| |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
Uncovering the policy factor in accidents This analysis by a prominent accident investigator shows that managerial policy - not "crew error" - most often triggers airline tragedies. By Gerrard M.Bruggink [A former deputy director of the Bureau of Accident Investigation at NTSB, Gerrard M. Bruggink has been involved in aviation safety and accident investigation for over 40 years. He has received awards from U.S. Army Aviation Association of America and the International Society of Air Safety Investigators.] This article is considered a milestone in the long journey for developing
a conceptual frame to understand the causal mechanism of air accidents.
In
accident investigation, one sentence has been repeated so often and so
convincingly that it has become an axiom: most aircraft accidents are
caused by the human factor, especially by crew error. In March 1984, the
chairman of the National Transportation Safety Board told a Senate subcommittee,
"The flight crew has been identified as a causal factor in about 65 to
70 percent of all air carrier accidents." The statistical validity of
this statement cannot be questioned; the mandate to determine causes puts
NTSB in the best position to know where it points its finger most often. First, policy making
at the managerial level is an unhurried, deliberate, and usually collective
process of open-eyed risk assessment. Second, individual
decision making at the working level is an urgent and constant process
based on the individual's immediate perception of the variables in a fluid
situation. Individuals at the lower end of the organization have an unlimited opportunity to make wrong decisions. The easily identified link between their errors and accidents threatens to obscure the less conspicuous role of policy factors. The better term, as used here, refers to managerial shortcomings in applying accident avoidance principles. A policy factor becomes an inherent part of the causal mechanism when top management of manufacturers, air carriers, professional organizations, airports or regulatory agencies helped set the stage for the accident by ignoring the lessons from predictive incidents and similar accidents in the past, or by tolerating unwarrented compromises for reasons of self-image, economy, or ineptness. The objective of this study is to determine to what extent the role of policy factors in accidents is properly identified in official determinations of cause. The facts needed to identify policy factors in past accidents were available only in accident reports that followed the International Civil Aviation Organization format, such as NTSB's "blue-cover" reports. This meant that the accident records in only one type of flying permitted a meaningful search for policy factors: air carrier operations under Part 121. To avoid excessive diversity in accident data, only fatal accidents involving scheduled passenger operations in turbojet aircraft were selected. The period 1973-82 was chosen because it was the latest 10-year period for which formal accident reports were available. A total of 29 fatal turbojet accidents in scheduled Part 121 passenger operations occurred during that period. However, 6 single fatality mishaps were not included in the tabulation because the operational safety of the aircraft was not threatened by these occurrences. NTSB characterized them as "bizarre" accidents, such as passenger falling off a stair platform.
[A synoptic report of each listed accident is attached at the end of this article] The table above shows the 23 fatal accidents that fall within the scope
of this analysis. Three of these accidents occurred on foreign soil and
were investigated by other governments; for one of these accidents, no
cause could be determined. The official cause(s) of the remaining 22 accidents
are listed in the sequence used in the statements of cause. In cases where
NTSB's probable cause statement merely described what happened, the column
for official cause reflects the board's apparent intent or the opinion
of dissenting board members. The second table summarizes the fatal accidents in scheduled Part 121
passenger operations from 1973 to 1982.
Takeoff accidents Case 18: The policy factors in the catastrophic American Airlines DC-10 takeoff accident at Chicago's O'Hare Airport need little elaboration. Five months before the previously damaged aft pylon bulkhead of the No.1 engine completely failed, another carrier had experienced similar damage using similar maintenance procedures. Case 20: NTSB officially attributed the Air Florida 737 accident at Washington National to the crew on three counts: (1) failure to use engine anti-icing, (2) the decision to takeoff with snow/ice on the airfoils, and (3) failure to reject the takeoff. Actually the NTSB came closer to the root of this accident in what it classified as a contributing factor: "The limited experience of the flight crew in jet transport winter operations." This so-called contributing factor may have been intended to soften the board's harsh judgement of the crew; in reality it constitutes a policy factor of the first order. The captain's commercial jet operating experience began in October 1978, in August 1980 he was upgraded to 737 captain. According to NTSB, he "missed the seasoning experience normally gained as a first officer as a result of the rapid expansion [of the carrier]." Case 22: According to the probable cause statement, the Pan Am 727 wind shear accident at New Orleans, which caused 153 deaths, was unavoidable due to the limits the existing state of technology placed on detecting and avoiding severe weather. However this accident, as well as case 10 (an Eastern 727 approach accident at New York's Kennedy Airport, which was attributed to wind shear), had several policy connotations, which follow:
In-flight accidents Approach accidents Case 9: This accident - a TWA 727 into Mount Weather at Barryville, Virginia - involved controlled flight into terrain (CFIT). It was made possible by regulatory/industrial complacency in resolving the ambiguity surrounding the term "cleared for the approach." Two months before the accident, a serious incident on the same approach drew attention to that ambiguity. Case 10: NTSB officially attributed the Eastern 727 approach accident at Kennedy to wind shear. The policy factor assigned to it is based on the rationale explained under Case 22, the Pan Am 727 accident at New Orleans. Case 16: The accident report officially assigned the responsibility for
the PSA 727 midair collision at San Diego to the flight crew and air traffic
control procedures. One approach accident (Case 6, a Pan Am 707 on approach at Bali) could not be examined for policy factors because of the incompleteness of the accident report. Landing accidents Case 21: The World Airways DC-10 overran the end of Boston's Logan Airport runway at 49 knots, following a nonprecision instrument approach and a touchdown 2,500 feet beyond the displaced threshold on an ice-covered runway. The probable cause statement assigns most of the responsibility to two policy-making entities, FAA and airport's management, but does not mention the manufacturer or the carrier. This is a bewildering omission in view of one of the NTSB's findings: "Present FAA standards and accepted operating practices do not preclude a pilot from landing an airplane on a runway which is too slippery to provide adequate friction to stop the airplane" (emphasis added). NTSB 11-page letter of recommendations to FAA, in essence, exposes the industry's reluctance to accept operational restrictions aimed at greater safety margins for takeoffs and landings on slippery runways.
The table shows the distribution of accidents with officially assigned
crew factors and accidents involving policy factors. The table also gives
the total fatalities associated with those factors. The fact that official
determinations of cause were made in all but one of the 23 accidents was
not taken into account in the tabulation; the only effect was a slight
decrease in the percentage in both columns. Official causes distort policy error
G.M. Bruggink [1985]
Brief descriptions &
synoptic reports of accidents considered by Gerrard Bruggink in his (1985)
study.
The Boeing ("Clipper Winged Racer") took off from runway 04 for it's
2nd leg of the Auckland-Papeete-Honolulu-Los Angeles flight and climbed
to 300ft. At 300ft a left turn was initiated and the aircraft struck the
sea in a descending excessive bank turn. The wreckage sank into the 700m
deep waters off Papeete. Both CVR and FDR were not recovered.
As Delta Flight 723 was descending, the approach clearance was given
by the controller after a delay, because the controller was preoccupied
with a potential conflict between two other aircraft. This caused the
flight to be poorly positioned for approach. The aircraft passed the Outer
Marker at a speed of 385km/h (80km/h too fast) and was 60m above the glide
slope. The flight director was inadvertently used in the 'go-around-mode',
which led to abnormal instrument indications. This caused some confusion.
The first officer, who was flying the approach, became preoccupied with
the problem. The DC-9 continued to descend and struck a seawall 3000ft
short of and 150ft to the right of runway 04R crashed and caught fire.
RVR at the time was 500m with 60m overcast.
The plane porpoised while descending to LAX. The aircraft was subjected to 2 minutes of peak acceleration forces of 2.4 g. A combination of design tolerances in the aircraft's longitudinal control system which, under certain conditions, produced a critical relationship between control forces and aircraft response.
Overspeeding of the starboard engine caused the engine to disintegrate. Pieces struck the fuselage, breaking a window, causing rapid explosive decompression and a passenger was sucked out of the plane. The plane landed safely. The captain and flight engineer were experimenting with the autothrottle system by tripping the circuit breakers, which supplied the instruments which measured the rotational speed of each engine's low pressure compressor. This led to engine overspeeding and destruction of the engine.
The aircraft, on approach to Pago Pago, encountered windshear some 3nm
short of the runway, causing it to deviate above the glide slope. Power
was reduced, but at 1,25nm short the aircraft went into a 1500ft/min descent
until striking trees 0,65nm short of the runway 05.
The aircraft, named "Clipper Climax", crashed into a mountain while preparing
for a runway 09 approach to Denpasar after a 4h20m flight from Hong Kong.
Flight TW841 (Tel Aviv-Athens-Rome-New York) left Athens at 09.12 GMT
for a 1h48min flight to Rome. The flight was cruising at FL280 when to
suddenly enter a steep climb attitude. The captain of PanAm flight 110
who witnessed the event, said the aircraft then rolled to the left into
a steep descent. The Boeing 707 disintegrated and crashed into the sea.
It was determined that the detonation of an explosive device in the aft
cargo compartment buckled and damaged the cabin floor in such a manner
that one or more of the elevator and rudder system control cables was
stretched and, perhaps, broken. The resultant displacement of control
surfaces caused a violent pitch up and yaw and made the aircraft uncontrollable.
The DC-9 struck trees while flying 135m too low and 80km/h too fast.
The aircraft crashed 3.3 miles short of runway 36 during a VOR/DME approach.
The crew descended below minimum altitude during a runway 12 VOR/DME
approach to Washington-Dulles. The aircraft struck high ground at 1800ft.
The aircraft struck approach lights during a runway 22L ILS approach.
The aircraft broke up and caught fire.
Flight 60 was making a runway 11 ILS approach under conditions of low
ceilings and low visibility. Descending through 4000ft visual contact
with the ground and water was acquired. The captain decided to proceed
visually. The aircraft touched down fast (at 145kts) with a 3kts tailwind
component. Braking action was poor, so the captain decided to execute
a go-around. Ground spoilers were retracted, flaps set at 25deg. The thrust
reversers didn't disengage fully, so full take-off thrust couldn't be
obtained. Attempts to disengage the reversers failed, so ground spoilers
were deployed again. The aircraft overran the wet runway, crossed a gully
and a service road, struck the antenna array support structure and continued
before ending up in a ravine, 700ft past the runway.
Flight 625 (Providence-New York-St.Thomas) departed New York at 12.00
AST. At 15.04 the flight crew cancelled their IFR flight plan and proceeded
VFR. The captain however elected to use the runway 9 ILS for vertical
guidance. The glideslope was intercepted at 1500ft msl (flaps 15deg and
at a 160 KIAS airspeed). The flaps were lowered to 25 and later to 30deg.
The company prescribed 40deg was never selected. The speed was still 10
KIAS above Vref when the aircraft passed the threshold at an estimated
altitude of 30-40ft. At 1000ft down the runway (while initiating flare)
turbulence caused the right wing to drop. The wings were leveled and the
aircraft floated a while until touchdown at 2200-2300ft down the runway.
The captain decided that the aircraft couldn't be stopped on the remaining
runway. He immediately initiated a go-around. Because of the absence of
any sensation either of power being applied or of aircraft acceleration,
the throttles were closed again. The aircraft, in an 11deg nose up attitude,
ran off the runway and struck a localizer antenna. The right wingtip clipped
a hillside just south of the antenna and the aircraft continued, hit an
embankment, became airborne and contacted the ground on the opposite side
of the perimeter road. The aircraft continued and came to rest 83ft past
the perimeter road, bursting into flames.
Southern Fight 242 (Huntsville-Atlanta) entered severe thunderstorms
between FL170 and FL140 over Rome, GA. Both engines failed and couldn't
be restarted. An emergency landing was carried out on State Spur Highway
92. The aircraft crashed.
Continental Flight 603 (Los Angeles - Honolulu) received clearance to
taxi to runway 6R at 09.01h. At 09.22h the flight was cleared to taxi
into position and hold. Takeoff clearance was given a minute later, but
the crew delayed the acknowledgment, because the captain thought the clearance
was given too soon after a heavy jet aircraft had made its takeoff. Acceleration
was normal, but while approaching the V1 speed (156kts) a loud "metallic
bang" was heard, followed by a quivering. As rejected takeoff procedures
were begun, the airspeed continued to increase to 159kts. The aircraft
appeared to be decelerating normally, but with 2000ft of runway remaining,
the flightcrew became aware that the rate of deceleration had decreased
and they believed that the aircraft would not be able to stop on the runway.
The aircraft was steered to the right and departed the right corner of
the runway end. About 100ft beyond the runway, the left maingear broke
through the nonload-bearing tarmac surface and failed. A fire erupted
in this area as the aircraft turned to the left, coming to rest 664ft
from the runway end and 40ft right of the extended centreline in a 11deg
left wing low and 1,3deg nose-up attitude.
Flight 193 operated as a scheduled passenger from Miami to Pensacola,
FL, with en route stops at Melbourne and Tampa, New Orleans, Louisiana,
and Mobile. About 21.02 CDT the flight departed Mobile on an IFR flight
plan to Pensacola and climbed to the cruising altitude of 7,000ft. At
21.09h, the crews were told that they would be vectored for an airport
surveillance radar (ASR) approach to runway 25. At 21.13h, the radar controller
told National 193 that it was 11 nm NW of the airport and cleared it to
descend and maintain 1700 ft. At 21.17h flaps were selected at 15deg and
two minutes later the flight was cleared to descend to 1500ft and shortly
after that further down to the MDA (480ft). As the aircraft rolled out
on the final approach heading, the captain called for the landing gear
and the landing final checklist. At 21.20:15h, the ground proximity warning
system (GPWS) whooper warning continued for nine seconds until the first
officer silenced the warning. Nine seconds later the 727 hit the water
with gear down and flaps at 25deg. It came to rest in about 12 ft of water.
The weather at the time of the accident was 400ft overcast, 4 mls visibility
in fog and haze, wind 190deg/7kts.
Gibbs Flite Center Cessna 172 aircraft had taken off from Montgomery
Field at 08.16 PST and proceeded to Lindbergh Field were two practice
ILS approaches to runway 9 were flown. At 09.00 the Cessna pilot was instructed
to maintain VFR at or below 3500ft, heading 70deg. PSA Flight 182 (a scheduled
passenger flight from Sacramento to San Diego via Los Angeles), cleared
for a runway 27 approach, was advised by the approach controller that
there was traffic in front of them. The PSA crew reported the traffic
in sight immediately thereafter and the PSA flight was instructed to maintain
visual separation and contact Lindbergh tower. Lindbergh tower again warned
the PSA flightcrew of "traffic, twelve o'clock, one mile, a Cessna". The
crew had lost track of the Cessna and radioed back: "think he's passing
off to our right". The flightcrew still weren't sure of the actual position
of the Cessna. At 09.01:28 a conflict alert warning began in the San Diego
Approach Control facility, indicating a collision hazard between PSA182
and the Cessna. At 09.01:47 the approach controller warned the Cessna
pilot of traffic in the vicinity. At the same moment both aircraft collided.
Flight 182 was descending and overtaking the Cessna, which was climbing
in a wings level attitude. The Cessna broke up immediately and exploded
after colliding with the Boeing's right wing. The Boeing entered a shallow
right descending turn and crashed into a residential area.
While approaching Portland, there appeared to be a problem with the extension
of the landing gear. The DC-8 circled for about an hour while the crew
were busy trying to solve the problem. After running out of fuel, a forced
landing was carried out in a wooded, populated area.
Flight 191 left the gate at Chicago-O'Hare at 14.59h and taxied to runway
32R. At 15.02h the flight was cleared for takeoff. The takeoff roll was
normal until just before rotation at which time sections of the No. 1
engine pylon structure came off the aircraft. During rotation the entire
No.1 engine and pylon separated from the aircraft, went over the top of
the wing, and fell to the runway. Flight 191 lifted off about 6,000 ft
down the runway, climbed out in a wings level attitude, and reached an
altitude of about 300ft agl with its wings still level. Shortly thereafter,
the aircraft began to turn and roll to the left, the nose pitched down,
and the aircraft began to descend. As it descended, it continued to roll
left until the wings were past the vertical position. The DC-10 crashed
in an open field and trailer park about 4,680 ft northwest of the departure
end of runway 32R. The aircraft was demolished during the impact, explosion,
and ground fire. Two persons on the ground were killed.
Flight 2605 departed Los Angeles at 01.40h for a flight to Mexico City.
Because of refurbishing work on runway 23L, the flight was cleared for
a runway 23R approach. Descend through a fog bank was continued below
the 600ft minimum for instrument approaches. The aircraft touched down
with the left maingear in the grass left of 23L and with the right maingear
on the runway shoulder. Go-around power was added and the nose lifted
10-11deg. The right maingear then collided with a truck located on the
runway. The gear leg separated and struck the right tailplane and elevator,
causing substantial damage. The aircraft banked to the right until it
struck the left wing struck the cab of an excavator, 1500m from the runway
threshold, continued and crashed into a building and caught fire.
Air Florida Flight 90 was scheduled to leave Washington National Airport
at 14.15h EST for a flight to Fort Lauderdale International Airport, FL,
with an intermediate stop at the Tampa, FL. The aircraft had arrived at
gate 12 as Flight 95 from Miami, FL, at 13.29h. Because of snowfall, the
airport was closed for snow removal from 13.38h to 14.53h. At about 14.20h
maintenance personnel began de-icing the left side of the fuselage with
de-icing fluid Type II because the captain wanted to start the de-icing
just before the airport was scheduled to reopen (at 14.30h) so that he
could get in line for departure. Fluid had been applied to an area of
about 10 feet when the captain terminated the operation because the airport
was not going to reopen at 14.30h. Between 14.45h and 14.50h, the captain
requested that the de-icing operation be resumed. The left side of the
aircraft was deuced first. No covers or plugs were installed over the
engines or airframe openings during de-icing operations. At 15.15h, the
aircraft was closed up and the jet way was retracted and the crew received
push-back clearance at 15.23h. A combination of ice, snow, and glycol
on the ramp and a slight incline prevented the tug, which was not equipped
with chains, from moving the aircraft. Then, contrary to flight manual
guidance, the flight crew used reverse thrust in an attempt to move the
aircraft from the ramp. This resulted in blowing snow which might have
adhered to the aircraft. This didn't help either, so the tug was replaced
and pushback was done at 15.35h. The aircraft finally taxied to runway
36 at 15.38h. Although contrary to flight manual guidance, the crew attempted
to deice the aircraft by intentionally positioning the aircraft near the
exhaust of the aircraft ahead in line (a New York Air DC-9). This may
have contributed to the adherence of ice on the wing leading edges and
to the blocking of the engine's Pt2 probes. At 15.57:42h, after the New
York Air aircraft was cleared for takeoff, the captain and first officer
proceeded to accomplish the pre-takeoff checklist, including verification
of the takeoff engine pressure ratio (EPR) setting of 2.04 and indicated
airspeed bug settings. Takeoff clearance was received at 15.58h. Although
the first officer expressed concern that something was 'not right' to
the captain four times during the takeoff, the captain took no action
to reject the takeoff. The aircraft accelerated at a lower-than-normal
rate during takeoff, requiring 45 seconds and nearly 5,400 feet of runway,
15 seconds and nearly 2,000 feet more than normal, to reach lift-off speed.
The aircraft initially achieved a climb, but failed to accelerate after
lift-off. The aircraft's stall warning stick shaker activated almost immediately
after lift-off and continued until impact. The aircraft encountered stall
buffet and descended to impact at a high angle of attack. At about 16.01h,
the aircraft struck the heavily congested northbound span of the 14th
Street Bridge and plunged into the ice-covered Potomac River. It came
to rest on the west end of the bridge 0.75 nm from the departure end of
runway 36. When the aircraft struck the bridge, it struck six occupied
automobiles and a boom truck before tearing away a 41-foot section of
the bridge wall and 97 feet of the bridge railings. Four persons in vehicles
on the bridge were killed; four were injured, one seriously.
The DC-10 made a non-precision instrument approach to runway 15R and
touched down 2800ft past the displaced threshold. When the crew sensed
that the aircraft couldn't be stopped on the remaining runway, they steered
the DC-10 off the side of the runway to avoid the approach light pier,
and slid into the shallow water. The nose section separated as the DC-10
came to rest 250ft past the runway end, 110ft left of the extended centreline.
Flight 759 took off from runway 10 for Las Vegas after the intermediate
stop at New Orleans. The Boeing climbed to 95-150ft when it began to descend.
It struck some trees 2376ft past the runway end and crashed in a residential
area, demolishing 6 houses.
Synoptic report not available |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||