Murph 9000
Computer
- Jun 26, 2021
- 297
Alistair Heaton said:… There are discussions about pilot lockouts on some features. And also the use of AI
I'm sorry, Dave. I'm afraid I can't do that.
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
Alistair Heaton said:… There are discussions about pilot lockouts on some features. And also the use of AI
NTSB said:Consistent with this philosophy, the NTSB notes that FAA certification guidance in
AC 25.1309-1A that allows manufacturers to assume pilots will respond to failure conditions
appropriately is based, in part, upon the applicant showing that the systems, controls, and
associated monitoring and warnings are designed to minimize crew errors, which could create
additional hazards.16 While Boeing considered the possibility of uncommanded MCAS operation
as part of its functional hazard assessment, it did not evaluate all the potential alerts and indications
that could accompany a failure that also resulted in uncommanded MCAS operation. Therefore,
neither Boeing’s system safety assessment nor its simulator tests evaluated how the combined
effect of alerts and indications might impact pilots’ recognition of which procedure(s) to prioritize
in responding to an unintended MCAS operation caused by an erroneous AOA input.17 The NTSB
is concerned that, if manufacturers assume correct pilot response without comprehensively
examining all possible flight deck alerts and indications that may occur for system and component
failures that contribute to a given hazard, the hazard classification and resulting system design
(including alerts and indications), procedural, and/or training mitigations may not adequately
consider and account for the potential for pilots to take actions that are inconsistent with
manufacturer assumptions.
Thus, the NTSB concludes that the assumptions that Boeing used in its functional hazard
assessment of uncommanded MCAS function for the 737 MAX did not adequately consider and
account for the impact that multiple flight deck alerts and indications could have on pilots’
responses to the hazard. Therefore, the NTSB recommends that the FAA require that Boeing
(1) ensure that system safety assessments for the 737 MAX in which it assumed immediate and
appropriate pilot corrective actions in response to uncommanded flight control inputs, from
systems such as MCAS, consider the effect of all possible flight deck alerts and indications on
pilot recognition and response; and (2) incorporate design enhancements (including flight deck
alerts and indications), pilot procedures, and/or training requirements, where needed, to minimize
the potential for and safety impact of pilot actions that are inconsistent with manufacturer
assumptions.
Further, because FAA guidance allows such assumptions to be made in transport-category
airplane certification analyses without providing applicants with clear direction concerning the
consideration of multiple flight deck alerts and indications in evaluating pilot recognition and
response, the NTSB is concerned that similar assumptions and procedures for their validation may
have also been used in the development of flight control system safety assessments for other
airplanes. Therefore, the NTSB recommends that the FAA require that for all other
US type-certificated transport-category airplanes, manufacturers (1) ensure that system safety
assessments for which they assumed immediate and appropriate pilot corrective actions in
response to uncommanded flight control inputs consider the effect of all possible flight deck alerts
and indications on pilot recognition and response; and (2) incorporate design enhancements
(including flight deck alerts and indications), pilot procedures, and/or training requirements, where
needed, to minimize the potential for and safety impact of pilot actions that are inconsistent with
manufacturer assumptions.