Adaptive Regulatory Compliance

Configurable Risk Matrices

Whether you're operating in Nuclear, Aviation, Defence, Rail, Automotive, Oil & Gas, or Cybersecurity, SAFOPS molds to your specific risk methodology — not the other way round.

Book an Engineering Walkthrough Interactive Bowtie Demo ↗

The live SAFOPS categorisation matrix editor, showing configurable Worker and Public risk matrices

Beyond Rigid Spreadsheets

A 6×6 matrix isn't right for everyone. SAFOPS lets a project define its own exposure groups, matrix dimensions, frequency bands, and consequence bands to match your own methodology — set once at project initiation, editable later without a schema migration.

Quantitative & Qualitative — Same Engine

Support for strict numeric frequency constraints (a computed sum against fixed or programme-tailorable thresholds) or direct engineering judgement (pick "Occasional" vs "Improbable" yourself, goal-based-standard style) — both run through the identical categorisation engine, so switching methodology never means switching tools.

Eight Starting Points, Not a Blank Page

Every new project starts from a real, reviewable template — pick one and adjust it, rather than building a matrix from scratch:

Nuclear — ONR SAPs style, 4 exposure groups, Class 1-3 PFD/PFH reliability ladder.
Aviation — ARP 4761/AC 25.1309 style, computed probability vs. fixed severity thresholds.
Defence (Def Stan 00-056) — goal-based, direct-judgment frequency, no fixed numeric ladder.
Defence (MIL-STD-882E) — programme-tailorable Risk Assessment Code matrix.
Rail — EN 50126/Yellow Book ALARP tolerability, SIL 1-4 PFH-based requirements.
Automotive — simplified ISO 26262-style ASIL triage.
Cyber Risk — ISO 27005/NIST SP 800-30 style, scored across Confidentiality/Integrity/Availability.
Oil & Gas — ISO 17776/IOGP style, scored across Personnel/Environment/Asset, SIL 1-3 SIF requirements.

The Same Bow Tie, Three Methodologies

The clearest way to see what “configurable” actually means is to look at one structure scored three different ways. The shape never changes. The barrier vocabulary, the frequency scale and the consequence categories all do.

**Def Stan 00-056** goal-based — Initiating events carry judgements — Remote, Improbable, Occasional — not numbers, and no summed frequency is claimed, because a goal-based standard has no numeric ladder to sum.

**Rail** EN 50126 — Barriers carry safety functions at SIL 3 and SIL 4, consequences are scored against ALARP tolerability, and the protected position is checked against the required tier.

**Defence** MIL-STD-882E — Barriers are safety critical items with a codes and standards class, and severity is scored per exposure group against a risk assessment code.

Each of those is a project template you start from and adjust — not a hard-coded scale you have to work around.

Matrix of Permitted Operations (MOPO)

A MOPO asks which activities may safely run at the same time given the conditions on the day — concurrent operations, external influences, and, hardest of all, impaired safety critical elements. That last one is difficult to keep current by hand, because it depends on knowing exactly what each degraded barrier was protecting. SAFOPS already holds that: take a safety measure out of service and change impact analysis names every fault sequence that was depending on it, while the golden thread shows which other operations shared it — the evidence a SIMOPS decision needs, rather than a spreadsheet last reviewed a quarter ago.

Ready to build your first Living Safety Case?