14 CFR § 5.53

When applying safety risk management, any person required to have an SMS under this part must analyze the systems identified in § 5.51. Those system analyses must be used to identify hazards under paragraph (c) of this section and in developing and implementing risk controls related to the system under § 5.55(c).

In conducting the system analysis, the following information must be considered:

Function and purpose of the system.

The system's operating environment.

An outline of the system's processes and procedures.

The personnel, equipment, and facilities necessary for operation of the system.

The interfaces of the system.

Any person required to have an SMS under this part must develop and maintain processes to identify hazards within the context of the system analysis.