Malaysia Airlines amended the change and risk management processes to add:
- an initial change process step to notify corporate safety oversight of the change
- a final change process step for the safety risk oversight committee (the renamed safety risk assessment team—SRAT) to monitor and manage residual risks identified during the change process
- a dedicated risk management process flowchart (that is, separate to the safety report process flowchart), including steps for a dedicated committee to conduct risk assessments, risk assessment validation and approval, and consolidation of risk registers
- risk treatment methods
- detail on triggers for risk assessment activities in addition to change management triggers.
After further discussion with ATSB, Malaysia Airlines undertook to revisit the following items:
- elements of change management, specifically: the definition of change, the definition of relevant stakeholders, the development of action and assurance plans, and change approval
- guidance on the identification of risk stakeholders
- the risk management element of the safety report process, with regard to assuring the appropriate level of involvement of subject matter expertise and safety groups.