Chapter 6 FMEA
Chapter 6 FMEA
223
In its most rigorous form, an FMEA summarizes the engineer’s thoughts while
developing a process. This systematic approach parallels and formalizes the mental
discipline that an engineer normally uses to develop processing requirements.
DEFINITION OF FMEA
FMEA is an engineering “reliability tool” that:
TYPES OF FMEAS
There are many types of FMEAs (see Figure 6.1). However, the main ones are:
Types of FMEA
Design Process
FMEA FMEA
System Component Machines
FMEA Subsystem Methods
System Material
Focus: Manpower
Machinery Minimize failure Measurement
FMEA effects on the
Environment
system
Focus:
Focus: Objective: Minimize
Design changes to Maximize system production process
lower life cycle quality, failure effects on
costs reliability cost, the system
and
Objective: maintain ability Objective:
Improve the
Maximize the
reliability and
system quality,
maintain ability of
reliability, cost,
the machinery and
maintain ability,
equipment
and productivity
IS FMEA NEEDED?
If any answer to the following questions is positive, then you need an FMEA:
BENEFITS OF FMEA
When properly conducted, product and process FMEAs should lead to:
1. Confidence that all risks have been identified early and appropriate actions
have been taken
2. Priorities and rationale for product and process improvement actions
3. Reduction of scrap, rework, and manufacturing costs
4. Preservation of product and process knowledge
5. Reduction of field failures and warranty cost
6. Documentation of risks and actions for future designs or processes
By way of comparison of FMEA benefits and the quality lever, Figure 6.2 may
help.
In essence, one may argue that the most important benefit of an FMEA is that
it helps identify hidden costs, which are quite often greater than visible costs. Some
of these costs may be identified through:
1. Customer dissatisfaction
2. Development inefficiencies
3. Lost repeat business (no brand loyalty)
4. High employee turnover
5. And so on
FMEA HISTORY
This type of thinking has been around for hundreds of years. It was first formalized
in the aerospace industry during the Apollo program in the 1960s. The initial
automotive adoption was in the 1970s in the area of safety issues. FMEA was
required by QS-9000 and the advanced product quality planning process in 1994
for all automotive suppliers. It has now been adopted by many other industries.
Payback: Effort
Product design fix
100:1
Process design fix
10:1
Production fix
1:1
Customer fix
1:10
Planning and
definition
Product design
and development
Mfg process
design and
development
Product and
process
validation Production
• A typical system FMEA should begin even before the program approval
stage. The design FMEA should start right after program approval and
continue to be updated through prototypes. A process FMEA should begin
just before prototypes and continue through pilot build and sometimes
into product launching. As for the MFMEA, it should also start at the
same time as the design FMEA. It is imperative for a user of an FMEA
to understand that sometimes information is not always available. During
these situations, users must do the best they can with what they have,
recognizing that the document itself is indeed a living document and will
change as more information becomes available.
• History has shown that a majority of product warranty campaigns and
automotive recalls could have been prevented by thorough FMEA studies.
GETTING STARTED
Just as with anything else, before the FMEA begins there are some assumptions and
preparations that must be taken care of. These are:
Satisfied
Excitement needs
Performance needs
Time
Basic needs
Dissatisfied
Excitement needs: Generally, these are the unspoken “wants” of the customer.
Performance needs: Generally, these are the spoken “needs” of the customer.
They serve as the neutral requirements of the customer.
Basic needs: Generally, these are the unspoken “needs” of the customer. They
serve as the very minimum of requirements.
SYSTEM customers may be viewed as: other systems, whole product, gov-
ernment regulations, design engineers, and end user.
DESIGN customers may be viewed as: higher assembly, whole product, design
engineers, manufacturing engineers, government engineers, and end user.
PROCESS customers may be viewed as: the next operation, operators, design
and manufacturing engineering, government regulations, and end user.
MACHINE customers may be viewed as: higher assembly, whole product,
design engineers, manufacturing engineers, government regulations, and
end user.
Another way to understand the FMEA customers is through the FMEA team,
which must in no uncertain terms determine:
The appropriate and applicable response will help in developing both the function
and effects.
There are many methods to assist in developing concepts. Some of the most common
are:
1. Brainstorming
2. Benchmarking
3. TRIZ (the theory of inventive problem solving)
4. Pugh concept selection (an objective way to analyze and select/synthesize
alternative concepts)
Totals - 2 3 4 1
+ 1 1 1 2 1 2
S 1 3 2 3 1
Legend:
Evaluation Criteria: These are the criteria that we are comparing the razor
with the other approaches.
Datum: These are the basic razor characteristics that we are comparing the
other concepts to.
Figure 6.4 shows what a Pugh matrix may look like for the concept of “shaving”
with a base that of a “razor.”
Core team
The experts of the project and the closest to the project. They facilitate
honest communication and encourage active participation. Support
membership may vary depending on the stage of the project.
Champion/sponsor
• Provides resources and support
• Attends some meetings
• Supports team
• Promotes team efforts and implements recommendations
• Shares authority/power with team
• Kicks off team
• Higher up in management the better
Team leader
A team leader is the “watchdog” of the project. Typically, this function
falls upon the lead engineer. Some of the ingredients of a good team
leader are:
• Possesses good leadership skills
• Is respected by team members
• Leads but does not dominate
• Maintains full team participation
Recorder
Keeps documentation of team’s efforts. The recorder is responsible for co-
ordinating meeting rooms and times as well as distributing meeting
minutes and agendas.
Facilitator
The “watchdog” of the process. The facilitator keeps the team on track and
makes sure that everyone participates. In addition, it the facilitator’s re-
sponsibility to make sure that team dynamics develop in a positive en-
vironment. For the facilitator to be effective, it is imperative for the
facilitator to have no stake on the project, possess FMEA process ex-
pertise, and communicate assertively.
• Continuity of members
• Receptive and open-minded
• Committed to success
• Empowered by sponsor
• Cross-functionality
• Multidiscipline
• Consensus
• Positive synergy
• Realistic agendas
• Good facilitator
• Short meetings
• Right people present
• Reach decisions based on consensus
• Open minded, self initiators, volunteers
• Incentives offered
• Ground rules established
• One individual responsible for coordination and accountability of the
FMEA project (Typically for the design, the design engineer is that person
and for the process, the manufacturing engineer has that responsibility.)
To make sure the effectiveness of the team is sustained throughout the project,
it is imperative that everyone concerned with the project bring useful information
to the process. Useful information may be derived due to education, experience,
training, or a combination of these.
At least two areas that are usually underutilized for useful information are
background information and surrogate data. Background information and supporting
documents that may be helpful to complete system, design, or process FMEAs are:
Surrogate data are data that are generated from similar projects. They may help
in the initial stages of the FMEA. When surrogate data are used, extra caution should
be taken.
Potential FMEA team members include:
• Design engineers
• Manufacturing engineers
• Quality engineers
• Test engineers
• Reliability engineers
• Maintenance personnel
• Operators (from all shifts)
• Equipment suppliers
• Customers
• Suppliers
• Anyone who has a direct or indirect interest
• In any FMEA team effort the individuals must have interaction with
manufacturing and/or process engineering while conducting a design
FMEA. This is important to ensure that the process will manufacture
per design specification.
• On the other hand, interaction with design engineering while conduct-
ing a process or assembly FMEA is important to ensure that the design
is right.
• In either case, group consensus will identify the high-risk areas that
must be addressed to ensure that the design and/or process changes
are implemented for improved quality and reliability of the product
Obviously, these lists are typical menus to choose an appropriate team for your
project. The actual team composition for your organization will depend upon your
individual project and resources.
Once the team is chosen for the given project, spend 15–20 minutes creating a
list of the biggest (however you define “biggest”) concerns for this product or
process. This list will be used later to make sure you have a complete list of functions.
Two excellent tools for such an evaluation are (1) block diagram for system, design,
and machinery and (2) process flow diagram for process. In essence, part of the respon-
sibility to define the project and scope has to do with the question “How broad is our
focus?” Another way to say this is to answer the question “How detailed do we have
to be?” This is much more difficult than it sounds and it needs some heavy discussion
from all the members. Obviously, consensus is imperative. As a general rule, the focus
is dependent upon the project and the experience or education of the team members.
Let us look at an example. It must be recognized that sometimes due to the
complexity of the system, it is necessary to narrow the scope of the FMEA. In other
words, we must break down the system into smaller pieces — see Figure 6.5.
Cylinder, fluid
Master bladder, etc
cylinder
Pedal, rubber
Pedals cover, cotter pins, etc.
and
linkages Rubber hose, metal
tubing, proportioning
Hydraulics valve, fitting, etc.
Back
Brake plate and
System Back plate, springs, washer,
hardware clips, etc.
The form may be expanded to include or to be used for such matters as:
Safety: Injury is the most serious of all failure effects. As a consequence, safety
is handled either with an FMEA or a fault tree analysis (FTA) or critical
Yes
Good?
No No L Run, package
and ship
L
Inpect Wash board
M
print
Apply
H paste
L Load
board Our scope
M
Dispense
paste
H Set up
machine
L L L
H Load Load Load tool Develop
screen sqeegee plate program
Legend:
L: Low risk
M: Medium risk
H: High risk
FIGURE 6.6 Scope for PFMEA — printed circuit board screen printing process.
FMEA WORKSHEET
System FMEA ____Design FMEA ____Process FMEA ____FMEA Number ____
Subject: ______________Team Leader.________________Page ____ of _____
Part/Proc. ID No. __________Date Orig. _____________Date Rev. __________
Key Date. ____________Team Members: ___________________
Part name or Potential Potential S C Potential O Current D RPN Recommended Target Actual Actions S O D R Remarks
process step failure effect of L cause of controls action and finish finish taken P
and function mode failure A failure responsibility date date N
mode S mode
S
237
© 2003 by CRC Press LLC
238 Six Sigma and Beyond
analysis (FMCA). In the traditional FTA, the starting point is the list of
hazard or undersized events for which the designer must provide some
solution. Each hazard becomes a failure mode and thus it requires an
analysis.
Effect of downtime: The FMEA may incorporate maintenance data to study
the effects of downtime. It is an excellent tool to be used in conjunction
with total preventive maintenance.
Repair planning: An FMEA may provide preventive data to support repair
planning as well as predictive maintenance cycles.
Access: In the world of recycling and environmental conscience, the FMEA
can provide data for tear downs as well as information about how to get at
the failed component. It can be used with mistake proofing for some very
unexpected positive results.
A typical body of an FMEA form may look like Figure 6.8. The details of this
form will be discussed in the following pages. We begin with the first part of the
form; that is the description in the form of:
1. A system view
2. A subsystem view
3. A component view
Primary Supporting
supporting functions Tertiary
function supporting
HOW? function
Primary Secondary
supporting supporting Tertiary
function function supporting
function
Primary
supporting
function
Task Ensure Tertiary
function dependability enhancing
Secondary function
Ensure enhancing
convenience function
Tertiary
Please senses enhancing
WHY? function
Enhancing
functions
Delight customer Tertiary
enhancing
function
• Position
• Support
• Seal in, out
• Retain
• Lubricate
For an example of a function tree for a ball point pen (tip), see Figure 6.10.
The process of brainstorming failure modes may include the following questions:
DFMEA
• Considering the conditions in which the product will be used, how can
it fail to perform its function?
• How have similar products failed in the past?
PFMEA
• Considering the conditions in which the process will be used, what
could possibly go wrong with the process?
• How have similar processes failed in the past?
• What might happen that would cause a part to be rejected?
Failure modes are when the function is not fulfilled in five major categories. Some
of these categories may not apply. As a consequence, use these as “thought provok-
ers” to begin the process and then adjust them as needed:
1. Absence of function
2. Incomplete, partial, or decayed function
3. Related unwanted “surprise” failure mode
4. Function occurs too soon or too late
5. Excess or too much function
6. Interfacing with other components, subsystems or systems. There are four
possibilities of interfacing. They are (a) energy transfer, (b) information
transfer, (c) proximity, and (d) material compatibility.
Failure mode examples using the above categories and applied to the pen case
include:
1. Absence of function:
• DFMEA: Make marks
• PFMEA: Inject plastic
2. Incomplete, partial or decayed function:
• DFMEA: Make marks
• PFMEA: Inject plastic
3. Related unwanted “surprise” failure mode
• DFMEA: Make marks
• PFMEA: Inject plastic
4. Function occurs too soon or too late
• DFMEA: Make marks
• PFMEA: Inject plastic
5. Excess or too much function
• DFMEA: Make marks
• PFMEA: Inject plastic
Process FMEA:
Four categories of process failures:
1. Fabrication failures
2. Assembly failures
3. Testing failures
4. Inspection failures
• Warped
• Too hot
• RPM too slow
• Rough surface
• Loose part
• Misaligned
• Poor inspection
• Hole too large
• Leakage
• Fracture
• Fatigue
• And so on
Note: At this stage, you are ready to transfer the failure modes in the FMEA
form — see Figure 6.12.
SFMEA
• System
• Other systems
• Whole product
• Government regulations
• End user
DFMEA
• Part
• Higher assembly
• Whole product
• Government regulations
• End user
PFMEA
• Part
• Next operation
• Equipment
• Government regulations
• Operators
• End user
Effects and severity are very related items. As the effect increases, so does the
severity. In essence, two fundamental questions have to be raised and answered:
The progression of function, cause, failure mode, effect, and severity can be
illustrated by the following series of questions:
Special Note: Please note that the effect remains the same for both DFMEA and
PFMEA.
Severity is a numerical rating — see Table 6.1 for design and Table 6.2 for process —
of the impact on customers. When multiple effects exist for a given failure mode,
enter the worst-case severity on the worksheet to calculate risk. (This is the excepted
method for the automotive industry and for the SAE J1739 standard. In cases where
severity varies depending on timing, use the worst-case scenario.
Note: There is nothing special about these guidelines. They may be changed to
reflect the industry, the organization, the product/design, or the process. For example,
the automotive industry has its own version and one may want to review its guidelines
in the AIAG (2001). To modify these guidelines, keep in mind:
At this point the information should be transferred to the FMEA form — see
Figure 6.13. The column identifying the “class” is the location for the placement of
the special characteristic. The appropriate response is only “Yes” or “No.” A Yes in
this column indicates that the characteristic is special, a No indicates that the
characteristic is not special. In some industries, special characteristics are of two
types: (a) critical and (b) significant. “Critical” refers to characteristics associated
with safety and/or government regulations, and “significant” refers to those that
affect the integrity of the product. In design, all special characteristics are potential.
In process they become critical or significant depending on the numerical values of
severity and occurrence combinations.
TABLE 6.1
DFMEA — Severity Rating
Effect Description Rating
None No effect noticed by customer; the failure will not have any 1
perceptible effect on the customer
Very minor Very minor effect, noticed by discriminating customers; the 2
failure will have little perceptible effect on discriminating
customers
Minor Minor effect, noticed by average customers; the failure will have 3
a minor perceptible effect on average customers
Very low Very low effect, noticed by most customers; the failure will have 4
some small perceptible effect on most customers
Low Primary product function operational, however at a reduced level 5
of performance; customer is somewhat dissatisfied
Moderate Primary product function operational, however secondary 6
functions inoperable; customer is moderately dissatisfied
High Failure mode greatly affects product operation; product or 7
portion of product is inoperable; customer is very dissatisfied
Very high Primary product function is non-operational but safe; customer 8
is very dissatisfied.
Hazard with warning Failure mode affects safe product operation and/or involves 9
nonconformance with government regulation with warning
Hazard with no warning Failure mode affects safe product operation and/or involves 10
nonconformance with government regulation without warning
1. What design or process choices did we already make that may be respon-
sible for the occurrence of a failure?
2. How likely is the failure mode to occur because of this?
For each failure mode, the possible mechanism(s) and cause(s) of failure are
listed. This is an important element of the FMEA since it points the way toward
preventive/corrective action. It is, after all, a description of the design or process
deficiency that results in the failure mode. That is why it is important to focus on
the “global” or “root” cause. Root causes should be specific and in the form of a
characteristic that may be controlled or corrected. Caution should be exerted not to
overuse “operator error” or “equipment failure” as a root cause even though they
are both tempting and make it easy to assign “blame.”
You must look for causes, not symptoms of the failure. Most failure modes have
more than one potential cause. An easy way to probe into the causes is to ask:
What design choices, process variables, or circumstances could result in the failure
mode(s)?
TABLE 6.2
PFMEA — Severity Rating
Effect Description Rating
None No effect noticed by customer; the failure will not have any effect 1
on the customer
Very minor Very minor disruption to production line; a very small portion 2
of the product may have to be reworked; defect noticed by
discriminating customers
Minor Minor disruption to production line; a small portion (much <5%) 3
of product may have to be reworked on-line; process up but
minor annoyances
Very low Very low disruption to production line; a moderate portion 4
(<10%) of product may have to be reworked on-line; process
up but minor annoyances
Low Low disruption to production line; a moderate portion (<15%) 5
of product may have to be reworked on-line; process up but
minor annoyances
Moderate Moderate disruption to production line; a moderate portion 6
(>20%) of product may have to be scrapped; process up but
some inconveniences
High Major disruption to production line; a portion (>30%) of product 7
may have to be scrapped; process may be stopped; customer
dissatisfied
Very high Major disruption to production line; close to 100% of product 8
may have to be scrapped; process unreliable; customer very
dissatisfied
Hazard with warning May endanger operator or equipment; severely affects safe 9
process operation and/or involves noncompliance with
government regulation; failure will occur with warning
Hazard with no warning May endanger operator or equipment; severely affects safe 10
process operation and/or involves noncompliance with
government regulation; failure occurs without warning
DFMEA failure causes are typically specific system, design, or material char-
acteristics.
PFMEA failure causes are typically process parameters, equipment characteris-
tics, or environmental or incoming material characteristics.
• Brainstorm
• Whys
• Fishbone diagram
and so on
• Fault Tree Analysis (FTA; a model that uses a tree to show the cause-and-
effect relationship between a failure mode and the various contributing
causes. The tree illustrates the logical hierarchy branches from the failure
at the top to the root causes at the bottom.)
• Classic five-step problem-solving process
a. What is the problem?
b. What can I do about it?
c. Put a star on the “best” plan.
d. Do the plan.
e. Did your plan work?
• Kepner Trego (What is, what is not analysis)
• Discipline GPS – see Volume II
• Experience
• Knowledge of physics and other sciences
• Knowledge of similar products
TABLE 6.3
DFMEA — Occurrence Rating
Occurrence Description Frequency Rating
Occurrence Rating
Design and process controls are the mechanisms, methods, tests, procedures, or
controls that we have in place to prevent the cause of the failure mode or detect the
failure mode or cause should it occur. (The controls currently exist.)
Design controls prevent or detect the failure mode prior to engineering release.
Process controls prevent or detect the failure mode prior to the part or assembly
leaving the area.
TABLE 6.4
PFMEA — Occurrence Rating
Occurrence Description Frequency Cpk Rating
Detection Rating
Detection rating — see Table 6.5 for design and Table 6.6 for process — is a numer-
ical rating of the probability that a given set of controls will discover a specific cause
or failure mode to prevent bad parts from leaving the operation/facility or getting
to the ultimate customer. Assuming that the cause of the failure did occur, assess
the capabilities of the controls to find the design flaw or prevent the bad part from
leaving the operation/facility. In the first case, the DFMEA is at issue. In the second
case, the PFMEA is of concern.
When multiple controls exist for a given failure mode, record the best (lowest)
to calculate risk. In order to evaluate detection, there are appropriate tables for
both design and process. Just as before, however, if there is a need to alter them,
remember that the change and approval must be made by the FMEA team with
consensus.
At this point, the data for current controls and their ratings should be transferred
to the FMEA form — see Figure 6.15. There should be a current control for every
cause. If there is not, that is a good indication that a problem might exist.
Old pen
stops
Partial ink writing, 7 N Inconsistent 2
customer ball rolling
scraps due to
pen deformed
housing
Customer 7 Ball does not 7
has to always pick
retrace up ink due to
ink viscosity
Writing
or Housing I.D. 1
drawing variation due
looks bad to mfg
and so on and so on
and so on
TABLE 6.5
DFMEA Detection Table
Detection Description Rating
Almost certain Design control will almost certainly detect the potential cause of 1
subsequent failure modes
Very high Very high chance the design control will detect the potential cause of 2
subsequent failure mode
High High chance the design control will detect the potential cause of 3
subsequent failure mode
Moderately high Moderately high chance the design control will detect the potential cause 4
of subsequent failure mode
Moderate Moderate chance the design control will detect the potential cause of 5
subsequent failure mode
Low Low chance the design control will detect the potential cause of 6
subsequent failure mode
Very low Very low chance the design control will detect the potential cause of 7
subsequent failure mode
Remote Remote chance the design control will detect the potential cause of 8
subsequent failure mode
Very remote Very remote chance the design control will detect the potential cause 9
of subsequent failure mode
Very uncertain There is no design control or control will not or cannot detect the 10
potential cause of subsequent failure mode
Risk = RPN = S × O × D
Obviously the higher the RPN the more the concern. A good rule-of-thumb
analysis to follow is the 95% rule. That means that you will address all failure modes
with a 95% confidence. It turns out the magic number is 50, as indicated in this
equation: [(S = 10 × O = 10 × D = 10) – (1000 × .95)]. This number of course is
only relative to what the total FMEA is all about, and it may change as the risk
increases in all categories and in all causes.
Special risk priority patterns require special attention, through specific action
plans that will reduce or eliminate the high risk factor. They are identified through:
1. High RPN
2. Any RPN with a severity of 9 or 10 and occurrence > 2
3. Area chart
The area chart — Figure 6.16 — uses only severity and occurrence and therefore
is a more conservative approach than the priority risk pattern mentioned previously.
At this stage, let us look at our FMEA project and calculate and enter the RPN —
see Figure 6.17. It must be noted here that this is only one approach to evaluating
risk. Another possibility is to evaluate the risk based on the degree of severity first,
TABLE 6.6
PFMEA Detection Table
Detection Description Rating
Almost certain Process control will almost certainly detect or prevent the potential cause 1
of subsequent failure mode
Very high Very high chance process control will detect or prevent the cause of 2
subsequent failure mode
High High chance the process control will detect or prevent the potential cause 3
of subsequent failure mode.
Moderately high Moderately high chance the process control will detect or prevent the 4
potential cause of subsequent failure mode
Moderate Moderate chance the process control will detect or prevent the potential 5
cause of subsequent failure mode
Low Low chance the process control will detect or prevent the potential cause 6
of subsequent failure mode
Very low Very low chance the process control will detect or prevent the potential 7
cause of subsequent failure mode
Remote Remote chance the process control will detect or prevent the potential 8
cause of subsequent failure mode
Very remote Very remote chance the process control will detect or prevent the potential 9
cause of subsequent failure mode
Very uncertain There is no process control or control will not or cannot detect the potential 10
cause of subsequent failure mode
in which case the engineer tries to eliminate the failure; evaluate the risk based on
a combination of severity (values of 5–8) and occurrence (>3) second, in which case
the engineer tries to minimize the occurrence of the failure through a redundant
system; and to evaluate the risk through the detection of the RPN third, in which
case the engineer tries to control the failure before the customer receives it.
Reducing the severity rating (or reducing the severity of the failure mode effect)
• Design or manufacturing process changes are necessary.
• This approach is much more proactive than reducing the detection
rating.
Reducing the occurrence rating (or reducing the frequency of the cause)
• Design or manufacturing process changes are necessary.
• This approach is more proactive than reducing the detection rating.
Old pen
stops
Partial ink writing, 7 N Inconsistent 2 Test # X 10
customer ball rolling
scraps due to
pen deformed
Customer housing
has to 7 Ball does not 7 None 10
retrace always pick
up ink due to
ink viscosity
Writing Housing I.D. 1 None 10
or variation due
drawing to mfg
looks bad
and so on and so on and so on
and so on
FIGURE 6.15 Transferring current controls and detection to the FMEA form.
10
9
High
8 Priority
7
Occurrence 6
Medium
5
Priority
4
3
2 Low
Priority
1
Severity
1 2 3 4 5 6 7 8 9 10
Examples include size, form, location, orientation, or other physical properties such
as color, hardness, strength, etc.
and so on
TABLE 6.7
Special Characteristics for Both Design and Process
FMEA Type Classification Purpose Criteria Control
FIGURE 6.19 Transferring action plans and action results on the FMEA form.
Design FMEA
Quality
Function
Deployment Function Failure Effect Severity Class Cause Controls Rec. Action
System
Design
Specifications
Sign-Off Report
Design Verification
Plan and Report
Process FMEA
Part C
Characteristic Function Failure Effect Controls L Cause Controls Reaction
1 Normal A S Special
2 S
3
4
etc. Remove the
classification
symbol
Machinery inputs
P diagram
Boundary diagram
Interface matrix
Customer functionality in terms of engineering specifications
Regulatory requirements review
Figure 6.21 shows the learning stages (the direction of the arrows indicates the
increasing level) in a company that is developing maturity in the use of FMEA.
OBJECTIVE
The design FMEA is a disciplined analysis of the part design with the intent to
identify and correct any known or potential failure modes before the manufacturing
stage begins. Once these failure modes are identified and the cause and effects are
determined, each failure mode is then systematically ranked so that the most severe
failure modes receive priority attention. The completion of the design FMEA is the
responsibility of the individual product design engineer. This individual engineer is
the most knowledgeable about the product design and can best anticipate the failure
modes and their corrective actions.
TIMING
The design FMEA is initiated during the early planning stages of the design and is
continually updated as the program develops. The design FMEA must be totally
completed prior to the first production run.
REQUIREMENTS
The requirements for a design FMEA include:
1. Forming a team
2. Completing the design FMEA form
3. FMEA risk ranking guidelines
DISCUSSION
The effectiveness of an FMEA is dependent on certain key steps in the analysis
process, as follows:
• Design engineer(s)
• Test/development engineer
• Reliability engineer
• Materials engineer
• Field service engineer
• Manufacturing/process engineer
• Customer
1. Task functions: These functions describe the single most important reason
for the existence of the system/product. (Vacuum cleaner? Windshield
wiper? Ballpoint pen?)
2. Supporting functions: These are the “sub” functions that are needed in
order for the task function to be performed.
3. Enhancing functions: These are functions that enhance the product and
improve customer satisfaction but are not needed to perform the task
function.
After computing the function tree or a block diagram, transfer functions to the
FMEA worksheet or some other form of a worksheet to retain. Add the extent of
each function (range, target, specification, etc.) to test the measurability of the
function.
The team must describe the effect of the failure in terms of customer reaction or in
other words, e.g., “What does the customer experience as a result of the failure mode
of a shorted wire?” Notice the specificity. This is very important, because this will
establish the basis for exploratory analysis of the root cause of the function. Would
the shorted wire cause the fuel gage to be inoperative or would it cause the dome
light to remain on?
The team anticipates the cause of the failure. Would poor wire insulation cause the
short? Would a sharp sheet metal edge cut through the insulation and cause the
short? The team is analyzing what conditions can bring about the failure mode. The
more specific the responses are, the better the outcome of the FMEA.
Brittle material
Weak fastener
Corrosion
Low hardness
Too small of a gap
Wrong bend angle
Stress concentration
Ribs too thin
Wrong material selection
Poor stitching design
High G forces
Part interference
Tolerance stack-up
Vibration
Oxidation
And so on
The team must estimate the probability that the given failure is going to occur. The
team is assessing the likelihood of occurrence, based on its knowledge of the system,
using an evaluation scale of 1 to 10. A 1 would indicate a low probability of
occurrence whereas a 10 would indicate a near certainty of occurrence.
In estimating the severity of the failure, the team is weighing the consequence
of the failure. The team uses the same 1 to 10 evaluation scale. A 1 would indicate
a minor nuisance, while a 10 would indicate a severe consequence such as “loss of
brakes” or “stuck at wide open throttle” or “loss of life.”
Generally, these controls consist of tests and analyses that detect failure modes or
causes during early planning and system design activities. Good system controls
detect faults or weaknesses in system designs. Design controls consist of tests and
analyses that detect failure causes or failure modes during design, verification, and
validation activities. Good design controls detect faults or weaknesses in component
designs.
Special notes:
• Just because there is a current control in place that does not mean that it
is effective. Make sure the team reviews all the current controls, especially
those that deal with inspection or alarms.
• To be effective (proactive), system controls must be applied throughout
the pre-prototype phase of the Advanced Product Quality Planning
(APQP) process.
• To be effective (proactive), design controls must be applied throughout
the pre-launch phase of the APQP process.
• To be effective (proactive), process controls should be applied during the
post-pilot build phase of APQP and continue during the production phase.
If they are applied only after production begins, they serve as reactive
plans and become very inefficient.
Engineering analysis
• Computer simulation
• Mathematical modeling/CAE/FEA
• Design reviews, verification, validation
• Historical data
• Tolerance stack studies
• Engineering reviews, etc.
System/component level physical testing
• Breadboard, analog tests
• Alpha and beta tests
• Prototype, fleet, accelerated tests
• Component testing (thermal, shock, life, etc.)
• Life/durability/lab testing
• Full scale system testing (thermal, shock, etc)
• Taguchi methods
• Design reviews
The team is estimating the probability that a potential failure will be detected before
it reaches the customer. Again, the 1 to 10 evaluation scale is used. A 1 would
indicate a very high probability that a failure would be detected before reaching the
customer. A 10 would indicate a very low probability that the failure would be
detected, and therefore, be experienced by the customer. For instance, an electrical
connection left open preventing engine start might be assigned a detection number
of 1. A loose connection causing intermittent no-start might be assigned a detection
number of 6, and a connection that corrodes after time causing no start after a period
of time might be assigned a detection number of 10.
Detection is a function of the current controls. The better the controls, the more
effective the detection. It is very important to recognize that inspection is not a very
effective control because it is a reactive task.
The product of the estimates of occurrence, severity, and detection forms a risk
priority number (RPN). This RPN then provides a relative priority of the failure
mode. The higher the number, the more serious is the mode of failure considered.
From the risk priority numbers, a critical items summary can be developed to
highlight the top priority areas where actions must be directed.
The basic purpose of an FMEA is to highlight the potential failure modes so that
the responsible engineer can address them after this identification phase. It is imper-
ative that the team provide sound corrective actions or provide impetus for others
to take sound corrective actions. The follow-up aspect is critical to the success of
this analytical tool. Responsible parties and timing for completion should be desig-
nated in all corrective actions.
Strategies for Lowering Risk: (System/Design) — High Severity or Occurrence
To reduce risk, you may change the product design to:
• Eliminate the failure mode cause or decouple the cause and effect
• Eliminate or reduce the severity of the effect
• Make the cause less likely or impossible to occur
• Eliminate function or eliminate part (functional analysis)
• Benchmarking
• Brainstorming
• Process control (automatic corrective devices)
• TRIZ, etc.
OBJECTIVE
The process FMEA is a disciplined analysis of the manufacturing process with the
intent to identify and correct any known or potential failure modes before the first
production run occurs. Once these failure modes are identified and the cause and
effects are determined, each failure mode is then systematically ranked so that the
most severe failure modes receive priority attention. The completion of the process
FMEA is the responsibility of the individual product process engineer. This individ-
ual process engineer is the most knowledgeable about the process structure and can
best anticipate the failure modes and their effects and address the corrective actions.
TIMING
The process FMEA is initiated during the early planning stages of the process before
machines, tooling, facilities, etc., are purchased. The process FMEA is continually
updated as the process becomes more clearly defined. The process FMEA must be
totally completed prior to the first production run.
REQUIREMENTS
The requirements for a process FMEA are as follows:
1. Form team
2. Complete the process FMEA form
3. FMEA risk ranking guidelines
DISCUSSION
The effectiveness of an FMEA on a process is dependent on certain key steps in the
analysis, including the following:
• Design engineer
• Manufacturing or process engineer
• Quality engineer
• Reliability engineer
• Tooling engineer
• Responsible operators from all shifts
• Supplier
• Customer
The team must identify the process or machine and describe its function. The team
members should ask of themselves, “What is the purpose of this operation?” State
concisely what should be accomplished as a result of the process being performed.
Typically, there are three areas of concern. They are:
For example, consider the pen assembly process (see Figure 6.22), which involves
the following steps:
Note: At the end of this function analysis you are ready to transfer the informa-
tion to the FMEA form.
Remember that another way to reduce the complexity or scope of the FMEA is
to prioritize the list of functions and then take only the ones that the team collectively
agrees are the biggest concerns.
The team must pose the question to itself, “How could this process fail to complete
its intended function? Could the resulting workpiece be oversize, undersize, rough,
eccentric, misassembled, deformed, cracked, open, shorted, leaking, porous, dam-
aged, omitted, misaligned, out of balance, etc.?” The team members are trying to
anticipate how the workpiece might fail to meet engineering requirements; at this
point in their analysis they should stress how it could fail and not whether it will fail.
Ink
Insert tip
Barrel
assembly housing
Move to dock
Once failure modes are determined under these assumptions, then determine
other failure modes due to:
The team must describe the effect of the failure on the component or assembly. What
will happen as a result of the failure mode described? Will the component or
The engineer anticipates the cause of the failure. The engineer is describing what
conditions can bring about the failure mode. Locators are not flat and parallel. The
handling system causes scratches on a shaft. Inadequate venting and gaging can
cause misruns, porosity, and leaks. Inefficient die cooling causes die hot spots.
Undersize condition can be caused by heat treat shrinkage, etc.
The purpose of a process FMEA (PFMEA) is to analyze or evaluate a process
on its ability to perform its functions (part characteristics). Therefore, the initial
assumptions in determining causes are:
Fatigue
Poor surface preparation
Improper installation
Low torque
Improper maintenance
Inadequate clamping
Misuse
High RPM
Abuse
Inadequate venting
Unclear instructions
Tool wear
Component interactions
Overheating
And so on
The team must estimate the probability that the given failure mode will occur. This
team is assessing the likelihood of occurrence, based on their knowledge of the
process, using an evaluation scale of 1 to 10. A 1 would indicate a low probability
of occurrence, whereas a 10 would indicate a near certainty of occurrence.
In estimating the severity of the failure, the team is weighing the consequence (effect)
of the failure. The team uses the same 1 to 10 evaluation scale. A 1 would indicate
a minor nuisance, while a 10 would indicate a severe consequence such as “motor
inoperative, horn does not blow, engine seizes, no drive, etc.”
Manufacturing process controls consist of tests and analyses that detect causes or
failure modes during process planning or production. Manufacturing process controls
can occur at the specific operation in question or at a subsequent operation. There
are three types of process controls, those that:
• Setup
• Machine
• Operator
• Component or material
• Tooling
• Preventive maintenance
• Fixture/pallet/work holding
• Environment
TABLE 6.8
Manufacturing Process Control Matrix
Dominance Factor Attribute Data Variable Date
The detection is directly related to the controls available in the process. So the better
the controls, the better the detection. The team in essence is estimating the probability
© 2003 by CRC Press LLC
Failure Mode and Effect Analysis (FMEA) 275
that a potential failure will be detected before it reaches the customer. The team
members use the 1 to 10 evaluation scale. A 1 would indicate a very high probability
that a failure would be detected before reaching the customer. A 10 would indicate
a very low probability that the failure would be detected, and therefore, be experi-
enced by the customer. For instance, a casting with a large hole would be readily
detected and would be assessed as a 1. A casting with a small hole causing leakage
between two channels only after prolonged usage would be assigned a 10. The team
is assessing the chances of finding a defect, given that the defect exists.
The product of the estimates of occurrence, severity, and detection forms a risk
priority number (RPN). This RPN then provides a relative priority of the failure
mode. The higher the number, the more serious is the mode of failure considered.
From the risk priority numbers, a critical items summary can be developed to
highlight the top priority areas where actions must be directed.
The basic purpose of an FMEA is to highlight the potential failure modes so that
the engineer can address them after this identification phase. It is imperative that
the engineer provide sound corrective actions or provide impetus for others to take
sound corrective actions. The follow-up aspect is critical to the success of this
analytical tool. Responsible parties and timing for completion should be designated
in all corrective actions.
Strategies for Lowering Risk: (Manufacturing) — High Severity or Occurrence
Change the product or process design to:
• Benchmarking
• Brainstorming
• Mistake proofing
• TRIZ, etc.
• Benchmarking
• Brainstorming, etc.
At this stage, now you are ready to enter a brief description of the recommended
actions, including the department and individual responsible for implementation, as
well as both the target and finish dates, on the FMEA form. If the risk is low and
no action is required write “no action needed.”
For each entry that has a designated characteristic in the class[ification] column,
review the issues that impact cause/occurrence, detection/control, or failure mode.
Generate recommended actions to reduce risk. Special RPN patterns suggest that certain
characteristics/root causes are important risk factors that need special attention.
After FMEA:
FAILURE MODE
A failure is an event when the equipment/machinery is not capable of producing
parts at specific conditions when scheduled or is not capable of producing parts or
POTENTIAL EFFECTS
The consequence of a failure mode on the subsystem is described in terms of safety
and the big seven losses. (The big seven losses may be identified through warranty
or historical data.)
Describe the potential effects in terms of downtime, scrap, and safety issues. If
a functional approach is used, then list the causes first before developing the effects
listing. Associated with the potential effects is the severity, which is a rating corre-
sponding to the seriousness of the effect of a potential machinery failure mode.
Typical descriptions are:
Downtime
• Breakdowns: Losses that are a result of a functional loss or function
reduction on a piece of machine requiring maintenance intervention.
• Setup and adjustment: Losses that are a result of set procedures. Adjust-
ments include the amount of time production is stopped to adjust
process or machine to avoid defect and yield losses, requiring operator
or job setter intervention.
• Startup losses: Losses that occur during the early stages of production
after extended shutdowns (weekends, holidays, or between shifts),
resulting in decreased yield or increased scrap and defects.
• Idling and minor stoppage: Losses that are a result of minor interrup-
tions in the process flow, such as a process part jammed in a chute or
a limit switch sticking, etc., requiring only operator or job setter inter-
vention. Idling is a result of process flow blockage (downstream of the
focus operation) or starvation (upstream of the focus operation). Idling
can only be resolved by looking at the entire line/system.
• Reduced cycle: Losses that are a result of differences between the ideal
cycle time of a piece of machinery and its actual cycle time.
Scrap
• Defective parts: Losses that are a result of process part quality defects
resulting in rework, repair, or scrap.
• Tooling: Losses that are a result of tooling failures/breakage or dete-
rioration/wear (e.g., cutting tools, fixtures, welding tips, punches, etc.).
Safety
• Safety considerations: Immediate life or limb threatening hazard or
minor hazard.
SEVERITY RATING
Severity is comprised of three components:
A rating should be established for each effect listed. Rate the most serious effect.
Begin the analysis with the function of the subsystem that will affect safety, gov-
ernment regulations, and downtime of the equipment. A very important point here
is the fact that a reduction in severity rating may be accomplished only through a
design change. A typical rating is shown in Table 6.9.
It should be noted that these guidelines may be modified to reflect specific
situations. Also, the basis for the criteria may be changed to reflect the specificity
of the machine and its real world usage.
CLASSIFICATION
The classification column is not typically used in the MFMEA process but should
be addressed if related to safety or noncompliance with government regulations.
Address the failure modes with a severity rating of 9 or 10. Failure modes that affect
worker safety will require a design change. Enter “OS” in the class column. OS
(operator safety) means that this potential effect of failure is critical and needs to
be addressed by the equipment supplier. Other notations can be used but should be
approved by the equipment user.
POTENTIAL CAUSES
The potential causes should be identified as design deficiencies. These could translate as:
Identify first level causes that will cause the failure mode. Data for the devel-
opment of the potential causes of failure can be obtained from:
• Surrogate MFMEA
• Failure logs
• Interface matrix (focusing on physical proximity, energy transfer, material,
information transfer)
• Warranty data
• Concern reports (things gone wrong, things gone right)
• Test reports
• Field service reports
Hazardous Very high severity: affects operator, 10 Failure occurs R(t) < 1 or some 10 1 in 1 Very low Present design controls 10
without plant, or maintenance personnel every hour MTBF cannot detect potential
warning safety and/or effects cause or no design control
noncompliance with government available
regulations without warning
Hazardous High severity: affects operator, 9 Failure occurs R(t) = 5% 9 1 in 8 Team’s discretion depending 9
with warning plant or maintenance personnel every shift on machine and situation
safety and/or effects
noncompliance with government
regulations with warning
Very high Downtime of 8+ hours or the 8 Failure occurs R(t) = 20% 8 1 in 24 Team’s discretion depending 8
281
© 2003 by CRC Press LLC
282 Six Sigma and Beyond
OCCURRENCE RATINGS
Occurrence is the rating corresponding to the likelihood of the failure mode occurring
within a certain period of time — see Table 6.8. The following should be considered
when developing the occurrence ratings:
• Service data
• MTBF data
• Failure logs
• Maintenance records
SURROGATE MFMEAS
Current Controls
Current controls are described as being those items that will be able to detect the
failure mode or the causes of failure. Controls can be either design controls or
process controls.
A design control is based on tests or other mechanisms used during the design
stage to detect failures. Process controls are those used to alert the plant personnel
that a failure has occurred. Current controls are generally described as devices to:
Detection Rating
Detection rating is the method used to rate the effectiveness of the control to detect
the potential failure mode or cause. The scale for ranking these methods is based
on a 1 to 10 scale — see Table 6.8.
Step 1: severity
Step 2: criticality
Step 3: detection
This means that regardless of the RPN, the priority is based on the highest
severity first, especially if it is a 9 or a 10, followed by the criticality, which is the
product of severity and occurrence, and then the RPN.
RECOMMENDED ACTIONS
• Each RPN value should have a recommended action listed.
• The actions are designed to reduce severity, occurrence, and detection
ratings.
• Actions should address in order the following concerns:
• Failure modes with a severity of 9 or 10
• Failure mode/cause that has a high severity occurrence rating
• Failure mode/cause/design control that has a high RPN rating
• When a failure mode/cause has a severity rating of 9 or 10, the design
action must be considered before the engineering release to eliminate
safety concerns.
REVISED RPN
• Recalculate S, O, and D after the action taken has been completed. Always
remember that only a change in design can change the severity. Occurrence
may be changed by a design change or a redundant system. Detection
may be changed by a design change or better testing or better design
control.
• MFMEA — A team needs to review the new RPN and determine if
additional design actions are necessary.
SUMMARY
In summary, the steps in conducting the FMEA are as follows:
SELECTED BIBLIOGRAPHY
Chrysler Corporation, Ford Motor Company, and General Motors Corporation, Potential
Failure Mode and Effect Analysis (FMEA) Reference Manual, 2nd ed., distributed by
the Automotive Industry Action Group (AIAG), Southfield, MI, 1995.
Chrysler Corporation, Ford Motor Company, and General Motors Corporation, Advanced
Product Quality Planning and Control Plan, distributed by the Automotive Industry
Action Group (A.I.A.G.), Southfield, MI, 1995.
Chrysler Corporation, Ford Motor Company, and General Motors Corporation, Potential
Failure Mode and Effect Analysis (FMEA) Reference Manual, 32nd ed., Chrysler
Corporation, Ford Motor Company, and General Motors Corporation. Distributed by
the Automotive Industry Action Group (AIAG), Southfield, MI, 2001.
The Engineering Society for Advancing Mobility Land Sea Air and Space, Potential Failure
Mode and Effects Analysis in Design FMEA and Potential Failure Mode and Effects
Analysis in Manufacturing and Assembly Processes (Process FMEA) Reference Man-
ual, SAE: J1739, The Engineering Society for Advancing Mobility Land Sea Air and
Space, Warrendale, PA, 1994.
The Engineering Society for Advancing Mobility Land Sea Air and Space, Reliability and
Maintainability Guideline for Manufacturing Machinery and Equipment, SAE Prac-
tice Number M-110, The Engineering Society for Advancing Mobility Land Sea Air
and Space, Warrendale, PA, 1999.
Ford Motor Company, Failure Mode Effects Analysis: Training Reference Guide, Ford Motor
Company — Ford Design Institute. Dearborn, MI, 1998.
Kececioglu, D., Reliability Engineering Handbook, Vol. 1–2, Prentice Hall, Englewood Cliffs,
NJ, 1991.
Stamatis, D.H., Advanced Quality Planning, Quality Resources, New York, 1998.
Stamatis, D.H., Failure Mode and Effect Analysis: FMEA from Theory to Execution, Quality
Press, Milwaukee, 1995.