Plan Do Check Act is a simple but effective process to use when implementing risk controls through corrective-preventative actions. The PDCA process is initiated after you discover some deficiency/weakness in your SMS that poses an unacceptable level of safety, such as after an aviation SMS audit, reported safety concern, or trend analysis.
The things to keep in mind about PDCA are:
The acronym PDCA represents the following:
PDCA is a primary process for driving continuous improvement of your SMS.
The first phase of PDCA is planning. Safety managers and/or subject matter experts are responsible for this phase, which involves:
The tools safety managers and/or department heads can use to help with the Planning phase are:
Once you have identified the weakness and understand the root causes, you need to outline how you fix the weakness with corrective actions. At a minimum, this “plan” should be a short paragraph that includes:
“Do” is the second step in the PDCA process. This is part of the process where the CPA assignee will carry out the actions to fix the problem. This phase simply includes:
As far as actual responsibility in the Do phase of PDCA, the person assigned the CPA is responsible for “doing” it. In complex environments or with complex CPAs, it’s a good idea to perform a safety case on the change and ensure that it is likely to actually fix the problem.
The third phase of PDCA is Check, where the subject matter expert who assigned the CPA is responsible for checking to make sure that the CPA's performance satisfies intent.
Once the assignee finishes CPA tasks, there are two outcomes:
Performance can be deficient because the assignee was lax in their duties, in which case you will need to ensure that they repeat the tasks. Performance can also be deficient because the CPA was not planned well (or is the wrong CPA), in which case you should update your CPA with better tasks or create a new CPA that better fixed the weakness.
A good practice here is to document a performance rating that will be helpful for future review.
Act is the last phase of PDCA and is the responsibility of the Safety Manager to update the System with any changes to the system. In this case, “updating the system” likely means updating your operational risk profile documentation to account for:
Also, you should also strongly consider:
For more information see our article on monitoring the effectiveness of risk controls.
Last updated in November 2024.