【事故致因】HFACS（人因分析与分类系统）(1)

However, even in aviation, not all situations have corresponding procedures to deal with them. There­fore, many situations require a choice to be made among multiple response options. Consider the pilot flying home after a long week away from the family who unexpectedly confronts a line of thunderstorms directly in his path. He can choose to fly around the weather, divert to another field until the weather passes, or penetrate the weather hoping to quickly transition through it. Confronted with situations such as this, choice decision errors (Orasanu, 1993), or knowledge-based mistakes as they are otherwise known (Rasmussen, 1986), may occur. This is par­ticularly true when there is insufficient experience, time, or other outside pressures that may preclude correct decisions. Put simply, sometimes we chose well, and sometimes we don’t.

最后，有时对问题没有很好的理解，没有正式的程序和应对方案。正是在这些不明确的情况下，需要发明新的解决方案。从某种意义上说，个人发现自己在没有人到过的地方，在许多方面，必须按部就班。处于这种情况下的个体必须采取缓慢而努力的推理过程，而时间是一种奢侈品，很少提供。毫不奇怪，虽然这种类型的决策比其他形式的决策更少见，但犯下的解决问题错误的相对比例明显更高。

Finally, there are occasions when a problem is not well understood, and formal procedures and response options are not available. It is during these ill-defined situations that the invention of a novel solution is required. In a sense, individuals find themselves where no one has been before, and in many ways, must literally fly by the seats of their pants. Individu­als placed in this situation must resort to slow and effortful reasoning processes where time is a luxury rarely afforded. Not surprisingly, while this type of decision making is more infrequent then other forms, the relative proportion of problem-solving errors committed is markedly higher.

2.2.1.3 Perceptual errors

毫不意外，当一个人对世界的感知与现实不同时，错误就可能发生，而且经常发生。通常，当感觉输入退化或“异常”时，就发生知觉错误，如视错觉和空间定向障碍，或者机组人员简单地误判飞机的高度、姿态或空速（表1）。例如，当大脑试图用它认为属于视觉贫乏环境的东西来“填补空白”时，就发生了视觉错觉，比如在夜间或在恶劣天气中飞行时看到的东西。同样地，当前系统无法分辨一个人在空间中的方位时，就会发生空间定向障碍，因此会做出“最佳猜测”-通常是在夜间或在恶劣天气下飞行时缺乏视觉（地平线）线索。在这两种情况下，不知情的个人往往会做出基于错误信息的决定，并且犯错误的可能性会提高。

Not unexpectedly, when one’s perception of the world differs from reality, errors can, and often do, occur. Typically, perceptual errors occur when sensory input is degraded or “unusual,” as is the case with visual illusions and spatial disori­entation or when aircrew simply misjudge the aircraft’s altitude, attitude, or airspeed (Table 1). Visual illu­sions, for example, occur when the brain tries to “fill in the gaps” with what it feels belongs in a visually impoverished environment, like that seen at night or when flying in adverse weather. Likewise, spatial disorientation occurs when the vestibular system cannot resolve one’s orientation in space and there­fore makes a “best guess” — typically when visual (horizon) cues are absent at night or when flying in adverse weather. In either event, the unsuspecting individual often is left to make a decision that is based on faulty information and the potential for commit­ting an error is elevated.

然而，重要的是要注意，这不是错觉或迷失方向被归类为感知错误。相反，它是飞行员对错觉或迷失方向的错误反应。例如，许多毫无戒心的飞行员都经历过“黑洞”方法，只是为了驾驶一架完全完好的飞机进入地形或水中。这种情况继续发生，即使众所周知的是，在夜间在黑暗的、无特征的地形（例如，没有树木的湖或田野），将产生飞机实际上比它高的错觉。因此，飞行员被教导依靠他们的主要仪器，而不是外部世界，特别是在飞行的接近阶段。即便如此，一些飞行员在夜间飞行时未能监控他们的仪器。不幸的是，这些机组人员和其他被幻觉和其他迷失方向的飞行制度所愚弄的人可能最终卷入致命的飞机事故。

It is important to note, however, that it is not the illusion or disorientation that is classified as a percep­tual error. Rather, it is the pilot’s erroneous response to the illusion or disorientation. For example, many unsuspecting pilots have experienced “black-hole” approaches, only to fly a perfectly good aircraft into the terrain or water. This continues to occur, even though it is well known that flying at night over dark, featureless terrain (e.g., a lake or field devoid of trees), will produce the illusion that the aircraft is actually higher than it is. As a result, pilots are taught to rely on their primary instruments, rather than the outside world, particularly during the approach phase of flight. Even so, some pilots fail to monitor their instruments when flying at night. Tragically, these aircrew and others who have been fooled by illusions and other disorientating flight regimes may end up involved in a fatal aircraft accident.

2.1.2 Violations

根据定义，错误发生在一个组织所支持的规则和条例之内;通常支配大多数事故数据库。相比之下，违规表示对管理安全飞行的规则和条例的故意无视，并且幸运地，由于它们经常涉及死亡，因此发生频率要低得多（Shappell等人，1999年b）。

By definition, errors occur within the rules and regulations espoused by an organization; typically dominating most accident databases. In contrast, violations represent a willful disregard for the rules and regulations that govern safe flight and, fortu­nately, occur much less frequently since they often involve fatalities (Shappell et al., 1999b).

2.1.2.1 Routine violations

虽然有许多方法来区分不同类型的违规行为，两种不同的形式已被确定，根据其病因，这将有助于安全专业人员确定事故的因果因素。第一种是日常违规行为，往往是习惯性的，往往被管理当局容忍（Rea son，1990）。例如，考虑一个人，他的驾驶速度一直比法律允许的速度快5-10英里/小时，或者一个人，当他只被授权在可视气象条件下飞行时，他经常在边缘天气飞行。虽然两者都肯定违反了管理法规，但许多其他人也在做同样的事情。此外，在55英里/小时的区域中驾驶64英里/小时的人几乎总是在55英里/小时的区域中驾驶64英里/小时。也就是说，他们“经常”违反速度限制。同样的情况也可以典型地适用于那些经常飞进恶劣天气的飞行员。

While there are many ways to distinguish between types of violations, two distinct forms have been iden­ tified, based on their etiology, that will help the safety professional when identifying accident causal factors. The first, routine violations, tend to be habitual by nature and often tolerated by governing authority (Rea­ son, 1990). Consider, for example, the individual who drives consistently 5-10 mph faster than allowed by law or someone who routinely flies in marginal weather when authorized for visual meteorological conditions only. While both are certainly against the governing regulations, many others do the same thing. Further­ more, individuals who drive 64 mph in a 55 mph zone, almost always drive 64 in a 55 mph zone. That is, they “routinely” violate the speed limit. The same can typi­cally be said of the pilot who routinely flies into mar­ ginal weather.

更糟糕的是，这些违规行为(通常被称为“弯曲”规则)通常是被容忍的，实际上是被监管当局批准的(也就是说，你不太可能收到交通罚单，除非你超过规定的限速10英里每小时)。然而，如果地方当局开始对高速公路上超过限速9英里或更低的速度开出交通罚单(就像在军事设施上经常做的那样)，那么个人违反规定的可能性就会降低。因此，从定义上讲，如果发现了日常违规行为，就必须进一步查看监管链，以确定那些没有执行规则的当权者。

What makes matters worse, these violations (com­ monly referred to as “bending” the rules) are often tolerated and, in effect, sanctioned by supervisory au­thority (i.e., you’re not likely to get a traffic citation until you exceed the posted speed limit by more than 10 mph). If, however, the local authorities started handing out traffic citations for exceeding the speed limit on the highway by 9 mph or less (as is often done on military installations), then it is less likely that individuals would violate the rules. Therefore, by definition, if a routine violation is identified, one must look further up the supervisory chain to identify those individuals in au­thority who are not enforcing the rules.

2.1.2.2 Excep­tional violations

另一方面，与常规侵犯行为不同的是，越权侵犯行为表现为对权力的孤立背离，并不一定表明个人的类型行为模式，也不被管理层所纵容(Reason，1990)。例如，一个孤立的例子，驾驶105英里每小时在55英里每小时的区域被认为是一个例外的违规。同样地，在桥下飞行或从事其他被禁止的机动，如低空峡谷跑，将构成例外。但是，必须指出，虽然大多数例外的违反行为令人震惊，但由于其极端性质，它们并不被视为“例外”。相反，他们被认为是特殊的，因为他们既不是典型的个人，也没有得到权威的宽恕。尽管如此，对于任何组织来说，特别难以处理的违规行为的原因是，它们并不代表一个人的行为，因此，特别难以预测。事实上，当人们面对自己可怕行为的证据并要求他们做出解释时，他们往往得不到什么解释。事实上，那些从这种常规中幸存下来的人清楚地知道，如果被抓住，可怕的后果将随之而来。尽管如此，许多其他方面的模范公民还是走上了这条潜在的悲剧之路。

On the other hand, unlike routine violations, excep­tional violations appear as isolated departures from authority, not necessarily indicative of individual’s typi­ cal behavior pattern nor condoned by management (Reason, 1990). For example, an isolated instance of driving 105 mph in a 55 mph zone is considered an exceptional violation. Likewise, flying under a bridge or engaging in other prohibited maneuvers, like low-level canyon running, would constitute an exceptional viola­ tion. However, it is important to note that, while most exceptional violations are appalling, they are not consid­ ered “exceptional” because of their extreme nature. Rather, they are considered exceptional because they are neither typical of the individual nor condoned by au­ thority. Still, what makes exceptional violations par­ ticularly difficult for any organization to deal with is that they are not indicative of an individual’s behavioral repertoire and, as such, are particularly difficult to predict. In fact, when individuals are confronted with evidence of their dreadful behavior and asked to explain it, they are often left with little explanation. Indeed, those individuals who survived such excur­ sions from the norm clearly knew that, if caught, dire consequences would follow. Still, defying all logic, many otherwise model citizens have been down this potentially tragic road.

Level	Tie	Type	Content
Unsafe acts	ERRORS	Skill­based Errors	Break down in visual scan
Unsafe acts	ERRORS	Skill­based Errors	Failed to prioritize attention
Unsafe acts	ERRORS	Skill­based Errors	Inadvertent use of flight controls
Unsafe acts	ERRORS	Skill­based Errors	Omitted step in procedure
Unsafe acts	ERRORS	Skill­based Errors	Omitted checklist item
Unsafe acts	ERRORS	Skill­based Errors	Poor technique
Unsafe acts	ERRORS	Skill­based Errors	Over­controlled the aircraft
Unsafe acts	ERRORS	Decision Errors	Improper procedure
Unsafe acts	ERRORS	Decision Errors	Misdiagnosed emergency
Unsafe acts	ERRORS	Decision Errors	Wrong response to emergency
Unsafe acts	ERRORS	Decision Errors	Exceeded ability
Unsafe acts	ERRORS	Decision Errors	Inappropriate maneuver
Unsafe acts	ERRORS	Decision Errors	Poor decision
Unsafe acts	ERRORS	Perceptual Errors (due to)	Misjudged distance/altitude/airspeed
Unsafe acts	ERRORS	Perceptual Errors (due to)	Spatial disorientation
Unsafe acts	VIOLATIONS		Failed to adhere to brief
Unsafe acts	VIOLATIONS		Failed to use the radar altimeter
Unsafe acts	VIOLATIONS		Flew an unauthorized approach
Unsafe acts	VIOLATIONS		Violated training rules
Unsafe acts	VIOLATIONS		Flew an overaggressive maneuver
Unsafe acts	VIOLATIONS		Failed to properly prepare for the flight
Unsafe acts	VIOLATIONS		Briefed unauthorized flight
Unsafe acts	VIOLATIONS		Not current/qualified for the mission
Unsafe acts	VIOLATIONS		Intentionally exceeded the limits of the aircraft
Unsafe acts	VIOLATIONS		Unauthorized low­altitude canyon running
Unsafe acts	VIOLATIONS		Continued low­altitude flight in VMC

2.2 Preconditions for Unsafe Acts

可以说，飞行员的不安全行为与近80%的航空事故直接相关。然而，仅仅关注不安全行为就像关注发烧而不了解引起发烧的潜在疾病。因此，调查人员必须更深入地挖掘不安全行为发生的原因。作为第一步，对不安全的机组人员条件进行了两个主要的细分:操作人员的不合标准的条件和他们所采取的基本标准做法(下图)。

Arguably, the unsafe acts of pilots can be directly linked to nearly 80 % of all aviation accidents. However, simply focusing on unsafe acts is like focusing on a fever without understanding the underlying disease causing it. Thus, investigators must dig deeper into why the unsafe acts took place. As a first step, two major subdi­ visions of unsafe aircrew conditions were developed: substandard conditions of operators and the substan­dard practices they commit .

2.2.1 Substandard Conditions of Operators

2.2.1.1 Adverse mental states

不良心理状态。精神上的准备在几乎所有的努力中都是至关重要的，但在飞行中可能更重要。因此，不良心理状态 这一类别被创建来解释那些影响表现的心理状态(表2)。其中主要包括情境意识的丧失、任务固定、注意力分散和由于睡眠不足或其他压力源导致的心理疲劳。这一类别还包括个性特征和有害的态度，如过度自信、自满和错误的动机。

Adverse mental states. Being prepared mentally is critical in nearly every endeavor, but perhaps even more so in aviation. As such, the category of Adverse Mental States was created to account for those mental conditions that affect performance (Table 2). Princi­pal among these are the loss of situational awareness, task fixation, distraction, and mental fatigue due to sleep loss or other stressors. Also included in this category are personality traits and pernicious atti­ tudes such as overconfidence, complacency, and mis­ placed motivation.

可以预见的是，如果一个人由于某种原因感到精神疲劳，那么出错的可能性就会增加。同样，过分自信和其他有害的态度，如傲慢和冲动，也会影响违法行为的可能性。显然，任何人为错误的框架都必须解释事件因果链中预先存在的不利心理状态。

Predictably, if an individual is mentally tired for whatever reason, the likelihood increase that an error will occur. In a similar fashion, overconfidence and other pernicious attitudes such as arrogance and impulsivity will influence the likelihood that a viola­tion will be committed. Clearly then, any framework of human error must account for preexisting adverse mental states in the causal chain of events.

2.2.1.2 Adverse physiological states

不良的生理状态。第二类，不利生理状态，是指那些妨碍安全操作的医学或生理状况。如前所述的视错觉、空间迷失以及身体疲劳等状况对航空特别重要。还有无数已知会影响表现的药理学和医学异常。

Adverse physiological states. The second category, adverse physiological states, refers to those medical or physiological conditions that preclude safe opera­ tions (Table 2). Particularly important to aviation are such conditions as visual illusions and spatial disori­ entation as described earlier, as well as physical fa­ tigue, and the myriad of pharmacological and medical abnormalities known to affect performance.

大多数飞行员都知道视觉错觉和空间定向障碍的影响。然而，飞行员们不太了解的是，经常忽视的是仅仅生病对驾驶舱内性能的影响。我们几乎所有人都曾带着病去上班，服用了非处方药，而且通常表现良好。然而，考虑到飞行员正在遭受普通的头部感冒。不幸的是，大多数飞行员认为头部感冒只是个小麻烦，使用非处方的抗组胺药、对乙酰氨基酚和其他非处方药就能轻松治愈。事实上，当面对鼻塞时，飞行员通常只关心随着机舱高度的变化而产生的鼻窦阻塞的影响。然而，这并不是当地飞行外科医生所关心的明显症状。更令人担忧的是，当进入仪器气象条件时，伴随而来的内耳感染和空间定向障碍的可能性增加，更不用说抗组胺药的副作用、疲劳和飞行员决策的睡眠不足。因此，任何安全专业人员都有责任在事件的因果链中解释这些有时微妙的医疗条件。

The effects of visual illusions and spatial disorien­tation are well known to most aviators. However, less well known to aviators, and often overlooked are the effects on cockpit performance of simply being ill. Nearly all of us have gone to work ill, dosed with over-the-counter medications, and have generally performed well. Consider however, the pilot suffer­ing from the common head cold. Unfortunately, most aviators view a head cold as only a minor inconvenience that can be easily remedied using over-the counter antihistamines, acetaminophen, and other non-prescription pharmaceuticals. In fact, when confronted with a stuffy nose, aviators typically are only concerned with the effects of a painful sinus block as cabin altitude changes. Then again, it is not the overt symptoms that local flight surgeons are concerned with. Rather, it is the accompanying inner ear infection and the increased likelihood of spatial disorientation when entering instrument meteoro­logical conditions that is alarming - not to mention the side-effects of antihistamines, fatigue, and sleep loss on pilot decision-making. Therefore, it is incum­bent upon any safety professional to account for these sometimes subtle medical conditions within the causal chain of events.

2.2.1.3 Physical/Mental Limitations

身体/精神的限制。第三种也是最后一种不合标准的情况涉及个人的身体/精神限制。具体地说，这一类是指任务需要超出控制人员能力的情况。例如，人类的视觉系统在夜间受到严重限制;然而，就像开车一样，司机不一定要减速或采取额外的预防措施。在航空领域，虽然减速并不总是一种选择，但额外关注基本的飞行准则和增加飞行里程往往会增加安全边际。不幸的是，如果不采取预防措施，结果可能是灾难性的，因为飞行员经常会由于视野中物体的大小或对比度而看不到其他飞机、障碍物或电线。

Physical/Mental Limitations. The third, and final, substandard condition involves individual physical/mental limitations. Specifically, this cat­ egory refers to those instances when mission require­ments exceed the capabilities of the individual at the controls. For example, the human visual system is severely limited at night; yet, like driving a car, drivers do not necessarily slow down or take addi­tional precautions. In aviation, while slowing down isn’t always an option, paying additional attention to basic flight instruments and increasing one’s vigi­ lance will often increase the safety margin. Unfortu­nately, when precautions are not taken, the result can be catastrophic, as pilots will often fail to see other aircraft, obstacles, or power lines due to the size or contrast of the object in the visual field.

类似地，有时完成一项任务或行动所需的时间超出了个人的能力。每个人处理和回应信息的能力差异很大。然而，优秀的飞行员通常以其快速准确的反应能力而著称。然而，有充分的证据表明，如果要求个人迅速作出反应(即，有更少的时间来彻底考虑所有的可能性或选择)，出错的可能性就会显著增加。因此，当面临快速处理和反应时间的需要时，就像大多数航空紧急情况一样，所有形式的错误都会加剧，这一点也不奇怪。

Similarly, there are occasions when the time re­ quired to complete a task or maneuver exceeds an individual’s capacity. Individuals vary widely in their ability to process and respond to information. Nev­ertheless, good pilots are typically noted for their ability to respond quickly and accurately. It is well documented, however, that if individuals are re­quired to respond quickly (i.e., less time is available to consider all the possibilities or choices thoroughly), the probability of making an error goes up markedly. Consequently, it should be no surprise that when faced with the need for rapid processing and reaction times, as is the case in most aviation emergencies, all forms of error would be exacerbated.

除了上述基本的感官和信息处理限制，至少还有两个额外的生理/心理限制需要解决，尽管它们经常被大多数安全专业人员忽略。这些限制包括那些根本不适合飞行的人，因为他们要么身体不适合飞行，要么没有飞行的能力。例如，一些人根本没有足够的体力在潜在的高G环境下飞行，或者由于人体测量的原因，根本无法达到控制。换句话说，驾驶舱的设计传统上并没有考虑到所有的形状、大小和物理能力。同样，并不是每个人都有驾驶飞机的智力或资质。正如不是所有人都能成为音乐会钢琴家或美国橄榄球联盟的中后卫一样，并不是每个人都有驾驶飞机的天赋——这一职业需要在生命受到威胁的情况下做出快速决策和准确反应的独特能力。对于安全专业人员来说，困难的任务是确定是否资质可能导致了事故的因果顺序。

In addition to the basic sensory and information processing limitations described above, there are at least two additional instances of physical/mental limitations that need to be addressed, albeit they are often overlooked by most safety professionals. These limitations involve individuals who simply are not compatible with aviation, because they are either unsuited physically or do not possess the aptitude to fly. For example, some individuals simply don’t have the physical strength to operate in the potentially high-G environment of aviation, or for anthropo­metric reasons, simply have difficulty reaching the controls. In other words, cockpits have traditionally not been designed with all shapes, sizes, and physical abilities in mind. Likewise, not everyone has the mental ability or aptitude for flying aircraft. Just as not all of us can be concert pianists or NFL lineback­ers, not everyone has the innate ability to pilot an aircraft – a vocation that requires the unique ability to make decisions quickly and respond accurately in life threatening situations. The difficult task for the safety professional is identifying whether aptitude might have contributed to the accident causal sequence.

2.2.2 Substandard Practices of Operators

显然，许多不符合标准的操作人员的条件可以而且确实导致不安全的行为。然而，我们对自己做了很多事情，造成了这些不合标准的条件。一般来说，操作员的不标准做法可以归纳为两类:机组资源管理不善和个人准备就绪。

Clearly then, numerous substandard conditions of operators can, and do, lead to the commission of unsafe acts. Nevertheless, there are a number of things that we do to ourselves that set up these substandard conditions. Generally speaking, the sub­standard practices of operators can be summed up in two categories: crew resource mismanagement and personal readiness.

2.2.2.1 Crew Resource Mismanagement

机组资源管理不善。几十年来，良好的沟通技巧和团队协调一直是工业/组织和人事心理学的咒语。不足为奇的是，机组资源管理在过去几十年里一直是航空航天的基石(Helmreich & Foushee, 1993)。因此，就产生了机组资源管理不善这一类别，以解释人员之间缺乏协调的情况。在航空方面，这包括飞机内部和与空中交通管制设施和维修管制之间的协调，以及必要时与设施和其他支助人员的协调。但是空勤人员之间的协调并不仅限于飞行中的空勤人员。它还包括在飞行前后与机组人员的简要和汇报进行协调。

Crew Resource Mismanagement. Good communi­cation skills and team coordination have been the mantra of industrial/organizational and personnel psychology for decades. Not surprising then, crew resource management has been a cornerstone of avia­tion for the last few decades (Helmreich & Foushee, 1993). As a result, the category of crew resource mismanagement was created to account for occur­rences of poor coordination among personnel. Within the context of aviation, this includes coordination both within and between aircraft with air traffic control facilities and maintenance control, as well as with facil­ity and other support personnel as necessary. But air­crew coordination does not stop with the aircrew in flight. It also includes coordination before and after the flight with the brief and debrief of the aircrew.

不难想象，由于机组人员缺乏协调，导致驾驶舱内的混乱和决策失误，从而导致事故发生的情景。事实上，航空事故数据库中充斥着机组人员之间缺乏协调的例子。更悲惨的例子之一是1972年一架民用飞机在佛罗里达沼泽地的夜晚坠毁，当时机组人员正忙着排除信号灯烧坏的原因。不幸的是，驾驶舱里没有人在监控飞机的高度，因为高度保持不小心断开了。理想情况下，机组人员应该协调解决问题的工作，确保至少有一名机组人员在监控基本的飞行准则和“驾驶”飞机。然而，事实并非如此，因为他们进入了一个缓慢的、不为人所知的沼泽地，导致了大量的死亡。

It is not difficult to envision a scenario where the lack of crew coordination has led to confusion and poor decision making in the cockpit, resulting in an accident. In fact, aviation accident databases are replete with instances of poor coordination among aircrew. One of the more tragic examples was the crash of a civilian airliner at night in the Florida Everglades in 1972 as the crew was busily trying to troubleshoot what amounted to a burnt out indicator light. Unfortunately, no one in the cockpit was moni­toring the aircraft’s altitude as the altitude hold was inadvertently disconnected. Ideally, the crew would have coordinated the trouble-shooting task ensuring that at least one crewmember was monitoring basic flight instruments and “flying” the aircraft. Tragi­cally, this was not the case, as they entered a slow, unrecognized, descent into the everglades resulting in numerous fatalities.

2.2.2.2 Personal Readiness

个人准备。在航空行业，或者在任何职业环境中，员工都应该准备好以最佳水平工作。然而，在航空行业，就像在其他行业一样，当个人在身体或精神上没有做好执勤准备时，就会出现个人准备不足的情况。例如，违反乘务人员休息要求、从bottle-to-brief rules和自我治疗都会影响工作表现，在飞机上尤其有害。不难想象，当个体违反机组休息要求时，就会面临精神疲劳等不良心理状态的风险，最终导致错误和事故的发生。然而，需要注意的是，影响个人准备状态的违例行为并不被认为是“不安全行为，违例行为”，因为它们通常不会发生在驾驶舱内，也不一定是具有直接和直接后果的主动故障。

Personal Readiness. In aviation, or for that matter in any occupational setting, individuals are expected to show up for work ready to perform at optimal levels. Nevertheless, in aviation as in other profes­ sions, personal readiness failures occur when individuals fail to prepare physically or mentally for duty. For instance, violations of crew rest requirements, bottle-to-brief rules, and self-medicating all will af­ fect performance on the job and are particularly detrimental in the aircraft. It is not hard to imagine that, when individuals violate crew rest requirements, they run the risk of mental fatigue and other adverse mental states, which ultimately lead to errors and accidents. Note however, that violations that affect personal readiness are not considered “unsafe act, violation” since they typically do not happen in the cockpit, nor are they necessarily active failures with direct and immediate consequences.

然而，并不是所有的个人准备失败都是由于违反管理规则或条例造成的。例如，在驾驶一架飞机之前跑10英里可能并不违反任何现有的规定，但它可能损害个人的身体和精神能力，足以降低表现，并引发不安全行为。同样，现代商人传统的“糖果和可乐”午餐可能听起来不错，但可能不足以在严格的环境中维持业绩。虽然可能没有规定这种行为，但飞行员在决定自己是否“适合”驾驶飞机时，必须有良好的判断力。

Still, not all personal readiness failures occur as a result of violations of governing rules or regulations. For example, running 10 miles before piloting an aircraft may not be against any existing regulations, yet it may impair the physical and mental capabilities of the individual enough to degrade performance and elicit unsafe acts. Likewise, the traditional “candy bar and coke” lunch of the modern businessman may sound good but may not be sufficient to sustain performance in the rigorous environment of avia­tion. While there may be no rules governing such behavior, pilots must use good judgment when de­ciding whether they are “fit” to fly an aircraft.

Level	Tie	Type	Content
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Channelized attention
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Complacency
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Distraction
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Mental fatigue
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Get-home-itis
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Haste
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Loss of situational awareness
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Misplaced motivation
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse mental states	Task saturation
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse physiological states	Impaired physiological state
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse physiological states	Medical illness
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse physiological states	Physiological incapacitation
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Adverse physiological states	Physical fatigue
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Physical/Mental Limitations	Insufficient reaction time
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Physical/Mental Limitations	Visual limitation
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Physical/Mental Limitations	Incompatible intelligence/aptitude
Preconditions for Unsafe Acts	Substandard Conditions of Operators	Physical/Mental Limitations	Incompatible physical capability
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Failed to back-up
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Failed to communicate/coordinate
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Failed to conduct adequate brief
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Failed to use all available resources
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Failure of leadership
Preconditions for Unsafe Acts	Substandard Practices of Operators	Crew Resource Mismanagement	Misinterpretation of traffic calls
Preconditions for Unsafe Acts	Substandard Practices of Operators	Personal Readiness	Excessive physical training
Preconditions for Unsafe Acts	Substandard Practices of Operators	Personal Readiness	Self-medicating
Preconditions for Unsafe Acts	Substandard Practices of Operators	Personal Readiness	Violation of crew rest requirement
Preconditions for Unsafe Acts	Substandard Practices of Operators	Personal Readiness	Violation of bottle-to-throttle requirement

2.3 Unsafe Supervision

回想一下，除了与飞行员/操作员相关的那些因果因素外，Reason》(1990)追溯了因果事件链，追溯了超指挥链。因此，我们已经确定了四类不安全的监管:监管不足，计划不当的操作，未能纠正已知问题，以及监管违规(图4)。每一类都在下面简要描述。

2.3.1 Inadequate Supervision

监督不足。任何主管的角色都是提供成功的机会。要做到这一点，主管，无论在什么级别的操作，必须提供指导，培训机会，领导和动机，以及适当的角色模型，以供模仿。不幸的是，情况并非总是如此。例如，不难想象这样一种情况，即没有为某一特定的机组人员提供充分的机组人员资源管理培训，或者没有为某一特定的机组人员提供参加这种培训的机会。可以想象，机组人员的协调能力将受到损害，如果飞机被置于不利的情况(例如紧急情况)，出错的风险将会加剧，发生事故的可能性将显著增加。

Inadequate Supervision. The role of any supervisor is to provide the opportunity to succeed. To do this, the supervisor, no matter at what level of operation, must provide guidance, training opportunities, lead­ ership, and motivation, as well as the proper role model to be emulated. Unfortunately, this is not always the case. For example, it is not difficult to conceive of a situation where adequate crew resource management training was either not provided, or the opportunity to attend such training was not afforded to a particular aircrew member. Conceivably, aircrew coordination skills would be compromised and if the aircraft were put into an adverse situation (an emer­ gency for instance), the risk of an error being com­ mitted would be exacerbated and the potential for an accident would increase markedly.

同样，良好的专业指导和监督是任何成功组织的基本要素。虽然赋予个人独立决策和运作的权力当然是必要的，但这并不会使监督者脱离责任。缺乏指导和监督已被证明是滋生许多违规行为的温床，这些违规行为已经蔓延到驾驶舱内。因此，任何对事故原因的彻底调查都必须考虑到监管在人为错误发生过程中所扮演的角色(即监管是否不当或根本没有发生)

In a similar vein, sound professional guidance and oversight is an essential ingredient of any successful organization. While empowering individuals to make decisions and function independently is certainly essential, this does not divorce the supervisor from accountability. The lack of guidance and oversight has proven to be the breeding ground for many of the violations that have crept into the cockpit. As such, any thorough investigation of accident causal factors must consider the role supervision plays (i.e., whether the supervision was inappropriate or did not occur at all) in the genesis of human error

2.3.2 Planned Inappropriate Operations

计划外的不当操作。有时，操作节奏和/或空乘人员的调度是这样的，个人被置于不可接受的风险，机组人员休息受到危害，并最终性能受到不利影响。在紧急情况下，这样的行动虽然是不可避免的，但在正常的行动中是不可接受的。因此，第二类不安全的监督，计划不当的操作，被创建来解释这些失败

Planned Inappropriate Operations. Occasionally, the operational tempo and/or the scheduling of air­ crew is such that individuals are put at unacceptable risk, crew rest is jeopardized, and ultimately perfor­ mance is adversely affected. Such operations, though arguably unavoidable during emergencies, are unac­ ceptable during normal operations. Therefore, the second category of unsafe supervision, planned inap­ propriate operations, was created to account for these failures

以机组配对不当的问题为例。众所周知，当非常高级、专横的机长与非常低级、能力较弱的副机长搭档时，很可能会出现沟通和协调问题。通常被称为跨座舱权威梯度，这样的条件可能导致了1982年1月一架商业客机在华盛顿特区外的波托马克河的悲剧坠毁(NTSB, 1982)。在那次事故中，当副机长指出发动机准则似乎不正常时，机长多次对副机长进行了重击。机长毫不气馁，在结冰的条件下，以不足的起飞推力继续了一次致命的起飞。飞机失速，坠入结冰的河中，机组人员和许多乘客遇难。

Take, for example, the issue of improper crew pairing. It is well known that when very senior, dictatorial captains are paired with very junior, weak co-pilots, communication and coordination prob­ lems are likely to occur. Commonly referred to as the trans-cockpit authority gradient, such conditions likely contributed to the tragic crash of a commercial airliner into the Potomac River outside of Washing­ ton, DC, in January of 1982 (NTSB, 1982). In that accident, the captain of the aircraft repeatedly re­ buffed the first officer when the latter indicated that the engine instruments did not appear normal. Un­ daunted, the captain continued a fatal takeoff in icing conditions with less than adequate takeoff thrust. The aircraft stalled and plummeted into the icy river, killing the crew and many of the passengers.

很明显，机长长和机组成员都有责任。他们死于事故，无法阐明原因;但是，这个监督链的作用是什么呢?也许机组成员配对同样负有责任。虽然在报告中没有具体论述，但在许多事故中，这些问题显然是值得探讨的。事实上，在那次事故中，还发现了其他几个培训和人员配备问题。
Clearly, the captain and crew were held account­ able. They died in the accident and cannot shed light on causation; but, what was the role of the supervi­ sory chain? Perhaps crew pairing was equally respon­ sible. Although not specifically addressed in the report, such issues are clearly worth exploring in many acci­ dents. In fact, in that particular accident, several other training and manning issues were identified.

2.3.3 Failure to Correct a Known Problem

未能纠正已知问题。已知不安全监管的第三类，未纠正已知问题，指的是那些个人、设备、培训或其他相关安全领域存在缺陷的情况，这些缺陷被主管“知道”，但被允许继续存在。例如，事故调查人员在一次致命的坠机事故后采访飞行员的朋友、同事和主管，结果却发现他们“知道这事总有一天会发生在他身上”，这种情况并不少见。如果主管知道一名飞行员没有能力安全飞行，但还是允许他飞行，他显然没有给飞行员任何好处。无论是通过补救性培训，还是在必要时取消飞行资格，都未能纠正这种行为，这意味着该飞行员已被判处死刑，更不用说机上其他乘客了。

Failure to Correct a Known Problem. The third category of known unsafe supervision, Failed to Cor­ rect a Known Problem, refers to those instances when deficiencies among individuals, equipment, training or other related safety areas are “known” to the supervisor, yet are allowed to continue unabated (Table 3). For example, it is not uncommon for accident investigators to interview the pilot’s friends, colleagues, and supervisors after a fatal crash only to find out that they “knew it would happen to him some day.” If the supervisor knew that a pilot was incapable of flying safely, and allowed the flight anyway, he clearly did the pilot no favors. The failure to correct the behavior, either through remedial train­ ing or, if necessary, removal from flight status, essen­ tially signed the pilot’s death warrant - not to mention that of others who may have been on board.

同样地，如果不能始终如一地纠正或约束不适当的行为，肯定会滋生不安全的气氛，促进违反规则的行为。亚维亚航空的历史是丰富的，有飞行员的报告，他们讲述了令人毛骨悚然的故事，他们的功绩和巡回低空飞行(臭名昭著的“到过那里，做过那件事”)。虽然对一些人来说很有趣，但它们经常用来宣传一种宽容和“高人一等”的观念，直到有一天有人打破了地面低空飞行的记录!事实上，未能报告这些不安全倾向并采取纠正行动，是未能纠正已知问题的又一个例子。

Likewise, the failure to consistently correct or disci­ pline inappropriate behavior certainly fosters an unsafe atmosphere and promotes the violation of rules. Avia­ tion history is rich with by reports of aviators who tell hair-raising stories of their exploits and barnstorming low-level flights (the infamous “been there, done that”). While entertaining to some, they often serve to promul­ gate a perception of tolerance and “one-up-manship” until one day someone ties the low altitude flight record of ground-level! Indeed, the failure to report these unsafe tendencies and initiate corrective actions is yet another example of the failure to correct known problems.

2.3.4 Supervisory Violations

违反监管规定。另一方面，违反监管行为只适用于那些被监管者故意无视的现有规则和规章的情况。尽管可以说是罕见的情况，但监管者在管理资产时偶尔会违反规则和原则。例如，在某些情况下，个人可以在没有现有资格或执照的情况下驾驶飞机。同样，也可以认为，未能执行现有的规章制度或炫耀权威也是监管层面的违法行为。尽管这种做法很少见，而且可能很难被剔除，但它公然违反了规则，并为可以预见的随之而来的悲惨事件奠定了基础。

Supervisory Violations. Supervisory violations, on the other hand, are reserved for those instances when exist­ ing rules and regulations are willfully disregarded by supervisors (Table 3). Although arguably rare, supervi­ sors have been known occasionally to violate the rules and doctrine when managing their assets. For instance, there have been occasions when individuals were permitted to operate an aircraft without current quali­ fications or license. Likewise, it can be argued that failing to enforce existing rules and regulations or flaunt­ ing authority are also violations at the supervisory level. While rare and possibly difficult to cull out, such practices are a flagrant violation of the rules and invari­ ably set the stage for the tragic sequence of events that predictably follow.

Level	Tie	Type	Content
Unsafe Supervision	Inadequate Supervision		Failed to provide guidance
Unsafe Supervision	Inadequate Supervision		Failed to provide operational doctrine
Unsafe Supervision	Inadequate Supervision		Failed to provide oversight
Unsafe Supervision	Inadequate Supervision		Failed to provide training
Unsafe Supervision	Inadequate Supervision		Failed to track qualifications
Unsafe Supervision	Inadequate Supervision		Failed to track performance
Unsafe Supervision	Planned Inappropriate Operations		Failed to provide correct data
Unsafe Supervision	Planned Inappropriate Operations		Failed to provide adequate brief time
Unsafe Supervision	Planned Inappropriate Operations		Improper manning
Unsafe Supervision	Planned Inappropriate Operations		Mission not in accordance with rules/regulations
Unsafe Supervision	Planned Inappropriate Operations		Provided inadequate opportunity for crew rest
Unsafe Supervision	Failed to Correct a Known Problem		Failed to correct document in error
Unsafe Supervision	Failed to Correct a Known Problem		Failed to identify an at-risk aviator
Unsafe Supervision	Failed to Correct a Known Problem		Failed to initiate corrective action
Unsafe Supervision	Failed to Correct a Known Problem		Failed to report unsafe tendencies
Unsafe Supervision	Supervisory Violations		Authorized unnecessary hazard
Unsafe Supervision	Supervisory Violations		Failed to enforce rules and regulations
Unsafe Supervision	Supervisory Violations		Authorized unqualified crew for flight

2.4 Organizational Influences

如前所述，上层管理人员的错误决定直接影响监督实践，以及操作人员的条件和行动。不幸的是，这些组织错误经常被安全专业人员忽视，这在很大程度上是由于缺乏一个明确的框架来研究它们。一般来说，最难以捉摸的潜在失败围绕着与资源管理、组织氛围和操作过程相关的问题，如下图所示。

As noted previously, fallible decisions of upper-level management directly affect supervisory practices, as well as the conditions and actions of operators. Unfor­ tunately, these organizational errors often go unnoticed by safety professionals, due in large part to the lack of a clear framework from which to investigate them. Gen­ erally speaking, the most elusive of latent failures revolve around issues related to resource management, organi­ zational climate, and operational processes, as detailed below in Figure 5.

2.4.1 Resource Management

资源管理。这一类包含了关于组织资产(如人力资源(人员)、货币资产和设备/设施)的配置和维护的公司级决策领域。一般来说，关于如何管理这些资源的企业决策围绕着两个截然不同的目标——安全目标和准时高效运营目标。在繁荣时期，这两个目标很容易得到平衡和充分满足。然而，正如我们前面提到的，也可能会有财政紧缩的时候，这两者之间需要一些妥协。不幸的是，历史告诉我们，在这样的战斗中，安全往往是输家，一些人可以很好地证明，在有财政困难的组织中，安全和培训往往是第一个被削减的。如果在这些领域的削减太过严重，飞行熟练程度可能会受到影响，最好的飞行员也可能离开组织去寻找更好的工作。

Resource Management. This category encompasses the realm of corporate-level decision making regard­ ing the allocation and maintenance of organizational assets such as human resources (personnel), monetary assets, and equipment/facilities (Table 4). Generally, corporate decisions about how such resources should be managed center around two distinct objectives – the goal of safety and the goal of on-time, costeffective operations. In times of prosperity, both objectives can be easily balanced and satisfied in full. However, as we mentioned earlier, there may also be times of fiscal austerity that demand some give and take between the two. Unfortunately, history tells us that safety is often the loser in such battles and, as some can attest to very well, safety and training are often the first to be cut in organizations having financial difficulties. If cutbacks in such areas are too severe, flight proficiency may suffer, and the best pilots may leave the organization for greener pastures.

过度削减成本还可能导致新设备的资金减少，或可能导致购买的设备不是最优的，设计不适当，以满足公司飞行的业务类型。其他涓滴效应包括设备和工作区维护不善，以及无法纠正现有设备的已知设计缺陷。其结果是，在最不理想的条件和时间安排下，飞行员驾驶的是一种非海上航行的、技术水平较低的老式和维护不良的飞机。这对航空安全的影响并不难想象。

Excessive cost-cutting could also result in reduced funding for new equipment or may lead to the pur­ chase of equipment that is sub optimal and inad­ equately designed for the type of operations flown by the company. Other trickle-down effects include poorly maintained equipment and workspaces, and the failure to correct known design flaws in existing equipment. The result is a scenario involving unsea­ soned, less-skilled pilots flying old and poorly main­ tained aircraft under the least desirable conditions and schedules. The ramifications for aviation safety are not hard to imagine.

2.4.2 Climate

气候。组织气候是指影响员工绩效的一大类组织变量。在形式上，它被定义为“组织对待个人时基于情境的一致性”(Jones, 1988)。然而，一般来说，组织气氛可以被视为组织内部的工作气氛。一个组织氛围的一个标志就是它的结构，这反映在指挥链、授权和责任、沟通渠道和正式的行动问责制(表4)。就像在驾驶舱一样，沟通和协调在一个组织中是至关重要的。如果组织内部的管理层和员工没有沟通，或者没有人知道谁在负责，那么组织的安全显然会受到影响，事故也会发生(Muchinsky, 1997)。

Climate. Organizational Climate refers to a broad class of organizational variables that influence worker performance. Formally, it was defined as the “situationally based consistencies in the organization’s treatment of individuals” (Jones, 1988). In general, however, organizational climate can be viewed as the working atmosphere within the organization. One telltale sign of an organization’s climate is its structure, as reflected in the chain-of-command, delegation of authority and responsibility, communication chan­ nels, and formal accountability for actions (Table 4). Just like in the cockpit, communication and coordi­ nation are vital within an organization. If manage­ ment and staff within an organization are not communicating, or if no one knows who is in charge, organizational safety clearly suffers and accidents do happen (Muchinsky, 1997).

一个组织的政策和文化也是其气候的良好指标。政策是官方的指导方针，指导管理层在招聘和解雇、晋升、留任、加薪、病假、吸毒和酗酒、加班、事故调查和安全设备的使用等方面做出决定。另一方面，文化是指一个组织中非官方的或不成文的规则、价值观、态度、生活和习俗。文化是“在这里做事的真正方式”。当政策定义不清、敌对或冲突时，或者当它们被非正式的规则和价值观所取代时，组织内部就会充满混乱。事实上，有一些公司经理在公共论坛上很快就会对官方的安全政策“口惠而实不至”，但在幕后操作时却忽视了这些政策。然而，热力学第三定律告诉我们，“秩序和和谐不能由这样的混乱和不和谐产生”。在这种情况下，安全必然受到影响。

An organization’s policies and culture are also good indicators of its climate. Policies are official guidelines that direct management’s decisions about such things as hiring and firing, promotion, reten­ tion, raises, sick leave, drugs and alcohol, overtime, accident investigations, and the use of safety equip­ ment. Culture, on the other hand, refers to the unofficial or unspoken rules, values, attitudes, be­ liefs, and customs of an organization. Culture is “the way things really get done around here.” When policies are ill-defined, adversarial, or con­ flicting, or when they are supplanted by unofficial rules and values, confusion abounds within the orga­ nization. Indeed, there are some corporate managers who are quick to give “lip service” to official safety policies while in a public forum, but then overlook such policies when operating behind the scenes. However, the Third Law of Thermodynamics tells us that, “order and harmony cannot be produced by such chaos and disharmony”. Safety is bound to suffer under such conditions.

2.4.3 Operational Process

操作过程。这一类是指管理组织内部日常活动的公司决策和规则，包括建立和使用标准化的操作程序，以及维护员工和管理层之间的制衡(监督)的非正常方法。例如，诸如操作节奏、时间压力、激励系统和工作时间表等因素都是会对安全产生不利影响的因素(表4)。如前所述，可能会有这样的情况，当一个组织的上层决定有必要增加操作的速度，以超出主管的人员配备能力。因此，主管可能会诉诸于使用不适当的调度程序，这将危及机组人员的休息，并产生次优的机组人员配对，使机组人员面临更大的事故风险。然而，组织应该有适当的官方程序来处理这些意外事件，以及监督计划来监测这些风险。

给大家的福利

零基础入门

对于从来没有接触过网络安全的同学，我们帮你准备了详细的学习成长路线图。可以说是最科学最系统的学习路线，大家跟着这个大的方向学习准没问题。

同时每个成长路线对应的板块都有配套的视频提供：

因篇幅有限，仅展示部分资料

网络安全面试题

绿盟护网行动

还有大家最喜欢的黑客技术

网络安全源码合集+工具包

所有资料共282G，朋友们如果有需要全套《网络安全入门+黑客进阶学习资源包》，可以扫描下方二维码领取（如遇扫码问题，可以在评论区留言领取哦）~

网上学习资料一大堆，但如果学到的知识不成体系，遇到问题时只是浅尝辄止，不再深入研究，那么很难做到真正的技术提升。

需要这份系统化资料的朋友，可以点击这里获取

一个人可以走的很快，但一群人才能走的更远！不论你是正从事IT行业的老鸟或是对IT行业感兴趣的新人，都欢迎加入我们的的圈子（技术交流、学习资源、职场吐槽、大厂内推、面试辅导），让我们一起学习成长！