ERJ-190 Flying Control Rigging Error
The Portuguese accident investigation agency, GPIAAF, issued a safety investigation update on a serious in-flight loss of control event involving Air Astana Embraer ERJ-190 P4-KCJ that occurred on 11 November 2018 immediately after maintenance at the OGMA facility at the Alverca Air Base. This was a ferry flight back to Kazakhstan with 6 persons on board not a maintenance check flight.
The aircraft was landed safely but with structural damage sufficient to make this an accident in accordance with ICAO Annex 13. The crew had however encountered considerable difficulty controlling the aircraft, so much so they had debated ditching offshore. However they regained a degree of control. After two unstabilised approaches, the crew landed runway 19L. The intended runway was 19R, but due to lateral drift they were forced to land on 19L. https://youtu.be/6n4mQvO4-tE https://youtu.be/98z41SwaVOQ
GPIAAF confirmed that an incorrect aileron control cable system installation had occurred in both wings during the maintenance check conducted in Portugal.
GPIAFF note that:
By introducing the modification iaw Service Bulletin 190-57-0038 during the maintenance activities, there was no longer the cable routing and separation around rib 21, making it harder to understand the maintenance instructions, with recognized opportunities for improvement in the maintenance actions interpretation.
They comment on a problem with fault-finding that:
The message “FLT CTRL NO DISPATCH” was generated during the maintenance activities, which in turn originated additional troubleshooting activities by the maintenance service provider, supported by the aircraft manufacturer. These activities, which lasted for 11 days, did not identify the ailerons’ cables reversal, nor was this correlated to the “FLT CTRL NO DISPATCH” message.
Its possible, but not confirmed or discussed by GPIAAF, that the 11 days of fruitless fault-finding may have resulted in a delay and pressure to release the aircraft. GPIAFF comment that “deviations to the internal procedures” occurred within the third-party Part-145 maintenance organisation that “led to the error not being detected in the various safety barriers designed” in the process. They do not comment on what deviations occur, why they occurred or crucially how clear and practical those internal procedures were. They do say that the maintenance organisation is making changes. The investigators also suggest that the Type Certificate Holder review their documentation too. They also note that the error “was not identified in the aircraft operational checks (flight controls check) by the operator’s crew.” They add that:
Amongst other issues, the safety investigation will look into the aircraft design and functioning, the crew procedures and human factors aspects raised, and will now focus on the maintenance procedures and applied aircraft technical documentation, as well as the human and organizational factors involved in the Part-145 service provider.
We will publish more as the investigation develops.
We also wrote Crossed Cables: Colgan Air B1900D N240CJ Maintenance Error. In 2003 a B1900D crashed on take off after errors during flying control maintenance. We looked at the maintenance human factors safety lessons from this and another B1900 accident that year. We have previously discussed Misrigged Flying Controls: Fatal Maintenance Check Flight Accident, involving a Piper PA-46-350P Malibu Mirage (N962DA) in 2015, Too Rushed to Check: Misrigged Flying Controls involving a Piper PA-12 (N3280M) in 2017 and FAA Rules Applied: So Misrigged Flying Controls Undetected involving a Cessna 172M Skyhawk II (N9085H) in 2018. https://youtu.be/kN-N7D_hrS4 We have also discuss in the past two cases were the normal sound airmanship of pre-flight ‘full and free’ control checks would have prevented an accident:
- C-130J Control Restriction Accident, Jalalabad
- Business Aviation Compliance With Pre Take-off Flight Control Checks
We have previously written:
- Professor James Reason’s 12 Principles of Error Management
- Back to the Future: Error Management
- Safety Performance Listening and Learning – AEROSPACE March 2017
- Maintenance Human Factors: The Next Generation
- Airworthiness Matters: Next Generation Maintenance Human Factors
- Rockets Sleds, Steamships and Human Factors: Murphy’s Law or Holt’s Law?
- Critical Maintenance Tasks: EASA Part-M & -145 Change
- Misassembled Anti-Torque Pedals Cause EC135 Accident
- EC130B4 Accident: Incorrect TRDS Bearing Installation
- Fatal $16 Million Maintenance Errors
- Insecure Pitch Link Fatal R44 Accident
- Time Pressures and Take-Off Trim Trouble
- Stabilised Hover Prevents Loss of Control Accidents Say FAA
- Crossed Wires: Online Maintenance Human Factors Training Video
- Flying Control FOD: Screwdriver Found in C208 Controls
- B1900D Emergency Landing: Maintenance Standards & Practices
- United Airways Suffers from ED (Error Dysfunction)
- USAF RC-135V Rivet Joint Oxygen Fire: A military accident investigation has paradoxically determined that a $62.4mn fire was due to a maintenance error but that no human factors were involved.
- Inadequate Maintenance, An Engine Failure and Mishandling: Crash of a USAF WC-130H
- Inadequate Maintenance at a USAF Depot Featured in Fatal USMC KC-130T Accident
- USAF F-16C Crash at Joint Base Andrews: Engine Maintenance Error
- USAF Engine Shop in “Disarray” with a “Method of the Madness”: F-16CM Engine Fire
- What a Difference a Hole Makes: E-8C JSTARS $7.35 million Radar Mishap
- USAF Tool Trouble: “Near Catastrophic” $25mn E-8C FOD Fuel Tank Rupture
- Tree Top Autorotation for B206L1 After Loose Fuel Line B-Nut Leaks
- UPDATE 6 October 2019: Glider Controls Fail After Non Compliant Maintenance Embodying an AD
- UPDATE 12 October 2019: ATR72 VH-FVR Missed Damage: Maintenance Lessons Unclear communications, shift handover & roles and responsibilities, complacency about fatigue and failure to use access equipment all feature in this serious incident.
- UPDATE 30 October 2019: ‘Crazy’ KC-10 Boom Loss: Informal Maintenance Shift Handovers and Skipped Tasks
- UPDATE 7 December 2019: Luftwaffe VVIP Global 5000 Written Off After Flying Control Assembly Error
Aerossurance worked with the Flight Safety Foundation (FSF) to create a Maintenance Observation Program (MOP) requirement for their contractible BARSOHO offshore helicopter Safety Performance Requirements to help learning about routine maintenance and then to initiate safety improvements: Aerossurance can provide practice guidance and specialist support to successfully implement a MOP. An excellent initiative Human Hazard Analysis (HHA) that could help identify problematic maintenance tasks and improvements is described in Designing out human error
HeliOffshore, the global safety-focused organisation for the offshore helicopter industry, is exploring a fresh approach to reducing safety risk from aircraft maintenance. Recent trials with Airbus Helicopters and HeliOne show that this new direction has promise. The approach is based on an analysis of the aircraft design to identify where ‘error proofing’ features or other mitigations are most needed to support the maintenance engineer during critical maintenance tasks.
Other manufacturers and MROs are expanding the use of HHA during 2019.
Aerossurance was pleased to both sponsor and present at a Royal Aeronautical Society (RAeS) Human Factors Group: Engineering seminar Maintenance Error: Are we learning? on 9 May 2019 at Cranfield University where we advocated a more sophisticated and holistic approach.