16.risk-management-3p. Risk Management and the 3P Model
Risk management is the part of aeronautical decision-making (ADM) that addresses how a pilot identifies, assesses, and mitigates the hazards of flight. Where ADM provides the structured thinking process, risk management provides the practical tools. The FAA's preferred risk management framework is the 3P model: Perceive, Process, Perform — a continuous loop that runs from preflight planning through engine shutdown.
The Three Steps
-
Perceive the hazards. A hazard is a present condition, event, object, or circumstance that could lead to or contribute to an unplanned or undesired event. To perceive hazards systematically, the FAA recommends the PAVE checklist:
- P — Pilot (experience, recency, currency, IMSAFE health check)
- A — Aircraft (airworthiness, fuel, performance, equipment)
- V — enVironment (weather, terrain, airport, lighting, day/night)
- E — External pressures (passengers, schedule, get-there-itis)
-
Process the risk. Once hazards are identified, the pilot evaluates the risk — the future impact of a hazard if not controlled. The recommended tool is CARE:
- C — Consequences
- A — Alternatives
- R — Reality
- E — External pressures Assess each hazard by likelihood (probable, occasional, remote, improbable) and severity (catastrophic, critical, marginal, negligible). A hazard that is probable and catastrophic demands immediate mitigation; one that is improbable and negligible may be accepted.
-
Perform risk management. Implement controls and fly the mitigated plan. The FAA tool here is TEAM:
- T — Transfer the risk (delegate, hand off to ATC, get a second opinion)
- E — Eliminate the risk (cancel the leg, remove the hazard)
- A — Accept the risk (only when benefit clearly outweighs cost)
- M — Mitigate the risk (reduce exposure — fly higher, add fuel, wait out weather)
Continuous Loop
The 3P process is not one-and-done. Conditions change: a tailwind becomes a headwind, a passenger becomes airsick, a destination ceiling drops. Each new piece of information re-enters the loop at Perceive. Effective pilots run 3P at every major decision point — preflight, taxi, top of climb, en route checkpoints, top of descent, and approach.
Hazardous Attitudes
The PHAK identifies five hazardous attitudes that interfere with sound risk management:
- Anti-authority ("Don't tell me!") — antidote: Follow the rules. They are usually right.
- Impulsivity ("Do something quickly!") — antidote: Not so fast. Think first.
- Invulnerability ("It won't happen to me.") — antidote: It could happen to me.
- Macho ("I can do it.") — antidote: Taking chances is foolish.
- Resignation ("What's the use?") — antidote: I'm not helpless. I can make a difference.
Recognizing one of these in yourself mid-flight is itself a hazard the 3P loop must address.
Example Application
A private pilot is planning a 250 NM cross-country in a Cessna 172, departing at 1700 local in summer.
- Perceive (PAVE): Pilot — 80 hours total, 5 hours night, last flight 3 weeks ago. Aircraft — full fuel, recent annual. enVironment — scattered thunderstorms forecast along route after 1900 local, ETA 1930. External — passenger has dinner reservation at destination.
- Process (CARE): Consequence of penetrating a thunderstorm is catastrophic. Alternatives include earlier departure, delay until morning, or alternate route south of weather. Reality is that night currency is marginal and pilot fatigue compounds the weather risk. External pressure of the dinner is a classic get-there-itis trap.
- Perform (TEAM): Mitigate by departing two hours earlier to beat the convective activity, or Eliminate by postponing to the next morning. Accepting the risk as briefed is not justified.
Personal Minimums
A cornerstone of effective risk management is the establishment of personal minimums — self-imposed limits more conservative than the regulatory minimums in 14 CFR Part 91. Personal minimums should address ceiling, visibility, crosswind, fuel reserves, and recency, and should be set on the ground, in writing, before any pressure to fly exists. They are tightened — never loosened — when the pilot is fatigued, out of practice, or operating in unfamiliar terrain.
Why It Matters
NTSB accident data consistently show that the majority of general aviation accidents are caused not by mechanical failure but by pilot decisions made before and during flight. The 3P model gives the pilot a repeatable, teachable structure to convert a vague feeling that "something isn't right" into a concrete, actionable mitigation — which is the practical difference between a completed flight and an accident report.