MOD Reliability and Maintainability Process Guidance Assessment PROCESS 306 EVALUATE RISK. DEVELOP MITIGATION STRATEGIES AND SELECT OPTIMUM R&M SOLUTIONS 1. OBJECTIVES The objective of this process is to evaluate the risks that may prevent the design solution options possessing the desired R&M1 characteristics and to develop and optimise a strategy which will mitigate these risks (through a proposed R&M Programme(s)) and enable the desired capability to be achieved and delivered. 2. INTRODUCTION The risks of the design solutions not possessing the required R&M characteristics and hence able to fulfil the desired capability have already been identified when developing the R&M Options (Activity 301-07) and their ongoing evaluated (Activity 302-01). It is now necessary to determine how feasible it is to remove or reduce such risks by addressing the factors that contribute to them. This will be achieved by reviewing the requirement, the time, monies and technology available to deliver them and the consequence of doing nothing. 3. RESPONSIBILITIES Accountability The Project Manager is accountable for the delivery of the R&M programme throughout the acquisition phases of the project however the responsibilities for the daily management of many of the activities involved may be delegated to other members of the Project Team. Responsibility The Project Team R&M Focal Point through the forum of the R&M Panel or associated R&M Working Groups will usually be responsible for carrying out many of the activities described in this guidance document. He/she must therefore be given authority by the Project Manager to programme major R&M assurance activities which should be developed in co-operation with other key assurance areas, especially Safety, Cost of Ownership (COO), Risk and Supportability disciplines. 4. SCHEDULE This process should be carried out iteratively through the Assessment Phase. 1 R&M is a generic term which embraces the qualities of Availability, Reliability, Maintainability, Durability, RCM and Testability. Version 2.0 Page 1 Process 306 Evaluate Risk, Develop Mitigation Strategies and Select Optimum R&M Solutions 5. INPUTS The following inputs will be required to carry out this process: R&M Risks previously associated with individual Design Solutions options. 6. OUTPUTS Prioritised list of preferred R&M options to develop and deliver the compliant capability; Outline R&M Programme strategy; Input to the R&M Case in the form of an Evidence Acceptance Framework to support the down selection process and provide traceability. 7. DESCRIPTION OF ACTIVITIES Activity 306-01 – Determine Probability of Removing/Reducing Risk Determine the probability of reducing the R&M risks associated with each solution option. Performance, cost and timescale risks have previously (Activity 305-07) been traded off for the various design solution options, however these design solutions will have a number of their own inherent risks associated with them. It is necessary to determine the probability of removing or reducing these risks. These risks are not only restricted to the top level KURs associated with R&M through statements relating to availability or sustainability but other factors e.g. ability to operate across the environmental profile, to be designed within the size and weight restraints, to integrate with or into other systems, technology insertion etc. The following four activities 306-02 through to 306-05) consider this mitigation further. Activity 306-02 – Determine if Requirement can be Modified to Reduce Risk Determine in association with the stakeholders if any of the risk can be mitigated by modifying the requirement. Changing, or relaxing a requirement to mitigate a risk is probably the quickest, easiest and cheapest of the options considered here, however the implications if not considered fully are probably the greatest. Before changing a requirement the following should be considered: Has the Requirements Analysis (Ao, PSA) been conducted properly? Are requirements fully justified or have they been ‘gold plated’? Is the metric appropriate or would another be more suited? Operational analysis seldom addresses the detailed specification of R&M but expresses itself in terms of capability, other times availability of the solution, and it is the acquisition process that evolves this requirement into that of the URD and future SRD. The sustainability of that capability can be retained by high reliability with little maintenance but conversely by a high maintenance intervention with a solution which is relatively unreliable. While the former Page 2 Version 2.0 MOD Reliability and Maintainability Process Guidance Assessment may be unaffordable initially the latter may be unacceptable through life and compromise is often sort. Where compromise cannot be achieved or the reliability-maintenance burden balanced, risk will exist. Achieving such a balance is far from straightforward particularly when it is constantly being driven by the influence of the projects cost, time and technology restraints, however understanding the detailed capability requirements can often greatly assist. For a given common solution the specific requirements of one user could be vastly different to that of another. A medium utility vehicle may cover more kilometres in a month over harsher terrain in the hands of a front line unit yet, may travel less distance in a year when operated by the more static support arms. Similarly a training establishment my use a system or equipment far greater than a front line unit purely because of the capability while essential may seldom be required for operational use. Therefore it is important to appreciate and understand all the specific users needs and specify appropriately. Where requirements conflict it may be more appropriate and cost effective to compromise and accept the greater maintenance burden for one user while exceeding that of the other. Requirements which are ‘better than last time’ are fraught with risk because they have seldom been thought through even if the specification of that previous purchase was known. In the early phases of the project keep the R&M requirements in the simple terms of duty cycle, conditions and period with any associated maintenance restraint. This will make them easier to be understood and the consequence of change to mitigate risk easier to appreciate. When a requirement is extended or reduced by a given measure, whether it is kilometres, hours, rounds etc. most stakeholders will understand the change relatively quickly. However should such changes be expressed in terms of reliability/probability for many in an audience it will be more difficult to quantify the change in a meaningful measure and care, time and effort needs to be invested to ensure all stakeholders appreciate the consequence of such change. Unfortunately customers and other stakeholders often do not appreciate the acquisition consequence of their requirements. While every practical effort should be taken to satisfy their genuine needs there is nothing to be lost by discussing those requirements, in details with such stakeholders, to ensure that the effort to mitigate the associated risks is warranted and not to satisfy little more than a potential ‘wish list’. Activity 306-03 – Determine if Cost/Time/Technology is Available to Mitigate Risk Determine if risks associated with each solution option can be mitigated within the perceived budget, time and technology constraints. Unfortunately few capabilities can be readily satisfied off the shelf resulting in the majority of projects needing some degree of development, in some instances this will be from scratch on the drawing-board, other times minor modifications to an existing product. Whether a solution needs extensive development or whether on the few occasions it can be acquired directly for use there will always be risk that procuring, developing where necessary and demonstrating compliance of the R&M elements of the solution options cannot be achieved within the cost, time and technology restraints available. When procuring and where necessary developing the solution options if they cannot be achieved within these restraints the risks must be discussed with all the stakeholders and compromised reached. Increasing the available budget or extending the in-service date would provide options for reducing such risks as would alternative options to reducing the performance characteristics of the requirement. Similarly when technology cannot address Version 2.0 Page 3 Process 306 Evaluate Risk, Develop Mitigation Strategies and Select Optimum R&M Solutions the shortfalls the only option may be in conjunction with the stakeholders to reconsider the requirements. Demonstrating compliance performs two functions; first to ensure that what was contracted for has been delivered but equally to ensure that a compliant solution is not falsely rejected. Demonstrating compliance in most instances is both time consuming and expensive therefore while not completing it may alleviate one risk it may well introduce others and hence warrant careful consideration as another risk reduction option. Activity 306-04 – Determine if Solution can be Changed/Modified to Mitigate Risk Determine if the proposed solutions would be tolerant of change and modification to enable the perceived risks to be mitigated. Whether a capability is to be designed from scratch, the integration of a number of proven assemblies or could, in most parts, be satisfied through proprietary Commercial Off The Shelf (COTS) or Military Off The Shelf (MOTS) solutions any shortfall (risk) to develop and demonstrate compliance will require mitigation. Even when finance and time are available it cannot be assumed without question that risk will always be resolved. The COTS or MOTS solution may be so specialised they would not tolerate such modification to reduce risk or the implications of modification would perhaps cost more financially and/or in programme time than an alternative option. Risk mitigation for a given solution option however may not only be restricted for technical reasons, manufacturers may be incapable or unwilling to mitigate risk. The latter being particularly common when the quantity required is small or the supplier already has a sound customer base and adopt a take it or leave it attitude. Other risks however may not relate directly to a manufacturers ability or willingness to develop and manufacture but to the confidence we have in the solution concept. Sound proven technology used in a novel way or the unusual integration of proven technology or systems can each influence risk and create mitigation dilemma. Risk however my not be restricted to the new acquisition, the requirement of a solution to be tolerant of existing systems and/or to integrate legacy systems and equipment, particularly when these systems and equipment’s are vintage, into them can quickly escalate risk. In recent years the requirement for vehicle manufacturers to stay abreast of engine emission regulations and IT manufacturers to retain backwards compatibility with legacy computer systems and networks are examples of solution being challenged to satisfy capabilities. While it may be perceived that these are design integration issues the inability to successfully resolve them are seen inservice as a reliability issue and maintenance burden. Activity 306-05 – Determine Consequence of Doing Nothing Determine in association with the stakeholders the consequence of not mitigating the risk for each proposed solution. Accepting a risk and doing nothing to mitigate it may seem to contradict all that has been advised so far but it remains an alternative which warrants consideration. Even for the most polished requirement and hence solution option there may be times where the resources are just not available, the risk is small or is so dependant on other factors at this time it cannot be perceived to be mitigated. Page 4 Version 2.0 MOD Reliability and Maintainability Process Guidance Assessment That is not to suggest it should not be assessed, in fact if at this time nothing is going to be done about it, it is of the highest priority that it is assessed in depth to ensure the consequence of doing nothing now and potentially in the future are fully appreciated. Such assessment should be conducted with the full co-operation of all interested stakeholders and through the forum of the projects risk management system. The risk and therefore mitigating action must be considered within the context of the operating environment and scenario because accepting the risk may well impose limitations on these parameters. Particularly when this capability is to form an integral part of another equipment or system then the consequences must also be considered towards the host solution of not directly mitigating the risk. However not all risks are solution based some will relate to time or confidence both of which may be beyond the projects resources. One solution may be preferred to another yet the penalty may be development time which the customer would be willing to tolerate to obtain the solution. Alternatively while funds may be available to develop the solution they may not be sufficient to provide the desired confidence through trialling and testing that compliance has been achieved. In both these instances a pragmatic approach is required and as with all risks an informed decision made to optimise the shortfall. Activity 306-06 – Develop Assessment Matrix Develop an assessment matrix and process to enable the selection and prioritisation in respect of R&M of the proposed solutions. The Assessment Matrix needs to be developed in parallel with the risk analysis activities throughout this process to enable the preferred solution in respect of R&M to be selected based on informed knowledge and appreciation of the potential risks and their mitigation. The content of the matrix will be determined by the acquisition strategy and the solution options however it will need to embrace not only the options but the risks involved and the proposed mitigation with the relevant arguments and assumptions supporting them. For each risk it will be necessary to determine the cost, time, technical limitations and any subsequent long term implications to the capability of the subsequent mitigation. Much of this should already form part of the project risk register however in selecting the preferred solution option it is necessary to compare their qualities as well as the full costs of the mitigation to enable an informed decision to be made regarding such comparison. Subject to the form of the project risk register this may be insufficient for the needs of the R&M Focal Point, however, there is much information already written in AOF and other reference text books addressing three or preferred five point estimating methodology. Activity 306-07 – Populate Assessment Matrix Populate the assessment matrix with the evidence, arguments, assumptions, constraints and risks to enable the proposed solutions to be prioritised in respect of their R&M qualities. Subject to the way in which the project is being managed and where responsibilities lay within the project team will depend by whom and how the Assessment Matrix will be populated. Usually it is conducted as a function of the R&M Panel however it is as likely to be delegated to an R&M working group or a sub-committee of the projects risk management committee to which the R&M Focal Point will find themselves having a significant input whichever the forum. The process of populating the matrix is not a one-off activity but should be completed as information becomes available for each option. As information and Version 2.0 Page 5 Process 306 Evaluate Risk, Develop Mitigation Strategies and Select Optimum R&M Solutions supporting evidence and argument changes likewise the matrix needs to be updated to reflect such changes to ensure that the selection process will be made using the most current information, arguments and assumptions available. The majority of projects employ a form based risk management assessment system which will most likely satisfy the requirements for R&M data entry with little or no modification. Whichever method is adopted it needs to be a systematic approach to ensure each solution option is assessed, based on the same criteria and not already biased, during the data entry process. Activity 306-08 – Select Preferred R&M Option With a view of achieving and demonstrating compliance, prioritise the proposed solution from an R&M perspective. A sound, well constructed Assessment Matrix should have the inherent properties to generate a prioritised output of solution options with very little intervention beyond that of data entry. However, which is the preferred R&M solution option and which are the projects preferred solution option seldom co-inside and compromise will be required to select that most suited to best deliver the capability within the project resources. The Project Management Committee needs to be advised through the Chair of the R&M Panel of the prioritised options to satisfy the capability from an R&M perspective with the advantages and disadvantages of each option explained in detail. While one option may be preferred over another, should it be unaffordable, or cannot be contracted for it will not happen. Conversely an option which is less desirable in terms of R&M but which is affordable may with appropriate support satisfy the Customers expectations completely. 8. RECORDS AND DOCUMENTATION A populated R&M Assessment Matrix of R&M Solution Options for inclusion in the R&M Case; A recommendation from the R&M Panel in the form of a prioritised list of R&M Solution Options with associated advantages and disadvantages which if implemented would enable the R&M requirements of the capability to be delivered; An updated R&M Case Report. 9. ADDITIONAL REFERENCE AND GUIDANCE R&M Management Responsibilities and Requirements for Programmes and Plans are set out in Def Stan 00-40 Part 1: http://www.dstan.mod.uk; Guidance on R&M progressive assurance throughout the CADMID cycle is available in Def Stan 00-42, Part 3: http://www.dstan.mod.uk and from the R&M area of the AOF: http://www.aof.mod.uk Guidance is available from the R&M area of the AOF: http://www.aof.mod.uk ; Page 6 Version 2.0 MOD Reliability and Maintainability Process Guidance Assessment General guidance on R&M tools and techniques can be found in: Applied R&M Manual for Defence Systems (GR-77): http://www.sars.org.uk/bok.htm and on the Defence Intranet. Version 2.0 Page 7 Process 306 Evaluate Risk, Develop Mitigation Strategies and Select Optimum R&M Solutions Process 306 - Evaluate Risk, Develop Mitigation Strategies and Select Optimum R&M Solutions Page 8 Version 2.0