Platform
Modules
By sector
By sector
By standard
Blog
News
Events
AASTP-04
Policy makers, safety professionals and risk analysts in a national explosives safety authority building or reviewing a risk-based safety decision
AASTP-04 is NATO's guide to explosives safety risk analysis, the process nations use to build and document a risk-based decision when quantity-distance rules cannot be met.
AASTP-04, Volume I is NATO's guide to explosives safety risk analysis. It is not a technical specification with numbers to meet. It is a description of a decision process: how a nation builds a risk-based method for judging whether an ammunition or explosives situation is safe enough, and how that method gets applied to a real site or activity. The document says plainly it "is an overview designed for use by policy makers, safety professionals, and analysts" - the people who build and run a national explosives safety programme, not a supplier meeting a contract clause.
NATO's long-standing approach to ammunition and explosives safety works through quantity-distance (QD) rules: keep enough distance between a given quantity of explosives and the people or buildings nearby, set out in AASTP-01 for permanent storage and AASTP-05 for deployed operations. Those QD rules are the baseline, and STANAG 2617 together with Allied Logistics Publication ALP-16 "require compliance with AASTP-01 or AASTP-05, as applicable." AASTP-04 exists for the situations where that baseline cannot be met: a site with no room to add distance, a mission need that will not wait, a one-off activity a QD table was never written for. Risk-based analysis fills that gap by working out the actual probability and consequence of an event, rather than relying on a fixed distance table.
The document sets this out as two separate processes. Building a risk-based approach is an 11-step sequence: define what the decision is for, choose what is being measured (most often the probability of a fatality), set acceptance criteria, fix who has authority to decide and how the decision gets documented, work out how frequency, physical effects, consequence and exposure combine into a risk figure, and build consensus around the result before it is relied on. AASTP-04 is explicit that the criteria step is not NATO's to set: "the acceptance of criteria for risk is a national question." The document lists recognised ways a nation can justify a threshold - comparison to other accepted risks, cost-benefit analysis, regulatory precedent - without prescribing one.
Applying an approach that already exists is a shorter, five-step cycle: define the situation (the potential explosion site, what is nearby, what protection already exists), run the model, evaluate the result against the criteria set earlier, treat or reduce the risk if it is too high, then accept and monitor it, repeating the analysis whenever conditions change.
One clause is worth calling out on its own: the document treats the paper trail behind a decision as part of the method, not an afterthought. It says a risk-based decision needs "a clearly documented audit trail which serves to standardize the decision process," because that protocol "would be thoroughly examined whenever an event resulted in an undesired consequence." The decision itself, not just its outcome, is what a later review looks at.
Chapter 6 catalogues how ten NATO nations - Australia, Canada, France, Germany, the Netherlands, Norway, Sweden, Switzerland, the United States and the United Kingdom - have actually built a risk-based explosives safety programme on this framework. Each entry follows the same structure: goals, measures, criteria, risk formula, frequency method, effects, consequence, exposure, model, decision protocol, and how consensus was reached nationally. Read together, the annexes are the clearest evidence of what AASTP-04 standardises and what it does not: every nation uses a different measure, a different model and a different acceptance level, and several cooperate with each other on methods without converging on identical criteria. AASTP-04 gives the shape of a defensible risk-based decision. It does not give the number a specific site or activity has to hit, and this page does not carry any of the annexes' national criteria, thresholds or consequence models, because none of them are NATO's to generalise from.
Nobody is certified, accredited or audited "against" AASTP-04 itself; it names no such scheme. What gets checked, where it is checked at all, is a specific decision: the documented analysis, the protocol that was followed, and who approved it. The document's own account is that this scrutiny typically follows an event with an undesired consequence, under the "informed decision" principle it describes - a decision maker who used the best available information at the time is not held liable if a later accident reveals something nobody knew when the decision was made.
Building or running a risk-based explosives safety decision generates a paper trail: the goals and measures an organisation chose and why, the decision protocol and who holds authority to accept a given level of risk, the analysis behind a specific decision, and the documented audit trail AASTP-04 says should exist so the decision holds up if it is later examined. ComplyTrain does not calculate an event's frequency or physical effects, model a consequence, or set or approve a risk acceptance level - that work stays with a nation's own risk analysts and decision authority, using the process AASTP-04 describes and the specialised tools built for it. What ComplyTrain supports is the record around that decision: controlled documents for the approach and its criteria, version history when a method is revised, sign-off records showing who accepted what, and a searchable trail so that when a decision is questioned later, how and why it was made is not scattered across email and local drives.
Tell us how you need to work with AASTP-04 and what you need from it. We will come back to you about what ComplyTrain can do.
Thank you. Your list is on its way to your inbox, and we will come back to you on what working with these standards in ComplyTrain involves, usually within one business day.
Nations record their agreement to use AASTP-04 through STANAG 4442, the same ratification mechanism as any other Allied Publication. What is agreed is narrower than a fixed requirement: it commits a nation to using a shared risk-evaluation framework, not to any specific acceptance criterion, model or threshold, which the document repeatedly leaves as a national decision.
AASTP-01 and AASTP-05 hold NATO's quantity-distance tables, the fixed-distance rules for storing and handling ammunition. AASTP-04 is what a nation turns to when those distances cannot be met and a risk-based analysis is needed instead. The three inform each other rather than one requiring another.
No. AASTP-04 is explicit that the acceptance of criteria for risk is a national question. It describes how to build and apply a risk-based decision process; the actual thresholds, models and figures a nation uses are set nationally, and vary between the NATO members whose methods it catalogues.
The document names its own readership as policy makers, safety professionals and analysts working within a national explosives safety authority, not commercial suppliers. Volume II, a separate document this page does not cover, is written for the risk analyst carrying out the calculations.
Volume I, covered here, is the policy-level overview of the risk-based decision process. Volume II holds the detailed algorithms a risk analyst uses to carry out the calculations Volume I describes, and is referenced throughout as the technical companion to this document.
One system for the whole compliance programme. Start with the module you need most.
Collect information the same way every time, and decide in advance what happens next.
Know whether your controls are operating, not just whether a policy says they exist.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
Medical device manufacturers operate under more regulatory pressure than almost any other sector outside pharmaceuticals. The rules govern how you design a device, how you make it, how you track it after it ships, and how you respond when something goes wrong.
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
A practical way to turn in-your-head risk management into a register that survives staff turnover and answers the risk questions now showing up in tenders.