safety risk model: risk profile bulletin, version 8 - …€¦ · safety risk model: risk profile...

76
Issue 1.1 published December 2014 Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. If you would like to give feedback on any of the material contained in this report, please contact: Marcus Dacre RSSB Block 2, Angel Square 1 Torrens Street London EC1V 1NY 020 3142 5476 [email protected] © RAIL SAFETY AND STANDARDS BOARD LTD. 2014 ALL RIGHTS RESERVED This publication may be reproduced free of charge for research, private study or for internal circulation within an organisation. This is subject to it being reproduced and referenced accurately and not being used in a misleading context. The material must be acknowledged as the copyright of RSSB and the title of the publication specified accordingly. For any other use of the material please apply to RSSB for permission. This publication can be accessed via the RSSB Rail Risk Portal at www.safetyriskmodel.co.uk. This is Issue 1.1 of the report. It details SRM version 8.1 and contains corrections to hours worked by workforce groups and associated results.

Upload: tranmien

Post on 15-Sep-2018

265 views

Category:

Documents


5 download

TRANSCRIPT

Page 1: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Issue 1.1 – published December 2014

Safety Risk Model: Risk Profile Bulletin, version 8.1

This report is issued by RSSB.

If you would like to give feedback on any of the material contained in this report,

please contact:

Marcus Dacre RSSB Block 2, Angel Square 1 Torrens Street London EC1V 1NY 020 3142 5476

[email protected]

© RAIL SAFETY AND STANDARDS BOARD LTD. 2014 ALL RIGHTS RESERVED This publication may be reproduced free of charge for research, private study or for internal circulation within an organisation. This is subject to it being reproduced and referenced accurately and not being used in a misleading context. The material must be acknowledged as the copyright of RSSB and the title of the publication specified accordingly. For any other use of the material please apply to RSSB for permission. This publication can be accessed via the RSSB Rail Risk Portal at www.safetyriskmodel.co.uk.

This is Issue 1.1 of the report. It details SRM version 8.1 and contains corrections to hours

worked by workforce groups and associated results.

Page 2: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Version 8.1 - Issue 1.1 - December 2014 ii

This page has been intentionally left blank

Page 3: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Executive summary

Version 8.1 - Issue 1.1 - December 2014 iii

Executive summary

The Safety Risk Model (SRM) consists of a series of fault tree and event tree models

representing 131 hazardous events (HEs) that collectively define the overall level of risk on

the railway. It provides a structured representation of the causes and consequences of

potential accidents arising from railway operations and maintenance. The reported risk

estimates relate to the network-wide risk and they indicate the current level of residual risk (ie

the level of risk remaining with the current risk control measures in place and with their current

degree of effectiveness).

Version 8 of the safety risk model has an extended scope to previous versions as it merges

mainline railway risk (as previously modelled in SRMv7.5) and risk on yards, depots and

sidings (previously modelled in the YDS-SRM). The version 8 SRM update also included a

number of modelling changes, precursor additions/restructurings and a refresh of data up to

the data cut-off date of 30th September 2013.

Following the completion of SRM v8 changes were made to the classification of a number of

suicide and trespass events. This resulted from improved liaison and data sharing between

RSSB and British Transport Police, which allowed for more accurate distinctions between

suicide and non-suicide events. Due to the magnitude of these data changes the risk

associated with affected hazardous events was recalculated to create a further version of the

SRM, version 8.1, using the same model structures and data cut-off date as version 8.

It is the results of version 8.1 that are reported on in this document. The risk results are

presented as a measure of the absolute risk on the railway. As with any quantified risk

assessment, the results are estimates and are dependent on modelling assumptions and

limitations of the available data. Quantified risk estimates can be a useful input to the decision

making process, but should not be the only input, and their inherent uncertainty must be taken

into account.

Overall risk

SRMv8.1 estimates that the overall level of risk on the railway is 139.6 FWI/year1. This

represents a decrease of 4.8% from the figure of 146.6 FWI/year estimated by SRMv7.5 and

the YDS-SRM

Risk by person type

The overall figures for SRMv8.1 broken down by each exposed group are given in Table 1.

Table 1: SRMv8.1 results by person group

Person category Passenger Workforce Public Total

SRMv8.1 (FWI/yr) 58.4 33.4 47.8 139.6

Passenger risk is 58.4 FWI/year. The main contributors to this risk are slips trips and falls and

assaults.

1 Unless otherwise specified all risk figures quoted exclude the direct risk from suicide events. That is, injuries to the suicidal person are excluded whilst secondary injuries, eg, train driver and crew shock/trauma injuries are included.

Page 4: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Executive summary

Version 8.1 - Issue 1.1 - December 2014 iv

Workforce risk is 33.4 FWI/year. The main causes of workforce risk are slips, trips and falls

and contact with objects.

Risk to members of the public is 47.8 FWI/year. The majority of this risk is due to trespass.

Risk by accident type

Alternatively, the overall risk figure of 139.6 FWI/year can be broken down by accident type

as shown in Table 2.

Table 2: SRMv8.1 results by accident category

Accident category HET HEM HEN Total

SRMv8.1 (FWI/yr) 8.0 49.6 82.0 139.6

Where:

HET: Train accidents

HEM: Movement accidents

HEN: Non-movement accidents

Further information is available on the Rail Risk Portal: www.safetyriskmodel.co.uk.

Page 5: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Contents

Version 8.1 - Issue 1.1 - December 2014 v

Table of contents

Executive summary .................................................................................................... iii

Table of contents ........................................................................................................ v

List of tables ........................................................................................................... vii

List of figures .......................................................................................................... viii

1 Introduction ......................................................................................................... 1

2 SRM objectives and overview ............................................................................. 3

2.1 Objectives ..................................................................................................... 3

2.2 Overview ....................................................................................................... 4

2.3 Key assumptions and exclusions .................................................................. 5

3 SRM update strategy .......................................................................................... 6

3.1 Overview of the SRMv8 update ..................................................................... 6

3.2 Update to SRM version 8.1 ........................................................................... 7

4 Total risk on the railway ...................................................................................... 9

4.1 Overall profile ................................................................................................ 9

4.1.1 Mainline profile ..................................................................................... 12

4.1.2 Yards, depots and sidings .................................................................... 16

4.1.3 Estimation of YDS underreporting ........................................................ 19

4.2 Risk by ASPR hazard categorisation .......................................................... 20

4.2.1 Risk by annual FWI .............................................................................. 20

4.2.2 Risk by annual fatalities ........................................................................ 20

4.2.3 Detailed risk profiles ............................................................................. 20

5 Key risk areas ................................................................................................... 23

5.1 Other risk groupings .................................................................................... 25

6 SRM risk vs observed risk ................................................................................. 26

7 Uncertainty in the SRM risk estimates .............................................................. 28

7.1 Introduction ................................................................................................. 28

7.2 Uncertainty methodology ............................................................................ 28

7.3 SRM uncertainty results .............................................................................. 29

7.4 Uncertainty analysis next steps ................................................................... 32

8 Individual fatality risk ......................................................................................... 33

8.1 Introduction ................................................................................................. 33

8.2 Fatality risk .................................................................................................. 33

8.3 Passengers ................................................................................................. 34

8.4 Workforce .................................................................................................... 35

8.5 Members of the public ................................................................................. 37

9 Multiple fatality risk: the F-N Curve ................................................................... 39

9.1 F-N results................................................................................................... 39

9.2 F-N modelling approach .............................................................................. 43

Page 6: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Contents

Version 8.1 - Issue 1.1 - December 2014 vi

10 Remodelling risk at the platform-train interface ................................................. 44

10.1 Background and objectives ......................................................................... 44

10.2 The remodelling process ............................................................................. 44

10.2.1 Scope of changes ................................................................................. 44

10.2.2 Remodelling steps ................................................................................ 45

10.2.3 PTI structural changes .......................................................................... 45

10.3 Impact on the risk profile ............................................................................. 46

11 SRM governance and RPB updates ................................................................. 48

11.1 Data and Risk Strategy Group .................................................................... 48

11.1.1 SRM Practitioners Working Group ........................................................ 48

11.2 Update history ............................................................................................. 48

11.3 Updates to the SRM during CP4 ................................................................. 50

11.4 Future updates during CP5 ......................................................................... 50

12 Contributors ...................................................................................................... 51

13 Acronyms and glossary ..................................................................................... 52

13.1 Acronyms .................................................................................................... 52

13.2 Glossary ...................................................................................................... 53

14 References ........................................................................................................ 61

Appendix A. SRM outputs...................................................................................... 62

Appendix B. ASPR hazardous event groupings .................................................... 63

Appendix C. Individual fatality risk summary .......................................................... 65

Appendix D. Modelling approach ........................................................................... 66

D.1. Key assumptions .................................................................................. 66

D.2. Hazardous event definitions ................................................................. 67

D.3. Normalisation data ................................................................................ 67

D.4. Significant modelling changes for SRMv8 ............................................ 67

D.4.1. Inclusion of YDS-SRM risk ................................................................... 67

D.4.2. Remodelling of risk at the PTI ............................................................... 67

D.4.3. Inclusion of MCB+OD and AOCL+B crossing types ............................. 67

D.4.4. New approach to assault data analysis ................................................ 67

Appendix E. Railway lines in SRM scope .............................................................. 68

Page 7: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

List of tables

Version 8.1 - Issue 1.1 - December 2014 vii

List of tables

Table 1: SRMv8.1 results by person group ........................................................................... iii Table 2: SRMv8.1 results by accident category ..................................................................... iv Table 3: Scope of the railway infrastructure .......................................................................... 4 Table 4: Exceptions to the physical boundary of the SRM ..................................................... 4 Table 5: Risk changes from SRMv8 to SRMv8.1 ................................................................... 8 Table 6: Total risk by accident category ................................................................................ 9 Table 7: Total risk by person category ................................................................................ 10 Table 8: Total risk to each person category from each accident category ........................... 10 Table 9: Total risk by accident category .............................................................................. 12 Table 10: Total risk by person category............................................................................... 13 Table 11: Total risk to each person category from each accident category ......................... 14 Table 12: Total risk by accident category ............................................................................ 16 Table 13: Total risk by person category............................................................................... 17 Table 14: Total risk to each person category from each accident category ......................... 17 Table 15: Grouped risk figures for SRMv8.1, not including YDS risk ................................... 23 Table 16: Selected SRMv8.1 risk groupings ........................................................................ 25 Table 17: Comparison of SRM and uncertainty model risk estimates .................................. 29 Table 18: Total passenger individual fatality risk ................................................................. 35 Table 19: Workforce individual fatality risk breakdown ........................................................ 37 Table 20: Frequency of train-related incidents leading toRI multiple fatalities ...................... 39 Table 21: Return periods of train-related incidents leading to multiple fatalities ................... 39 Table 22: Remodelled PTI HE descriptions ......................................................................... 45 Table 23: Remodelled PTIHEs. Summary of changes......................................................... 46 Table 24: Summary of the changes in risk for PTI hazardous events .................................. 47 Table 25: SRM update history ............................................................................................. 49 Table 26: Accident groups used within the ASPR ............................................................... 63 Table 27: Workforce group individual fatality risk by cause classification. ........................... 65 Table 28: Key modelling assumptions in the SRM .............................................................. 66 Table 29: Railway lines in and out of scope of the SRM ...................................................... 68

Page 8: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

List of figures

Version 8.1 - Issue 1.1 - December 2014 viii

List of figures

Figure 1: Summary of the SRM remodelling and data updates. ............................................ 7 Figure 2: Total risk profile by person type (% of total FWI/year) .......................................... 11 Figure 3: Mainline railway risk profile by person type (% of total mainline FWI/year) ........... 15 Figure 4: YDS risk profile for workforce (% of total workforce FWI/year) ............................. 18 Figure 5: Risk profile in FWI/year (with % change from SRMv7.5+YDS) ............................. 21 Figure 6: Risk profile in fatalities/year (with % change from SRMv7.5+YDS ........................ 22 Figure 7: Breakdown of SRMv8.1 (excluding YDS risk) by risk area ................................... 24 Figure 8: Passenger observed FWI vs SRM FWI approximation ......................................... 27 Figure 9: Risk distribution for the total SRMv8.1 HEM/HEN risk .......................................... 29 Figure 10: Risk distribution for the SRMv8.1 risk for HEM and HEN separately .................. 30 Figure 11: Risk distribution for the SRMv8.1 risk by person type ......................................... 31 Figure 12: Fatality risk for each person category per year (SRMv8.1) ................................. 34 Figure 13: Causal breakdown of passenger fatality risk ...................................................... 34 Figure 14: Expected annual fatalities by workforce role ....................................................... 36 Figure 15: Individual fatality risk by workforce role .............................................................. 36 Figure 16: Causal breakdown of MOP fatality risk ............................................................... 38 Figure 17: The F-N Curve – all person and train accident types. ......................................... 40 Figure 18: Estimated frequency of train accident-related fatality events .............................. 41 Figure 19: F-N curve – plotted separately for three categories of train accidents ................ 42 Figure 20: Contribution of key hazardous events to the F-N curve ...................................... 43 Figure 21: Timeline of updates of the SRM and RPB that occurred in CP4 ......................... 50

Page 9: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Introduction

Version 8.1 - Issue 1.1 - December 2014 1

1 Introduction

RSSB works with its members to support the development of safety strategies, develop

standards and monitor and report on the safety performance of the industry. An understanding

of the overall risk level and risk profile of the railway is a key foundation for this role. RSSB

supports its members — who comprise the railway industry — by providing risk information to

help them understand their own risk profile and benchmark their performance. This in turn

helps them formulate their own safety policies, plans and measures. The Safety Risk Model

(SRM) provides the network-wide risk profile and this information is communicated to the

industry in a range of ways, the primary one being the SRM Risk Profile Bulletin (SRM-RPB).

The SRM consists of a series of fault tree and event tree models representing 131 hazardous

events (HEs), which collectively define the overall level of risk on the mainline railway. It

provides a structured representation of the causes and consequences of potential accidents

arising from railway operations and maintenance on railway infrastructure as well as other

areas where the industry has a commitment to record and report accidents.

The SRM has been designed to take account of both high-frequency, low-consequence events

(occurring routinely, and for which there is a significant quantity of recorded data) and low-

frequency, high-consequence events (occurring rarely, and for which there is little recorded

data). The results for each HE are presented in terms of the frequency of occurrence (number

of events per year) and the risk (number of fatalities and weighted injuries (FWI) per year).

The FWI weightings equate injuries of differing degree with a fatality, which allows all of the

risk on the railway to be totalled and contrasted in comparable units. These FWI weightings

are shown in Section 13.2.

The risk estimates presented can be used to support risk assessments and for judging how

the risk relating to particular operations compares with and contributes to the network-wide

risk.

The information contained in this document relates to the network-wide risk on railway

infrastructure covering all running lines, rolling stock types, stations, yards, depots and sidings

currently in use. The system boundaries are detailed in Section 2.2. The risk estimates are for

the current level of residual risk on the railway, which is the level of risk remaining with the

current risk control measures in place and with their current degree of effectiveness.

Because of the network-wide nature of the SRM, it is necessary to make average assumptions

that represent the general characteristics of the network. The model also hinges on the

definitions of the HEs and precursors by which risk estimates are reported. These definitions

are available on the RSSB Rail Risk Portal at www.safetyriskmodel.co.uk, and a thorough

understanding of them is essential to the correct interpretation and use of the risk information

reported here. The SRM does not provide risk profiles for specific lines of route and train

operating companies (TOCs), although a Risk Profile Tool is also available from the Rail Risk

Portal to help scale the results for this purpose. The information in this report should not be

considered to be representative of the risk for any particular line of route or TOC, without

further localised analysis.

This risk profile bulletin details the risk estimates made for version 8.1 of the SRM. Version

8.1 is a partial update from SRM version 8 that came about as the result of significant changes

being made to the classification of suicide and trespass events (detailed in section 3.2). The

Page 10: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Introduction

Version 8.1 - Issue 1.1 - December 2014 2

cut-off date for incident data used to inform SRMv8.12 was 30 September 2013.3 Comparisons

are made against the combined SRMv7.5 and the Yards, Depots and Sidings SRM, referred

to throughout this document as SRMv7.5+YDS.

The main part of this report sets out:

An overview of the SRM and its objectives (Section 2.1)

The SRM update strategy (Section 3)

Total risk on the railway (Section 4)

Breakdown of risk by the Strategic Safety Plan (SSP) risk areas (Section 5)

A comparison of observed FWI with SRM risk estimates (Section 6)

Detail of the uncertainty involved in the SRM risk estimates (Section 7)

A summary of individual risk (Section 8)

A summary of multi-fatality risk (Section 9)

Modelling changes made for SRMv8.1 (Section 10)

SRM governance arrangements (Section 11)

The SRM Practitioners Working Group (SRM-PWG) was the industry governance body for the

SRM throughout Control Period 4 (CP4). It was formed under the authority of the Safety Policy

Group (SPG) to engage stakeholders in the development and control of future versions of the

SRM and its related outputs. The modelling changes implemented as part of the update of the

SRM to version 8 have been endorsed by the SRM-PWG. The revised version 6 figures

(SRMv6.7) and the version 8 figures (SRMv8) were presented to the group and approved in

March 2014. As part of the modernisation of safety co-operation (MOSC) initiative, SPG and

SRM-PWG have been wound up and oversight for future SRM updates and developments will

be provided by the Data and Risk Strategy Group (DRSG) which is a subgroup of the System

Safety Risk Group (SSRG).

The Department for Transport (DfT) has been using the outputs from the SRM as the primary

means of measuring the performance of the industry against the High Level Output

Specification (HLOS) safety metrics. The risk estimates derived from SRMv6 provided the

initial baseline against which to compare safety performance through CP4 (April 2009 to March

2014). This is achieved by comparing the risk metrics derived from SRMv8 against the

baseline safety metrics determined from SRMv6 (and subsequently updated to SRMv6.7). A

full report of the HLOS metric calculation is given in the report HLOS Safety Metrics – baseline

and progress metrics following completion of the update of the SRM to version 8 [Ref. 1] which

was delivered to SRM-PWG on the 27 March 2013.

Additional appendices for this document may be downloaded from the RSSB Rail Risk Portal

at http://www.safetyriskmodel.co.uk.

2 The term SRMv8.1 is used to refer to the full SRM scope of events including those events which did not need to be recalculated in the partial update. 3 There are four hazardous event models that are exceptions to this data cut-off: HEM-12, HEM-25, HEM-31 and HEN-77. The mapping of incidents to these HEs is influenced by coroners’ reports, which may not be available until a considerable time after the event. Therefore, to ensure there is confidence in the data used to analyse them, an earlier cut-off date (30 September 2012) was used.

Page 11: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM objectives and overview

Version 8.1 - Issue 1.1 - December 2014 3

2 SRM objectives and overview

2.1 Objectives

The SRM has been developed and published to support RSSB members. The primary

objectives of the SRM are:

To provide an estimate of the extent of the current risk on the railway.

To provide risk information and risk profiles relating to the railway.

This information is used for risk assessments, appraisals and to inform decision making

throughout the railway industry.

Taking Safe Decisions, [Ref. 2] sets out the rail industry’s consensus view on how safety is

taken into account when making decisions. The guidance was updated in 2014 to reflect

changes to the legal environment and evolving industry practice. In the Great Britain (GB) rail

industry, almost every policy, investment or operational decision has an impact on safety. In

order to make these decisions and to ensure that risk is acceptable, the rail industry needs to

understand safety risk, its causes and consequences. The SRM is one of the key tools used

to help support this decision making through:

Monitoring: are operations safe or might changes be required?

Analysing and selecting options: what (if anything) should I change and can it be done

safely?

Making a change: how do I make sure a change is safe?

This includes:

Enabling risk-informed assessments and cost-benefit analyses (CBAs) to be carried

out to support decisions taken about:

Whether changes to the railway can be made safely.

Which risk control measures should be applied or can be relaxed or changed.

Technical modifications and upgrades such as new infrastructure investment.

Revision of Railway Group Standards (RGS), in terms of their contribution to

risk mitigation (including development of impact assessments for proposed

changes to the RGS).

Providing risk information to support:

The development of priorities for the Industry Strategic Business Plans 2014–

2019 [Ref. 3].

Transport operator risk assessments, as required by The Railways and Other

Guided Transport Systems (Safety) Regulations 2006.

Identification and prioritisation of issues for audit and/or research.

RSSB’s contributions and comments on the development of Technical

Standards for Interoperability (TSIs), National Technical Rules and National

Safety Rules.

Page 12: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM objectives and overview

Version 8.1 - Issue 1.1 - December 2014 4

Providing an understanding about the contribution of a particular item of equipment or

failure mode to the overall risk.

2.2 Overview

The SRM includes the safety risk from incidents which could occur during the operation and

maintenance of the railway. For SRMv8.1 the scope has been extended to include risk within

yards, depots and sidings, previously covered by the separate Yards, Depots and Sidings

(YDS) Risk Profile Report [Ref. 4].

For SRMv8.1 the extent of the railway infrastructure in question is defined below in Table 3.

Table 3: Scope of the railway infrastructure

Inclusions Exclusions

The sections of the operational railway4 which are managed or operated by Network Rail.

Any assets, structures, stations, yards, depots and sidings associated with the above.

Any yard, depot or siding that is connected to but away from the running lines on railway infrastructure, where train maintenance, stabling, marshalling and/or servicing (including refuelling) takes place under the management of other infrastructure managers.

Station car parks.

Offices (except areas normally accessible by MOP).

Mess rooms.

Training centres.

IECCs/SCCs.

Outside of the entrance to stations.

Station and site toilets.

Retail units and concessions in stations.

Construction sites which are completely segregated from the public areas.

Track sections closed for long term construction, maintenance, renewal or upgrade.

This defines the physical boundary of the SRM. Any incidents which occur inside this

boundary, and are listed in GE/RT8047, are included in the SRM. Conversely, any incidents

outside this boundary are excluded from the SRM.

The exceptions to this rule are listed below in Table 4.

4 The operational railway includes all lines for which the infrastructure manager & railway undertaking have been granted a safety authorisation & certificate respectively by the ORR (under European Safety Directive 2004/49/EC [Ref 5]). This provides evidence that there is a suitable SMS in place, and that operations are being conducted in accordance with that SMS. 5 For instance, this would include delivery of goods to a trackside location, but exclude travel to a training centre.

Table 4: Exceptions to the physical boundary of the SRM

Inclusions outside the SRM boundary Exclusions inside the SRM boundary

Injuries to people which are directly caused by operations or maintenance inside the boundary.

Injuries to railway staff who are on duty and travelling between sites, except if their destination is one of the excluded areas in Table 3 (eg an office).5

Long-term occupational health issues.

Terrorist activity.

Page 13: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM objectives and overview

Version 8.1 - Issue 1.1 - December 2014 5

Appendix G of the YDS Risk Profile Report contains a more detailed discussion of the SRM-

YDS scope and the boundaries of yards, depots and sidings. It also gives specific guidance

as to what aspects of the operation and maintenance of the railway are within scope of the

SRM.

2.3 Key assumptions and exclusions

Appendix D.1 lists key assumptions that are applicable to the SRM. Further clarity on the

definitions and assumptions applicable to individual HEs can be provided on request.

Page 14: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM update strategy

Version 8.1 - Issue 1.1 - December 2014 6

3 SRM update strategy

3.1 Overview of the SRMv8 update

The SRM was used by the DfT as the primary means of measuring the performance of the

industry against the HLOS safety metrics throughout control period 4 (CP4). It was therefore

necessary to be able to distinguish between changes in estimated risk arising from genuine

changes in safety performance and changes due to modelling refinements (for SRM versions

6 through 8).

To incorporate YDS risk modelling and to enable the HLOS comparison to be meaningful, the

update of the SRM to version 8 has been split into three distinct stages.

1. Bring the YDS risk model into the main risk model framework.

2. Produce risk estimates for SRMv8 incorporating:

a. Changes to the model structure. This included:

i. Restructuring of the various platform-train interface (PTI) hazardous

events following industry requirements for greater understanding of

risk at the PTI (explanation of this remodelling is covered in detail in

Chapter 10).

ii. Extension of the seven level crossing hazardous events to include the

recently introduced crossing types: MCB with obstacle detection

(MCB+OD) and AOCL with half barriers (AOCL+B).

b. Changes to the calculation methods. This included:

i. Improved estimates of the risk from passenger and public assaults

utilising a refined matching of records between SMIS and the BTP

CRIME database.

ii. Correcting minor errors from previous SRM versions.

c. Changes to historical data (incidents which occurred prior to the data cut-off

for previous versions). This included:

i. Inclusion, exclusion or reclassification of incidents in the light of new

information.

ii. Inclusion of late reported incidents.

d. Inclusion of new data for incidents which occurred since the data cut-off for

the previous version and the SRMv8 data cut-off of 30 September 2013.

3. Apply step 2a) to 2c) above to SRMv6 to create SRMv6.7. This updated version

represents the risk as would have been calculated for SRMv6 had the modelling

changes for the mainline railway risk implemented in SRMv8 been implemented at

the time SRMv6 was first created.

The required comparisons between risk estimates can then be meaningfully made:

1. SRMv6.7 and SRMv8 can be compared to provide the estimated change in risk over

CP4 as required for HLOS.

Page 15: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM update strategy

Version 8.1 - Issue 1.1 - December 2014 7

2. SRMv7.5 and SRMv8 (without YDS) can be compared to give the estimated change

in risk due to remodelling and the refresh of the data up to 30 September 2013

(compared to 30 June 2012 for SRMv7.5).

3. The YDS-SRM and the YDS subsection of SRMv8 can be compared to give the

estimated change in YDS risk.

This is the third time the SRM update has required previous models to be simultaneously

updated. The other occasions being for SRMv7 and SRMv7.5. This has been necessary in

order to provide a framework that is compatible with the requirements for monitoring the HLOS

metrics and to provide risk estimates for different points in time that are calculated on a like-

for-like basis.

Figure 1 summarises the different SRM versions and how they have been derived. For HLOS

comparative purposes, the light grey boxes show valid comparisons based solely on changes

in data between different versions of the model.

Figure 1: Summary of the SRM remodelling and data updates.

3.2 Update to SRM version 8.1

In 2013/14, BTP made more information about railway fatalities available to the rail industry

as a result of the enhanced co-operation effected by the National Suicide Prevention Strategy

Group. BTP provided additional information dating back to 2009/10, which has enabled the

industry to update the classification of a number of fatalities6.

6 Further information on the suicide/trespass data reclassification is available in the Annual Safety Performance

Report 2013/14.

Date of version release

Data

cut-

off

date SRM v6 SRMv6.5 SRMv6.6 SRMv6.7

SRMv7 SRMv7.1

SRMv7.5

YDS-SRM

SRMv8

Remodelling

Data refresh

Extension of scope

KEY

Final HLOS comparison

1st HLOScomparison

2nd HLOS comparison

Partial Update

Page 16: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM update strategy

Version 8.1 - Issue 1.1 - December 2014 8

The reclassified data only became available after the SRMv8 update had been completed.

However, due to the expected scale of the impact RSSB decided to update risk estimates for

the relatively small number of affected hazardous events and incorporate them in a partial

update to SRMv8 to create SRMv8.1.

The hazardous events for which data was recoded and the risk recalculated are:

HEM-31-Suicide (or attempted suicide) involving rolling stock in motion.

HEN-77-Suicide (or attempted suicide) not involving rolling stock in motion.

HEM-12-MOP (trespasser) struck/crushed by train while on tracks at station.

HEM-25-MOP (trespasser) struck/crushed by train while on railway infrastructure not

at station.

HEN-38-MOP (adult trespasser) electric shock (conductor rail).

HEN-71-MOP (adult trespasser) fall/jump onto railway infrastructure.

Other hazardous events were indirectly affected due to dependencies on the above, these

were:

HEM-31-YDS-Suicide or attempted suicide involving rolling stock in motion.

HEN-45-MOP (non-trespasser) fall onto railway infrastructure.

HEN-72-MOP (child trespasser) fall/jump onto railway infrastructure.

HEN-77-YDS-Suicide (or attempted suicide) not involving rolling stock in motion.

The overall effects of these changes are given in Table 5.

Table 5: Risk changes from SRMv8 to SRMv8.1

Change in FWI from v8 to v8.1

Absolute Percentage

Suicide risk 7.97 3.4%

Other risk -11.59 -27.1%

These changes only had a negligible impact on passenger and workforce risk so did not affect

the HLOS calculations.

Throughout this report all values, charts and tables reflect the SRMv8.1 results.

Page 17: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 9

4 Total risk on the railway

4.1 Overall profile

This section presents the overall risk on the railway for the 131 HEs which make up the SRM.

Risk is presented as:

Injury severity by accident category (Table 6)

Injury severity by person category (Table 7)

Person type injured by accident category ( Table 8)

The total risk from the 131 HEs is estimated to be 139.6 FWI/year7. This is made up of

approximately:

55 fatalities per year8

567 major injuries per year

2494 class 1 minor injuries per year

11833 class 2 minor injuries per year

1887 shock/trauma events per year

This compares to the 146.6 FWI/year calculated in SRMv7.5 and SRM-YDS9. These total risk

estimates are broken down by accident category and injury type in Table 6.

7 The values presented exclude direct risk due to suicide and attempted suicide. Indirect suicide risk (eg the shock/trauma of witnesses) associated with these events is included. 8 Note that, due to rounding, values in tables and the text throughout this document may not match. 9 This version of the SRM is the first version that has included both mainline and yards, depots and sidings. Consequentially comparisons have been made to the combined results from SRMv7.5 and the SRM-YDS.

Table 6: Total risk by accident category

Accident category FWI / year

Fata

liti

es/y

ea

r

Majo

r in

juri

es

/

year

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma

/

year

Cla

ss

2

sh

ock/t

rau

ma

/

year

Train accidents 8.0 6.1 14 79 39 4 38

Movement accidents (excl. trespass)

25.2 12.4 76 372 1822 253 217

Non-movement accidents (excl. trespass)

72.8 5.6 457 2024 9964 9 1340

Trespass 33.6 31.3 21 19 9 26 0.4

Total 139.6 55 567 2494 11833 292 1595

Page 18: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 10

Table 7 shows the risk to each person category on the railway, broken down by person category and accident category. Reasons for the changes in risk are explored in more detail in section 4.1.1 (which focuses on the changes in mainline risk from SRMv7.5) and section 4.1.2 (which focuses on the changes in risk on YDS sites from the YDS-SRM).

Table 7: Total risk by person category

Person category

SRMv8.1 SRMv7.5+YDS

FW

I/y

ear

Fata

liti

es/y

ea

r

Majo

r in

juri

es/

year

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma/

year

Cla

ss

2

sh

ock/t

rau

ma/

year

FW

I/y

ear

% C

han

ge f

rom

SR

Mv7.5

+Y

DS

to

SR

Mv8.1

Passenger 58.4 8.3 352 1616 6001 1.6 801 54.7 +6.9%

Workforce 33.4 4.2 173 798 5683 289 763 34.0 -2.0%

MOP 47.8 43 42 80 150 1.1 31 57.9 -17.5%

Total 139.6 55 567 2494 11833 292 1595 146.6 -4.8%

The reclassification of suicide/trespass events has only been applied to this latest version of

the SRM. This means that those hazardous events that were reanalysed for SRM version 8.1

are no longer directly comparable to their SRMv7.5+YDS counterparts due to the significant

differences in the data. A significant proportion of the reduction in risk to both members of the

public and HEM events can be attributed to this.

Figure 2 presents the total risk profile for passengers, the workforce and members of the

public. It shows that the bulk of the risk is split between passengers and members of the public,

with 42% and 34% respectively — the remaining proportion (24%) is attributed to the

workforce. Fatalities still dominate the risk to the public, comprising 90% of the total risk to

members of the public (equivalent to 43 fatalities per year). Fatalities due to trespass make

up 73% of member of public fatalities (equivalent to 31 fatalities per year).

Table 8: Total risk to each person category from each accident category

Accident category

SRMv8.1 SRMv7.5+YDS

Total FWI/year

Passenger FWI/year

Workforce FWI/year

MOP FWI/year

Total FWI/year

% change from SRMv7.5+ YDS to SRMv8.1

HET 8.0 2.8 1.1 4.0 8.3 -4.4%

HEM 49.6 11.7 6.6 31.4 56.4 -12.0%

HEN 82.0 43.9 25.6 12.4 81.9 +0.1%

Total 139.6 58.4 33.4 47.8 146.6 -4.8%

Page 19: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 11

Figure 2: Total risk profile by person type (% of total FWI/year)

To

tal ri

sk

= 1

39.6

FW

I/year

Ma

jor

inju

rie

s(5

1.7

%)

Cla

ss

2 m

ino

r in

juri

es

(0.3

%)

Cla

ss

2 s

ho

ck/t

rau

ma

(0

.1%

)

Fa

tali

tie

s(1

4.2

%)

Ma

jor

inju

rie

s(6

0.3

%)

Cla

ss

1 m

ino

r in

juri

es

(13.8

%)

Cla

ss

2 m

ino

r in

juri

es

(10.3

%)

Cla

ss

1 s

ho

ck/t

rau

ma

(0

.01

%)

Fa

tali

tie

s (

12.7

%)

Cla

ss

1 m

ino

r in

juri

es (

12.0

%)

Cla

ss

2 m

ino

r in

juri

es

(17.0

%)

Cla

ss

2 s

ho

ck/t

rau

ma

(1

.4%

)

Cla

ss

1 s

ho

ck/t

rau

ma

(4

.3%

)

Cla

ss

2 s

ho

ck/t

rau

ma

(2

.3%

)

Fa

tali

tie

s(8

9.9

%)

Majo

r in

juri

es (

8.9

%)

Cla

ss

1 m

ino

r in

juri

es (

0.8

%)

Passen

ger

(42%

)

Mem

bers

of

the p

ub

lic

(34%

) Wo

rkfo

rce

(24%

)

Cla

ss

1 s

ho

ck/t

rau

ma

(0

.01

%)

Page 20: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 12

4.1.1 Mainline profile

This section presents the overall risk for the 122 hazardous events on the mainline railway

(that is, excluding all hazardous and sub-hazardous events referring to YDS risk), which are

considered within the SRM. Risk is presented as:

Injury severity by accident category (Table 9)

Injury severity by person category (Table 10)

Person type injured by accident category (Table 11)

The total risk from the 122 HEs for the mainline railway is assessed to be 132.0 FWI/year.

This is made up of approximately:

55 fatalities per year

520 major injuries per year

2314 class 1 minor injuries per year

10609 class 2 minor injuries per year

1874 shock/trauma events per year

These total risk estimates are broken down by accident category and injury type in Table 9.

Table 10 shows the risk to each person category on the railway. Risk to passengers forms the

greatest proportion of the total risk, at 58.4 FWI/year (an increase of 6.9% from SRMv7.5).

However, over the same period passenger journeys have increased by 2% and passenger

kilometres have increased by 3% (from 57.7 billion to 59.2 billion passenger km).

Table 9: Total risk by accident category

Accident category FWI/ year

Fata

liti

es/y

ea

r

Majo

r in

juri

es/y

ear

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma/

year

Cla

ss

2

sh

ock/t

rau

ma/

year

Train accidents 7.8 6.0 13 76 37 0.8 38

Movement accidents (excl. trespass)

24.6 12.3 72 357 1760 253 216

Non-movement accidents (excl. trespass)

66.2 5.3 414 1863 8803 9.2 1331

Trespass 33.4 31.1 20 19 9.1 26 0.4

Total 132.0 54.8 520 2314 10609 289 1585

Page 21: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 13

The increase in passenger risk is due to increases in several hazardous events, the top

contributors of which are HEN-14: Passenger slip, trip or fall and HEN-64: Passenger physical

assault. The rise in risk from HEN-14 is mainly driven by an increase in estimated frequency

due to a larger number of observed slips, trip or falls on stairs and escalators.

Absolute MOP risk decreased by 17.7% since SRMv7.5. This is due to a number of trespass

events being reclassified as suicides following further information from BTP. Trespass events

are still the largest contributor to MOP risk but following this reclassification, the trespass risk

has decreased by 10.9 FWI/year.

The risk to the workforce is now 26.1 FWI/year which represents a 2.9% reduction from

SRMv7.5. The decrease in workforce risk is due to a decrease in the risk from several

hazardous events, of which the top contributors are HEM-19: Infrastructure worker

struck/crushed by train in motion and HEN-65: Workforce physical assault.

Table 10: Total risk by person category

Person category

SRMv8.1 SRMv7.5

FW

I/y

ear

Fata

liti

es/y

ea

r

Majo

r in

juri

es/

year

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma/

year

Cla

ss

2

sh

ock/t

rau

ma/

year

FW

I/y

ear

% c

han

ge f

rom

SR

Mv7.5

to

SR

Mv8.1

Passenger 58.4 8.3 352 1616 6000 1.6 800 54.7 +6.9%

Workforce 26.1 3.8 126 620 4463 286 754 26.9 -2.9%

MOP 47.5 42.7 42 78 146 0.9 30 57.7 -17.7%

Total 132.0 54.8 520 2314 10609 289 1585 139.2 -5.2%

Table 11 presents the risk on the mainline railway broken down by person and accident

category. As in the previous section, the table shows that overall risk due to train accidents

(HETs) has decreased by 4.6%, largely due to the decrease in estimated frequency of

derailments. Movement accidents (HEMs) have seen a 12.4% reduction in risk, whereas non-

movement accidents (HENs) have remained relatively constant. Overall, the total decrease in

risk from SRMv7.5 to SRMv8.1 is 5.2%.

Page 22: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 14

Table 11: Total risk to each person category from each accident category

Accident category

SRMv8.1 SRMv7.5

Total FWI/year

Passenger FWI/year

Workforce FWI/year

MOP FWI/year

Total FWI/year

% change from SRMv7.5 to SRMv8.1

HET 7.8 2.8 1.0 4.0 8.2 -4.6%

HEM 49.0 11.7 6.0 31.3 55.9 -12.4%

HEN 75.2 43.9 19.1 12.2 75.1 +0.1%

Total 132.0 58.4 26.1 47.5 139.2 -5.2%

Figure 3 presents the total risk profile for passengers, workforce and public. It shows that the

bulk of the risk is split between passengers and public, with 44% and 36% respectively — the

remaining proportion (20%) is attributed to workforce incidents. Fatalities still dominate risk to

public, comprising 90.0%. This is due to public trespass events, contributing 31.3 fatalities per

year.

Page 23: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 7.1 — August 2011 15

Figure 3: Mainline railway risk profile by person type (% of total mainline FWI/year)

Cla

ss 2

min

or

inju

ries

(0.3

%)

To

tal ri

sk

= 1

32.0

FW

I/year

Cla

ss 2

sh

oc

k/t

rau

ma (

0.1

%)

Fa

tali

tie

s(1

4.2

%)

Ma

jor

inju

rie

s(6

0.3

%)

Cla

ss

1 m

ino

r in

juri

es

(13.8

%)

Cla

ss

2 m

ino

r in

juri

es

(10.3

%)

Cla

ss 1

sh

ock/t

rau

ma (

0.0

1%

)

Fata

liti

es (

14.5

%)

Ma

jor

inju

ries

(48.1

%)

Cla

ss

1 m

ino

r in

juri

es (

11.9

%)

Cla

ss

2 m

ino

r in

juri

es

(17.1

%)

Cla

ss

2 s

ho

ck/t

rau

ma

(1

.4%

)

Cla

ss

1 s

ho

ck/t

rau

ma (

5.5

%)

Cla

ss 2

sh

ock/t

rau

ma (

2.9

%)

Fata

liti

es

(90.0

%)

Ma

jor

inju

rie

s (

8.8

%)

Cla

ss 1

min

or

inju

rie

s

(0.8

%)

Passen

ger

(44%

)

Mem

bers

of

the p

ub

lic

(36%

)

Wo

rkfo

rce

(2

0%

)

Cla

ss 1

sh

oc

k/t

rau

ma

(0

.01

%)

Page 24: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 16

4.1.2 Yards, depots and sidings

This section presents the overall risk for the nine hazardous events and 40 sub-hazardous

events related to YDS, which are considered within the SRM. Risk is presented as:

Injury severity by accident category (Table 12)

Injury severity by person category (Table 13)

Person type injured by accident category (Table 14)

The total risk from the 49 HEs for YDS is assessed to be 7.6 FWI/year. This is made up of

approximately:

0.7 fatalities per year

47.6 major injuries per year

180 class 1 minor injuries per year

1224 class 2 minor injuries per year

13.4 shock/trauma events per year

These total risk estimates are broken down by accident category and injury type in Table 12.

Table 12: Total risk by accident category

Accident category FWI/ year

Fata

liti

es/y

ea

r

Majo

r in

juri

es/

year

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma/

year

Cla

ss

2

sh

ock/t

rau

ma/

year

Train accidents 0.17 <0.1 0.72 3.2 2.4 3.3 <0.1

Movement accidents (excl. trespass)

0.64 <0.1 4.0 15 61 <0.1 1.0

Non-movement accidents (excl. trespass)

6.59 0.35 43 161 1160 <0.1 8.8

Trespass 0.21 0.19 0.20 0.21 <0.1 0.12 <0.1

Total 7.61 0.70 47.6 180 1224 3.58 9.80

Table 13 shows the risk to each person category on YDS. The majority of the risk on YDS can

be attributed to the workforce (96%). The remaining 4% of risk is allocated to members of the

public and over-carried passengers. The risk to workforce is now 7.3 FWI/year in comparison

to the 7.2 FWI/year in SRM-YDS.

The absolute risk to members of the public and over-carried passengers is small and therefore

susceptible to large percentage changes in risk from year to year as it is based on relatively

few events, as can be seen in Table 13 and Table 14.

Page 25: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 17

Table 13: Total risk by person category

Person category

SRMv8.1 YDS SRM-YDS

FW

I/y

ear

Fata

liti

es/y

ea

r

Majo

r in

juri

es/

year

Cla

ss

1 m

ino

r

inju

ries

/ye

ar

Cla

ss

2 m

ino

r

inju

ries

/ye

ar

Cla

ss

1

sh

ock/t

rau

ma/

year

Cla

ss

2

sh

ock/t

rau

ma/

year

FW

I/y

ear

% c

han

ge f

rom

SR

M-Y

DS

to

SR

Mv8.1

Passenger <0.1 - <0.1 <0.1 0.27 - <0.1 <0.1 -19.1%

Workforce 7.28 0.44 47 178 1220 3.3 8.8 7.2 +1.4%

MOP 0.33 0.26 0.57 1.4 3.9 0.25 1.0 0.29 +14.9%

Total 7.61 0.70 47.6 180 1224 3.58 9.80 7.47 +1.9%

Table 14 presents the risk broken down into person category and accident categories. The

table shows that overall risk due to train accidents (HETs) has increased by 6% but is still a

relatively small absolute risk at 0.2 FWI/year. Movement accidents (HEMs) have seen an

increase of 0.14 FWI/year which amounts to a 27.9% increase in risk (this is largely a

consequence of having a larger pool of data to analyse for SRMv8). Non-movement accidents

(HENs) have remained relatively constant. Overall, the total increase in risk from SRM-YDS

to SRMv8.1 is 1.9%.

Table 14: Total risk to each person category from each accident category

Accident category

SRMv8.1 YDS SRM-YDS

Total FWI/year

Passenger FWI/year

Workforce FWI/year

MOP FWI/year

Total FWI/year

% change from SRM-YDS to SRMv8.1

HET 0.17 - 0.13 <0.1 0.16 +6.0%

HEM 0.64 - 0.60 <0.1 0.50 +27.9%

HEN 6.80 <0.1 6.5 0.26 6.8 -0.1%

Total 7.61 <0.1 7.27 0.33 7.47 +1.9%

Figure 4 presents the total risk profile for the different workforce types on YDS sites10. Risk to

engineering staff is the highest of all workforce types at 36% of the total YDS risk. Across all

workforce types, major injuries are the highest contributors to workforce risk on YDS.

10 Workforce type groups are detailed in the glossary (section 13.2).

Page 26: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 18

Figure 4: YDS risk profile for workforce (% of total workforce FWI/year)

To

tal w

ork

forc

eri

sk =

7.2

8 F

WI/

year

Cla

ss

1 m

ino

r in

juri

es (

12.8

%)

Cla

ss

2 m

ino

r in

juri

es (

21.1

%)

Cla

ss

1 s

ho

ck/

tra

um

a (

0.0

%)

Fa

tali

tie

s (

5.9

%)

Ma

jor

inju

rie

s(6

0.1

%)

En

gin

eeri

ng

Sta

ff (

36%

) Dri

ver/

sh

un

ter

(30%

)

Cle

an

er/

ad

min

(14%

)

Infr

astr

uctu

rew

ork

er

(21%

)

Ma

jor

inju

rie

s(6

5.0

%)

Ma

jor

inju

rie

s(6

7.4

%)

Ma

jor

inju

rie

s(6

8.6

%)

Fa

tali

tie

s (

8.1

%)

Cla

ss 1

min

or

inju

ries (

11.3

%)

Cla

ss

2 m

ino

r in

juri

es (

15.3

%)

Cla

ss

1 s

ho

ck/

tra

um

a (

0.0

%)

Fa

tali

tie

s (

3.2

%)

Cla

ss

1 m

ino

r in

juri

es (

12.3

%)

Cla

ss

2 m

ino

r in

juri

es (

17.0

%)

Cla

ss

1 s

ho

ck/

tra

um

a (

0.0

%)

Fa

tali

tie

s (

6.0

%)

CC

lass

2 m

ino

r in

juri

es (

12.4

%)

Cla

ss

1 s

ho

ck/t

rau

ma

(0

.7%

)

Cla

ss

1 s

ho

ck/

tra

um

a (

0.2

%)

Cla

ss 1

min

or

inju

ries (

12.2

%)

Cla

ss

2

sh

oc

k/t

rau

ma

(0

.1%

)

Cla

ss

2 s

ho

ck/t

rau

ma

(0

.1%

)

Cla

ss

2 s

ho

ck/

tra

um

a (

0.2

%)

Page 27: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 19

4.1.3 Estimation of YDS underreporting

There is some evidence for underreporting of incidents across the whole of the railway11. For

most areas of risk on the mainline railway this is not currently thought to be a significant issue

as:

Reporting into SMIS is mandatory.

RSSB operates a data quality programme for mainline data reporting.

Underreported events tend to be less severe and due to the way in which minor injuries

are weighted limits their effect on overall FWI risk.

However there are specific problems relating to the quality of YDS data. The reporting of

events that occur on YDS into SMIS is not mandatory, and some companies do not report any

incidents into SMIS at all. Consequentially there are gaps in the data for events on YDS sites.

To attempt to address this issue of underreported YDS events, the scale of underreporting

has been estimated based on reporting from all freight companies and train maintenance

companies, taking into account the size of each company.

Of the freight operators who have agreed to provide event data, there is evidence that up until

2008/09 reporting was not complete. However, incident reporting from April 2009 is considered

fairly complete and by looking at the level of reporting since then it is possible to estimate what

level of reporting would have occurred pre-April 2009 if there had been no underreporting. In

doing so, an increased freight-based rate of reporting was estimated, which in turn increased

the freight proportion of the overall risk figure. Using this same method, the gaps for other

freight reporting have been filled in and scaled accordingly.

Estimates can also be made for train maintenance companies. Discussions were held with

three of the four train maintenance companies regarding; the scale of their operations, their

injury rates and the types and locations of those injuries. One company has also provided

some injury data, which has been used to aid the estimates. Based on these discussions and

data an estimate was made of the number of injuries that would have been reported had the

companies been doing so.

An extrapolation from the data that is available can be made to estimate a figure for the risk

associated with the missing data. This gives an increase of around 24% in the overall level of

risk on YDS sites. If we assume a similar profile of injury types for this missing data we can

extrapolate the total risk by this proportion. This gives an overall risk on YDS sites:

Estimated total risk = 9.4 FWI/year

This provides an estimate of the overall risk on YDS sites (the equivalent figure calculated for

the YDS-SRM was 9.2 FWI/year). Note that there is more uncertainty in this estimate than the

base figure of 7.6 FWI/year based on the known dataset. The portion of the extrapolated figure

that relates to workforce is 9.0 FWI/year (based on the existing ratio of workforce risk to overall

risk).

11 Further information on data quality is given in Chapter 10 of the ASPR 2013-14

Page 28: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 20

4.2 Risk by ASPR hazard categorisation

The 131 HEs which make up the SRM have been grouped into the 22 accident groups used

in the ASPR [Ref. 6] in Table 26 (Appendix B). Combining the HEs in this manner allows

identification of the types of accidents that contribute the greatest proportion of risk.

4.2.1 Risk by annual FWI

Figure 5 presents the risk profile in FWI/year and indicates the percentage change in risk

between SRMv7.5 and SRMv8.1 for each of the 22 HE categories listed above. The greatest

overall risk contribution results from Slips, trips and falls with 39.0 FWI/year, an increase of

6% compared with SRMv7.5+YDS. The next-highest risk contribution results from Trespass

with 33.6 FWI/year, which is dominated by fatality risk.

The majority of risk from Slips, trips and falls occurs to passengers, contributing 27.2 FWI/year,

which represents 47% of the overall risk to passengers. After Slips, trips and falls, the category

which contributes most to the overall risk to passengers is Assault and abuse, representing

9.6 FWI/year, followed by Platform edge incidents (both boarding/alighting and non-

boarding/alighting). Considered together, these four categories account for over 80% of the

risk to passengers.

The greatest workforce risk also comes from the Slips, trips and falls category (10.2 FWI/year),

with the second-highest contribution coming from Contact with object (5.4 FWI/year). Together

these categories represent 47% of the risk to the workforce.

A large proportion of the risk to the public results from Trespass (33.5 FWI/year), followed by

Struck/crushed by train (not trespass) with 6.5 FWI/year. Together they represent 84% of the

risk to MOP.

For both Figure 5 and Figure 6 the large percentage change in road traffic accident risk is due

to significantly improved reporting of this type of event. The large percentage change in

trespass event is mainly due to the reclassification of suicide and trespass events as a result

of the SRMv8.1 update.

4.2.2 Risk by annual fatalities

Figure 6 shows the combined risk by event type in fatalities per year (excluding the contribution

from injuries, shock and trauma). Fatality risk is dominated by Trespass accidents, accounting

for more than half, with 31.3 fatalities per year down 25% on the SRMv7.5+YDS figure due to

the reclassification of a number of suicide/trespass events. The accident type contributing the

second-highest number of fatalities is Struck/crushed by train with 8.5 fatalities per year,

suggesting these events have remained relatively constant since SRMv7.5+YDS. Together,

these two categories account for 72% of all fatalities.

The highest contribution to passenger fatalities is Platform edge incidents (not

boarding/alighting), which accounts for 3.8 fatalities per year (representing 46% of passenger

fatality risk).

The most significant contributor to workforce fatalities is Struck/crushed by train, accounting

for 1.6 fatalities per year (39% of the workforce fatality risk total). The 31.3 fatalities per year

due to MOP Trespass represents 73% of public fatality risk.

4.2.3 Detailed risk profiles

More detailed risk profiles for each accident type and person category can be found in the

Annual Safety Performance Report 2013/14.

Page 29: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 21

Figure 5: Risk profile in FWI/year (with % change from SRMv7.5+YDS)

THe

01

02

03

04

0

Tra

in a

ccid

ents

: o

the

r

Lea

n o

r fa

ll fr

om

tra

in in

run

nin

g

Fire

s a

nd

explo

sio

ns (

no

t in

volv

ing

tra

ins)

Con

tact w

ith

pe

rso

n

Wo

rkfo

rce

ele

ctr

ic s

ho

ck

Tra

in a

ccid

ents

: str

ikes w

ith

obje

cts

Ma

chin

ery

/too

l op

era

tio

n

Fa

lls f

rom

heig

ht

Indir

ect

risk d

ue t

o s

uic

ide

Oth

er

Roa

d t

raffic

accid

en

t

Ma

nu

al h

an

dlin

g/a

wkw

ard

mo

vem

ent

Tra

in a

ccid

ents

: colli

sio

ns a

nd d

era

ilme

nts

Tra

in a

ccid

ents

: str

ikes w

ith

ro

ad

ve

hic

les a

t le

ve

l…

Pla

tfo

rm e

dg

e in

cid

ents

(no

t bo

ard

ing/a

ligh

tin

g)

Con

tact w

ith

ob

ject

On

-boa

rd in

juri

es

Pla

tfo

rm e

dg

e in

cid

ents

(bo

ard

ing/a

ligh

tin

g)

Str

uck/c

rush

ed

by t

rain

Assa

ult a

nd

ab

use

Tre

sp

ass

Slip

s, tr

ips,

an

d fa

lls

Passen

ger

Wo

rkfo

rce

Pu

blic

39.0

(+

6%

)

33.6

(-2

5%

)

11.8

(+

2%

)

9.0

(+

1%

)

9.0

(+

16%

)

6.9

(-4

%)

6.7

(-4

%)

6.2

(+

9%

)

3.6

(+

5%

)

3.5

(-1

2%

)

1.7

(-8

%)

1.3

(+

62%

)

1.2

(+

4%

)

1.2

(+

16%

)

1.1

(+

10%

)

1.1

(+

7%

)

0.5

4 (

-8%

)

0.5

3 (

-19%

)

0.4

2 (

-9%

)

0.4

0 (

-27%

)

0.3

9 (

-10%

)

0.3

1 (

-9%

)

Page 30: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Total risk on the railway

Version 8.1 - Issue 1.1 - December 2014 22

Figure 6: Risk profile in fatalities/year (with % change from SRMv7.5+YDS

02

46

83

03

2

Indir

ect

risk d

ue t

o s

uic

ide

Co

nta

ct w

ith

pe

rso

n

Ma

nu

al h

an

dlin

g/a

wkw

ard

mo

vem

ent

On

-boa

rd in

juri

es

Ma

chin

ery

/too

l op

era

tio

n

Pla

tfo

rm e

dg

e in

cid

ents

(bo

ard

ing/a

ligh

tin

g)

Co

nta

ct w

ith

ob

ject

Tra

in a

ccid

ents

: o

the

r

Fire

s a

nd

explo

sio

ns (

no

t in

volv

ing

tra

ins)

Wo

rkfo

rce

ele

ctr

ic s

ho

ck

Lea

n o

r fa

ll fr

om

tra

in in

run

nin

g

Tra

in a

ccid

ents

: str

ikes w

ith

obje

cts

Oth

er

Fa

lls f

rom

heig

ht

Assa

ult a

nd

ab

use

Ro

ad t

raffic

accid

en

t

Slip

s, tr

ips,

an

d fa

lls

Tra

in a

ccid

ents

: colli

sio

ns a

nd d

era

ilme

nts

Tra

in a

ccid

ents

: str

ikes w

ith

ro

ad

ve

hic

les a

t le

ve

l…

Pla

tfo

rm e

dg

e in

cid

ents

(no

t bo

ard

ing/a

ligh

tin

g)

Str

uck/c

rush

ed

by t

rain

Tre

sp

ass

Pa

ss

en

ge

r

Wo

rkfo

rce

Pu

blic

31.3

(-2

5%

)8.5

(+

1%

)

4.3

(+

7%

)

3.2

(+

6%

)

2.4

(-1

3%

)

1.4

(-2

7%

)

0.8

7 (

+293%

)

0.6

6 (

-67%

)

0.6

2 (

+23%

)

0.3

4 (

-3%

)

0.3

2 (

-3%

)

0.3

2 (

-10%

)

0.3

2 (

-21%

)

0.2

9 (

-30%

)

0.2

1 (

-5%

)

0.1

7 (

-47%

)

0.1

6 (

-25%

)

0.0

6 (

-1%

)

0.0

3 (

+10%

)

0 0 0

Page 31: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Key risk areas

Version 8.1 - Issue 1.1 - December 2014 23

5 Key risk areas

Effective safety planning requires a detailed understanding of risk areas – the activities or circumstances where the safety risk profile for passengers, the workforce, and the public is the greatest. This allows resources and effort to be concentrated where they will have the greatest impact.

Though it is no longer produced, the SSP [Ref. 7] considered nine key risk areas (KRAs) that have been selected from the original breakdown of the SRM into 15 risk areas. These nine KRAs represent the top 98% of the overall SRM risk (and the percentage has remained the same since SRMv7.5) and are thus considered to be the key to understanding the causes of risk in the rail industry.

A complete breakdown of the SRMv8.1 figures into the 15 risk areas is shown in Table 15 and diagrammatically in Figure 7 (the KRAs are indicated in both). These figures do not include YDS risk.

Table 15: Grouped risk figures for SRMv8.1, not including YDS risk

Risk area group

Risk in FWI/year (% of SRMv8.1)

Risk areas (key risk areas in bold)

SRMv8.1 risk (excluding YDS) (FWI/yr)

% of SRMv8.1 risk (excluding YDS) (FWI/yr)

SRM v7.5 risk (FWI/ yr)

Change from SRMv7.5 to SRMv8.1

Engineering 4.48

(3.4%)

Infrastructure 2.47 1.87% 3.04 -19%

Level crossing 0.20 0.15% 0.23 -11%

Rolling stock 1.81 1.37% 2.09 -13%

Environment 0.23

(0.2%)

Adjacent property/land 0.04 0.03% 0.03 +14%

Weather 0.19 0.14% 0.18 +5%

Passengers 28.0

(21%)

In stations 24.7 18.7% 23.1 +7%

On trains 3.32 2.52% 3.02 +10%

Public behaviour

59.3 (44.9%)

Crime 46.3 35.1% 57.3 -19%

General 2.02 1.53% 1.44 +14%

Level crossings

Pedestrian user

7.26 5.51% 6.80 +7%

Road vehicle user

3.63 2.75% 3.58 +1%

Workforce 40.0

(30%)

Shunter 0.12 0.09% 0.06 +108%

Signaller 0.68 0.52% 0.78 -13%

Station staff 17.8 13.5% 16.6 +7%

Track worker 14.0 10.6% 13.6 +3%

Train crew 7.43 5.63% 7.38 +1%

Total 132.0 132.0 139.2

Page 32: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Key risk areas

Version 8.1 - Issue 1.1 - December 2014 24

Figure 7: Breakdown of SRMv8.1 (excluding YDS risk) by risk area

*Indicates that the risk area was one of the nine KRAs reported in the SSP 2009-2014.

The 15 risk areas relate to the sources of risk. For example the Infrastructure worker risk area relates to the risk that arises from infrastructure workers carrying out their activities and their behaviour in doing so, rather than the risk to infrastructure workers in their role. This means that the risk areas relate to the causes of the SRM precursors.

In some cases, where a precursor has more than one cause, it has been necessary to assign proportions of the precursor risk between two or more risk areas. Appendix C gives full details of how the figures in Table 15 have been derived – it lists all of the precursors making up each of the risk areas and gives the proportions that have been applied for any precursor split between two or more risk areas.

The 15 risk areas can be further grouped into five higher level risk area groups – namely engineering, environment, passenger behaviour, public behaviour and workforce behaviour. These groupings can also be seen in Table 15.

Table 15 provides information to the industry regarding the significant causes of HEs. Precursors, by definition, are the main contributors to the HEs that ultimately lead to harm. Targeting the precursors through effective management actions will lead to a reduction in risk for all associated HEs.

Engineering3.4% Environment

0.2%

Passengers21.2%

Public behaviour44.9%

Workforce30.3%

Infrastructure1.9%

Level crossing0.2%

Rolling stock*1.4% Adjacent property/land

0.03%

Weather0.14%

In stations*18.7%

On trains*2.5%

Crime*35.1%

General1.5%

Pedestrian user5.5%

RV user2.8%

Shunter0.1%

Signaller0.5%

Station staff*13.5%

Track worker*10.6%

Train crew*5.6%

Total Risk = 131.95 FWI/year

Level crossing*RV user +

Pedestrian user8.2%

Page 33: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Key risk areas

Version 8.1 - Issue 1.1 - December 2014 25

5.1 Other risk groupings

It is also useful to group the HE and precursor into high level groups that relate to specific causes or areas of risk on the railway. Significant risk groupings include track faults, rolling stock, signals passed at danger (SPADS) and level crossings. Table 16 provides a summary of the top level figures for a variety of groupings concerning these four broad categories. It should be noted that these groupings are not mutually exclusive and the same precursor risk contribution may be counted in more than one group.

Table 16: Selected SRMv8.1 risk groupings

Group description Passenger train risk (FWI/year)

Non-passenger train risk (FWI/year)

Total Risk (FWI/year)

Track faults - grouped for both passenger and non-passenger trains (outside possession)

- - 1.75

Track faults (including incidents inside possession)

1.67 0.11 1.77

Rolling stock faults 3.32 0.50 3.82

SPADs resulting in collision 0.36 0.24 0.60

SPADs resulting in derailment or level crossing collision

0.06 0.03 0.09

Other SPADs and runaways 0.01 0.27 0.28

All level crossings - - 11.21

Road vehicles at level crossings 3.19 0.42 3.61

Footpath crossings - - 3.30

Non-footpath level crossings - - 7.60

To accompany this chapter a detailed breakdown of risk by key risk areas is provided in

Table C1, C2 and C3 which are available via the via the RSSB Rail Risk Portal

www.safetyriskmodel.co.uk

Page 34: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM risk vs observed risk

Version 8.1 - Issue 1.1 - December 2014 26

6 SRM risk vs observed risk

The level of safety risk estimated by the SRM is often higher than the observed rate of harm.

This is because the SRM accounts for rare events and the small contributions from many

different types of rare events add up to make an annual average modelled risk that is usually

higher than that which is observed. This holds despite the volatility in observed FWI and the

multi-year risk smoothing used in the SRM to reduce this volatility.

This is particularly the case for passenger risk as shown in Figure 8. This chart is an attempt

to show how the total observed passenger risk has changed over the last nine years and over

CP4.

The blue line represents an annual moving average of all observed FWI normalised by

passenger train km. This is calculated using all of the FWI data reported in the ASPR excluding

passenger assaults. Risk from passenger assaults has been estimated using BTP data

because such events are not well reported in SMIS. This includes all reported injuries in train

accidents as well as movement and non-movement related accidents.

The green line shows a risk metric that attempts to mimic the modelling of the SRM. This is

done by selecting different periods to average the different injury types over. The chart shows

fatalities averaged over ten years, major injuries over 2.5 years, class 1 and class 2 minor

injuries over four years. This is mostly based on data except, unlike the blue line, the FWI

contributions for HETs and passenger assaults are determined from the SRM modelling. This

is a significant simplification of the SRM and should be seen as a rough approximation.

Figure 8 shows the change in different measures of risk over the past nine years and illustrates

the volatility of taking a one-year average of observed risk compared to the relatively less

volatile SRM risk.

Some key observations are:

SRM risk estimation is nearly always higher than that of observed risk.

The occurrence of a major accident may temporarily push the rate of observed risk

higher than the SRM risk estimation (Grayrigg) or closer to the SRM risk estimation

(Ufton Nervet).

There has been a long term trend of decreasing risk, which is becoming less

pronounced and may now have started to plateau.

Because of the difficulty, without hindsight, of differentiating between genuine

trends/turning points and short-term statistical variation, and with the requirement for

a data sample large enough to produce robust risk estimates yet relevant to current

operations, the SRM estimates will lag during periods when the risk profile is changing.

The extent to which they lag is dependent on the time period used in the modelling and

this will vary from HE to HE.

Page 35: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM risk vs observed risk

Version 8.1 - Issue 1.1 - December 2014 27

Figure 8: Passenger observed FWI vs SRM FWI approximation

SR

Mv6.7

SR

Mv8

.1

10

14

710

14

710

14

710

14

710

14

710

14

710

14

710

14

710

14

7

2004

2005

2006

2007

2008

2009

2010

2011

2012

2013

Normalised passenger risk

SR

M a

ppro

xim

ation

Observ

ed F

WI (m

ovin

g 1

2-m

onth

avera

ge)

SR

M r

esults

Uft

on N

erv

et

Gra

yrig

g

Page 36: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Uncertainty in the SRM risk estimates

Version 8.1 - Issue 1.1 - December 2014 28

7 Uncertainty in the SRM risk estimates

7.1 Introduction

The SRM risk estimates represent the underlying level of risk on the GB rail network. They

are based on an analysis of data reported to SMIS, which is classified according to the HE

and precursor structure of the SRM. The amount of data for each precursor in the SRM can

vary quite considerably. In some cases, there is a lot of data to base a precursor estimate on,

in other cases there is little or very little, and in some cases there is none.

The SRM precursor/HE estimates represent the best estimate of risk based on the available

data for that precursor/HE. For cases where there is a lot of data available, there is a high

level of confidence in the estimations, however, where there is little data, there is less

confidence in the estimate. It has been a long standing aim to quantify this level of uncertainty

and to develop a framework that can determine selected confidence intervals around the SRM

estimates.

This section gives some background to the work that has been undertaken in this area, outline

the methodology that is currently being developed and presents some results based on the

version 8.1 update.

7.2 Uncertainty methodology

In 2003, RSSB commissioned research to investigate quantification of the uncertainty in a risk

assessment model, using the SRM as an example. This research formed R&D project T306

[Ref. 8]. While methods investigated apply primarily to the train accident (HET) models (as

they are built using fault and event tree models), the principles can be equally applied to the

other models of the SRM.

The main difference between the HET models and the HEM/HEN models is that in general

the HEM/HEN models are based on significant amounts of actual injury-related data, while the

HET models are not. This means that the HET uncertainty methodology is mainly aimed at

quantifying model uncertainty in conjunction with statistical uncertainty due to the lack of data.

The HEM/HEN methodology focus, however, can be aimed more at quantifying statistical

uncertainty, as there is ample data.

The occurrence of a hazardous event and the consequences associated with it can be regarded as random. This means that there is inherent uncertainty in the SRM estimates, and year to year it could be expected that different event counts and consequences would be observed for a given hazardous event even if the ‘underlying risk’ did not change. The aim of the uncertainty methodology is to quantify this uncertainty and determine relevant confidence intervals within which we would expect the true value of the SRM estimates to lie given a specified level of confidence.

The main part of the methodology consists of quantifying the uncertainty in the frequency and in the average consequence estimates for each precursor. This involves constructing distributions (either from data or expert judgement, or a mixture of the two) for each of these factors. Once these have been set, a simulation can be run, where frequency and consequence estimates are sampled from the distributions many thousands of times and combined to give a distribution of the risk estimates for each precursor. Subsequently, these can be sampled to give distributions of the risk at HE level, HEM/HEN level or at the overall SRM system risk level which can be used to determine confidence intervals.

Page 37: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Uncertainty in the SRM risk estimates

Version 8.1 - Issue 1.1 - December 2014 29

7.3 SRM uncertainty results

The uncertainty methodology currently in development has been applied to the version 8.1

HEM/HEN risk estimates. YDS risk has been included, while HET risk has been excluded from

this analysis. Excluding the HET contribution gives an overall SRM combined HEM/HEN risk

of 131.6 FWI per year. Comparison between the uncertainty model and the SRM risk

estimates are given in Table 17 (values in this table exclude all HET risk).

It should be noted that the uncertainty and confidence intervals in this section are based on

statistical uncertainty and do not take into account other potential sources of error such as

modelling assumptions (many models implicitly assume that the risk has been relatively stable

for the past few years) and data quality, particularly the underreporting of events.

Figure 9: Risk distribution for the total SRMv8.1 HEM/HEN risk

SRM

LL 125.8 -7.1 Mean 132.9 UL 140.6 7.7

Figure 9 shows the 95% confidence interval12 around the overall HEM/HEN risk of 131.6

FWI/year. The boxes above the chart show some properties of the distribution of the risk that

12 A confidence interval indicates the range of values an estimate is likely to lie in given a specified level of confidence. In this case a 95% confidence interval means that if we were to rerun (if this was possible) the whole operation of the railway again, as it was over the SRMv8.1 data period, collect the data and calculate a 95%

121 123 125 127 129 131 133 135 137 139 141 143 145

Pro

bab

ilit

y d

en

sit

y

Risk (FWI/year)

95%

Table 17: Comparison of SRM and uncertainty model risk estimates

SRM risk group SRM estimate (FWI/yr) Uncertainty model

distribution mean (FWI/yr)

Overall 131.6 132.9

HET Not shown Not calculated

HEM 49.6 50.0

HEN 82.0 82.8

Passengers 55.6 55.8

Workforce 32.2 32.5

MOPs 43.8 44.5

Page 38: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Uncertainty in the SRM risk estimates

Version 8.1 - Issue 1.1 - December 2014 30

has been constructed. The central white box gives the mean (average) value of the distribution

and it can be seen that this corresponds well with the overall SRM HEM/HEN risk estimate of

131.6 FWI/year13 (see Table 2). The other two white boxes either side show the extent of the

95% confidence interval, with a lower limit (LL) of 125.8 FWI/year and an upper limit (UL) of

140.6 FWI/year. The blue boxes show the absolute risk difference between the LL/UL and the

distribution mean. In this case it can be seen that the UL is 7.7 FWI/year above the mean risk,

while the LL is 7.1 FWI/year below the mean risk. Note that all charts are drawn to the same

scale on the x axis to allow comparisons between them.

Figure 10 shows the 95% confidence interval for HEM risk and HEN risk considered separately, while Figure 11 shows the 95% confidence interval for passenger, workforce and public risk considered separately. Figures for the mean risk of each of these distributions along with the LL and UL of the 95% confidence interval can be read from the white and blue boxes as before.

Figure 10: Risk distribution for the SRMv8.1 risk for HEM and HEN separately

HEM

LL 44.1 -6.0 Mean 50.0 UL 56.8 6.8

HEN

LL 79.5 -3.3 Mean 82.8 UL 86.2 3.4

confidence interval for the overall HEM/HEN risk, we would expect in 19 out of 20 occasions (ie 95% of the time) the confidence interval would contain the true underlying level of risk. 13 This is to be expected from the way the HEM/HEN uncertainty model has been constructed. There is a slight overestimate due to the use of lognormal distributions to model the uncertainty in low event counts.

38 40 42 44 46 48 50 52 54 56 58 60 62

Pro

ba

bil

ity d

en

sit

y

Risk (FWI/year)

95%

70 72 74 76 78 80 82 84 86 88 90 92 94

Pro

bab

ilit

y d

en

sit

y

Risk (FWI/year)

95%

Page 39: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Uncertainty in the SRM risk estimates

Version 8.1 - Issue 1.1 - December 2014 31

Figure 11: Risk distribution for the SRMv8.1 risk by person type

Passenger

LL 53.6 -2.1 Mean 55.8 UL 57.9 2.1

Workforce

LL 31.4 -1.1 Mean 32.5 UL 33.6 1.1

Member of Public

LL 38.1 -6.4 Mean 44.5 UL 51.9 7.4

44 46 48 50 52 54 56 58 60 62 64 66 68

Pro

bab

ilit

y d

en

sit

y

Risk (FWI/year)

95%

20 22 24 26 28 30 32 34 36 38 40 42 44

Pro

bab

ilit

y d

en

sit

y

Risk (FWI/year)

95%

33 35 37 39 41 43 45 47 49 51 53 55 57

Pro

bab

ilit

y d

en

sit

y

Risk (FWI/year)

95%

Page 40: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Uncertainty in the SRM risk estimates

Version 8.1 - Issue 1.1 - December 2014 32

Note that proportionally, there is more uncertainty in the estimate of HEM risk. This is because HEM risk tends to be dominated by a relatively small number of fatalities, whereas HEN risk tends to be dominated by a greater number of lower consequence events. The same reasoning explains why there is more uncertainty in the estimate of public risk than in the estimates of risk to passengers or members of the workforce.

7.4 Uncertainty analysis next steps

The work presented in this chapter is on-going and the results should be treated as preliminary

findings, however they do illustrate how the results can be presented. The next steps are to

finalise the HEN/HEM uncertainty methodology and to continue to develop the HET

methodology.

The eventual aim of this work is to construct a framework that can be used to assess the

uncertainty in the SRM risk estimates at any level that is required and to present the

information in a format that is accessible and understandable. This can help inform decisions.

For example, when interpreting benefit-cost ratios to determine whether a measure is needed

to ensure safety so far as is reasonably practicable, the judgement as to whether the cost is

grossly disproportionate to the benefit is informed by an understanding of the level of

uncertainty in the estimates of both.

Page 41: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 33

8 Individual fatality risk

8.1 Introduction

Individual fatality risk is defined as the probability of a fatality to which a category of individual

is exposed. Fatality risk is distinct from FWI risk, because it excludes the component of risk

relating to injuries and shock/trauma.

The industry document Taking Safe Decisions [Ref. 2] clarifies that collective risk (rather than

individual fatality risk) is used in the formulation of arguments about whether a particular

measure is needed to ensure risk is acceptable. However, individual risk can help a company

understand its risk profile and prioritise safety management effort.

Note that the comparisons made in the following sections are between the figures reported in

the SRM-RPB version 7 (based on SRMv7), the YDS report (based on the SRM-YDS) and

the latest figures for SRMv8.1. Changes between versions shown here are due to both

modelling changes and the updating of data to 30 September 2013.

8.2 Fatality risk

The predicted individual fatality risk from SRMv8.1 was analysed for each of the person

categories listed below:

Passengers

Workforce, including:

Train drivers (eg passenger train (PT) drivers, freight train drivers,

driver/shunters)

Other train crew

Infrastructure workers

Other workforce (eg train dispatch and ticket line staff)

YDS based staff members (engineering staff and YDS cleaner/admin)

Members of the public

Fatalities on the railway are dominated by suicide and trespass, together amounting to 56.5%

of the total fatality risk. Excluding these types of event, Figure 12 shows the fatality risk for

each person category.

In the following sections, the individual fatality risk to each person category is discussed and

compared with its equivalent value in SRMv7+YDS.

To accompany this chapter a detailed breakdown of individual fatality risk by person group

and hazardous event is provided in Table D1 which is available from the RSSB Rail Risk

Portal www.safetyriskmodel.co.uk.

Page 42: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 34

Figure 12: Fatality risk for each person category per year (SRMv8.1)

8.3 Passengers

Of the population of train passengers, regular commuters have the greatest exposure to risk

from the railway environment. The individual fatality risk to a commuter is therefore assumed

to be indicative of the worst-case for the whole population of train passengers14.

Figure 13: Causal breakdown of passenger fatality risk

It is assumed that, on average, each commuter makes 450 journeys per year (two journeys

per day, five days per week for 45 weeks per year). SRMv8.1 predicts a probability of fatality

of 1 in 403,976 per year for the average passenger (Table 18), which is a reduction of 33.6%

compared with the corresponding risk in SRMv7+YDS. This large reduction in individual

fatality risk is due in part to the increase in passenger journeys and partially due to a reduction

in observed and modelled fatality risk resulting from assaults and passenger train derailments.

As assault risk was not recalculated using the SRMv7 data cut-off the reduction in observed

fatalities is not directly comparable.

14 Whilst it is logical to do this, analysis has shown that per journey, regular commuters have a lower level of risk than other travellers. This worst case should be seen as a best guess approximation.

8.30 Fatalities per year

4.22 Fatalities per year

11.61 Fatalities per year

0

2

4

6

8

10

12

14

Passenger Workforce Public

An

nu

al

fata

liti

es

45.8%

20.6%

11.5%

7.3%

6.4%

8.4%

0 1 2 3 4

Platform edge incidents (notboarding/alighting)

Train accidents: collisions andderailments

Slips, trips, and falls

Assault and abuse

Struck/crushed by train

All other risk categories

Annual fatalities

Page 43: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 35

The most significant contributions to passenger individual fatality risk are broken down in

Figure 13.

Table 18: Total passenger individual fatality risk

SRMv8.1 SRMv7+YDS % change v7+YDS to v8.1

Fatality risk per year 8.30 10.44 -20.49%

Annual passenger journeys 1,508,403,942 1,259,400,000

19.77% Population size (assuming each person undertakes 450 journeys per year)

3,352,009 2,798,667

Individual fatality risk (probability of a fatality per year per passenger)

2.48E-06 3.73E-06

-33.62% 1 in 403,976 1 in 268,169

8.4 Workforce

The total workforce fatality risk calculated in SRMv8.1 was distributed into specific workforce

types in order to estimate their individual fatality risk.15 Individual and absolute fatality risks are

summarised in Figure 14 and Figure 15.

Population numbers for each of these workforce types; estimated from Network Rail (NR)

timesheet data (infrastructure workers and OTP drivers), and RSSB surveys of NR and each

TOC/FOC (all other workforce groups), are presented in Table 19 along with their individual

fatality risk.

Comparison of Table 18 with Table 19 shows that individual fatality risk to the workforce is an

order of magnitude greater than for passengers. This is in line with the workforce’s increased

exposure to the railway environment and the hazardous nature of the work carried out in the

rail industry.

Note that for SRMv7 ‘OTP driver’ risk was grouped with the ‘Other workforce’ risk. This has

been separated out here as the OTP driver risk is observed to be significantly higher than risk

for the ‘Other workforce’ group. Therefore there are no comparisons between SRMv7 and

SRMv8.1 for these workforce groups.

A summary of expected annual fatalities by workforce group is given in Table 27 in Appendix

C.

15 During this process a number of assumptions were made, which are detailed in Appendix D.1.

Page 44: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 36

Figure 14: Expected annual fatalities by workforce role

Figure 15: Individual fatality risk by workforce role

0

0.3

0.6

0.9

1.2

1.5

1.8

2.1

2.4

2.7

3D

rive

r(s

hun

ter)

OT

P d

rive

r

Infr

astr

uctu

rew

ork

er

Fre

ight tr

ain

driver

Oth

er

wo

rkfo

rce

Pa

ssen

ge

rtr

ain

drive

r

YD

Se

ng

inee

ring

sta

ff

Oth

er

tra

incre

w

YD

Scle

an

er/

adm

in

Exp

ecte

d a

nn

ua

l fa

talit

ies

Expected annualfatalities

0

0.1

0.2

0.3

0.4

0.5

0.6

0.7

0.8

0.9

1

Driver

(shunte

r)

OT

P d

river

Infr

astr

uctu

rew

ork

er

Fre

ight tr

ain

driver

Oth

er

wo

rkfo

rce

Pa

ssen

ge

r tr

ain

driver

YD

S e

ngin

eering

sta

ff

Oth

er

train

cre

w

YD

Scle

an

er/

adm

in

Indiv

idual fa

talit

y r

isk p

er

10,0

00 y

ears

Individual fatalityrisk per 10,000years

Page 45: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 37

Table 19: Workforce individual fatality risk breakdown

Person Type Expected annual fatalities

Population v8

Individual fatality risk (probability of a fatality per year)

SRMv8 SRMv7 or YDS-SRM

% change

Infrastructure workers

2.399 30,500 7.86E-05 9.22E-05

-15% 1 in 12,716 1 in 10,847

OTP drivers 0.129 1,525 8.48E-05

- - 1 in 11,799

Passenger train drivers

0.473 13,145 3.60E-05 4.22E-05

-15% 1 in 27,805 1 in 23,670

Freight train drivers

0.136 2,378 5.74E-05 5.43E-05

6% 1 in 17,432 1 in 18,410

Other PT crew members

0.204 13,284 1.54E-05 2.34E-05

-34% 1 in 65,117 1 in 42,818

Other workforce 0.594 16,019 3.71E-05

- - 1 in 26,960

Driver/shunter 0.120 1,338 8.96E-05 1.30E-04

-31% 1 in 11,161 1 in 7,721

YDS engineering staff

0.146 6,379 2.29E-05 2.43E-05

-6% 1 in 43,652 1 in 41,226

YDS cleaner/admin

0.022 2,123 1.04E-05 1.01E-05

4% 1 in 95,757 1 in 99,455

8.5 Members of the public

In hazardous industries where all operations occur within a discrete, clearly-defined,

geographical location, the numbers of exposed members of the public, and therefore individual

fatality risk to the public, can be determined. For the GB railway, however, it is only possible

to discuss fatality risk to the public population as a whole. The individual fatality risk to

members of the public (excluding suicides and trespass) is equivalent to 11.6 fatalities per

year. The most significant contributions to MOP individual fatality risk are broken down in

Figure 16.

Page 46: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Individual fatality risk

Version 8.1 - Issue 1.1 - December 2014 38

Figure 16: Causal breakdown of MOP fatality risk

The dominant fatality risk to members of the public (non-trespasser) occurs at level crossings,

including all events in the struck/crushed by train category. Individual fatality risk to members

of the public (non-trespasser) at levels crossings is equivalent to 9.3 fatalities per year, or

80.2% of the non-trespass total fatality risk.

Individual fatality risk estimates for regular crossing users have not been given as it has not

been possible to calculate reliable values given the uncertainty in usage data and the large

variations in crossing types.

54.7%

25.5%

4.3%

3.9%

3.3%

8.4%

0 2 4 6 8

Struck/crushed by train

Train accidents: strikes withroad vehicles at level crossings

Platform edge incidents (notboarding/alighting)

Slips, trips, and falls

Falls from height

All other risk categories

Annual fatalities

Page 47: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

The F-N curve

Version 8.1 - Issue 1.1 - December 2014 39

9 Multiple fatality risk: the F-N Curve

While there are no specific criteria associated with the acceptability of the frequency of train

accidents that could potentially lead to multiple fatalities, it is important to understand the

vulnerability of the railway to such accidents. Guidance on taking multiple fatality events into

account in the decision making process is given in Taking Safe Decisions.

9.1 F-N results

Using the event tree structures within SRMv8.1, for all the train accident hazardous events

with the potential to lead to multiple fatalities, an overall F-N curve (frequency versus number

of fatalities) for train accidents has been produced. This curve is shown in Figure 17.

The curve shows that as the number of potential fatalities associated with an event increases,

the frequency of occurrence of the event reduces rapidly. Key points on the curve and

information on how the rest has changed between SRM versions are given in Table 20 and

Table 21.

Table 20: Frequency of train-related incidents leading to multiple fatalities

Incidents (events/year) affecting passengers, staff and MOP

SRMv2 (Jul-99)

SRMv3 (Mar-01)

SRMv4 (Dec-03)

SRMv5 (Dec-05)

SRMv6 (Sep-08)

SRMv7 (Sep-10)

SRMv8.1 (Sep-13)

>=5 fatalities 0.700 0.416 0.265 0.189 0.186 0.173 0.144

>=10 fatalities 0.320 0.180 0.127 0.110 0.065 0.055 0.047

>=25 fatalities [not

included] [not

included] [not

included] 0.021 0.020 0.016 0.011

Table 21: Return periods of train-related incidents leading to multiple fatalities

Years between incidents affecting passengers, staff and MOP

SRMv2 (Jul-99)

SRMv3 (Mar-01)

SRMv4 (Dec-03)

SRMv5 (Dec-05)

SRMv6 (Sep-08)

SRMv7 (Sep-10)

SRMv8.1 (Sep-13)

>=5 fatalities 1.4 2.4 3.8 5.3 5.4 5.8 6.9

>=10 fatalities 3.1 5.6 7.9 9.1 15.3 18.3 21.2

>=25 fatalities [not

included] [not

included] [not

included] 48 50 62 87.0

Page 48: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

The F-N curve

Version 8.1 - Issue 1.1 - December 2014 40

Figure 17: The F-N Curve – all person and train accident types.

1.0

0E

-07

1.0

0E

-06

1.0

0E

-05

1.0

0E

-04

1.0

0E

-03

1.0

0E

-02

1.0

0E

-01

1.0

0E

+0

0

2 2

0 2

00

Cumulative frequency (events/year)

Nu

mb

er

of p

asse

ng

er,

sta

ff a

nd

me

mb

er

of p

ub

lic f

ata

litie

s

Page 49: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

The F-N curve

Version 8.1 - Issue 1.1 - December 2014 41

The continued increase in expected time between train-related incidents that lead to multiple

fatalities can be seen from SRMv2 to SRMv8.1 (Figure 18). The more recent reductions are

due to a generally improving safety performance trend, as reflected in the SRMv8.1 train

accident model results. The reasons for these reductions include many steps that the industry

has taken to reduce the likelihood of accidents occurring (eg the introduction of TPWS) and to

reduce the consequences if accidents do happen (eg the overall improvement in train vehicle

crash-worthiness due to the removal of Mark 1 slam-door rolling stock). There is also likely to

be some effect from enhancements to the train accident models over successive SRM

versions.

Figure 18: Estimated frequency of train accident-related fatality events

Figure 19 shows the F-N curve for the three main categories of train accident: collisions,

derailments and level crossing accidents. This chart shows that multi-fatality derailment events

generally occur more frequently for all severity levels and level crossing events least

frequently. Note that these three categories do not cover the entirety of the train accident HEs

in the SRM.

Figure 20 shows the contribution of key hazardous events to the F-N curve. It is apparent that

the majority of events with fewer than 100 fatalities are HET-12 (passenger train derailments)

events, whilst the majority of events with 100 or more fatalities (which are estimated to occur

very infrequently at a rate of less than 1 per 7500 years) result from HET-13 (non-passenger

train derailments) events as a result of train accidents involving trains carrying hazardous

materials.

0.0

0.1

0.2

0.3

0.4

0.5

0.6

0.7

0.8

1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014

Fre

qu

en

cy (

eve

nts

/ye

ar)

>=5 fatalities >=10 fatalities

v4, Dec-03

v5, Dec-05 v6, Sep-08

v3, Mar-01

v2, Jul-99

v7, Sep-10

v8, Sep-13

Page 50: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

The F-N curve

Version 8.1 - Issue 1.1 - December 2014 42

Figure 19: F-N curve – plotted separately for three categories of train accidents

1.0

0E

-09

1.0

0E

-08

1.0

0E

-07

1.0

0E

-06

1.0

0E

-05

1.0

0E

-04

1.0

0E

-03

1.0

0E

-02

1.0

0E

-01

1.0

0E

+0

0

2 2

0 2

00

Cumulative frequency (events/year)

Nu

mb

er

of p

asse

ng

er,

sta

ff a

nd

me

mb

er

of

pu

blic

fa

talit

ies

Co

llisio

ns

De

railm

en

tsL

eve

l cro

ssin

g R

V s

trik

es

Page 51: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

The F-N curve

Version 8.1 - Issue 1.1 - December 2014 43

Figure 20: Contribution of key hazardous events to the F-N curve

9.2 F-N modelling approach

Only the train accident models have been considered in the F-N curve calculation as these

are the main contributors to multiple fatality events. Previous F-N figures have included all

HEs, however the contribution for non-train accidents with two or more fatalities to these

figures is minimal.

SRMv3 F-N results were presented in two versions — with and without the effects of TPWS.

For comparison in this section the without TPWS figures have been used, as SRMv3 was

produced during the transition period before TPWS had been fully implemented.

As in previous SRM versions, the basic F-N analysis suggests that the frequency of accidents

leading to 25 fatalities has reduced. However, even though the event trees within the SRM

break down the HEs into a large number of different potential outcomes, each consequence

estimate still only represents a single average consequence for that outcome. In reality a

greater spread of consequences might actually be possible. This is the case, for example, with

public fatalities in models involving the spillage of hazardous goods, where the possibility for

very high consequence events exists, albeit with a very low frequency.

Consequently, while the average risk associated with such outcomes is accurately modelled

within the SRM, the full range of higher and lower consequence outcomes that make up this

average is not always explicitly modelled. The F-N analysis has been adjusted for high-fatality

public events. The adjusted results have been calculated by redistributing the high-fatality

portion of public fatality events whilst maintaining the overall level of risk. As a result of the

correction, the frequencies of higher fatality events are now considered to be more realistically

represented on the F-N curve in SRMv6, SRMv7 and SRMv8.1.

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

2 5 10 30 100 300

HET-01

HET-02

HET-10

HET-12

HET-13

HET-17

Fatalities per event

Pe

rce

nta

ge

co

ntr

ibutio

n t

o F

-N C

urv

e

Page 52: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Risk at the PTI

Version 8.1 - Issue 1.1 - December 2014 44

10 Remodelling risk at the platform-train interface

The update process to SRMv8 has involved the remodelling of several hazardous events that

together cover hazards at the platform-train-interface (PTI). The new structure provides more

granular information to improve understanding of PTI risk and the assessment of PTI hazards.

The following five passenger hazardous events and one member of public (non-trespasser)

hazardous event have been remodelled. These are:

HEM-05 and HEM-43 (train door closes on passenger/MOP incidents), remodelled to

single out ‘trap and drag’ incidents and train movement.

HEM-09 and part of HEM-06 (boarding and alighting incidents), restructured and new

precursors defined to detail train motion at the time of the event.

HEM-06, HEM-08, and HEM-10 (fall from platform and/or struck by train incidents),

restructured and new precursors defined to detail train motion at the time of the event.

The following sections describe the changes in more detail and explain further some of the

motivating factors behind the remodelling.

10.1 Background and objectives

High-profile accidents, including at James St in 2011, have focused attention on accidents at

the PTI involving train dispatch. Consequently there has been considerable interest in

improving the management of the PTI with discussions being held at an Industry Safety

Meeting in February 2013 and the ORR/RSSB industry workshop in April 2013.

The rail industry has established a PTI Strategy Group which is developing a PTI Strategy

focused on optimising safety, capacity and performance issues. To support the work of this

group and industry efforts to manage the risk there is a need to better understand risk at the

PTI, which this remodelling aims to facilitate.

Changes to the PTI model permit more detailed, immediate insight into PTI hazards than has

been the case for past SRM versions.

10.2 The remodelling process

10.2.1 Scope of changes

The hazardous events considered in this remodelling are all hazardous events which relate

specifically to passenger and member of public PTI risk. These hazardous events are given

in Table 22.

Page 53: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Risk at the PTI

Version 8.1 - Issue 1.1 - December 2014 45

Table 22: Remodelled PTI HE descriptions

HE Code Description

HEM-05 Train door closes on passenger

HEM-06 Passenger falls between stationary train and platform

HEM-08 Passenger fall from platform and struck by train

HEM-09 Passenger injury while boarding/alighting a train (platform side)

HEM-10 Passenger struck by/contact with moving train while on platform

HEM-43 Train door closes on MOP (non-trespasser)

10.2.2 Remodelling steps

The remodelling process can be seen as a compromise between creating a highly detailed

model and being able to reliably quantify it using the available accident and incident data. In

order to create the new PTI accident models the available accident dataset was analysed with

an emphasis on finding what useful information could be reliably extracted from incident

narratives. The conclusions of this investigation were then used to decide on a consistent and

quantifiable way to restructure the models that would benefit the PTI strategy.

The datasets have all been recoded to the new structure and the model was analysed in this

new format for SRM v8.

10.2.3 PTI structural changes

Table 23 summarises the new model structure for each affected hazardous event.

Page 54: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Risk at the PTI

Version 8.1 - Issue 1.1 - December 2014 46

Table 23: Remodelled PTIHEs. Summary of changes

HE code Description Summary of changes

HEM-05 Train door

closes on

passenger

Remodelled to isolate 'trap and drag’ incidents. Now

distinguishes between events where the train door has

closed on a passenger, and where the train has or has not

subsequently moved with the passenger remaining trapped.

HEM-06 Passenger fall

between train

and platform

Expanded to segregate three train movement scenarios

that are connected to a passenger fall between a train and

platform.

There are now three sub-hazardous events covering

passenger falls involving a stationary train, a moving train

and a stationary train which subsequently moves.

HEM-08 Passenger fall

from platform

and struck by

train

Remodelled so that events are grouped according to the

motion of the train (arriving at, departing from, or travelling

through the station) at the time of accident.

HEM-09 Passenger

injury while

boarding and

alighting

Existing boarding and alighting sub-hazardous events have

been duplicated to distinguish between events involving

stationary and moving trains.

A new sub-hazardous event for passenger alighting not at

platform has been added.

HEM-10 Passenger

struck

by/contact with

moving train

while on

platform

This event has been more rigorously defined so it is

restricted to events where a passenger has made contact

with a moving train while on the platform and has remained

entirely on the platform. Events that no longer fit this

definition were moved to newly created sub-hazardous

events for the other PTI HEMs.

Precursors restructured to separate events according to

train motion (arriving at, departing from, or travelling

through the station) at the time of accident.

HEM-43 Train door

closes on MOP

(non-trespasser)

This hazardous event is the MOP (non-trespasser)

equivalent of HEM-05. Similarly it has been remodelled to

isolate 'trap and drag’ incidents.

10.3 Impact on the risk profile

These changes led to some events being re-categorised (for example, moving from HEM-08

or HEM-10 to HEM-06). Table 24 summarizes the hazardous events affected along with the

overall change in the modelled risk for version 6.6 to version 6.7 (an equivalent comparison

between SRMv7 and SRMv8.1 cannot be provided as results were not computed using the

new PTI structure for SRMv7). This table shows that overall risk at the PTI has remained

relatively the same but it has shifted between HEs significantly as a result of the remodelling.

Page 55: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Risk at the PTI

Version 8.1 - Issue 1.1 - December 2014 47

Table 24: Summary of the changes in risk for PTI hazardous events

HE HE description Risk (FWI/year)

v6.6 v6.7

HEM-05 Train door closes on passenger 0.57 0.66

HEM-06 Passenger fall between stationary train and platform

1.55 2.80

HEM-08 Passenger fall from platform and struck by train

2.19 1.50

HEM-09 Passenger injury while boarding/alighting a train (platform side)

3.35 3.14

HEM-10 Passenger struck by/contact with moving train while on platform

1.32 0.68

HEM-43 Train door closes on MOP (non-trespasser)

0.0021 0.0044

Total 8.99 8.79

Page 56: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM governance and RPB updates

Version 8.1 - Issue 1.1 - December 2014 48

11 SRM governance and RPB updates

11.1 Data and Risk Strategy Group

The Safety Risk Model (SRM) and related tools such as the SRM Risk Profile Tool are now

under the remit of the DRSG. This group is a subgroup of the SSRG. Full details of the scope

and remit of DRSG can be found on the RSSB website16.

11.1.1 SRM Practitioners Working Group

Throughout control period 4, including the production of SRMv8, SRM-PWG was the industry

governance body of the SRM. It was set up to facilitate a structured process for eliciting the

industry’s views on the development and use of the SRM. The SRM-PWG provided

governance for changes to the SRM.

The SRM-PWG was formed under the authority of the industry’s Safety Policy Group (SPG) -

the predecessor to the current System Safety Review Group (SSRG). SRM-PWG’s remit was

to engage stakeholders in the development and control of future versions of the SRM and its

related outputs. These outputs include the SRM-RPB and SRM-RPT.

The modelling changes implemented as part of the update of the SRM to version 8 have been

endorsed by SRM-PWG. The re-revised version 6 figures (SRMv6.7) and the SRMv8 figures

were presented to the group in March 2014 and recommended for approval by SSRG, which

took on responsibility after SPG was disbanded and before DRSG was formed. Following this

meeting the results were then presented to SSRG and approved in March 2014.

11.2 Update history

Since version 1 in 2001, the SRM-RPB has been updated regularly so that the risk profile

remains as current as is reasonably practicable. Since version 2, the SRM-RPB has been

issued approximately every 18–24 months. The last SRM-RPB update was for version 7

which was issued August 2011. Since then there have been two shorter versions of the Risk

Profile Bulletin, Risk Profile Reports (RPRs) which were:

Version 7.5, detailing the SRM v7.5 partial update,

The Yards, Depots and Siding Risk Profile Report detailing the development and

calculation of the YDS-SRM

This RPB version 8.1 is the ninth Bulletin (eleventh including Risk Profile Reports) release

and covers SRMv6.7, SRM-YDS and SRMv8.1. The update history up to and including this

version is shown in Table 25 below.

16http://www.rssb.co.uk/groups-and-committees/rssb-board/safety/system-safety-risk-group/data-and-risk-strategy-group

Page 57: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM governance and RPB updates

Version 8.1 - Issue 1.1 - December 2014 49

Table 25: SRM update history

Version Issue date Data cut-off Major change (from previous version)

1 January 2001 July 1999 First version

2 July 2001 July 1999 Re-release of SRMv1

3 February 2003 March 2001 Full data update and model enhancements

Inclusion of TPWS

4 January 2005 December 2003 Full data update and model enhancements

5 August 2006 December 2005

Full data update and model enhancements

Removal of Mk1 slam-door rolling stock from models

Inclusion of OTP risk model

5.5 May 2008 October 2007 Interim partial data update

Change in FWI weightings

6 June 2009 September 2008 Full data update and model enhancements CP4 HLOS benchmark version

6.5 January 2011 September 2008 Enhanced version 6

7 June 2011 September 2010 Full data update

YDS November 2012

September 2011 Introduction and calculation of yards, depots and sidings risk profile

6.6 March 2013 September 2008 Enhanced version 6.5 (required for HLOS comparisons)

7.1 March 2013 September 2010 Enhanced version 7 (required for HLOS comparisons)

7.5 March 2013 June 2012 Interim partial data update

6.7 March 2014 September 2008

Enhanced version 6.6 (required for HLOS comparisons).

Model enhancements to allow like for like comparisons with v8.

8 March 2014 September 2013

Full data update and model enhancements.

Full incorporation of YDS–SRM into main SRM model.

Final CP4 HLOS benchmarking.

8.1 May 2014 September 2013 Update of suicide and trespass risk models due to improved data accuracy resulting from improved data sharing with BTP.

Page 58: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

SRM governance and RPB updates

Version 8.1 - Issue 1.1 - December 2014 50

11.3 Updates to the SRM during CP4

Version 8 is the final full update of the SRM required for HLOS metric comparisons across

CP4 using SRMv6 figures as benchmarks. Figure 21 illustrates the timeline of SRM updates

during CP4.

Figure 21: Timeline of updates of the SRM and RPB that occurred in CP4

11.4 Future updates during CP5

Moving into CP5 there is no longer the requirement to use the SRM to track industry

progress against HLOS targets. SRM-PWG has been disbanded with DRSG taking its place.

As a result of this, future plans for the development of the SRM are being discussed and a

strategy is currently being developed.

2009 2010 2011 2012 2013 2014

Version 6Mar 2009

(risk figures)

Jun 2009(RPB)

CP4

2015

CP5

Version 7Mar 2011

(risk figures)

Jun 2011(RPB)

Version 7.5Dec 2012

(risk figures)Mar 2013

(RPR)

Version 8Mar 2014

(risk figures)Aug 2014

(RPB)

Page 59: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Contributors

Version 8.1 - Issue 1.1 - December 2014 51

12 Contributors

Details of the preparation and approval of the SRM and SRM-RPB are given below:

Prepared by: Carol Bloxsome

Steven Burke

Stuart Carpenter

Marcus Dacre

Joanna Evans

Alex Gilchrist

Ben Gilmartin

Jonathan Gregory

Chris Harrison

Alex Healy

Jay Heavisides

Matthew Hunt

Rachael Johnson

Albert Law

Reuben McDonald

Paul Murray

Kevin Thompson

Reviewed by: George Bearfield

Marcus Dacre

Chris Harrison

SRMv8 and SRMv6.7 scope and update changes were endorsed by the SRM Practitioners

Working Group on behalf of the SSRG.

Approved by: George Bearfield

Release date: August 2014

Correspondence may be sent to: RSSB

Block 2, Angel Square 1 Torrens St London EC1V 1NY UK

Or: [email protected]

Page 60: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 52

13 Acronyms and glossary

13.1 Acronyms

ABCL Automatic barrier level crossing, locally-monitored

AHB Automatic half-barrier (level crossing)

ALCRM All Level Crossing Risk Model

AOCL+B Automatic open level crossing, locally-monitored (with half barrier)

ASPR Annual Safety Performance Report

BTP British Transport Police

CP4/CP5 Control period 4/5

CSM RA Common Safety Method on Risk Evaluation and Assessment

DfT Department for Transport

DRSG Data and Risk Strategy Group

FP Footpath level crossing

FWI Fatalities and weighted injuries

GB Great Britain

HE Hazardous event

HLOS High-level output specification

HSE Health and Safety Executive

KRA Key risk area

LC Level crossing

LUL London Underground Ltd

MCB Manually-controlled barrier level crossing

MCB+OD Manually-controlled barrier level crossing with obstacle detector

MCG Manually-controlled gate level crossing

MOP Members of the public

NR Network Rail

OC Open level crossing

ORR Office of Rail Regulation

POS Inside possession

PTI Platform-train interface

RGS Railway Group Standards

RIDDOR The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations

1995

RMF Risk Management Forum

Page 61: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 53

RSSB Rail Safety and Standards Board

SMIS Safety Management Information System

SPAD Signal passed at danger

SPG Safety Policy Group

SRM Safety Risk Model

SRM-PWG Safety Risk Model Practitioners Working Group

SRM-RPB Safety Risk Model: Risk Profile Bulletin

SRM-RPT Safety Risk Model: Risk Profile Tool

SSP Strategic Safety Plan

SSRG System Safety Risk Group

TABS Track Access Billing System

TfL Transport for London

TPWS Train Protection and Warning System

UWC(+T) User-worked level crossing (+telephone)

VPF Value of preventing a fatality

YDS Yards, depots and sidings

13.2 Glossary

The following list describes terms as they are used in the SRM.

acceptable level of risk The CSM RA defines risk acceptance principle to mean: “the

rules used in order to arrive at the conclusion whether or not the

risk related to one or more specific hazards is acceptable”. It

also defines safety measures to mean: “a set of actions either

reducing the frequency of occurrence of a hazard or mitigating

its consequences in order to achieve and/or maintain an

acceptable level of risk”.

The risk acceptance principles are explained in detail in Taking

Safe Decisions [Ref. 2]

ACTRAFF A database for recording actual traffic movement across the

network.

assault SMIS records incidents in which ‘in circumstances related to

their work, a member of staff is assaulted, threatened or

abused, thereby affecting their safety or welfare’.

BTP records and categorises criminal assaults in accordance

with Home Office rules. For the majority of RSSB’s work, BTP

crime codes have been grouped into higher level categories to

facilitate analyses and comparisons with SMIS records.

Page 62: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 54

awkward movement An injury caused by an unusual body movement, eg twisting or

stretching, which is received in the course of carrying out

normal everyday activities. It excludes any injuries received

from lifting or carrying objects which are classified under

manual handling.

child A person aged 15 years or below.

cleaner/admin staff All those workers who are not engineering and maintenance

staff, and who are not involved in shunting/driving activities.

It is specifically directed at those engaged in cleaning and train

servicing activities that do not actually involve any physical

maintenance work, plus those supervisors and administration

staff who are occasionally on the shop floor or in the yard.

collective risk The aggregate risk, possibly for a range of different groups,

associated with their exposure to a particular scenario or

hazardous event. The SRM calculates collective risk as the

average number of fatalities, or FWI/year that would be

expected to occur from a hazardous event, or group of

hazardous events. When undertaking an assessment of

whether or not a measure is necessary to reduce risk to a

level that is acceptable, the change in risk associated with the

measure is a collective risk estimate.

consequence The amount of safety harm directly caused by a hazardous

event. This is quantified in terms of fatalities, injuries and

occurrences of shock and trauma.

control measure Any means to reduce the frequency of a hazardous event

and/or minimise the consequence following its occurrence.

Control measures may be physical devices, procedures, or a

system of both.

driver/shunter Drivers of trains undertaking shunting manoeuvres (and

entering/exiting the site) on YDS sites, and the shunters that

assist in those manoeuvres on the ground.

engineering staff All workers who are undertaking engineering and maintenance

work (including maintenance during train servicing) on trains

and train-related components on a YDS site. This also includes

fitters and machine operators, loading workers (freight) and

other workers on the site involved in operational rail activities

that do not fit into other categories.

Page 63: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 55

escalation factor Any failure which significantly increases, or ‘escalates’, the

consequence of a hazardous event. For instance, a train

derailment (the hazardous event) could escalate into a bridge

collapse onto the train, a fire or release of hazardous goods.

An escalation factor may be a system failure, sub-system

failure, component failure, human error, physical effect or

operational condition. It may occur individually, or in

combination with other escalation factors.

fatalities and weighted

injuries (FWI)

The aggregate amount of safety harm.

One FWI is equivalent to:

one fatality, or

10 major injuries, or

200 Class 1 minor injuries, or

200 Class 1 shock/trauma events, or

1,000 Class 2 minor injuries, or

1,000 Class 2 shock/trauma events.

fatality Death occurs within one year of the accident.

frequency The rate of occurrence (eg the number of events per year).

hazardous event (HE) An incident that has the potential to be the direct cause of

safety harm.

HLOS A key feature of the access charges review. Under Schedule 4

of the 2005 Railways Act, the Secretary of State for Transport

(for England and Wales) and Scottish Ministers (for Scotland)

are obliged to send to ORR a high level output specification

(HLOS) and a statement of funds available, to ensure the

railway industry has clear and timely information about the

strategic outputs that Governments want the railway to deliver

for the public funds they are prepared to make available. ORR

must then determine the outputs that Network Rail must

deliver to achieve the HLOS, the cost of delivering them in the

most efficient way, and the implications for the charges

payable by train operators to Network Rail for using the

railway network.

individual fatality risk The probability of fatality per year to which an individual is

exposed from the operation of the railway. Individual risk is a

useful notion when organisations are seeking to benchmark

their risk profile and to prioritise safety management effort.

The ORR categorises individual risk as ‘unacceptable’,

‘tolerable’ and ‘broadly acceptable’ for the purposes of

prioritising its enforcement activity.

Page 64: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 56

infrastructure worker A member of the workforce whose responsibilities include

engineering or technical activities on or about the track. This

includes track maintenance, civil structure inspection,

signalling and telecommunications renewal/upgrade,

engineering supervision, acting as a controller of site safety,

hand signaller or lookout and machine operation.

level crossing A junction between a road, footpath, bridleway etc and the

railway, where both are at ground-level.

mainline railway Any location that is connected to the running lines but is not a

YDS site

major injury Injuries to passengers, staff or MOP as defined in Schedule 1

of RIDDOR. This includes losing consciousness, most

fractures, major dislocations, loss of sight (temporary or

permanent) and other injuries that resulted in hospital

attendance for more than 24 hours.

1 FWI is equivalent to 10 major injuries.

minor injury Class 1: Injuries to passengers, staff or MOP, which are neither a fatality nor a major injury, and:

For passengers or MOPs, result in the injured person being taken to hospital from the scene of the accident (as defined as reportable in RIDDOR 1995 amended April 2012).

For workforce, result in the injured person being incapacitated for their normal duties for more than three consecutive calendar days, not including the day of the injury.

Class 2: All other physical injuries that are not Class 1, but must still be reported in SMIS for compliance with GE/RT8047 [Ref. 9]

1 FWI is equivalent to 200 Class 1 minor injuries, or 1000 Class 2 minor injuries.

movement accident

(HEM)

An accident causing injury to people, involving trains (in

motion or stationary) but excluding injuries sustained in train

accidents, which occurs within the scope of the SRM.

non-movement

accident (HEN)

An accident causing injury to people, unconnected with the

movement of trains, which occurs within the scope of the

SRM.

operational incident An irregularity affecting, or with the potential to affect, the safe operation of trains or the safety and health of persons.

The term operational incident applies to a disparate set of human actions involving an infringement of relevant rules, regulations or instructions.

Page 65: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 57

operational railway All railway lines for which the infrastructure manager has been

granted a safety authorisation, and the railway undertaking

has been granted a safety certificate by the ORR (under

European Safety Directive 2004/49/EC [Ref. 5]). This provides

evidence that there is a suitable safety management system

(SMS) in place, and that operations are being conducted in

accordance with that SMS.

Ovenstone criteria An explicit set of criteria, adapted for the railway, which

provides an objective assessment of suicide if a coroner’s

verdict is not available. The criteria are based on the findings

of a 1970 research project into rail suicides and cover

aspects such as the presence (or not) of a suicide note, the

clear intent to commit suicide, behavioural patterns, previous

suicide attempts, prolonged bouts of depression and

instability levels [Ref. 10].

outcomes The range of scenarios that could arise following the

occurrence of a hazardous event.

passenger A person on railway infrastructure, who either intends to travel

on a train, is travelling on a train or has travelled on a train or

has been over carried to a YDS site after a train has been

taken out of service. This does not include passengers who

are trespassing or who commit suicide — they are included

in the SRM as MOP.

possession (POS) The complete stoppage of all normal train movements on a

running line or siding for engineering purposes. This includes

protection as defined by the Rule Book (GE/RT8000) [Ref. 9].

precursor A system failure, sub-system failure, component failure,

human error or operational condition which could, individually

or in combination with other precursors, result in the

occurrence of a hazardous event.

probability The likelihood of an event occurring on demand.

public, members of

(MOP) Persons other than passengers or workforce members. This

includes passengers who are trespassing (eg when crossing

tracks between platforms), or attempting to commit suicide.

Any authorised visitors to a YDS site, except those who work

for, or are under contract to, the company who manages the

site, are considered to be MOP.

Page 66: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 58

railway infrastructure All structures within the boundaries of Network Rail’s

operational railway, including the permanent way, land within

the lineside fence and plant used for signalling or exclusively

for supplying electricity for railway operations. It does not

include stations or YDS that are owned by, or leased to, other

parties. It does, however, include the permanent way at

stations and plant within these locations.

residual risk The level of risk remaining with the current risk control

measures in place and with their current degree of

effectiveness.

RIDDOR

(The Reporting of

Injuries, Diseases and

Dangerous

Occurrences

Regulations)

The Reporting of Injuries, Diseases and Dangerous

Occurrences Regulations 1995 is a set of health and safety

regulations that require any major injuries, illnesses or

accidents occurring in the workplace to be formally reported to

the enforcing authority. It defines major injuries and lists

notifiable diseases — many of which can be occupational in

origin. It also defines notifiable dangerous occurrences, such

as collisions and derailments.

risk Risk is the potential for a known hazard or incident to cause

loss or harm; it is a combination of the probability and the

consequence for that event.

Safety Management

Information System

(SMIS)

A national database used by railway undertakings and

infrastructure managers to record any safety-related events

that occur on the railway. SMIS data is accessible to all of the

companies who use the system, so that it may be used to

analyse risk, predict trends and focus action on major areas of

safety concern.

Safety Risk Model

(SRM)

A quantitative representation of the safety risk that can result

from the operation and maintenance of the GB rail network. It

comprises 131 individual models, each representing a type of

hazardous event.

shock/trauma Class 1: Shock or trauma results from being involved in, or

witnessing, events that have serious potential of a fatal

outcome, eg train accidents such as collisions and

derailments, or personal accidents such as being struck by a

train.

Class 2: Shock or trauma results from other causes, such as

verbal abuse, near misses, or personal accidents of a typically

non-fatal outcome.

1 FWI is equivalent to 200 Class 1 S/T injuries, or 1000

Class 2 S/T injuries.

Page 67: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 59

signal passed at

danger (SPAD)

An incident when any part of a train has passed a stop signal

at danger without authority or where an in-cab signalled

movement authority has been exceeded without authority.

Full definitions are available from GO/RT3119 [Ref. 9].

Strategic Safety Plan

(SSP)

This is a joint statement by the companies responsible for

Britain’s mainline rail network setting out and agreed industry

approach to managing safety.

The 2009-2014 plan was developed by bringing together

commitments made by individual companies in their own

individual safety plans, thus creating a link with the duty holder

planning process.

In the plan, trajectories have been developed which describe

the industry’s ambitions in nine key risk areas and identify

actions that are being undertaken to achieve them [Ref. 7].

suicide and suspected

suicide

A fatality is classified as a suicide according to a coroner’s

verdict. It is classified as a suspected suicide where the

coroner has yet to return a verdict or returns an open verdict,

but where objective evidence of suicide exists based on the

application of the Ovenstone criteria.

The consequences of suicide events are split into direct risk

(injuries to the suicidal person) and indirect risk (injuries to

persons who observe the event or are injured in any

associated accident).

train Any self-powered vehicle, or vehicles hauled by a self-

powered vehicle, with flanged wheels on guided rails.

train accident (HET) Reportable train accidents as defined in RIDDOR. The main

criterion is that the accident must be on or affect the running

line. There are additional criteria for different types of

accident, and these may depend on whether the accident

involves a passenger train.

Train Protection and

Warning System

(TPWS)

A safety system that automatically applies the brakes on a train which either passes a signal at danger, or exceeds a given speed when approaching a signal at danger, a permissible speed reduction or the buffer stops in a terminal platform.

trespass An occurrence of a person entering a location where they are never authorised to be. This is distinct from a person behaving inappropriately at a place where they are allowed to be under certain conditions (eg level crossing violations/errors).

workforce Persons working for the industry on railway operations, either as direct employees or under contract.

Page 68: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Acronyms and glossary

Version 8.1 - Issue 1.1 - December 2014 60

YDS site Any location that is connected to but away from the running lines, where train maintenance, stabling, marshalling and/or servicing (including refuelling) takes place.

Page 69: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

References

Version 8.1 - Issue 1.1 - December 2014 61

14 References

[Ref. 1] HLOS Safety Metrics – baseline and progress metrics following completion of the update of the SRM to version 8. Report delivered to SRM-PWG 27th March 2013.

[Ref. 2] RSSB (2014) Taking Safe Decisions — How Britain’s railways take decisions that affect safety. http://www.rssb.co.uk/Library/risk-analysis-and-safety-reporting/2014-guidance-taking-safe-decisions.pdf

[Ref. 3] Network Rail (2012) Strategic Business Plans 2014-2019. http://www.networkrail.co.uk/publications/strategic-business-plan-for-cp5/

[Ref. 4] RSSB (2012) Yards, Depots & Sidings Risk Profile Report, version 1. www.safetyriskmodel.co.uk

[Ref. 5] European Railway Safety Directive 2004/49/EC. http://www.dft.gov.uk/pgr/rail/Safety/ersd

[Ref. 6] RSSB (2014) Annual Safety Performance Report 2013/14.

[Ref. 7] RSSB (2009) The Railway Strategic Safety Plan 2009–2014. http://www.rssb.co.uk/safety/Pages/default.aspx

[Ref. 8] Cheng D., 2009, Uncertainty Analysis of Large Risk Assessment Models with Applications to the Rail Safety & Standards Board Safety Risk Model. Glasgow: Strathclyde University. http://strathprints.strath.ac.uk/13400/

[Ref. 9] Information on railway group standards, guidance notes and similar is available at: http://www.rgsonline.co.uk

[Ref. 10] Ovenstone, I.M. (1973) A psychiatric approach to the diagnosis on suicide. British Journal of Psychiatry, 123 (572), pp15–21.

Page 70: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 62

Appendix A. SRM outputs

The outputs from the Safety Risk Model are available via the RSSB Rail Risk Portal

www.safetyriskmodel.co.uk.

The following tables of results are available:

Table A1 which gives a breakdown of risk at the sub-hazardous event level.

Table B1 which provides the most detailed breakdown of risk to the precursor level.

Table A2 which gives reasons for the changes in risk from version 7 to version 8/8.1.

Table C1 which contains the full breakdown of the SRM at precursor level into the Key

Risk Areas as summarised in Table 15.

Tables C2 and C3 which contain the breakdown of the SRM by Key Risk Grouping as

summarised in Table 16.

Table D1 which details individual fatality risk by person group and hazardous event

summarised in Chapter 8.

Table E1 details the normalisation data used in the calculation of SRMv8.1, the

sources of that data and an explanation of changes from v7 normalisers.

Tables are provided as .xls files, other formats are available on request.

Page 71: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 63

Appendix B. ASPR hazardous event groupings

Table 26: Accident groups used within the ASPR

Accident grouping

Description of the types of event contained within grouping

Hazardous events

Assault and abuse All types of assault, verbal abuse and threat. Also includes unlawful killing.

HEN-64, HEN-65, HEN-66

Contact with object Any injury involving contact with objects, not covered by another category.

HEM-20, HEM-32, HEM-42, HEM-45, HEN-21, HEN-23, HEN-26, HEN-44, HEN-55, HEN-56, HEN-59, HEN-76, HEN-79, HEN-80

Contact with person

Injuries due to bumping into, or being bumped into by, other people. Excludes assaults.

HEN-55, HEN-56

Falls from height Generally speaking, falls of more than 2m. Excludes falls down stairs and escalators.

HEN-15, HEN-25, HEN-45, HEN-78

Fires and explosions (not involving trains)

Fires or explosions in stations, lineside or other in scope locations.

HEN-01, HEN-02, HEN-03, HEN-04, HEN-05, HEN-48, HEN-49

Indirect risk due to suicide

Second party injuries arising from suicide, suspected suicide and attempted suicide.

HEM-31, HEN-77

Lean or fall from train in running

Injuries resulting from accidental falls from trains, or from leaning from trains.

HEM-03, HEM-07, HEM-15, HEM-17

Machinery/tool operation

Injuries from power tools, being trapped in machinery, or track maintenance equipment. Does not include injuries due to arcing. Does not include injuries due to being struck by things thrown up by tools or from carrying tools/equipment.

HEN-22, HEN-27, HEN-56

Manual handling/awkward movement

Strains and sprains due to lifting or moving objects, or awkward movement. Excludes injuries due to dropping items being carried, which are classed under contact with objects.

HEN-73, HEN-74, HEN-82, HEN-83

On-board injuries

All injuries on trains, excluding train accidents, assaults, and those occurring during boarding or alighting, or whilst leaning from trains.

HEM-38, HEM-39, HEM-48, HEN-62, HEN-63

Platform edge incidents (not boarding/alighting)

Accidents that involve falls from the platform (with or without trains being present) or contact with trains or traction supplies at the platform edge. Excludes accidents that take place during boarding or alighting.

HEM-05, HEM-06, HEM-09, HEM-16, HEM-21, HEM-22, HEM-23, HEM-43, HEN-84

Platform-train interface (boarding/alighting)

Accidents occurring whilst getting on or off trains. Includes falls between train and platform where it is not known if the person is boarding or alighting.

HEM-06, HEM-08, HEM-10, HEM-21, HEM-40, HEM-41, HEM-49, HEN-09, HEN-10, HEN-13, HEN-52, HEN-67

Page 72: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 64

Accident grouping

Description of the types of event contained within grouping

Hazardous events

Road traffic accident

All accidents directly resulting from road traffic accidents, apart from road vehicle incursions not at LC.

HEN-35

Slips, trips, and falls

Generally speaking, falls of less than 2m at any in scope location (except on trains), and falls of any height down stairs and escalators.

HEN-14, HEN-16, HEN-24, HEN-25, HEN-46, HEN-68, HEN-78, HEN-80

Struck/crushed by train

All incidents involving pedestrians struck/crushed by trains, excluding trespass, platform edge and boarding and alighting accidents.

HEM-11, HEM-14, HEM-19, HEM-27, HEM-45

Train accidents: collisions and derailments

Collisions between trains, buffer stop strikes and derailments (excluding those caused by striking road vehicles at level crossings).

HET-01, HET-02NP, HET-02P, HET-03, HET-06, HET-09, HET-12, HET-13, HET-26, HET-27

Train accidents: other

Train divisions, train fires, train explosions, structural damage affecting trains.

HET-17, HET-20, HET-21, HET-22, HET-23, HET-24, HET-25

Train accidents: striking objects

Train striking an object, including road vehicles not at level crossings and trains hit by missiles. Excludes derailments.

HET-04

Train accidents: striking road vehicles at level crossings

Includes derailments. HET-10, HET-11

Trespass

First-party injuries resulting from people engaging in behaviour involving access of prohibited areas of the railway, where that access was the result of deliberate or risk-taking behaviour. Errors and violations at level crossings are not included in this category.

HEM-12, HEM-25, HEM-30, HEM-44, HEM-46, HEN-36, HEN-37, HEN-38, HEN-39, HEN-40, HEN-41, HEN-42, HEN-43, HEN-71, HEN-72, HEN-81

Workforce electric shock

Electric shock involving third rail, OLE, or non-traction supply. Includes burns from electrical short circuits. Does not include injuries due to arcing, which are classed under ‘other’.

HEN-27, HEN-30, HEN-31, HEN-32

Other Any other event not covered by the categories above.

HEM-01, HEM-50, HEN-07, HEN-08, HEN-11, HEN-27, HEN-28, HEN-29, HEN-33, HEN-50, HEN-51, HEN-53, HEN-54, HEN-57, HEN-58, HEN-60, HEN-61, HEN-70, HEN-75, HEN-79

Note that the risk from some HEs has been split across two or more accident types based on

precursor level risk estimates.

Page 73: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 65

Appendix C. Individual fatality risk summary

Table 27: Workforce group individual fatality risk by cause classification.

NB – the shading in this table indicates the relative magnitude of the figures. The more green the box is the higher the risk figure.

Assa

ult a

nd

ab

use

Co

nta

ct w

ith

ob

ject

Falls

fro

m h

eig

ht

Fire

s a

nd

exp

losio

ns (

not

involv

ing t

rain

s)

Lea

n o

r fa

ll fr

om

tra

in in r

unn

ing

Ma

chin

ery

/to

ol o

pera

tion

Oth

er

Pla

tfo

rm e

dg

e in

cid

en

ts

(boa

rdin

g/a

lightin

g)

Ro

ad

tra

ffic

accid

en

t

Slip

s,

trip

s,

an

d f

alls

Str

uck/c

rush

ed

by tra

in

Tra

in a

ccid

en

ts: co

llisio

ns a

nd

dera

ilme

nts

Tra

in a

ccid

en

ts:

str

ikin

g r

oad

ve

hic

les a

t le

vel cro

ssin

gs

Tra

in a

ccid

en

ts:

oth

er

Wo

rkfo

rce e

lectr

ic s

hock

Tota

l an

nu

al fa

talit

ies

PT driver

9.3

E-0

4

6.3

E-0

4

0.0

04

-

0.0

02

-

0.0

11

9.2

E-0

4

0.0

71

-

0.1

05

0.2

05

0.0

44

0.0

04

0.0

25

0.4

73

FT driver

8.6

E-0

5

5.7

E-0

5

4.1

E-0

4

-

0.0

02

-

9.8

E-0

4

8.6

E-0

5

0.0

07

-

0.0

10

0.0

60

0.0

06

0.0

49

0.0

02

0.1

36

Other train crew 0

.00

8

0.0

02

- -

0.0

72

-

0.0

07

0.0

02

0.0

25

0.0

02

0.0

25

0.0

47

0.0

11

0.0

01

-

0.2

04

Infrastructure worker

1.8

E-0

4

0.1

02

0.1

33

0.0

03

0.0

34

0.0

21

0.0

51

5.1

E-0

4

0.5

11

0.0

10

1.2

95

- - -

0.2

40

2.3

99

OTP driver -

0.0

01

- -

0.0

32

- - - - -

0.0

09

0.0

83

5.1

E-0

4

0.0

04

-

0.1

29

Other workforce 0

.01

1

0.0

47

0.0

47

0.0

42

- -

0.0

60

5.1

E-0

4

0.2

11

0.0

22

0.1

35

- - -

0.0

20

0.5

94

Driver (shunter)

6.6

E-0

5

0.0

02

-

0.0

03

0.0

01

0.0

07

0.0

29

-

0.0

27

0.0

07

0.0

43

- - -

0.0

02

0.1

20

YDS engineering staff 2

.6E

-05

0.0

09

-

0.0

11

-

0.0

29

0.0

37

-

0.0

15

0.0

12

0.0

05

- - -

0.0

27

0.1

46

YDS cleaner/ admin

4.4

E-0

5

4.1

E-0

4

-

0.0

02

-

0.0

02

0.0

06

-

0.0

08

0.0

02

6.3

E-0

4

- - -

0.0

02

0.0

22

Total annual fatalities 0

.02

1

0.1

64

0.1

85

0.0

59

0.1

44

0.0

59

0.2

00

0.0

04

0.8

74

0.0

56

1.6

28

0.3

95

0.0

61

0.0

57

0.3

17

4.2

23

Page 74: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 66

Appendix D. Modelling approach

D.1. Key assumptions

Table 28 describes the main assumptions used in the analysis for SRMv8. Assumptions for

individual models are available on request.

Table 28: Key modelling assumptions in the SRM

Assumptions

1. Train accident (HET) event frequencies are calculated based on all recorded incidents, irrespective of injury, whereas movement and non-movement (HEM and HEN) event frequencies are only based on incidents that resulted in an injury to a person.

2. An average day has been divided into:

Night: 0000–0600 hrs

Peak: 0700–1000 and 1600–1900 hrs

Off-peak: 0600–0700, 1000–1600 and 1900–0000 hrs

25% of peak trains are assumed to be crush loaded.

3. Average train distributions:

Night: 0.6 PTs and 0.4 NPTs per hour

Peak: 5 PTs and 0.05 NPTs per hour

Off-peak: 2 PTs and 0.38 NPTs per hour

4. Consequences are based on a five car train with average passenger loadings per train:

Night-loaded train: 2 passengers per carriage: 10 passengers per train

Peak-loaded train: 50 passengers per carriage: 250 passengers per train

Off-peak-loaded train: 10 passengers per carriage: 50 passengers per train

Crush-loaded train: 90 passengers per carriage: 450 passengers per train

5. Average passenger train loadings are calculated using assumptions 2 and 3, as well as an assumed proportion of passenger loadings at each time of day:

11% of all PTs are night loaded

63% of all PTs are off-peak loaded

19.5% of all PTs are peak loaded

6.5% of all PTs are crush loaded

6. Average train crew:

Passenger trains: 1 driver and 1 guard

Freight, ECS & parcels trains: 1 driver

OTMs/RRVs: 2 operators

Shunting manoeuvres: 1 driver (shunter)

7. The frequency of train accidents at stations and in tunnels is based upon their respective proportions of overall length compared with total track kilometres. The length of each platform is assumed to be 200m.

8. It is assumed that there is complete and correct reporting of injury events.

Page 75: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 67

D.2. Hazardous event definitions

Full descriptions of all HEs and precursors used in the SRM are available via the RSSB Rail

Risk Portal www.safetyriskmodel.co.uk.

D.3. Normalisation data

The values used to normalise data in SRMv8.1 along with equivalent values from past

versions of the SRM are provided in Table E1 available via the RSSB Rail Risk Portal

www.safetyriskmodel.co.uk

D.4. Significant modelling changes for SRMv8

D.4.1. Inclusion of YDS-SRM risk

Risk previously modelled in the YDS-SRM has been fully incorporated into this version of the

SRM.

D.4.2. Remodelling of risk at the PTI

The platform-train interface risk models and precursor structure have be remodelled in order

to better understand risk at the PTI. Full details are given in Chapter 10.

D.4.3. Inclusion of MCB+OD and AOCL+B crossing types

Two new crossing types, MCBs with obstacle detection and AOCL with half barriers, have

been introduced. All level crossing models (HET-10, HET-11, HEM-11, HEM-27, HEN-44,

HEN-46 and HEN-75) have been extended to explicitly calculate the risk at these crossing

types.

D.4.4. New approach to assault data analysis

For this version a change has been made to the assault modelling. Algorithms have been

written and automated to match BTP recorded assault data with SMIS recorded assault data

in order to provide a larger, richer dataset. In previous updates this was done manually and

so only a subset of the data was analysed then scaled up. This has resulted in more reliable

assault risk modelling.

Page 76: Safety Risk Model: Risk Profile Bulletin, version 8 - …€¦ · Safety Risk Model: Risk Profile Bulletin, version 8.1 This report is issued by RSSB. ... Figure 9: Risk distribution

Appendices

Version 8.1 - Issue 1.1 - December 2014 68

Appendix E. Railway lines in SRM scope

The SRM only includes railway lines which are managed and/or operated by Network Rail.

Table 29 contains examples of some commonly-queried lines (and sections of lines), along

with the reason for their inclusion or exclusion.

Table 29: Railway lines in and out of scope of the SRM

Line / Section Notes

Criteria In/Out of Scope

NR

Man

ag

ed

?

NR

op

era

ted

sig

nallin

g?

In

Sta

tio

ns

ab

ou

t th

e

track/a

t

PT

I

High Speed 117 The entire line, including St Pancras, is managed, operated and maintained by NR.

In In

The Cambrian line18 Owned and managed by NR. In In

Heathrow Express: Paddington to Heathrow Central

NR-owned infrastructure. In In

Heathrow Express: Heathrow Central to Terminals 4 and 5

Owned by BAA but maintained on their behalf by NR. In In

Nexus — Tyne and Wear Metro: Fellgate to South Hylton

Owned and managed by NR. Out In

Nexus — Tyne and Wear Metro: All sections apart from Fellgate to South Hylton

Neither managed by NR, nor is the signalling controlled by NR. Out Out

LUL Metropolitan Line: Chiltern services between Harrow-on-the-Hill and Amersham

This section is owned and operated by LUL and its subsidiaries / operators.

Out Out19

LUL District Line: Gunnersbury to Richmond

This section was a joint operation with Silverlink Metro, for which NR is now responsible.

Out In

LUL District Line: East Putney to Southfields

LUL owns the infrastructure. NR owns the signals, but the signalling is operated by LUL.

Out Out

LUL Bakerloo Line: Services north of Queens Park

Track managed by NR, who also operates the signalling. Out In

Island Line on the Isle of Wight The service is wholly operated and managed under a franchise to South West Trains.

Out Out

East London Line TfL owns and maintains the track, but NR operates the signalling.

In In

17 The risk from High Speed 1 train operations is modelled in the same way as all other lines, ie as an average railway, rather than explicit modelling of High Speed 1 characteristics. The contribution of Eurostar services to HEM/HEN risk is included. 18 The risk from the Cambrian line is modelled in the same way as all other lines, ie, as an average railway rather than modelling explicit ERTMS characteristics. This is under investigation for future versions of the SRM. 19 PTI and on-board injuries on these Chiltern services are in scope, injuries on or about the track are out of scope.