What is the difference between a hazard and a risk in aviation?

According to the FAA Risk Management Handbook (FAA-H-8083-2), a hazard is any real or potential condition, event, or circumstance that could cause injury, death, or property damage — it simply exists as a fact. Risk, by contrast, is the assessed combination of the probability that a hazard will result in harm and the severity of that harm if it occurs. A thunderstorm is a hazard; the level of risk it poses depends on variables like your route, aircraft equipment, and pilot experience.

How do you use the PAVE checklist to identify aviation hazards?

PAVE stands for Pilot, Aircraft, enVironment, and External pressures, and it gives pilots a structured way to survey all four domains where hazards commonly hide before any flight. You work through each category — asking, for example, whether your personal health or currency is a concern, whether the aircraft has any known deficiencies, what the weather and terrain look like, and whether schedule pressure might be distorting your judgment. Once all hazards are identified using PAVE, you then apply a probability-and-severity assessment to each item to determine the actual risk level, as described in FAA-H-8083-2.

Why is it important to continuously reassess risk during a flight rather than just before departure?

The FAA Risk Management Handbook (FAA-H-8083-2) explicitly states that risk is a dynamic variable because conditions — weather, aircraft systems, pilot fatigue, and ATC environment — can change significantly once a flight is underway. A risk assessment made on the ground may be completely outdated an hour into the flight if, for example, destination weather deteriorates or an instrument system shows anomalies. Continuous reassessment is built into FAA aeronautical decision-making models like the DECIDE model and the 3P model precisely because many accident chains involve conditions that were manageable at departure but became unacceptable en route without the pilot recognizing the change.

Hazard vs. Risk Distinction in Aviation Safety

When a student pilot hears the words hazard and risk, they often treat them as synonyms. That casual substitution is more than a vocabulary problem — it represents a genuine gap in aeronautical decision-making (ADM) that the FAA's Risk Management Handbook (FAA-H-8083-2) is specifically designed to close. Flight and ground instructors are obligated under the Aviation Instructor's Handbook (FAA-H-8083-9) to build systematic risk-management thinking in every learner, and that process starts with making the hazard-versus-risk distinction crystal clear.

Defining the Terms Precisely

The Risk Management Handbook defines a hazard as any real or potential condition, event, or circumstance that could cause injury, illness, or death to people, or damage to or loss of equipment or property. Notice three things about that definition. First, a hazard can be potential — it does not have to have caused harm yet to qualify. Second, the definition is purely descriptive; it carries no probability or severity information on its own. Third, hazards exist independently of whether anyone is aware of them. A patch of clear-air turbulence over the Rockies is a hazard whether or not you have filed a flight plan anywhere near it.

Risk, by contrast, is the assessed possibility of negative consequences — specifically, the combination of the probability that a hazard will result in harm and the severity of that harm if it does occur. Risk is therefore a calculated judgment, not a physical thing. It can change even when the underlying hazard stays the same, because probability and severity both respond to context, mitigation, and the skills of the person involved. This is the fundamental insight: a hazard simply exists; risk is what you assign to it after evaluating the relevant variables.

A Worked Example: Thunderstorm at the Destination

Consider a convective SIGMET depicting embedded thunderstorms at your destination airport. The thunderstorm cell is the hazard — a meteorological condition capable of producing structural damage, loss of control, hail, and windshear. Now ask the risk questions. What is the probability you will actually encounter the cell? That depends on its movement, your ETA, the availability of real-time datalink weather, and whether an alternate is within reach. What is the severity if you do encounter it? Severity depends on aircraft type, your instrument currency, ATC radar coverage in the area, and fuel remaining. Two pilots launching from the same airport at the same time face an identical hazard but may legitimately assess very different risk levels based on those variables — and therefore make legitimately different go/no-go decisions. The Risk Management Handbook reinforces that both the probability and the severity axis must be evaluated; focusing only on one produces a distorted picture.

The Four-Step Risk Management Process

The FAA describes risk management as a continuous, four-step cycle that drives ADM throughout a flight. Understanding where hazard identification ends and risk assessment begins is essential to executing each step correctly.

Identify the hazards. Survey every relevant domain for conditions, events, or circumstances that could produce harm. This is purely a listing exercise — no judging yet.
Assess the risk. For each hazard, estimate probability and severity. The Risk Management Handbook presents a risk matrix — a grid that plots probability on one axis and severity on the other — to help pilots categorize and prioritize. A high-probability, high-severity combination demands immediate action. A low-probability, low-severity item may require only continued awareness.
Analyze risk controls. Identify specific mitigations that reduce either probability (e.g., delaying departure until a front passes) or severity (e.g., filing an alternate, briefing passengers on emergency exits). Note that mitigation lowers risk; it rarely eliminates it entirely.
Make control decisions and monitor. Implement the best control strategy and continue reassessing as conditions evolve. Risk is not a one-time calculation; it is a dynamic variable that must be updated throughout preflight planning and in flight.

The PAVE Checklist: Structuring Hazard Identification

The FAA provides the PAVE checklist as a systematic tool for ensuring no hazard category is overlooked during the identification step. It organizes hazards into four domains:

P — Pilot. Personal health, fatigue, recency of experience, currency, emotional state, and the five hazardous attitudes (anti-authority, impulsivity, invulnerability, macho, resignation). A pilot who has not flown in 90 days is a hazard to the flight system regardless of total hours.
A — Aircraft. Airworthiness, equipment status, known inoperative items, weight and balance, and fuel state. An improperly loaded aircraft is a hazard even sitting on the ramp.
V — enVironment. Weather, terrain, airspace, lighting conditions, runway surface, and NOTAMs. This is often the broadest category and the one students most commonly scan too quickly.
E — External pressures. Schedule demands, passenger expectations, economic pressures, and the classic get-there-itis. External pressures do not alter the physical environment, but they distort the risk assessment by inflating the perceived cost of a conservative decision.

PAVE is a hazard-hunting checklist. Once the list is assembled, the probability-severity matrix is applied to each item to produce a risk assessment. Think of PAVE as the tool that opens the file; the matrix is the tool that prices each folder inside it.

Memory Aid

PAVE — Pilot, Aircraft, enVironment, External pressures. After PAVE reveals the hazards, move to the matrix: Is the probability high or low? Is the severity high or low? Where those two answers intersect tells you how urgently to act.

Instructor Responsibilities and the ADM Connection

The Aviation Instructor's Handbook (FAA-H-8083-9) identifies risk management as a core teaching responsibility, not an optional enrichment topic. Instructors who allow students to conflate hazards and risk are inadvertently permitting them to skip the assessment step — the very step that converts a vague awareness of danger into a quantified, actionable judgment. The handbook describes how effective instructors model disciplined thinking aloud during flight, narrating hazard identification and risk assessment so students internalize the process as normal cockpit behavior rather than a ground-school abstraction.

The connection to aeronautical decision-making (ADM) is direct. ADM frameworks such as the DECIDE model and the 3P model (Perceive, Process, Perform) all hinge on the ability to perceive hazards and process their associated risks accurately. A pilot who perceives a hazard but skips to a gut-level response has short-circuited the process model. The ADM literature in both FAA-H-8083-2 and FAA-H-8083-9 consistently links accident chains to precisely this failure — not to a lack of awareness that something was wrong, but to a failure to assess how wrong it was likely to get.

Key Numbers and Rules

Risk is always a function of two variables: probability and severity. An answer that describes risk using only one dimension is incomplete.
The risk matrix in FAA-H-8083-2 typically presents probability categories (such as unlikely, seldom, occasional, likely, frequent) against severity categories (such as catastrophic, critical, marginal, negligible) in a grid used to categorize and prioritize hazards. Exam questions may reference this general structure, though exact labeling can vary by edition.
Mitigation reduces risk but never reduces it to zero. Recognizing residual risk is part of a sound go/no-go analysis.
Risk assessment must be continuous. The FAA explicitly states in FAA-H-8083-2 that conditions change and new information requires updated assessment throughout flight.
Familiarity with a hazard does not lower its probability. Complacency — overconfidence born from repeated safe encounters with a hazard — is a separate risk factor the Risk Management Handbook warns against, distinct from the five FAA-defined hazardous attitudes, and it causes pilots to underestimate probability.

Common Test Traps

Mixing up the definitions. Knowledge test questions will isolate the precise FAA definitions. A hazard is a condition or circumstance; risk is the assessed probability-times-severity product. Swapping them on paper is a guaranteed wrong answer.
Treating risk as binary. Risk is not simply present or absent. FAA test questions often probe whether students understand risk as a spectrum that responds to mitigation.
Believing preflight assessment is sufficient. The FAA is explicit that risk assessment is an ongoing in-flight process. A question asking when risk should be re-evaluated has a single correct answer: continuously.
Confusing a hazardous attitude with the hazard itself. Get-there-itis is not a weather phenomenon; it is an external pressure that corrupts risk assessment. Test questions sometimes conflate the two to see whether students understand the PAVE categories.
Assuming low severity means low risk. A high-probability, low-severity hazard can still demand mitigation — and a low-probability, catastrophic-severity hazard may be unacceptable even if the chances seem remote. Both axes matter equally.