Abstract: To improve the safety management level of the air traffic control system, a process-based FMEA method was worked out for identifying the potential risk factors in the terminal area control system. A DEMATEL-ISM model was built, and the affecting degree and affected degree of each risk factor were calculate by using the decision making trial and evaluation laboratory (DEMATEL) model. The causal attribute and centrality order were determined. The ISM was used for constructing the system risk hierarchical structure presenting the attributes of causes of and hierarchical relationships between the various risk factors in the regulatory system. A terminal area control system was taken as an example to verify the effectiveness of the DEMATEL-ISM model. According to the results, the DEMATEL-ISM model can be used to classify the causal properties of risk factors into three categories in the system, respectively, six direct causes, ten transition causes and three essential causes. In addition, the constructed hierarchical structure can be used to effectively characterize the correlations between the risks in the terminal area control system, complete system analysis and provide a decision-making basis for the system's risk management.

Key words: failure mode and effect analysis (FMEA), causality, centrality degree, terminal area control, interpretative structural model (ISM), risk integration