ISO 17666:2016 PDF

Overview

ISO 17666:2016 - Space systems - Risk management - defines principles and requirements for integrated risk management on space projects. Extending ISO 14300‑1, it prescribes a project-level approach usable by any actor in the customer–supplier chain (customer, prime, lower‑tier suppliers). The standard outlines a structured, iterative risk management process (4 basic steps, 9 tasks), requiring information exchange across all project domains and providing risk visibility and ranking by criticality throughout all project phases.

Key topics and requirements

• Four-step risk management process: Establish implementation requirements, identify and assess risks, decide and act, then monitor, communicate, and accept risks. The process is iterative and tailored to project specifics.
• Nine tasks embedded in the four steps, covering policy, planning, identification, assessment, mitigation, monitoring, and documentation.
• Risk visibility and ranking: Risks must be tracked, ranked by criticality (risk index), and reported to support decision-making and resource trade-offs (cost, schedule, technical).
• Roles and responsibilities: Project management holds overall responsibility; implementation requires corporate commitment and clear accountability down the organisation.
• Documentation: Mandates a risk management policy, a risk management plan (DRD guidance included in Annex B), and maintained risk registers / ranked risk logs (examples in Annex A).
• Tailoring: Requirements are adaptable to programme or project context - select or modify requirements to match project profile and constraints.
• Integration: Encourages use of existing engineering analyses (safety, dependability, critical path, cost) as part of risk management.

Applications and practical use

ISO 17666 is practical for:

• Space programme and project managers who need a consistent, auditable risk framework across a multi-tier supply chain.
• Systems engineers and risk managers responsible for identifying, quantifying, and mitigating technical and programmatic risks (mass, power, schedule, cost, dependability, safety).
• Suppliers and subcontractors implementing contract-level risk controls aligned to prime/customer risk policies.
• Project control and decision boards requiring ranked risk information to prioritise resources and actions.

Practical outputs include a tailored risk management plan, maintained risk register and ranked risk log, documented risk decisions, and periodic risk‑management cycles tied to project milestones.

Related standards

• ISO 14300‑1 - referenced for project phasing and baseline requirements (ISO 17666 extends its requirements).
• ECSS (European Cooperation for Space Standardization) - commonly used in tandem for space project processes and engineering best practices.

Keywords: ISO 17666, space systems risk management, risk management process, space project risk, risk register, risk management plan.