(a) When applying safety risk management, the certificate holder must analyze the systems identified in §5.51. Those system analyses must be used to identify hazards under paragraph (c) of this section, and in developing and implementing risk controls related to the system under §5.55(c).

(b) In conducting the system analysis, the following information must be considered:

(1) Function and purpose of the system.

(2) The system's operating environment.

(3) An outline of the system's processes and procedures.

(4) The personnel, equipment, and facilities necessary for operation of the system.

(c) The certificate holder must develop and maintain processes to identify hazards within the context of the system analysis.