UFC 4-390-01
23 July 2003
It is recognized that individual system designs will vary to such
an extent that no single list can encompass the entire spectrum
of SOC's. The following is a list of specific areas that
generally require inclusion in the SOC. This list is provided
for purposes of illustration and should not be considered as all
inclusive or universally applicable:
a) Pressure hull, pressure vessels, hard structure,
and appurtenances (penetrations, seals, etc.,).
b) Life support subsystems that provide an acceptable
atmosphere for unmanned medical and physiological experiments.
c) Pressurization and depressurization systems
including, but not limited to, piping systems and pressurized
storage facilities.
d) Non-compensated equipment, subject to pressure,
which may implode or explode.
e)
Fire fighting devices or subsystems.
f) Electrical power subsystems that include internal
and external electrical protective devices where failure could
result in malfunction of a critical component or subsystem or
create a shock hazard.
g) Subsystems and components that protect personnel
directly or indirectly against the effects of accidents and
hazards.
2.2.2
Hazard Category Criteria. In the analysis of a
structural or functional failure of a system, equipment, or
component, the following hazard category (HAZCAT) evaluation
criteria are used (Figure 2 is used as a guide):
a) HAZCAT I. Catastrophic failure, which exposes
operator/test personnel to hazards that would likely result in
death, or severe injury (permanent total disability). Upon
failure, operator action cannot be taken to manage or mitigate
the hazards. Testing operations aborted.
b) HAZCAT II. Critical failure, which exposes
operator/test personnel to hazards that would likely result in
injury (permanent partial disability). Upon failure, operator
action can be taken to manage or mitigate the hazards. Testing
operations likely aborted.
c) HAZCAT III. Marginal failure, which would not
likely expose operator/test personnel to any significant hazards.
Upon failure, operator action is required to manage or repair
the failure; otherwise testing operations must be aborted.
10
Previous Page
