described in or cannot be traced back to the PHA), then the PHA must be updated to include  them.  See  Appendix G for further information on how to prepare an SHA.  The purpose of the O&SHA is to perform a detailed, systematic safety analysis addressing  hazards and risk applicable to the operation and the support activities of a given system.  The O&SHA identifies hazards and risks occurring during operation of the system. This  primarily encompasses the procedural aspects as well as the support functions  (e.g., maintenance, servicing, overhaul, facilities, equipment, and training). Its purpose is to  evaluate the effectiveness of mitigating procedural hazards (not hazards created by design). Additionally, the O&SHA should ensure that procedures do not introduce new hazards. The timing of the O&SHA is important. In most cases, procedures are not available for review  until the system begins initial use, demonstration, prototype, or initial T&E. As a result, the  O&SHA is typically the last formal analysis to be completed, usually mid-way through the SI  phase. The sooner the analysis can begin, the better. Even before the system is designed, an  O&SHA can begin identifying hazards within the anticipated operation of the system. Ideally,  the O&SHA should begin with the formulation of the system and not be completed until  sometime after its initial test (which may identify additional hazards). This is critical; design and  construction of support facilities must begin far before the system is ready for fielding, and all  special safety features must be identified early on, or the costs to modify the facilities may force  POs and users to accept unnecessary risk. If new safety hazards are identified in the O&SHA  (i.e., safety hazards that are not previously described in or cannot be traced back to the PHA),  then the PHA must be updated to include them.  See Appendix H for further information on how to prepare an O&SHA.  The TEMP is a living document that must be updated as the program progresses with more  detailed supporting information as it becomes available. The final TEMP should be completed  after design reviews, such as the critical design review, and is generally revised at major  program milestones.  POs must develop GSIPs in accordance with the current version of FAA Order JO 6000.50,  National Airspace System (NAS) Integrated Risk Management,  for all construction and/or  installation activities they sponsor. POs must develop an SRM document for any GSIP.  Before a system can be deployed, the PO must submit a NAS Change Proposal to the NAS  CCB in accordance with the current version of FAA Order 1800.66,  Configuration Management  Policy . The CCB is responsible for top-level Configuration Management (CM) of the NAS for  the agency. This includes CM of the NAS Technical Architecture and traceability of  requirements (including safety) from the NAS documentation/baselines to the program  documentation/ baselines. 2.3.5.1.6  O&SHA  2.3.5.1.7  Final TEMP  2.3.5.1.8  GSIP  2.3.5.1.9  NAS Change Proposal  2_SRMGSA_202003  Originally published March 2020  Uncontrolled copy when downloaded  1 9