114

Journal 2008 PDF 1.8 MB

Embed Size (px)

Citation preview

FOREWORD

i

EDITORIAL ADVISORY BOARD MEMBERS

Robert EaglesDirector, Safety Operations & InfrastructureInternational Air Transport Association, Asia Pacific

Prof Henry FanProfessor, Centre for Infrastructure SystemsSchool of Civil and Environmental EngineeringNanyang Technological University, Singapore

Dr K RaguramanJoint Associate ProfessorDepartment of Geography and Civil EngineeringNational University of Singapore

Sivakant TiwariPrincipal, Senior State CounselAttorney-General’s Chambers, Singapore

Dr Jarnail SinghChairmanCivil Aviation Medical Board, Singapore

Cletus MJ PackiamChief, Airport Emergency ServiceCivil Aviation Authority of Singapore

Goh Chin EeDirector, Singapore Aviation AcademyCivil Aviation Authority of Singapore

EDITORIAL TEAM

Ms Chan Pin Pin

Ms Jasmin Ismail

Ms Addrienne Kang

Ms Eudora Tan

ii

CONTENTS

Aviation Safety

1 The Safety Reporting in Aviation: Safety Management

and Safety Culture in Interaction 1

Professor Patrick Hudson

Leiden University, The Netherlands

2 Aviation Safety Investigations – Cooperative, Independent,

No-blame and Accountable 13

Mr Alan Stray

Australian Transport Safety Bureau

3 Balancing Safety and Compliance in the Regulatory Environment 23

Mr William Voss

Flight Safety Foundation

Aviation Security

4 Benefits of Aviation Security Audits and Quality Control Systems 29

Mr Bernard Lim

Ministry of Transport, Singapore

Aircraft Accident Investigation

5 The Role of Safety Culture in Aircraft Accidents 37

Professor Graham Braithwaite

Cranfield University, UK

iii

Aviation Technology

6 State-of-the-Art Technology in Airport Pavement 47

Dr Satish K Agrawal

Federal Aviation Administration, US

Crisis Management

7 Evidence-based Medical Response to Mass Casualty Event at Airports 55

Dr Mark Leong

Singapore General Hospital

Airport Management

8 Opening of New Terminals – Changi Airport’s T3 experience 65

Mr Foo Sek Min

Civil Aviation Authority of Singapore

Sustainable Aviation

9 Towards Sustainable Aviation 73

Mr Michael Rossell

International Civil Aviation Organization

iv

ABSTRACT

Aviation Safety

ABSTRACT

This paper examines the necessity for safety reporting in terms of risk management, using the Bowtie model as a way of showing how reports of minor incidents can provide vital information about how well an organisation is managing the risks of the business. As the underlying causes of both major accidents and minor incidents are similar, reporting all types of incidents provides invaluable information that can be used to prevent accidents. In today’s commercial aviation industry, we cannot afford to learn these lessons from actual accidents, so there is no real choice if we are to avoid further major accidents.

The International Civil Aviation Organization has recognised this necessity in its definition of how Safety Management Systems (SMS) should operate. Nevertheless, there are many situations in which people are afraid to report, because of a blame culture, or do not feel it is worthwhile. This paper identifies three different types of blame culture, the Personal, the Professional and the Political and then examines how these might be countered, primarily by education and an understanding of how accidents are caused. The paper ends with a plea for all involved, from pilots and engineers to regulators, politicians and the media, to put aside natural tendencies to blame in favour of supporting full and open reporting in commercial aviation.

Safety Reporting in Aviation:

Safety Management and Safety Culture in Interaction

ABOUT THE AUTHOR ABOUT THE AUTHOR

Professor Patrick Hudson

Professor Patrick Hudson is with the Centre for Safety Research, Leiden University, Netherlands. He has been Project Leader of the Tripod Research Programme on Human Error for Shell International since 1988, cooperating closely with Prof. J. Reason of Manchester University, UK. He was involved in the early development of safety management systems as well as human factors programmes. He currently leads the Hearts and Minds research programme on the development of safety culture in the Oil and Gas industry.

Prof Hudson is a member of ICAO’s Human Factors Awareness Group and the Joint Aviation Authorities Human Factors Steering Group. His involvement with aviation includes working with companies such as Ansett Australia, Emirates, British Airways, Cathay Pacific, Shell Aircraft, KLM Helicopters and Swissair. He has over 180 publications in scientific journals, books and conference proceedings.

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

1

Aviation Safety

Professor Patrick Hudson

Leiden University, The Netherlands

INTRODUCTION

Many incidents in aviation would go unknown unless

someone reports them. This is unfortunate, because learning

from minor incidents is the most cost-effective way of

making the aviation system safer. Accidents are obvious

and fortunately rare, but near misses and minor incidents

are much more common and can go undetected unless

someone is willing to tell what happened. The causes

of accidents and near misses are the same, especially at

the level of the underlying causes (Reason, 1997), which

is why they are commonly collected together under the

term incidents.

This paper will first discuss why it is so important to report

more than just the major incidents, placing reporting firmly

in the context of safety management, and then consider

why people find it so difficult to report, describing a

number of distinct organisational cultures. The paper then

considers the range of possible mechanisms for ensuring

reporting and concludes with a plea to put aside culturally

determined barriers in favour of encouraging a truly proactive

management of the risks of aviation.

WHY REPORT?

After a major incident, whether an actual accident or a very

public near miss, there will be a formal investigation to

discover what happened and, more importantly, why1. After

such an investigation, the results can be disseminated

throughout the industry and the expectation is that the

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

1 ICAO Annex 13 is quite explicit in its requirement to uncover the reasons why an incident happened and to do this in a blame-free setting. This paper explores just why the blame-free element is so important, especially when incidents do not reach their full disastrous potential.

2

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

safety of the system, as a whole, can be improved and possible accidents avoided. In the last

100 years of aviation, learning from accidents has been the main way in which the industry has

become safer; almost every line of the ICAO annexes can be traced back to an incident that now

need no longer be repeated.

Experience with major incidents in a great many different industries has shown that there are

almost always precursors that were, or could have been, identified in less serious incidents. In

many cases these minor incidents fall below the threshold that required them to be officially

reported and, subsequently, investigated (see Figure 1). These incidents will have breached one

or more barriers, “slices of cheese”, but will not have gone so far as to be classified as an actual

accident. Barriers are intended to prevent hazards from creating losses, such as an accident. Some

barriers may involve design and procedures, others may involve competence and vigilance. Poor

design or inappropriate procedures are latent conditions that are represented by ‘holes in the

cheese’, but an accident may be prevented by the competence and vigilance of an operator, such

as a pilot or air traffic controller. With the benefit of hindsight, such minor incidents have often

proven to be the harbingers of a future disaster. The immediate precursors that can be identified

from minor incidents will themselves have been caused by organisational failures or shortcomings,

such as lack of oversight, inappropriate procedures or a shortage of funding. These are all

factors that typically have an impact on a great many other possible defences that prevent

future accidents (Reason, 1997). It is this information that reporting of incidents can and should

provide. In an ideal world sufficient levels of proactive reporting of minor incidents, allowing

the identification of the underlying causes of potential incidents, should help drive down the

numbers of incidents where actual damage or injury occurs.

Figure 1: The Swiss Cheese model of accident causation (Courtesy J. Reason)

3

Journal Aviation Management 2008

REPORTING AND RISK MANAGEMENT

Reporting is one of the three major methods for acquiring information about how well

risks are being managed. This is the reason why incident reporting is stressed as one of the

major component of an SMS (ICAO, 2005). The other two are audits and, the most unforgiving,

accidents and major incidents where no one can deny that something went wrong. Reporting

enables us to identify systemic weaknesses as well as providing an important way of identifying

new hazards or threats that need to be managed to assure safety. To see reporting in context

it is necessary to understand how risk analysis is performed in other hazardous industries. Risk

analysis in general involves:

• Discovering how undesired consequences can occur and what hazards are involved (eg. terrain,

other aircraft, birds, Foreign Object Damage etc.);

• Uncovering both the superficial and the root or underlying causes of problems;

• Identifying how these causes can be managed effectively so that the problems do not arise.

Risk assessment goes further than analysis and involves quantifying the probabilities of such

consequences and identifying the frequency of underlying threats – how they may arise - and

assessing the effectiveness of preventative and mitigation barriers intended to prevent problems

from arising.

EXAMPLE – AIRSIDE COLLISIONS WITH NEW GENERATION COMPOSITE AIRCRAFT

There is a specific example which shows how reporting of apparently trivial incidents can no

longer be treated as a luxury. Future generations of aircraft will almost certainly increasingly

be constructed from composites, like the Boeing 787. One particular problem for such aircraft

lies exactly in their strength. Many components may fail to show, to simple visual inspection,

that they have been damaged to the point of threatening airworthiness as materials may

spring back after being hit. There are effective non-destructive techniques that are capable

of detecting such damage and allowing an assessment of whether repair is necessary or

not, but it is necessary first to know whether and where to look. Whether the damage is

caused by dropping tools in engineering or vehicle collisions on the ramp, the only way to

set a testing process in operation is to have someone report what happened and where; the

alternative of checking the whole of every such aircraft before every flight is unthinkable. At

the same time such reports also provide information about why such a collision occurred in

the first place; collecting such reports can show if there are trends, such as airside drivers

who may not have been given sufficient training to acquire the necessary competence to

drive heavy vehicles in the vicinity of composite aircraft.

In aviation, we are concerned with a wide range of possible consequences ranging from multiple

fatalities and aircraft loss, eg. Controlled Flight into Terrain (CFIT), to damage without injury and

reputation damage to airlines, airports, Air Traffic Mangement (ATM) providers and the sector as a

4

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

whole. One of the lessons from other high-hazard industries is the need to manage the full

range of the problems that can cause such outcomes, not just by working backwards in the

hope of preventing specific outcomes like CFIT or runway incursions (Hudson, 2003a).

There are two basic approaches, viz reactive and proactive, to analysing the risks of an operation.

The reactive approach uses actual incidents and uncovers root causes by working backwards

from consequence to cause. A more proactive version of incident analysis imagines what possible

incidents could happen and again works backwards to ascertain how such an incident could

happen. An explicitly proactive approach, Failure Mode and Effect Analysis (FMEA), moves forward

from possible causes towards potential incidents, by systematically varying every element or

component in a system and seeing what failures can result. FMEA, while fully proactive, is labour

intensive and is usually only applied to engineering problems with a concentration on ‘hard’

component failures because of the difficulty in developing such a systematic approach with softer

human factors issues.

REPRESENTING RISKS - THE BOWTIE DIAGRAM

One way of understanding how accidents can be prevented involves using a risk analysis method

called the Bowtie, shown in Figure 2, which provides a way of combining these two approaches

while significantly reducing the complexity. Bowties are based around a top event, the point

at which no adverse consequences have yet occurred, but where control over the hazard has

been lost. There are a number of threats, ways in which the hazards can be released leading to

a top event and on to the undesirable consequences. To prevent hazards being released and

the consequences happening, we can place barriers on the threat pathway. These barriers may

depend on hard controls, such as designed hardware or softer controls such as procedures. The

barriers are explicit representations of the slices of cheese in the Swiss Cheese model. A full bowtie

represents a risk analysis, with all the threat pathways and barriers identified. If the frequencies of

threats and the effectiveness of the barriers are also quantified, then we have a risk assessment.

5

Journal Aviation Management 2008

Figure 2: The Bowtie diagram

EXAMPLE OF A BOWTIE ANALYSIS – BIRD STRIKE

Bird strike is a major issue in aviation, which can result in a crash or major damage to

engines and airframes. These are the consequences that we wish to avoid, but the Top Event,

where we have lost control, is the point where birds and aircraft are in the same airspace.

Birds are the hazards, either flocks of small birds like pigeons, gulls or occasional large birds

such as pelicans or geese. To the left of the Top Event we represent how this can happen (the

threats - how we get birds near airports) and what we can do to avoid this from happening

in the first place, (the barriers – such as managing rubbish dumps or using bird-scaring

tactics). To the right of the Top Event are the recovery measures, mitigation defences, which

show what we can do to ensure that the worst consequences are not reached if there is a

bird strike despite our best preventative endeavours (engine design, pilot procedures, fire

brigade, pre-designed press releases). Each of these barriers is, in fact, a slice of cheese in

the Swiss Cheese model shown in Figure. 1. The Escalation factors are shown to see how

specific barriers and mitigation measures might fail – how the holes get into the cheese. If

one barrier is for an aerodrome to employ an ornithologist, the escalation factor might be

cost pressure and it is possible to see that some steps would need to be taken to ensure that

cost reduction did not result in the loss of an ornithologist and subsequent increased risk

of major bird strike. The conventional barriers and defences are found on the main bowtie;

the organisational underlying causes are to be found on the escalation factors. Reporting

provides a major mechanism for discovering that one or more barriers are ineffective at either

the main bowtie level or within the escalation factors.

6

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

Reports can be made about failures at any point on the trajectory from a hazard as well as about

novel hazards. At the level of consequences we will have had an actual accident, at the level of

the top event and where right-hand side barriers have failed, we will have had an incident that

can be easily recognised as a near miss. Prior to the top event, on the left-hand side, we could

have identified a failing preventative control. The bowtie diagram, in the case of any incident,

enables us to identify just which barriers failed and which barriers also worked to avoid the full

consequences. Accidents and public near-misses may suffice to set investigation in progress, but

there is already a cost, if only to reputation. The less obvious incidents, in contrast, can also be

analysed and can provide the same information at considerably less cost, at least in terms of

public exposure.

One thing is clear from this analysis of reporting as an integral part of the risk management

process. Reports have to be investigated to the point where they reveal information about

systemic shortcomings that could potentially impact operations and so cause more serious

incidents. Without such analysis, reporting is no more than a token exercise most likely to reflect

badly on the reporter. The problem is that professional investigation of incidents is often seen

as time-consuming and expensive, requiring extensive training if anything more than a superficial

re-description of the incident and some trivial trending is to be achieved. The bowtie, once in

place, provides an accessible and relatively rapid way of setting out the set of barriers available2,

allowing the investigator to identify which ones failed, which remained intact, and what if any

hazards and new threats can be identified.

WHY NOT REPORT?

If the case for reporting is so clear, why should people not report? The reality is that reporting in

many organisations and countries is sometimes infrequent; this despite the belief that there is

quite a lot happening, even in very safe operations, worthy of being reported, because individuals

fear being personally blamed for what went wrong, or more specifically, the consequences. Blame

cultures are those in which there is a strong desire to identify and punish those who have failed in

some way, typically those most closely identified with causing some bad outcome. They are found

in a wide variety of professions and in many national cultures.

Blame cultures can be understood in the light of two factors. One is a well-known and reliable

psychological phenomenon called the “Fundamental Attribution Error”. This refers to the disparity

in explanations of events between the individuals involved and observers; observers explain

individuals’ failures in terms of their poor internal psychological characteristics, while those same

individuals explain their actions with reference to the external environment. The term pilot error,

for instance, is used to blame the pilot, typically in terms of the individual pilot’s personal failings

while the pilot might point to the environmental factors3. The second factor is the belief that

people, unlike inanimate forces, have the power to control their own destiny. Taken in combination

with hindsight bias (Hudson, 2001; Fischhoff, 1975; Fischhoff & Beyth, 1975), where people believe

2 This is not necessarily to imply that the bowtie is the only possible methodology, but it sets a benchmark for quick and effective investigation of minor incidents that other methodologies will have to meet.3 In contrast people do tend to attribute their successes to their individual qualities, while outsiders may make reference to the

environment those individuals found themselves in.

7

Journal Aviation Management 2008

that “they knew it all along”, this leads to explanations of events in which a person can be

expected to have known what was happening and to have had the ability to prevent the bad

consequences from happening. The belief is that individuals, typically at the last moment, could

have and should have exercised sufficient control over their actions. The fact that they did not

makes them candidates for blame.

There appear to be three different types of blame culture, the Personal, the Professional and the

Political. In the Personal culture, there is a belief that people who immediately ‘cause’ an accident

should pay for it. Individuals are afraid of the consequences if they should report, especially when

it is their own actions, or inactions, that they are reporting. Even if they are not afraid of the

organisational consequences, such as punishment, they may still be keenly aware of the loss of

face reporting one’s own failures can incur. In many national cultures the fear of such outcomes

is enough to provide a significant impediment to reporting. These impediments to reporting can

be overcome if there is sufficient appreciation that front line operators, whose actions may have

been in error at the end of the whole incident trajectory, are equally the victims when there are

underlying causes over which they have little or no control (shown in Figure 1).

In the Professional culture, individuals may still feel ashamed of the fact that they have performed

below their own expectations and would rather not tell. Professional Cultures are those in which

the key individuals - pilots, engineers, and doctors form good examples – feel that they possess

exceptional characteristics and have been given special training so that any failure to exercise the

highest professional standards of performance must reflect upon them personally. In many ways

these groups may be seen to fall under a reversed attribution error; failure reflects on their failure

to exercise sufficient control whatever the circumstances, while success is only what would be

expected every day.

Finally, the Political culture covers the complex of public constituencies outside the organisation

that also seek to identify individuals to blame, from the law to the media. There may be

impediments to reporting from external agencies that mean that, even with an open culture

within the organisation with the understanding that everyone is fallible, reporting is still an open

invitation to some form of sanction, whether legal or in terms of reputation damage to either

individuals or the organisation as a whole. The law, almost by definition, institutionalises the

concept of blame and subscribes to the belief that identification and punishment of those who

fail, whether intentionally or not, is essential. Often there is a belief that punishment, especially

in public, will ensure that other people do not make the same errors – a belief that flies in the

face of 100 years of psychological study. The media is also served by providing easily understood

explanations of why things went wrong, especially after a public disaster – unfortunately accurate

explanations rapidly become too complex to capture in a sound bite or a headline, while pilot

error meets the bill easily. In commercial aviation the problem may be exacerbated by the public

perception that aviation is safe, therefore any failure of the system must be due to one or more

individuals who actively subverted that safe system.

8

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

Some or all of these cultures may be in effect at the same time, they are different but not

incompatible because the same psychological mechanisms of blame underlie all three.

TYPES OF REPORTING SYSTEM

There are a variety of different ways to collect reports. A number of these systems are intended to

encourage reporting by avoiding some of the cultural pitfalls. This section describes the different

types of system available, the next section considers how they can be used to get people to

report. Barach & Small (2000) provide a comprehensive review of reporting systems.

• Anonymous reporting systems, while potentially capable of lowering the threshold to report,

suffer from a number of problems that make them effectively useless. One is that such systems

are open to abuse, allowing people to make reports that bring individuals into focus that may

be the result of malicious rather than well-intentioned intent. But more important is the fact

that it is hard, or impossible, to get the information that is really important; one is left with the

immediate description of what happened and little if any trustworthy information about why the

event happened. Yet I have argued above that this is the true value of reporting.

• Confidential reporting systems are intended to overcome the problems with anonymous

reporting, removing both malicious reporting and the inability to follow up reported incidents.

They should allow people who feel that they may be blamed to report anyway because their

names should never be released to those who will blame. The necessity of such systems reflects

on the overall culture of the organisation, as it is still felt necessary to protect reporters.

• Protected reporting systems are those that provide a degree of protection from prosecution.

The American ASRS provides immunity for those who report in a timely manner.

• Open reporting may be constrained, names are known but reports and their results are typically

published without references to persons, or totally open, as when access to all reports in the

system is available to everyone in the organisation, or limited to those with a need to know.

• Mandatory reporting is normally demanded by legal requirements. Such reports are invariably

specific about individuals, but may be confidential within the confines of the organisation

and the regulator, unless the legal authorities decide that they wish to intervene. ICAO

Annex 13 (Aircraft Accident & Incident Investigation) sets clear requirements for full and blame-

free investigation, implying the same for reporting on non-accident incidents, but the possibility

for prosecuting authorities to proceed has always remained, subject to the requirement that

they have to collect their own evidence4.

These different systems are intended to make reporting easier for reporters, except for mandatory

systems that simply require, with the clear threat of sanctions for non-reporting. It is clear that the

level of protection felt necessary to make people feel comfortable with reporting will be a function

of the overall safety culture of the organisation (Hudson 2003b), which primarily impacts on the

4 Most jurisdictions allow individuals to remain silent in the event that speaking would provide evidence of guilt in a criminal case. The requirement of Annex 13 is to ensure that the information needed to prevent future accidents becomes available, but the fact that something has been stated in the context of Annex 13 means that prosecutors would need to find other proof. The situation

in civil cases is, in my opinion, less clear.

9

Journal Aviation Management 2008

personal blame culture. A more advanced culture would, hopefully, also have fewer problems

with the professional culture (see Figure 3). As the safety culture improves the tendency to report

increases. At the same time we expect the number of actual serious incidents to reduce, but this

shows that the absolute number of reports may be expected to rise to a point where there are

fewer serious incidents and the number of reports starts to drop. A rise in the number of reports

may, therefore, be good news about an improvement in the safety culture rather than indicating

that real safety performance is getting worse. Unfortunately all reporting will take place within the

political blame culture. In societies where blame is directed at individuals, this will always remain

as a residual barrier to full and open reporting unless quite explicit steps are taken both within

the organisation and at the level of the State to protect individuals.

Figure 3: The relationship between safety culture and reporting rate

Whistle-blower systems are sometimes provided to compensate for the reporting of particularly

‘difficult’ cases. However these tend to concentrate on the faults of others, often those higher

in the organisation, and again reflect on the true state of the culture of an organisation if they

continue to be felt to be necessary.

HOW DO YOU GET PEOPLE TO REPORT?

What can overcome the barriers to reporting? The logical arguments for the advantages of reporting

are not always sufficient to overcome the obstacles set up by one or more of the different types

of blame culture. Personal blame cultures need to overcome the belief amongst management

and peers that it is just the individuals closest to an incident who should carry the responsibility.

This means more than just forgiving those individuals, it also means developing an acceptance

that most incidents will have an organisational cause and that management have a role to play.

10

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

This is not such a burden as it might appear; incident reporting can uncover weaknesses in

the system, especially on the left-hand side of the bowtie, leading to improvements that are

typically cost-effective, benefiting the organisation as a whole, and where management can often

be happy that issues have been identified before anything wrong or blameworthy has happened.

Two major problems arise, one is the continuing belief of management in the reprehensibility of

individuals who could have prevented an incident at the last moment, the second is the belief

(and expectation) in such individuals that punishment will still be meted out, despite public

protestations to the opposite by senior staff.

Professional blame cultures are, if anything, more difficult to manage. Professionals like pilots

and surgeons have to learn the same lesson as management in the Personal culture, but now

applied to themselves. They need to understand that even though they may be put into impossible

situations, that it is worth reporting to uncover and remedy the reason for those problems.

Extending reporting requirements within an explicit framework of professional risk management

may help such people to realise that being professional involves discovering sources of error and

failure as well as combating them.

Political blame cultures are the hardest to circumvent. The historical and cultural background that

determines the attitudes of lawmakers and the media are outside the power of most organisations

to change. The one possibility that appears to work is supra-national regulation. ICAO, and

especially Annex 13, provides an example of how international regulation can be used to overcome

national tendencies. The European Union has also made a requirement for blame-free reporting

in directive 2003/42/EC. ICAO and the European Union have, unfortunately, little if any influence

on the media’s perception that when bad things have happened someone has to pay, and their

belief that retribution is what the public wants. Nevertheless even here a proactive approach to

the media, coupled with openness from senior management in the organisation, can result in a

change in opinion that the media can reflect. Figure 3 shows an interesting relationship between

the expected safety performance of an organisation and the number of reports, a message that

could be passed to those who immediately equate an increase in the number of reports with a

worsening situation5.

The lesson appears to be that education about how incidents actually happen, and how information

about failures can actually serve to make the system better rather than just provide evidence

that things are bad, can impact on blame cultures at all three levels. But there are two other

requirements that are essential. First, even with the development of the understanding of how

incidents can be illuminating rather than just symptomatic, it is essential that all parties can be

made to believe that reporting of all except the most egregious events should be blame-free (or

blame-light) and even rewarded (Hudson et al, 2008).

In order to do this a track record of reporting without negative consequences for the reporter

needs to be constructed, and this will take time. One way to develop such a track record

involves approaching individuals and essentially setting up a number of reports that ‘prime the

5 The question that can be asked in the aviation setting is, “Would you rather fly with an airline that reported, or one that didn’t?”

11

Journal Aviation Management 2008

pump’, together with publicity about the reports and the lessons learnt while clearly not naming

individuals (the message is that reporting makes things better and reporters do not receive bad

consequences). A later stage might then involve publishing the incident, the lessons learnt and

how the reporter was rewarded, thus bringing individuals out into the open in a positive way.

The second requirement interacts with the first, it is that reports should be handled in a timely

manner and that feedback be given to the reporter so that they feel that reporting is worthwhile.

Both of these are related to the development of trust; the first trust that reporters will not suffer

bad personal consequences, and may even be rewarded, the second that something useful will be

done with the information derived from the report.

CONCLUSION

Reporting, especially of apparently minor incidents, is of vital importance in all high hazard

industries, but particularly in commercial aviation where the numbers of victims in major accidents

can be considerable. Proactive reporting is one way to uncover underlying potential causes of

future accidents before they happen, along with considered risk analysis and thorough audits.

This paper has identified a number of reasons why people would not wish to report, some of

them are inherent to the industry, some are the result of failures of trust between reporters and

the management of their organisation, and some are the result of the behaviour, or expected

behaviour, of external bodies such as regulators or the media. There are a number of ways in

which reporting can be encouraged, ranging from making reports of certain types of incident

mandatory, providing ways of enduring freedom from prosecution, through confidential reporting

even to anonymous. The need for these different types of reporting system depends upon the

safety culture of the organisation, the regulatory bodies, the legal system and the media.

With recent developments in aviation, we can no longer afford the luxury of waiting to learn from

accidents, so there is really no alternative to having as full and open a reporting system as is

possible. The price we may have to pay to achieve a full and informative reporting system as

possible may be considerable. Pilots and engineers, for instance, must be willing to put aside their

feelings of professional pride for a greater good. Management of airlines must become convinced

that the benefits of reporting far outweigh their desire to punish individuals. Regulators and

other lawmakers must accept that heavy-handed intervention may well prove counterproductive

and smother reporting completely. Finally the media must learn to contain simplistic popular

interpretations, or at least accept responsibility for the long-term consequences of their actions.

Without such concessions from all parties we may remain doomed to continue learning from

accidents. In a world in which the consequences of accidents with aircraft like the A380 are almost

too considerable to be contemplated, for passengers, the airline and even the industry as a whole,

there is no alternative.

12

References

Barach, P. & Small, S.D. (2000) Reporting and preventing medical mishaps: Lessons from non-medical near miss

reporting systems. British Medical Journal, 320, 759-763

Fischoff, B. (1975) Hindsight /= foresight: The effect of outcome knowledge on judgement under uncertainty. Journal

of Experimental Psychology: Human Perception and Performance. 1, 288-299.

Fischhoff, B. & Beyth, R. (1975) “I knew it would happen”: Remembered probabilities of once-future things.

Organisational Behaviour and Human Performance. 13, 1-16.

Hudson, P.T.W. (2001) They didn’t see it coming: Hindsight and foresight on the road to disaster. In E.R. Mullaer &

C.J.J.M. Stolker (Eds.) Ramp en Recht: Beswchouwingen over rampen, verantwoordelijkheid en aansprakelijkheid.

Boom Juridische Uitgevers: Den Haag. Pp 91-102

Hudson, P.T.W. (2003a) Applying the lessons of high-risk industries to medicine. Quality and Safety in Health Care.

12, 7-12

Hudson, P.T.W. (2003b) Developing an aviation safety culture. Journal of Aviation Management. 4, 27-48.

Hudson, P.T.W., Vuijk, M., Bryden, R., Biela, D. & Cowley, C. (2008) Meeting Expectations: A new model for a just and

fair culture. In Proceedings of the 8th SPE International Conference of Health, Safety and Environment in Oil and Gas

Exploration and Production. Richardson, TX: Society of Petroleum Engineers. 6 pp. [CD-ROM]

ICAO (2005) ICAO Safety Management Manual. Doc 9859 AN/460 Montreal.

Reason, J.T. (1997) Managing the Risks of Organisational Accidents. Ashgate.

Safety Reporting in Aviation: Safety Management and Safety Culture in Interaction

ABSTRACT

Aviation Safety

ABSTRACT

The need for cooperation in investigations is a fundamental tenet and is now more important than ever. Cooperation is required to ensure the needs of the community are best served. Police, Coroners, Judicial and regulatory authorities in most States rely on effective cooperation with the aviation investigation authority to ensure they can also meet the needs of the community. However, in an era of low cost airlines and increasing globalisation, we are seeing airline ‘code sharing’ and ‘alliances’ resulting in more of the world’s population using air travel. People are using a broader cross section of airlines, from a range of flag States, than ever before.

Many States do not have, or do not dedicate, the resources to appropriately meet their ICAO Annex 13 obligations, thereby reducing the effectiveness of their safety oversight and investigation capabilities. This in turn reduces their ability to meet the needs of their citizens, and the citizens of many other countries when an aircraft is carrying passengers or crew of differing nationalities. This paper will briefly explore the need for broader cooperation in the conduct of independent, no-blame and accountable investigations not only within a State, but globally.

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

ABOUT THE AUTHOR ABOUT THE AUTHOR

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

Mr Alan Stray

Mr Alan Stray is Director International of the Australian Transport Safety Bureau (ATSB), with responsibility for international engagement/liaison with government and industry. He has been an aviation safety investigator since January 1987.

Mr Stray has been the Accredited Representative on a number of overseas major airline accidents, most recently the Garuda and AdamAir Boeing 737 tragedies in Indonesia. He has the lead in-country role in the ATSB’s cooperation with the Indonesian National Transportation Safety Committee, as part of the Australian Government’s Indonesia Transport Safety Assistance Programme. In January 2005 and 2008, he was awarded the Government’s Australia Day Council Achievement Medallion, for his contribution to aviation safety and support to the Indonesian Government in the Garuda 737 investigation respectively.

13

Aviation Safety

Mr Alan Stray

Australian Transport Safety Bureau

NEED FOR REGIONAL COOPERATION

International Civil Aviation Organization (ICAO) has

contemplated the need for Regional cooperation in

investigations and this was the subject of a working paper

that was discussed at the ICAO Accident Investigation

and Prevention (AIG) Divisional Meeting held in Montreal

in October 2008, the first such meeting since 1999.

In the working paper titled ‘Regional Cooperation in

Investigations’, the ICAO Secretariat states:

For the investigation of major accidents in States which do not have

the resources to carry out the investigation, other interested States

(e.g. the State of Design and Manufacture) may assist and provide

support to the State of Occurrence. However, many States also lack

the capability to investigate accidents other than the major ones,

and to investigate serious incidents. For many of those States, the

establishment of a regional accident investigation organisation, or

the creation of a regional pool of qualified investigators might be the

only options to enable the establishment of an effective accident and

incident investigation and prevention system.

ICAO has long been aware of the difficulties experienced by some

Contracting States in implementing Standards and Recommended

Practices (SARPs) and has tried to assist them accordingly. Safety

oversight audits conducted under the ICAO Universal Safety

Oversight Audit Programme (USOAP) have highlighted the extent

of deficiencies encountered by those States in meeting their safety

oversight obligations. In many cases, these deficiencies are the

result of insufficient resource allocation to the national civil aviation

body. Consequently, such States are unable to comply in full with

national and international requirements concerning the safety of civil

aircraft operations.

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

14

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

ICAO IDENTIFIES STATES’ SHORTFALLS

The ICAO Secretariat’s working paper on ‘Regional Cooperation in Investigations’ draws attention

to responsibilities of States in ensuring appropriate oversight and investigation, and highlights the

fact that many States are falling short of their responsibilities:

The Convention on International Civil Aviation (Chicago Convention) allocates responsibility for aviation safety to

individual States. Each State bears responsibility for the continuing airworthiness of aircraft; safe and efficient

aircraft operations; the licensing and/or certification of personnel; safe air traffic flow within its airspace, sufficient

airport infrastructure; and adequate investigations of aircraft accidents and incidents. At the November 1997

Conference of Directors-General of Civil Aviation, ICAO highlighted the findings of its safety oversight assessments,

which indicated that a significant number of Contracting States were experiencing problems in implementing SARPs,

recruiting qualified personnel and, in general, fulfilling their safety oversight obligations.

Safety oversight audits conducted under the ICAO Universal USOAP now include the audit of a

State’s capability with respect to compliance with Annex 13 SARPs. Since the inclusion of Annex 13

in the USOAP, the extent of deficiencies encountered by States in meeting their safety investigation

obligations has been highlighted. Some Contracting States have been found to have no Annex

13 enabling legislation or policies and procedures. Even in the States that have basic enabling

legislation, these deficiencies have been shown to result from insufficient resources, which

translates to a lack of qualified and experienced investigators; training opportunities; basic and

essential equipment; policies and procedures. Consequently, these States are unable to meet their

national and international aircraft accident and incident investigation obligations. The legal system

in a State itself may impact the relationship of the investigation legislation to other legislation.

ICAO GUIDANCE FOR REGIONAL OVERSIGHT

In 2006, ICAO published the Safety Oversight Manual and Part B — The Establishment and

Management of a Regional Safety Oversight System (Doc 9734–Part B). The manual provides

guidance on the establishment and management of a Regional Safety Oversight Organisation

(RSOO) and outlines the duties and responsibilities of ICAO Contracting States with respect to the

establishment and management of a regional safety oversight system. It is addressed to high-level

government decision-makers, as it highlights States’ obligations as signatories to the Chicago

Convention and provides information and guidance on the establishment and management of

an RSOO to assist Contracting States in fulfilling part or all of their safety oversight-related

obligations.

While Doc 9734–Part B does not specifically address aircraft accident and incident investigations,

it can be used as a reference for the establishment of regional accident investigation systems.

The manual provides guidance on how to establish and manage a regional system within a

particular region or sub-region. Consideration should be given to the need to ensure that the

establishment of a regional system for the investigation of accidents and incidents does not

affect the independence of the investigation process, which is not a matter covered in detail

in Doc 9734–Part B. The accident and incident investigation authority must be independent,

yet accountable.

15

Journal Aviation Management 2008

COOPERATION IS AN IMPORTANT ELEMENT

While the 1992 Accident Investigation and Prevention Divisional Meeting (AIG/92) discussed

the need to separate any judicial proceedings to apportion blame or liability from an accident

investigation, the meeting also discussed the necessity of good coordination between accident

investigation and judicial authorities during investigations. Following AIG/92, several provisions

covering those subjects were developed and introduced in Annex 13. ICAO has also developed

much guidance material to help States in implementing Annex 13 SARPs.

Many States do not have enabling legislation to ensure primacy, let alone protection of evidence,

for the agency conducting investigations in accordance with Annex 13 SARPs. For the investigation

of major accidents in States that do not have the resources to carry out investigations or have

extremely limited capability, other interested States (eg the State of Design and Manufacture) may

assist and provide support to the State of Occurrence. For many of those States, the establishment

of a regional accident investigation organisation, or the creation of a regional pool of qualified

investigators, might be the only options to enable the establishment of an effective accident and

incident investigation and prevention system.

One ICAO AIG working paper states:

In many areas of regional cooperation, States can produce economies of scale leading to increased efficiency due

to the possibility of sharing and pooling of human and financial resources. Participating States will also increase

their capacity to develop harmonised regulations adapted to their local environment and in compliance with SARPs.

In the international arena, the existence and effective operation of regional organisations is a demonstration of

regional solidarity and increases the involvement of individual States in aviation activities relating to the region or

sub-region.

COOPERATING WITH OTHER AUTHORITIES AND ORGANISATIONS

In recent years, some States have indicated that following an accident, the Judicial authorities have

control over the wreckage, which may delay or restrict the conduct of the Annex 13 investigation.

Many States do not have an independent investigation authority or appropriate procedures in

place for carrying out Annex 13 no-blame investigations. In this case, the investigation may be

done by the State’s regulator or the Judicial authority. These investigations are not Annex 13 no-

blame investigations, but nevertheless are necessary to ensure that the needs of the community

and the community’s expectation of natural justice are upheld. So when considering regional

cooperation to facilitate Annex 13 investigations for the conduct of no-blame safety investigations,

the needs of the community must be given very careful consideration.

WHAT IS INDEPENDENCE?

The principle of ‘independence’ is extremely important in aircraft accident and incident investigation.

Functional independence is required in order for the investigation to be conducted without ‘fear

or favour’ in the interest of seeking to fully determine all the causes or causal factors of the

accident or incident and report publicly, ensuring that appropriate safety action is taken. Functional

16

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

independence means that the roles and responsibilities of safety investigators need to be clearly

outlined in legislation, separate from judicial processes and not subject to direction in the conduct

of an investigation by third parties. Independence is not achieved where, for example, a division

of the regulator conducts the investigation of the accident or incident. Likewise, if a police aircraft

is involved in an accident, independence would not be achieved if a division of the police force

conducted the investigation. It is foreseeable that there may be systemic factors associated with

a regulatory or police agency that contributed to the accident. At the very least, if these agencies

commissioned the investigation, there is likely to be a community perception that all the factors

related to those agencies may not have been fully investigated and publicly reported on. Lack of

confidence in the investigation framework and processes will inevitably result.

HOW INDEPENDENT IS INDEPENDENT?

It is widely accepted that complete and totally unfettered independence is almost a myth. One

basic yet fundamental example is that the funding of investigation authorities in most States

is normally dependent on a government budgetary process. In many States, the investigation

authority may be responsible to a level of bureaucracy for public service administration. Therefore,

the term independence, in the context of aircraft accident and incident investigation, more typically

refers to functional or operational independence.

It is interesting to note that Article 6 of the European Union Directive, which covers aviation

investigation, states:

Investigating body or entity

1. Each member State shall ensure that technical investigations are conducted or supervised by a permanent civil

aviation body or entity. The body or entity concerned shall be functionally independent in particular of the national

aviation authorities responsible for airworthiness, certification, flight operation, maintenance, licensing, air traffic

control or airport operation and, in general, of any other party whose interests could conflict with the task entrusted

to the investigating body or entity.

2. Notwithstanding paragraph 1, the activities entrusted to this body or entity may be extended to the gathering and

analysis of air safety related data, in particular for prevention purposes, in so far as these activities do not affect its

independence and entail no responsibility in regulatory, administrative or standards matters.

There will always be a potential, perceived, or real conflict of interest where a person or organisation

involved in an accident or incident conducts the investigation.

INDEPENDENCE NOT JUST A MATTER FOR AVIATION INVESTIGATIONS

In the maritime world, there is also concern about independence. A proposed new Code for

Marine Casualty Investigations had been put forward for adoption at the International Maritime

Organisation’s Maritime Safety Committee meeting in May 2008. Chapter 11 of the Code which

would be mandatory will require that:

17

Journal Aviation Management 2008

Marine Safety Investigating State(s) must ensure that investigator(s) carrying out a Marine Safety Investigation

are impartial and objective. The Marine Safety Investigation must be able to report on the results of the Marine

Safety Investigation without direction or interference from any persons or organisations who may be affected by

its outcome.

ICAO GUIDELINES FOR FUNCTIONALLY INDEPENDENT INVESTIGATIONS

The following important information can be found in the Manual of Aircraft Accident and Incident Investigation and Part I — Organisation and Planning (Doc 9756):

2.1.1 In conformity with Article 26 of the Convention on International Civil Aviation, it is incumbent on the State

in which an aircraft accident occurs to institute an inquiry into the circumstances of the accident. This obligation

can only be met when appropriate legislation on aircraft accident investigation is in place. Such legislation

must establish an accident investigation authority (or commission, board or other body) for the investigation of

aircraft accidents.

2.1.2 The accident investigation authority must be strictly objective and totally impartial and must also be perceived

to be so. It should be established in such a way that it can withstand political or other interference or pressure.

Many States have achieved this objective by setting up their accident investigation authority as an independent

statutory body or by establishing an accident investigation organisation that is separate from the civil aviation

administration. In these States, the accident investigation authority reports direct to Congress, Parliament or a

ministerial level of government.

2.1.3 In many States it may not be practical to establish a permanent accident investigation authority. These States

generally appoint a separate accident investigation commission for each major accident to be investigated, the

members of which are often seconded from the civil aviation administration. It is essential that such a commission

report direct to a ministerial level of government so that the findings and safety recommendations of the investigation

are not diluted during passage through regular administrative channels.

COORDINATION WITH OTHER AUTHORITIES WHILE MAINTAINING NO-BLAME INVESTIGATIONS

The functional independence and primacy of investigations under Annex 13 are provided for in the ICAO Standards in paragraphs 5.4 and 5.6. However, cooperation and coordination with separate judicial or administrative inquiries are contemplated by Annex 13 and, if relevant, aviation security authorities (see paragraphs 5.10 and 5.11).

Coordination – Judicial authorities

5.10 The State conducting the investigation shall recognise the need for coordination between the investigator-in-

charge and the Judicial authorities. Particular attention shall be given to evidence which requires prompt recording

and analysis for the investigation to be successful, such as the examination and identification of victims and read-

outs of flight recorder recordings.

Note 1.— The responsibility of the State of Occurrence for such coordination is set out in 5.1.

Note 2.— Possible conflicts between investigating and Judicial authorities regarding the custody of flight recorders

and their recordings may be resolved by an official of the judicial authority carrying the recordings to the place of

read-out, thus maintaining custody.

18

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

Informing aviation security authorities

5.11 If, in the course of an investigation it becomes known, or it is suspected, that an act of unlawful interference was

involved, the investigator-in-charge shall immediately initiate action to ensure that the aviation security authorities

of the State(s) concerned are so informed.

This is reflected in Sections 7(2), 10 and 17 of Australia’s Transport Safety Investigation Act 2003,

which replaced Part 2A of the Air Navigation Act 1995. Such cooperation and coordination is

important and is achieved in the context of parallel inquiries.

These sections articulate the objectives of the Act to improve transport safety through reporting

safety matters, and the conduct of independent no-blame investigations. This is to be done through

cooperation between the investigation agency and other government agencies or any person who

has powers under another law to also investigate the matter. There is also a requirement to conduct

the investigation activities in a manner consistent with Australia’s international obligations.

The Australian Transport Safety Bureau (ATSB) seeks to ensure cooperation with other agencies

such as the aviation regulator, air traffic services provider, police and Coroner. Every effort is made

to facilitate these authorities being able to undertake parallel inquiries, short of them using ATSB

compelled witness statements and other sensitive documents. This also applies to Coroners and

officers assisting Coroners.

WHY DO INVESTIGATIONS NEED TO BE ‘NO-BLAME’

Annex 13 paragraph 3.1 states that “The sole objective of the investigation of an accident or

incident shall be the prevention of accidents and incidents. It is not the purpose of this activity to

apportion blame or liability”. However, in explaining what, why and how it happened, and seeking

to encourage safety actions to improve future safety, and trying to make sure an accident does not

happen again, aircraft accident investigation reports written in accordance with Annex 13 may be

read, particularly by the media, as implying blame.

ICAO Annex 13 Standard 5.12 requires non-disclosure of accident or incident records for purposes

other than accident or incident investigation unless a Judicial authority conducts a balancing

exercise and determines “that their disclosure outweighs the adverse domestic and international

impact such action may have on that or any future investigations”. The records covered by the

Standard include witness statements, operational communications, medical or private information,

cockpit voice recordings and transcripts, air traffic control recordings and transcripts, and opinions

expressed in the analysis of information including flight recorder information. Paragraph 5.12.1

states: “These records shall be included in the final report or its appendices only when pertinent

to the analysis of the accident or incident. Parts of the records not relevant to the analysis shall

not be disclosed,”. The Annex notes that:

19

Journal Aviation Management 2008

Information contained in the records listed above, which includes information given voluntarily by persons

interviewed during the investigation of an accident or incident, could be utilised inappropriately for subsequent

disciplinary, civil, administrative and criminal proceedings. If such information is distributed, it may, in the future,

no longer be openly disclosed to investigators. Lack of access to such information would impede the investigation

process and seriously affect flight safety.

Extensive legal guidance on the protection of safety information and data is provided in Attachment

E to Annex 13 which came into force on 23 November 2006. This guidance applies to all accident

investigation records.

The ‘no-blame’ principle is fundamental to encouraging the free flow of safety information to

an accident investigation. ICAO has done a tremendous job in encouraging States to implement

protection for accident investigation records as well as other safety information collected from

Safety Data Collection and Processing Systems. The promulgation of Attachment E to Annex 13

is an example of this. During the October 2008 AIG, the items that should be protected during

a no-blame investigation and included in Annex 13 Attachment E were discussed with the aim of

ensuring clearer guidance in facilitating the no-blame principle of safety investigation.

In addition to this ICAO material, in 2005 major aviation industry groups worked to develop a

‘Global Aviation Safety Roadmap’ (GASR) with key safety focus areas from 2006 to 2010 and

for several years beyond, which was presented to ICAO’s Air Navigation Commission on 25

January 2006. ICAO sought an implementation plan and the result in early 2007 was a detailed

document titled ‘Implementing the Global Aviation Safety Roadmap: A Strategic Action Plan for

Future Aviation Safety’ developed jointly by Airports Council International, Airbus, Boeing, Civil Air

Navigation Services Organisation, Flight Safety Foundation, International Air Transport Association

and International Federation of Air Line Pilots Associations for ICAO, States and the Industry (GASR

Implementation). Australia has supported the GASR and the GASR Implementation at meetings of

ICAO, Directors-General of Civil Aviation, and through training in our region (e.g. in Indonesia and

at the Singapore Aviation Academy).

The GASR Implementation emphasises that with the rapidly increasing aviation activity worldwide,

in order to prevent a rise in accidents, there is a need to share safety information and data more

freely and in better structured ways.

If a State is not able to establish a separate, functionally independent, no-blame accident and

incident investigation authority because of limited resources in its own State, the State should look

to the possibility of establishing such an authority in conjunction with other States in a regional

group. For many years the Interstate Aviation Committee based in Moscow has capably conducted

investigations on behalf of Russia and 11 other States. The Interstate Aviation Committee works

cooperatively with the 12 States and is a functionally independent, no-blame, accountable regional

investigation authority.

20

Aviation Safety Investigations – Cooperative, Independent, No-blame and Accountable

ACCOUNTABILITY

A separate, functionally independent accident and incident investigation authority needs to be able

to demonstrate accountability. The accident and incident investigation authority should be open

and transparent about its investigation processes. The precise means of achieving this openness

and transparency in order to provide accountability should be left to the individual States to

determine. However Annex 13 does provide a lead to investigation authorities into accountability

throughout the investigation process. Annex 13 Standard 6.3 instructs States to send the draft

Final Report to States with a material interest for a 60-day review and comment period; a period of

scrutiny. Accountability is further achieved through compliance with Annex 13 Standard 6.5, which

under the heading Release of the Final Report states:

6.5 In the interest of accident prevention, the State conducting the investigation of an accident or incident shall

release the Final Report as soon as possible.

This then leaves the report open to public scrutiny. A Coroner or an appropriate Judicial inquiry

may conduct an enquiry to determine the date, time, place, manner and cause of death. This will

normally include a detailed review of the Final Report. Further, as is the case in Australia, the ATSB

is subject to questioning from parliamentary committees about its investigations and processes.

HOW DOES THE ATSB ‘STACK UP’?

Australia, through the ATSB, has been conducting functionally independent, no-blame and

accountable investigations and has embarked on a significant programme of cooperation with its

regional neighbours for many years. More recently, under a structured program of cooperation with

the Republic of Indonesia titled the ‘Indonesian Transport Safety Assistance Program’ (ITSAP), the

ATSB has been working closely with the National Transportation Safety Committee team through

investigation and training cooperation in Jakarta, as well as in Canberra. Major activities in this

regional cooperation programme have been assistance in the Garuda and AdamAir Boeing 737

accidents that occurred in 2007. Working cooperatively led to the timely release of both Final

Reports and many safety actions being taken by the Indonesian regulator, air traffic services

provider and the airlines.

In an era of massive expansion of air services globally, cooperation with regional neighbouring

States is fundamentally important. This concept may lead to regional accident and incident

authorities being formed throughout the world to ensure the timely and effective use of resources

in the quest of transport safety enhancement. In many areas of regional cooperation, States can

produce economies of scale leading to increased efficiency due to the possibility of sharing and

pooling of human, technical and financial resources. Participating States will also increase their

capacity to develop harmonised regulations adapted to their local environment and in compliance

with SARPs.

The views and opinions expressed in this article reflect those of the author and not necessarily

those of the ASTB or the Australian Government.

21

Journal Aviation Management 2008

REFERENCES

ICAO (2008). ICAO AIG Working Papers, Used with permission of ICAO AIG Secretariat.

ICAO (2006). Safety Oversight Manual and Part B — The Establishment and Management of a Regional Safety

Oversight System (Doc 9734-part B).

ICAO (2001). Annex 13 Aircraft Accident and Incident Investigation, International Standards and Recommended

Practices, Amendment 11, 23 November 2006.

ICAO (2000). Manual of Aircraft Accident and Incident Investigation and Part I — Organisation and Planning (Doc 9756).

TSI Act (2003). Transport Safety Investigation Act (2003), Australian Government.

GASR Implementation Group (2005). Global Aviation Safety Roadmap (GASR).

GASR Implementation Group (2007). Implementing the Global Aviation Safety Roadmap: A Strategic action plan for

future aviation safety developed jointly by ACI, Airbus, Boeing, CANSO, FSF, IATA and IFALPA for ICAO States and

the Industry.

22

ABSTRACT

Aviation Safety

ABSTRACT

Safety management system (SMS) is a buzzword in the industry, and it is a system that will not work without voluntary disclosure of the evidence of risks in the system between operators and regulators. To continue this free disclosure, enforcement actions need to be carefully considered and sometimes waived if the risk factor is addressed promptly and appropriately. This novel concept is difficult for those outside the industry to understand, and political pressures have caused setbacks in the implementation of SMS. This paper discusses issues relating to balancing safety and compliance, and the importance of the operator-regulator relationship.

Balancing Safety and Compliance in the Regulatory Environment

ABOUT THE AUTHOR ABOUT THE AUTHOR

Balancing Safety and Compliance in the Regulatory Environment

Mr William Voss

Mr William Voss is President and CEO of the Flight Safety Foundation. Prior to that, he was Director of the Air Navigation Bureau at the International Civil Aviation Organization (ICAO), and was responsible for the development of major international safety initiatives. Before joining ICAO, Mr Voss spent 23 years at the Federal Aviation Administration (FAA), US, focusing on air traffic management and control. He was responsible for the development of global safety plans and led reform plans to expedite the process in which critical needs are identified and addressed. He is a certified air transport pilot, flight and ground instructor, airframe and power plant mechanic, and a qualified FAA control tower operator. He holds a Bachelor of Science degree in Aviation Maintenance and Management and a Master’s degree in Public Administration.

23

Aviation Safety

Mr William Voss

Flight Safety Foundation

INTRODUCTION

For decades, the aviation industry has been focusing on

the management of compliance. The thinking was simple

– find a problem, write a rule, comply with the rule, and

things will be safe. The idea is too simplistic and too

reactive. Now is an era of safety management that takes a

very different approach.

A lot has been done in the area of safety management

implementation. All over the world, airlines, airports,

regulators and air navigation service providers have

implemented new risk-based, proactive approaches.

However, this poses a problem as the public does not

understand these new emerging safety approaches; they

understood good old fashion simple compliance. They

want to understand why, as an industry, it was decided to

move past the simple concept of compliance, giving rise to

the need to explain these new actions.

THE LIMITS OF REGULATIONS

Without taking into account technical specifications and

recommendations set by the International Civil Aviation

Organization (ICAO), there are 13,000 Standards that

Governments are made to comply with. Adding to that

the technical requirements and recommended practices,

it amounts to approximately 30,000 ICAO Standards and

Recommended Practices (SARPs). The ICAO Council agreed

that it was time to start writing fewer rules. A new approach

had to be adopted.

It is important to remember that the States then have to

promulgate even more regulations and guidance materials

based on these SARPs. Companies that are subject to State

Balancing Safety and Compliance in the Regulatory Environment

24

regulations have to then develop internal regulations procedures that allow them to work within the regulatory environment. These would be things such as detailed procedures, operations manuals and technical guidelines. At the end of the day, the person actually trying to fly the airplane or run the airline is subjected to a dizzying array of thousands of regulations. The number of rules cannot simply increase with the expectations of things to happen. Rules are important but the potential of rules may have already been exhausted.

The first thousand standards were written in the 1940s and 1950s. These were probably very important standards. However, the next thousand standards would probably not be anywhere near as important as the first thousand. There is a point of diminishing returns which had been passed decades ago. For this reason, other approaches must be developed to ensure safety.

Out of necessity, a new approach i.e. safety management based on the management of risk rather than just the management of compliance, was developed for today. That leaves two approaches based on different philosophies, and these approaches have to be balanced.

The reality is that the balance that needs to be achieved is for the aviation professionals alone to decide. The reality is that much of what is done in the system is being driven by the public.

THE ROLES OF THE PUBLIC

The examples below discuss the big aviation changes in international aviation systems over the last five years.

The European Blacklist has certainly grabbed a lot of headlines. The establishment of the list came about when the public around the world saw numerous accidents happening in the summer of 2005. These made the public lose their trust in the aviation industry. It was particularly the case in Europe, where many had lost friends and family in foreign crashes. A tremendous amount of pressure was placed on the Director Generals and the Ministries to take action. The reality is that one of the biggest changes in the landscape of international aviation safety was not driven by the aviation professionals, but by the public.

Here is another example. After over 12 years of debate between the US National Transportation Board and Federal Aviation Administration (FAA), FAA announced its intention to issue a rule requiring the central fuel tanks in aircraft to be filled with inert gas in order to eliminate the chance of fuel tank explosions such as that which occurred in the Trans World Airline Flight 800. From the perspective of aviation safety risk management, it is hard to justify the high cost of that change.

Over the last 12 years, the FAA had issued countless directives that eliminated ignition sources and dramatically reduced the risks of that event occurring again. Comparing the price tag of the system and the resistible risk after the various procedure changes have been made, the FAA could say that they reduced the risk to nearly zero. However, this was not good enough for the public’s eye. There had to be reassurance and the risk had to be driven to zero no matter what the cost. This is an example of an expensive policy that is not based on data or analysis, but on the public’s need to feel reassured, which will affect aviation for years.

Balancing Safety and Compliance in the Regulatory Environment

25

Journal Aviation Management 2008

Another point would be the concept of collaboration. Collaboration between the industry and the government is central to the concept of system safety. It is clearly called out in ICAO documentation. In this regard, ICAO is not alone. The Global Aviation Safety Roadmap, Airport Council International, Airbus, Boeing, Civil Air Navigation Services Organisation, Flight Safety Foundation and the International Air Transport Association all clearly call out for renewed cooperation in safety between the government and the industry.

However, caution needs to be exercised. The concept of partnership, which the aviation system embraces broadly, can be viewed skeptically by the flying public. The public is very used to the notion that when the government and the industry collaborate, there is a tendency for the government and the industry to be corrupt. This leads to another problem – the industry was doing a lot of things right and lives were saved – but there is a need to reflect on how these actions are perceived and viewed by the outside world. If the power of the public is not considered, the ability to implement new safety changes and ultimately saving lives may be lost.

THE REALITY OF WHAT IS AT STAKE

To understand what is at stake, these new ideas including collaboration with industry and the proactive management of risk must be evaluated. These concepts started seeing broad implementation in the mid to late 1990s. While these practices were not adopted universally, they were clearly adopted by the airlines and regulators that transported the vast majority of the airline passengers. To put this in perspective, compare the accident rates internationally in 1996 when these ideas were new, and in 2006 when these ideas were well implemented. By taking the accident rates in 1996 and multiplying it by the number of flights in 2006, it worked out to about 30 potential major accidents. Yet, the actual number of accidents in 2006 was 11. That worked out to 19 airplanes full of people that did not crash.

The public thinks that governing bodies are going soft on the rules and that there is too much coziness between the government and the industry. The results however seem to suggest that this approach is saving lives. Try visualising the number of lives being saved. Imagine standing in a balcony overlooking a customs area and the customs shutting down while 19 planes arrive. Down in the crowded area, imagine baby strollers, businessmen and families on holiday. Imagine looking into that sea of people and seeing your own children’s faces looking back at you. This is what is at stake, and if this not communicated effectively to the public and politicians, there could be a terrible price to pay.

COMPLIANCE VERSUS SAFETY MANAGEMENT

This leads back to the balance that must be struck between the worlds of compliance and safety. Once this balance is struck, the public must understand it. The first step is to understand how different the philosophy of compliance is from the concept of safety management.

In the world of compliance, all rules are equal. In the world of safety management, some rules are vital, and some are nearly irrelevant. In safety management, the focus is on things that are most likely to cause risk whilst compliance focuses on complying to every rule even if they do not represent risk.

26

The other assumption in the world of compliance is that, if all rules are complied with, the risk of

an accident is zero. In safety management, it is known that the risk is never zero, but sometimes

it is acceptably low. This is where the public and politicians are lost. They want to be assured that

the possibility of an accident is zero, so they keep writing rules.

Another difference in the world of compliance is the notion that safety is supported by punishment.

The idea is to find the person who did not comply with the rule and punish him as an example.

Safety management philosophy is somewhat different. Safety is ensured when information flows

freely. Safety management acts on information on risks and incidents that would inform what the

next accident will be and how to prevent it. The safety management assumption is that people

will make mistakes even if punishment is mete out. The important thing is to anticipate the next

mistake that will be made.

Another assumption of the compliance model is that more inspections and more “cops on the

beat” will yield more safety. The logic is that more inspections equal more enforcement; more

enforcement equals more compliance; more compliance guarantees safety. In contrast, safety

management is not about more inspections, it is about making sure safety systems within an

airline work and making sure what is inspected is that which presents the most risk.

Looking at the philosophy underpinning the two approaches, it is easy to guess who understands

and supports which approach. The approach of compliance resonates with the public, politicians

and prosecutors. Compliance is easy to understand, provides reassurances, and resonates with

those who write laws and enforce them. On the other hand, only safety professionals understand

how safety management works and this notion has to change.

THE REALITY OF BALANCING THE TWO CONCEPTS

The good news is that compliance and safety management do not have to be at odds. They can

indeed complement each other. One such example is Canada.

Canada is a leader in safety management implementation. Everything they do in Canada is based

on risk. They deploy inspectors to the most serious problems. A number of years ago, the regulator

in Canada was having trouble with a low cost carrier. There were numerous incidents and reports

regarding this particular operator. This operator had not implemented safety management and was

barely dealing with the basics of operations. Fortunately, the regulator had implemented safety

management with many other carriers, including Air Canada. The regulator was able to look at

these mature airlines and determine that they could safely cut down on surveillance resources and

redirect these resources to the low cost carrier that was presenting more risk. The regulator took a

compliance-based approach to this problematic low cost carrier. Eventually this airline quietly went

into bankruptcy. The safety management approach that was appropriate for the more mature and

sophisticated airlines, actually freed up inspectors to deal with the more marginal carrier.

Balancing Safety and Compliance in the Regulatory Environment

27

Journal Aviation Management 2008

WHAT CAN GO WRONG

When the public and political world feel there is an imbalance between compliance and safety

management, things can go very wrong. The recent, very public hearing regarding the safety

oversight practices of the FAA is a very powerful example.

The US sets the highest record for safety in the history of aviation over the past five years. This

is remarkable when it is considered that all but two of the major airlines in the US were going

through bankruptcy at that time.

Yet, in recent hearings, this fact did not matter at all. The relationship between the FAA and the

industry was called into question. In spite of a remarkable safety record, politicians called into

question the appropriateness of the relationship between the government and the industry. They

also questioned the emphasis on risk management, and how some compliance issues could be

dismissed. This caused a backlash in the regulatory process and ultimately the travel of more that

300,000 passengers was disrupted while compliance issues were debated.

This type of intervention from the politicians and the public is not limited to the US. A similar

incident is taking place in Canada. The regulator in Canada is proposing safety management

legislation. It is being characterised by the press as “industry self-regulation”. As the newspaper

clips showed, the attacks on the regulator have been vicious. They call for vigorous enforcement

and compliance, and they dismiss collaboration and the exchange of safety information. Advocating

safety improvements without the understanding of the press, public and the politicians, is a

dangerous business.

Another area where things could go wrong with the debate between safety philosophies is the

courtroom. All over the world, it is seen that prosecutors are aggressively pursuing charges against

aviation personnel who had made mistakes. They are acting on the assumptions of a compliance

model, i.e. that punishment will prevent error. Recent events include the case of the Garuda crash,

the Concorde crash and the runway collision in Milan, Italy amongst many others.

The problem with this is that the philosophy of punishment runs against the philosophy of

information exchange that underlies safety management. The more cases are prosecuted, the

less likely the chances of voluntary disclosure of information that would allow the prediction and

prevention of accidents.

28

CONCLUSION

The aviation industry has to deal with two philosophies that can be conflicting if they are not

deliberately reconciled and balanced. It is not enough for the aviation industry to come to grips

with this. The audience is much bigger. Once the balance is struck, it must be communicated to

the politicians, media, public and prosecutors. If not, the balance will be rejected and focus will

swing back to old rule-based systems of compliance that we have all outgrown. That would take

the industry back in time with alarming accident rates. Everyone needs to reach a consensus in

the community on the right regulatory approach, then reach out to communicate it. It has to be

done – lives are at stake.

This paper was adapted from the lecture given by Mr William Voss, at the inaugural SAA Aviation

Insight Series on 31 July 2008

ABSTRACT

Aviation Security

Aviation security is a critical underpinning factor in the stability and growth of the global civil aviation industry. However, developing a set of aviation security standards and adopting various aviation security measures alone is insufficient to ensure that a sound security system is applied by airlines, airports, air cargo agents, and other relevant stakeholders. To ensure that aviation security standards are adhered to, reviewed and kept relevant, and that security measures are practical and effective, it is useful for stakeholders to establish and maintain an aviation security audit and compliance regime. An aviation security audit and compliance regime would help all stakeholders collaborate and coordinate with one another, as well as provide a reality check on the standards and measures in force to identify gaps, areas for improvements and areas that are adequately enforced.

It is also useful to consider the “six P’s” in an aviation security audit and compliance regime, namely (a) Patronage, (b) People, (c) Processes, (d) Preparation (e) Post-mortem and (f ) Perseverance. These guiding principles should help stakeholders to develop and sustain a meaningful and effective aviation security audit and compliance regime that would be adaptable to the changing global industry and security environment, and allow for better understanding and integration of efforts amongst all players responsible for effecting aviation security measures.

Benefits of Aviation Security Audits and Quality Control Systems

ABOUT THE AUTHOR

Mr Bernard Lim

Mr Bernard Lim is Director for International Relations and Security with the Ministry of Transport, Singapore. His key responsibilities include formulating and managing policy matters concerning international relations, transport security and transport emergency preparedness in Singapore. He is also the Vice-Chairman of the Asia-Pacific Economic Co-operation Aviation Security Experts Sub-Group, and member of the International Civil Aviation Organization Aviation Security Panel. Mr Lim holds a Master’s Degree in Public Administration from the University of Liverpool, UK, and was trained in crisis management at the Emergency Planning College in York, UK and in Leadership at the John. F. Kennedy School of Government, Harvard University. He was conferred the Airport Police Commander’s Award in 2000, the Singapore Armed Forces National Service Medal in 2001, the Ministry of Home Affairs’ Emergency Preparedness Commendation Award in 2002 and the Minister’s Innovation Distinguished Award in 2007.

Benefits of AviationSecurity Audits and Quality Control Systems

29

Aviation Security

Mr Bernard Lim

Ministry of Transport, Singapore

Benefits of Aviation Security Audits and Quality Control Systems

INTRODUCTION

The global civil aviation industry comprises a multitude of systems and sub-systems that involve regulations, processes, activities, infrastructure and facilities, which enable the carriage of people and goods across the world by air. Annually, some five billion passengers and close to 90 million metric tonnes of cargo move around the world by air.

The success and continued development of the global civil aviation industry rests on many players. These include regulators, airlines, airport operators, ground handling agents, suppliers, ground transport companies, air freight companies, catering companies and other stakeholders. Together, these stakeholders collaborate and coordinate with one another to ensure that air passengers and goods are moved safely, efficiently, and in a cost-effective and timely manner.

AVIATION SECURITY

There are many factors underpinning the stability and growth of the global civil aviation industry. A good level of aviation security is one of them. Aviation security encompasses a host of policies, legislation, national, airport and airline security frameworks and security programmes, as well as measures and procedures. Aviation security measures are needed to ensure that airport and airline operations are secure against the threats from unlawful interference that threaten to disrupt civil aviation operations and endanger lives of passengers and air crew. The terrorist attacks of 11 September 2001 where civilian aircraft were used as weapons of mass destruction further attest the need for effective aviation security measures across the entire civil aviation system.

30

AVIATION SECURITY AUDITS AND QUALITY CONTROL

To that extent, stakeholders have implemented various security measures across airline, airport

and airfreight operations. This is to achieve a level of security that is assessed to be reasonable

enough to protect their operations and minimise the threat from terrorist attacks. However,

implementing layers after layers of security measures is not necessarily the best way to achieve an

effective and practical level of security, be it for airline, airport, airfreight or other of civil aviation

operations. Rather, all stakeholders should periodically conduct audits to assess the effectiveness

of their existing aviation security plans, measures and procedures. As a basic approach, audit

checks are useful in helping stakeholders assess if their existing security measures comply with

the standards stakeholders have benchmarked to meet.

Aviation security audits and compliance regimes are not new. Regulators and the industry have

been undertaking audit checks for many years. Following the terrorist attacks in the US on 11

September 2001, the International Civil Aviation Organization (ICAO) established the ICAO Universal

Aviation Security Audit Programme (USAP). This programme involved the mandatory audit of all

190 ICAO Contracting States on their compliance with the aviation security standards under Annex

17 to the Chicago Convention. It also looked at measures taken by Contracting States to adopt or

achieve the objectives of the recommended practices for aviation security contained in Annex 17.

The first cycle of the ICAO USAP, which ran for five years from 2002 to 2007, has been completed.

ICAO continues to conduct follow-on audits for a number of Contracting States, while some others

have commenced their second cycle of ICAO USAP audits in 2008.

THE USEFULNESS OF AVIATION SECURITY AUDITS

Aviation security audits and compliance regimes are useful tools to help States and stakeholders

obtain an assessment of where they stand in relation to the standards that they are measured

against. Such audit exercises can also help regulators and stakeholders to identify gaps and areas

where security measures are lacking. These audit exercises further help to point out changes that

are needed in security measures and processes, and recognise those areas that are adequately

met. Audit checks provide a “health check” that would determine the overall prevailing level of

security in the State or for a specific civil aviation facility or organisation.

KEY FACTORS TO EFFECTIVE AVIATION SECURITY AUDITS

It can be argued that different stakeholders hold different perspectives and approaches towards

aviation security audits. Some may view aviation security audit exercises as constructive means

toward improving the level of security standards and measures in place. Others, on the other

hand, may view aviation security audits as an unnecessary hassle that consumes time and

resources. Nonetheless, at the end of each audit check, all stakeholders would like to hear that

their organisation has the necessary measures and that they had “passed” the audit checks with

flying colours.

Benefits of Aviation Security Audits and Quality Control Systems

31

Journal Aviation Management 2008

But the more important outcome of each aviation security audit exercise is not to simply know that an organisation had “done well”. Rather, the true value and desired outcome of aviation security audit exercises is to learn what needs to be done in order to implement the necessary aviation security measures effectively, close off any gaps, and engage in forward planning to deal with new security challenges that lie ahead. In order for any aviation security audit exercise to be meaningful, regulators and stakeholders could consider adopting the six “P’s” – Patronage, Processes, People, Preparation, Post-Mortem and Perseverance.

Patronage

In any organisation, the patronage of its top leaders is critical for any initiative to take off and to develop. With the patronage of the top management, there can be a strong assurance of commitment, effort and resources accorded to the whole aviation security audit effort. Periodic updates and reports to the top management on the audit preparations, outcome and follow-up actions will not only provide them with an accurate perspective of where the organisation stands in its compliance of aviation security standards, but also help identify areas that need to be addressed, including resources needed, so that decisions can be taken in directing the follow-on actions towards improving the aviation security measures.. Patronage is necessary at all levels, from the national level down to the individual stakeholder level. With strong commitment at all levels, all stakeholders will be able to work effectively towards achieving the best possible and practical outcomes to enhance the level of aviation security within the State.

Processes

As with any audit regime, it is necessary for regulators and stakeholders to establish a set of aviation security compliance regimes. Annex 17 to the Chicago Convention requires all Contracting States to establish a National Civil Aviation Security Quality Control Programme (NCASQCP) aimed at meeting the aviation security standards and recommended practices stipulated in Annex 17. At the minimum, each Contracting State should establish an NCASQCP. In addition, it is desirable that regulators and stakeholders establish other local aviation security audit programmes designed to meet the State’s national aviation security standards and requirements, as well as security requirements assessed as necessary for the individual organisation’s business and operations. For instance, the fuel providers at airports and the airline catering companies would have a set of common security objectives that would be in line with the State’s National Civil Aviation Security Programme and Airport Security Programme. In addition, these companies would have security requirements unique to their individual business considerations of providing fuel to airlines at the airport, and providing in-flight catering service.

Establishing clear and easily understandable aviation security compliance processes are useful. These processes should serve as guidance to regulators and stakeholders stipulating the objectives of the aviation security audit regimes, areas of focus, and recommended measures, processes and procedures which stakeholders can adopt to achieve the intended outcomes. These processes will also synchronise the work of the auditors and the actions by those audited. This would help minimise grey areas, ambiguities, and divergence in interpretations of the security objectives and intended outcomes. Follow-on actions after each audit exercise would also be much simpler with such a clear set of processes which stakeholders can refer to.

32

People

People are definitely the most important factor in successfully establishing and carrying out any aviation security audit programmes. The support of top managers and all personnel down to the rank and file is critical for any aviation security audit exercise to be meaningfully carried out. Aviation security regulators should have a team of auditors who are trained and knowledgeable in civil aviation operations, facilitation and procedures, and who possess the adequate expertise in aviation security requirements. Stakeholders (ie. those audited) should also have trained personnel who are familiar with the security objectives and standards, and a positive mindset and enthusiastic attitude in helping their organisation establish the necessary measures, initiatives and preparations to comply with the necessary aviation security requirements.

People are critical in many aspects. It is people that ensure that aviation security procedures are established and followed. It is people who maintain security equipment and infrastructure regularly and adequately to ensure that the equipment functions properly at all times. It is people who determine how open and agreeable stakeholders are to audit findings and recommendations, and give the support for follow-up actions to be taken. People can be argued as the start and end of the whole aviation security audit process, and the top management of all stakeholders must be willing to take the responsibility for the aviation security audit of their organisation and its

compliance with the aviation security standards as required.

Preparations

It is doubtful that any regulator or organisation can “breeze through” an aviation security audit exercise without adequate preparation. Preparation for audit exercises is necessary. Good preparation requires an investment in terms of time, commitment and resources. Preparation for aviation security audit exercises should start as early as possible. A dedicated core team of officers should be assigned the responsibility for all preparatory actions, and to help the organisation through the audit exercise. Preparation should involve all stakeholders concerned. They should be clearly informed of the purpose of the audit exercise, the security objectives to be assessed and met, and the desired outcomes to be achieved. A detailed audit preparatory programme should be developed mapping out the roles and responsibilities of all stakeholders concerned (eg. airport operator, security service providers, catering companies, fuel suppliers, immigration authority, airlines, ground handling agents, etc.). A preparatory committee comprising senior ranking officers from the relevant organisations should be established to oversee and monitor the preparation work for the audit exercise.

For national level audits, key milestones should be reported periodically to the National Civil Aviation Security Committee (NCASC) for policy guidance and decisions. For local or individual organisation audit preparations, key information and feedback should be given to senior management for their knowledge and for decision making. Pre-audit dry runs and rehearsals should be held with sufficient time to the actual audit exercise to allow organisations and individuals to iron out any grey areas, establish clear communication links and coordinate actions on the ground. A pre-audit exercise meeting should be held between the auditors and those who are audited so that clear ground rules and process steps are established to ensure smooth execution of the audit exercise.

Benefits of Aviation Security Audits and Quality Control Systems

33

Journal Aviation Management 2008

Post-Mortem

A post-mortem of each aviation security audit exercise is indeed useful. The purpose of post-

mortems should not be to witch hunt and pin blame on organisations or individuals for areas

that were found to be inadequate. On the other hand, post-mortems should also not be turned

into an exercise to heap praises and produce a glowing report of each stakeholder. Instead, clear

objectives and purpose of each post-mortem meeting should be established. Essentially, the aim

of such aviation security audit post-mortem meetings should be to objectively identify areas that

need to be improved on, be it in the area of aviation security plans, procedures, coordination or

equipment and infrastructure. These post-mortem discussions should also serve as a platform

for civil aviation stakeholders to work out corrective actions or plans to practically address the

security weaknesses identified. The approach should be forward moving towards improving the

level of security measures from the prevailing state.

Post-mortem exercises are also useful for regulators and stakeholders to review whether any

security standard in the National Civil Aviation Security Programme, Airport Security Programme,

Operator Security Programme, National Civil Aviation Security Training Programme, or any other

security regimes, are still relevant or require adjustment. As the civil aviation industry is a globally

dynamic industry where airline and airport operations are also constantly undergoing change

due to improvements in technology, new processes and improved facilitation needs, aviation

security standards should also be periodically reviewed to ensure relevance and effectiveness to

regulators, stakeholders and industry. Post-mortem meetings should be held at various levels,

including between auditor and those audited, amongst stakeholders who have been audited, and

within each individual organisation after the aviation security audit exercise. This is to understand

the strengths and weaknesses identified, map out the areas for improvements, and disseminate

the findings and recommended actions to all relevant personnel and to the management.

Perseverance

Finally, perseverance is an important factor for regulators and stakeholders to move on after each

aviation security audit exercise. It is important that organisations, from the top management down

to ground personnel, acknowledge the need to persevere on to address and overcome the security

gaps that had been identified, and to keep up those security measures and processes that were

found to be sound. Regulators and stakeholders should aim to avoid the trap of complacency,

where after each aviation security audit exercise, the findings are just noted with no concerted

effort to follow up to address the weaknesses that had been identified. Those security measures

found to be adequate should also not be taken for granted. Effort should continue to ensure that

the relevant personnel are trained, skills and knowledge updated, equipment maintained, and

procedures and processes periodically reviewed to check on their relevance and effectiveness over

time, especially if there are changes to factors like geography, technology and business operations.

Perseverance will also help sustain a positive mindset to plan for and pursue the acquisition of

needed resources and equipment to implement the desired aviation security measures that were

assessed through the audit exercise to be necessary, cost-effective and practical, especially in

situations where those resources are currently lacking.

34

SINGAPORE’S EXPERIENCE

Singapore was audited by ICAO under the ICAO USAP in November 2006. Singapore adopted

the six “P’s” amongst its approaches in preparing for and following up on the audit exercise.

To begin with, Singapore’s audit preparations were given top management and policy oversight

by the NCASC, chaired by the Deputy Secretary from the Singapore Ministry of Transport (MOT).

Periodic updates on the progress of the audit preparations were submitted to the Chairman of the

NCASC and key policy decisions were taken and approved, as relevant. The senior management

from the other Singapore Government agencies, such as the Civil Aviation Authority of Singapore

(CAAS), Singapore Police Force (SPF), Immigration and Checkpoints Authority (ICA), and industry

stakeholders (eg. the national carriers, ground handling agents, catering companies, security

service providers, concessionaires, etc.) were also kept informed of the audit preparations, roles

and involvement of the various agencies. Senior officials from the Singapore Government agencies

and airport community also participated actively throughout the audit exercise.

At the operational level, Singapore formed an aviation security audit task force led by the Airport

Police Division (APD) from the SPF, with members representing the various government organisations

and industry. The task force comprised a core team of personnel dedicated to overseeing the

preparatory work for the audit. Senior policy and operational staff from the various agencies were

also engaged in the discussions to ensure that the task force was adequately supported by people

with the relevant expertise and experience. Refresher training was given to officers as needed, and

training was provided to new officers who were involved in the audit exercise for the first time.

The aviation security audit task force ensured that all stakeholders were familiar with the aviation

security requirements as stipulated in the National Civil Aviation Security Programme, Airport

Security Programme, Operator Security Programme, and others as relevant. Agencies and individuals

also read through the procedures and processes for the ICAO USAP exercise to ensure that they

were familiar with how the audit exercise would be conducted and what was required from them.

This was useful in helping to optimise the time allocated for the audit exercise effectively.

The task force was formed at least one year ahead to prepare for the audit. Aside from establishing

the roles and responsibilities of agencies and individuals, the task force also reviewed the relevant

national civil aviation security programmes and Standard Operating Procedures (SOPs). Pre-

audit checks were carried out to ensure that procedures and measures were updated and clearly

understood by airport personnel responsible for executing these measures.

Following the end of the ICAO USAP audit of Singapore, the relevant Singapore agencies held in-

depth post-audit discussions on the findings and recommendations. These were followed up and

monitored by the APD and CAAS to ensure that the necessary corrective actions were undertaken.

In addition, the agencies took with them useful lessons from the audit exercise to conduct further

reviews of their own organisation SOPs and aviation security measures as they deemed relevant.

Benefits of Aviation Security Audits and Quality Control Systems

35

Journal Aviation Management 2008

Although the ICAO USAP audit of Singapore was held in 2006, the NCASC, MOT, SPF and CAAS continue

to monitor aviation security measures and procedures that could do with further improvement,

even if these measures were already in compliance with the standards and recommended practices

of Annex 17. In some cases, these could require investment in resources, equipment and training,

while in others, it could be a refinement to existing policies and procedures. Nonetheless, the

approach that has been adopted is one where, at both the national level and at the individual

organisation level, all parties would strive to enhance and improve their respective aviation security

measures in a practical and cost-effective manner that would meet the desired security objectives,

and balanced with the needs of facilitation, service and operations.

CONCLUSION

Aviation security audit exercises and compliance regimes are certainly useful in helping States

and industry players measure up to industry standards and practices to enhance the security

of their operations for the air travellers. In addition, aviation security audit exercises provide

all stakeholders with a unique opportunity to understand each other’s objectives, concerns and

business needs better. This would allow for better collaboration and coordination not only during

the audit exercise itself, but even thereafter on a day-to-day basis, where stakeholders can better

cooperate with each other to meet the common desired aviation security outcomes. Such aviation

security audit exercises also provide opportunities for networking and build closer people-to-

people relations amongst regulators and stakeholders. These relationships are certainly valuable

both within and outside the audit cycles.

Finally, aviation security audit exercises provide a very good reality check for all organisations

concerned. This will enable them to review and refine their aviation security approaches and more

often than not, lead them to adjust and adopt new and more cost-effective ways of carrying out

aviation security measures that best supports and enhances their business operations.

36

ABSTRACT

Aircraft Accident Investigation

In recent years, a great deal of emphasis has been placed on the role of safety culture in global aviation operations, particularly as part of an established safety management system. However, the way in which safety culture is both measured and managed is still the subject of much discussion. Furthermore, the investigation of safety culture following an accident adds further levels of complexity and potential bias to the task. This paper will discuss some of the issues and potential pitfalls surrounding the definition, measurement and investigation of safety culture and also examine the role of ‘Moments of Truth’ and the effect they have on both internal and external perceptions of safety culture.

The Role of Safety Culture in Aircraft Accidents

ABOUT THE AUTHOR ABOUT THE AUTHOR

Professor Graham Braithwaite

Professor Graham Braithwaite is Head of the Department of Air Transport and Director of the Safety and Accident Investigation Centre at Cranfield University, UK. A Fellow of the Royal Aeronautical Society and Member of the International Society of Air Safety Investigators, Prof Braithwaite has led the development and delivery of investigation, human factors and safety management courses for a range of external clients. He has also consulted extensively in safety and human factors matters. His research interests are in accident and incident investigation, human factors, safety management and the influence of culture on safety. Prof Braithwaite holds a Bachelor of Science (Hons) in Transport Management and Planning as well as a PhD in Aviation Safety Management from Loughborough University, UK.

The Role of Safety Culture in Aircraft Accidents

37

Aircraft Accident Investigation

Professor Graham Braithwaite

Cranfield University, UK

INTRODUCTION

With the publication of the Safety Management Manual in

2006, the International Civil Aviation Organization (ICAO)

signaled its intent that member States should require

operators to establish a formal safety management system

(SMS) by 1 January 2009. As the date approaches, a flurry

of activity is apparent across the industry. Whilst many of

the components that form an SMS are well established,

it is their interaction within a well designed system that

promises a tangible improvement in safety. Ultimately, the

facilitation of an SMS depends on the shared beliefs and

attitudes (culture) of the organisation if it is to go beyond

the theoretical framework.

Although much has been written about what safety culture

should look like, understanding its role in the causation

of incidents and accidents is harder to define. The biases

and traps that may affect investigators, analysts or other

interested parties can give a distorted view of the role of

safety culture and may be a factor in unwittingly shifting

blame from individuals to their managers. If safety culture

is to evolve positively, the industry needs to understand

not only where it is aiming, but how it reacts to apparent

failures of safety performance.

SAFETY CULTURE

The term safety culture first appeared after the catastrophic

reactor fire at Chernobyl nuclear power station located in

the Soviet Union near Pripyat, Ukraine in 1986. Since then,

the term has been widely discussed by the industry and

academia alike, although as Reason (1997) points out,

The Role of Safety Culture in Aircraft Accidents

38

The Role of Safety Culture in Aircraft Accidents

“few phrases are so widely used yet so hard to define as safety culture”. Whilst the term itself is

just over 20 years old, the role of an organisation’s way of doing things as a factor in accidents

has been known for rather longer.

The Royal Commission’s investigation into the 1979 Mount Erebus disaster provided a pivotal

role in changing the way accident investigation involving complex socio-technical systems was

conducted. Viewed in the context of modern safety thinking, the focus on organisational factors

is unremarkable. However, at the time, the Commissioner went far deeper than the technical

investigation did to examine the organisational and cultural factors within the operator and

regulator. The Commissioner experienced a strong political backlash when his findings were

released, not least because of the difficult conclusions he made about the honesty of the airline’s

senior management, summarising the evidence he had heard from them as “…an orchestrated

litany of lies” (Mahon, 1981).

Erebus was later cited in texts such as Beyond Aviation Human Factors (Maurino, Reason, Johnston

and Lee, 1995) and the ICAO Human Factors Digest No. 10 (ICAO, 1993) as an example of the way

in which actions taken close to the moment of occurrence had in many cases been seeded or

compounded by events, conditions or the way of working months or years before. With the work of

system safety specialists such as Perrow (1996), Rasmussen (1983 etc.) and Reason (1990, 1997b

etc.), the appreciation of organisational failings has grown considerably.

The fatal take-off accident at Dryden, Ontario, Canada in 1989 further highlighted the influence

of the wider safety system. The Commission of Inquiry examined factors from active failures on

the day through to deficiencies in the airline’s operation and the wider regulatory environment.

Concluding that the accident “...was a result of a failure in the air transport system”, Moshansky

(1992) highlighted systemic issues in a way that few technical investigations had been able to

do previously. A serious incident in the UK where the pilot of a BAC1-11 was nearly sucked out of

his aircraft after the windscreen failed allowed UK Air Accidents Investigation Branch (AAIB, 1992)

Inspectors to consider not just the errors of an individual (the shift supervisor who managed to fit

incorrectly-sized bolts to the aircraft), but also the processes and practices that should have been

in place to defend against the inevitability of human error.

These three accidents are well documented examples in which “the way of doing things”

compounded individual failures, errors and violations. However, as the enthusiasm for SMS gathers

pace, the question remains, how can we identify a failing safety culture prior to an accident, or

indeed diagnose the role of safety culture in an incident or accident?

MEASURING SAFETY CULTURE

Rod Eddington, former CEO of Ansett Australia and British Airways, often reminded his staff “…if

you can’t measure it, you can’t manage it”. In terms of safety culture, things are no different; the

transition from one level of safety culture to the next needs some sort of measurement. Hudson

(2001) builds on the work of Ron Westrum in describing the evolution of safety culture from

“pathological organisations” (who cares as long as we’re not caught?) to the ideal “generative

39

Journal Aviation Management 2008

culture” (safety is how we do business around here). Such stages of evolution are useful markers,

but identifying where an organisation finds itself on the scale is a little harder. The American

Institute of Chemical Engineers’ (2005) definition highlights why measurement is difficult: “Safety

culture is how the organisation behaves when no one is watching”. It is also conceivable that the

‘observer effect’ will modify the very thing being measured.

A number of researchers have investigated the measurement of safety culture with seminal work

published by both Zohar (1980) and Reason (1997b). The methods that were generally employed

included questionnaire-based techniques to score the organisation in a number of safety dimensions

according to the model being employed with Zohar correlating these dimensions against the

effectiveness of safety programmes within industrial organisations. However, questions exist as

to how well this industrial model relates to the aviation industry, although work has also been

carried out into specific safety culture surveys for aviation operations (Gibbons, von Thaden and

Wiegmann 2004).

The problem is compounded by a lack of data in the aviation industry and the, albeit desirable,

lack of accidents from which to obtain it. Recent investigation trends in the aviation industry have

seen the increased use of incidents as safety indicators and pre-emptors in an attempt to address

the lack of data and this has obvious parallels with Zohar’s later work (2003) to enhance both

modeling and measurement through the use of “micro accidents”.

One failure of the questionnaire-based approach is that it lacks any measure of observable

behaviours. Whilst some researchers highlight the relative accuracy of this approach and its ability

to capture change within an organisation, this presents a different challenge in accident or incident

investigations where pre-existing data may not be available and where the effect of the accident

on perceptions within the organisation may preclude any meaningful post-accident measurements.

The advantage of measuring observable behaviours is that awareness of the measurement criteria

will tend to improve those aspects; the disadvantage is that the same awareness will tend to

improve only those aspects.

When an incident or accident occurs, a questionnaire approach is unlikely to be appropriate, not

least because the event itself may have changed the perception of culture, or at least people’s

recollection of it prior to the event. This is part of what Reason refers to as outcome knowledge.

Just as all other aspects of investigation need multiple evidence sources and inductive reasoning

to corroborate any conclusions, so evidence of the effect of culture needs to be collected. One

way to achieve this is to test the organisation against established ideals for a safety culture (see

Reason, 1997b).

IDEALS FOR SAFETY CULTURE

An informed culture comprehends the hazards that it faces and the risk that each of them presents.

Yet, organisations cannot anticipate all of the hazards it is likely to face or accurately predict the

magnitude of all risks. Far from being a fatalistic attitude, this is an acknowledgement that the way

in which conditions and failures combine within a complex socio-technical system cannot easily

40

The Role of Safety Culture in Aircraft Accidents

be mapped, even in mature organisations. Aircraft accidents are rare events and there are many

examples where those with complex causality are the ones that slip through the safety net – the

so-called “impossible accidents” (Wagenaar and Groeneweg, 1987).

Where a no-blame approach was once advocated by many in the industry, there is now strong support

for just culture to be at the heart of an SMS. It remains appropriate for accident investigations

conducted through processes such as those found in the ICAO Annex (Aircraft Accident and Incident

Investigation) to be no-blame in order to preserve the integrity and independence of the process.

However, modern thinking on SMS highlights the need to make a clear distinction between what

is acceptable behaviour and what is not. Where resources and training support the employee to

make the right decision, a just culture will treat genuinely unintentional errors quite differently

from wilful violations. Indeed, when an incident or accident occurs, employees will look for fair

treatment of themselves and their colleagues, or behaviours will start to modify accordingly.

Misapplication of either no-blame or just culture will undermine the core value of a mature safety

culture – trust.

A reporting culture wants to know what is happening within the organisation – both good and

bad. Negative feedback is problematic, but a complete absence is arguably worse. In the airline

environment where serious incidents are rare, there can be a natural reluctance to be the bearer of

bad news. Following one incident, the accident investigation agency called the airline to say that

they thought it was unusual that their safety manager had not attended the site. For the safety

manager, this was the first news of an incident that had occurred two days previously that no one

had wanted to ‘trouble him’ with. When reviewing the role of reporting following an occurrence,

the investigator must consider whether the message was able to get through, whether it was

welcomed, or whether its presence was indicative that a problem had been identified, but not

dealt with.

A learning or proactive culture is one that recognises that incidents, near-misses and voluntary

reports can provide vital lessons before the onset of an accident. Indeed, there is a process in

place to collate and do something with the information. All too often, the collection of data has

become the focus and, with limited resources, there is little time to do anything with it other than

present trend data. Several options exist for safety promotion, ranging from publications and

presentations to training design and procedural changes. However, it should be borne in mind that

no safety improvements can exist in isolation from the financial health of an organisation. Budgets

are not limitless and choices need to be made in order to prioritise initiatives.

When an accident occurs, it is all too easy for digruntled employees, or perhaps those who

have been affected, to point to missed opportunities for the organisation to learn. However, it

is possible that the decision that was made at the time was the best one, based on available

evidence. A learning culture tries to understand the context of failures. In other words, as Dekker

(2002) remarks, “the point of an investigation is not to find where people went wrong. It is to

understand why their assessments and actions made sense at the time”.

41

Journal Aviation Management 2008

Finally, a flexible culture is adaptable to evolving threats and crises. It is this aspect that can often be overlooked when reactive investigations focus on what went wrong, rather than looking for things that reduced the potential consequences of an event. Whilst safety policies, processes and responsibilities need to be defined clearly as part of an SMS, the way in which an organisation responds to new situations is perhaps the greatest test of a safety culture. Encompassing all of the preceding elements, the ability to trap or mitigate against the impossible accident is the real test.

INTERPRETING SAFETY CULTURE

Mandating that organisations implement an SMS will not guarantee a sound safety culture. Regulators are faced with the unenviable task of attempting to measure and assess compliance using elements of a system that are not easy to measure, especially after an event. Although ICAO is clear that the intent of SMS is not something that can be achieved through a ‘tick in the box’ solution, the challenge of establishing what to measure and how to do it remains. ICAO (2006) acknowledges that “safety culture is… difficult to measure, especially when the principal criterion for measuring safety is the absence of accidents and incidents”. Does this mean that the occurrence of an accident suggests a poor safety culture?

Culture is easily misinterpreted, especially if it crosses organisational, professional or national boundaries. Spoken and body language, etiquette and customs are all examples of the variables that can be reflected across the culture of an organisation. Different combinations of cultural traits can be assembled to produce the same successful outcome – for example, a culture where questioning of authority does not come easily, can be balanced with strict adherence to standard operating procedures which include cross-checking.

The interpretation of data from certain elements of an SMS needs care to avoid false generalisations or false correlations. For example, an increase in incident reports may be symptomatic of either an increase in incidents or perhaps a greater willingness to report, or increased ease of reporting. Similarly, the operational requirements or conditions placed upon a certain group may yield results which can be misinterpreted. In the case of one major airline, the B737 fleet appeared to yield a higher proportion of unstable or rushed approaches than the other aircraft types. Was this symptomatic of the way the fleet was being managed or the crew trained? In fact, one of the influences was the type of flying that the B737 fleet was often being required to do, which involved short-notice replacement of aircraft types on sectors where the schedule needed making up – something that by definition was placing increased pressure on crews and even encouraging them to fly ‘enthusiastically’. A blame-oriented view was to see the managers as failing whereas a more enlightened view might be that business imperatives were creating risks that needed managing.

Identifying and quantifying the role of safety culture in an occurrence is not easy. Although certain accident investigation agencies (notably the Australian Transport Safety Bureau and the Transportation Safety Board of Canada) have prided themselves on their systemic approach to investigation and their willingness to examine organisational factors, this is far from the norm. Few, if any, accident investigation texts explain what to look for to establish whether safety culture deficiencies were a latent condition leading to an event. Is this something that is perhaps best diagnosed in terms of how well the organisation practises the ideals of safety culture?

42

The Role of Safety Culture in Aircraft Accidents

MOMENTS OF TRUTH

Former Scandanavian Airlines System (SAS) Group Chief Executive Office, Jan Carlzon (1989), spoke

of “Moments of Truth” when describing the 50 million times a year company employees came

into contact with the customer; their actions defining whether the company would succeed or fail.

Whilst Carlzon was writing from a business management perspective, such moments of truth are

equally valid when determining both the internal reality and external perception of safety culture.

For example, a recent event within a Maintenance, Repair and Overhaul (MRO) organisation tested

the commitment of senior management to its stated aim of developing a safety culture. The

MRO organisation was very busy and a customer’s aircraft was parked outside the hangar for

maintenance. The crew that was working on it went to start an air-powered jack which was placed

beneath the wing. Despite several attempts, the jack would not start and fitters were called to

repair it. After inspection and several attempts to fix it, it was concluded that a replacement

would be needed – something which would take an hour to arrange. At this point the maintainers

decided to take lunch early so that the jack would be available on their return and they could

keep to schedule. Unfortunately, whilst they were away, the jack (which had now dried out from

the water contamination that had caused it not to work) started to work and began to screw itself

up into the wing of the aircraft, causing considerable damage.

The initial reaction was to establish who was to blame. The maintainers agreed they had taken the

decision to go to lunch early as a group and as such they would take responsibility as a group.

The temptation for management was to start disciplinary action for the whole group – after all the

repair bill was potentially several million dollars. However, there was also recognition that the way

in which the event was dealt with would have aftershocks through the organisation. Although with

hindsight, a major error had been made in leaving the jack connected to the air supply, the intent

of the group in taking an early lunch was a positive one, related to their commitment to meet the

work schedule. Sacking the group would be an expensive mistake, not just in terms of the loss of

skills and capability, but also in sending a message to other staff that errors would be punished.

Even though the consequences carried high financial worth, the errors that led to it were no more

significant than for many other inconsequential near-misses.

Another moment of truth occurred as a result of a landing accident involving a B737 cargo aircraft at

Birmingham, UK in 2006. During landing approach at East Midlands airport, the pilot inadvertently

disconnected the autopilot leading to a high rate of descent. A go-around was called, but it was

too late to avoid contacting the ground, breaking off the right main landing gear. The aircraft

diverted to Birmingham where an emergency landing was subsequently made without injury.

The resulting Aircraft Accident Investigation Branch (AAIB) report (2008) highlighted a number of

causal and contributory factors, including inappropriate transmission of a company message at a

late stage (500 feet) of a Category III automatic approach, and ineffective training of the co-pilot

– the latter prompting a recommendation that the regulatory authority require the operator to

review their standard operating procedures. As a result of the accident, approximately one month

later, the operator sacked the pilot and was quoted (Mail Reporter, 2006) as saying, “Although the

AAIB investigation continues, it has been established that the automatic pilot was disengaged.

43

Journal Aviation Management 2008

That is down to human error. Although the pilots did manage to recover superbly and made a text

book emergency landing at Birmingham airport, they instigated the incident with a momentary

lapse and the company operates a zero accident tolerance level”.

The full facts are unlikely to be disclosed in the public domain, but if momentary lapses are to

be punished (or at least perceived to be punished) through a zero tolerance culture, the effect

on the safety culture is likely to be negative. Should the “superb recovery” and “text book

emergency landing” by the crew be taken into account in learning from the event or was the error

unforgivable?

In August 2007, an aircraft Captain allowed a Premiership footballer onto the flight deck of an

A320 private charter en route from Finland to Manchester, UK, contravening the stated policy of the

airline. The pilot later acknowledged that he had broken a rule but argued that he did “…interpret

the rule wasn’t quite as strict for a private charter, which this was. Everyone onboard knew each

other” (BBC, 2007). He was dismissed for gross misconduct with a spokesman for the operator

quoted as saying “We have a zero tolerance policy towards any actions which could endanger the

safety of our passengers and employees”.

In this case, the violation related to a security procedure; something which may be treated

differently to other flight safety issues in the current climate. However, the operator had the

added challenge of managing the dismissal of a ‘celebrity’ pilot and the involvement of a famous

footballer. In these circumstances, should the matter be treated any differently and were external

perceptions affected by those who were involved?

An alternative form of occurrence took place in January 2008 when the captain of a B777 performed

an unauthorised fly-by of the Boeing airfield during the delivery flight, reportedly passing within 28

feet of the ground with the undercarriage raised. The Captain was subsequently dismissed as he

had “…neither sought nor obtained the necessary company approval to undertake such a fly-by”

(Quinn 2008) and the co-pilot was subjected to disciplinary action.

The event was complicated by the presence of a large number of airline executives including

the Chairman, with the pilot allegedly even being pictured in the operator’s newsletter toasting

the maiden flight with airline executives who had been onboard. A senior pilot for the airline

was reported as saying “Maiden flights are treated as a bit of a jolly for executives with lots of

champagne flowing and these fly-bys used to be done for a wheeze in the old days. But they are

dangerous, because however good the pilot thinks he is, he isn’t trained for it and the planes

aren’t designed for it” (Batty, 2008).

Whilst the fly-by was a clear breach of current policy, it appears that a culture had existed where

this was an accepted practice and it is at least arguable that the presence and subsequent

“celebration” of the event by executives amounted to tacit cultural approval. The apparent inaction

of senior managers provides a strong case for the pilot to argue that he felt his actions to be

culturally acceptable. Indeed, as safety leadership starts at the top, were the senior managers not

equally culpable for the practice?

44

The Role of Safety Culture in Aircraft Accidents

It is interesting to reflect that these three cases arguably represent three levels of occurrence from

serious violation in the case of the fly-by, through procedural violation by the A320 captain to

momentary lapse in the case of the B737. Despite this, all three resulted in the same outcome of

dismissal of the pilot. However, it is difficult to imagine that all three affected the safety culture

of the organisation in the same way, or that effect on the internal and external perceptions were

the same.

BAD ACCIDENT: BAD SAFETY CULTURE?

Does the occurrence of an accident indicate the presence of a bad safety culture? Various

hindsight biases encourage observers to consider bad outcomes to be the result of bad people or

horrendous mistakes, something compounded by the instant news culture of looking for someone,

or something, to blame. Yet the reality is rarely so clear-cut – some of the most highly regarded

airlines have been involved in major accidents, often after long periods of accident-free operation.

For example, American Airlines had flown over nine million sectors without loss prior to a B757

colliding with terrain near Cali, Colombia in 1995. In other accidents such as those involving SAS

at Milan Linate, Italy in 2001 and DHL over Überlingen, Germany, in 2002, there was little more the

operator could have done to prevent them. However, such events have an effect on the culture of

the organisation and the perception of its customers.

CONCLUSION

The importance of safety culture has become widely accepted, but its measurement, particularly

following an occurrence, remains difficult. Whilst there is clear guidance as to where organisations

should aim to be, the response of an organisation to an event will provide a defining moment of

truth in establishing the future direction for its safety culture. Understanding how and why failures

occur is key to even a proactive approach and guidance on safety culture needs to be based on

an accurate understanding of how it contributes to accidents.

References

AAIB – Air Accidents Investigation Branch (2008) Report on the accident to Boeing 737-300, registration OO-TND at

Nottingham East Midlands Airport on 15 June 2006. UK Department for Transport, London.

AAIB – Air Accidents Investigation Branch (1992) Report on the accident on BAC 1-11, GBJRT over Didcot, Oxfordshire

on 10 June 1990. UK Department of Transport, London.

American Institute of Chemical Engineers (2005) Building Process Safety Culture: Tools to Enhance Process Safety

Performance. Center for Chemical Process Safety, New York.

Batty, D. (2008). Pilot sacked after fly-by prank ends up on internet [WWW]. http://www.guardian.co.uk/business/2008/

feb/25/theairlineindustry.usa

BBC (2007). Pilot sacked after Savage visit. [WWW]. http://news.bbc.co.uk/1/hi/england/coventry_warwickshire/7034412.

stm (28 May 2008)

45

Journal Aviation Management 2008

Carlzon, J. (1989) Moment of Truth. HarperPerennial, New York.

Dekker, S. W. A (2002) The Field Guide to Human Error Investigations. Ashgate, Aldershot.

Gibbons, A. M., von Thaden, T. L. and D. A. Wiegmann (2004). Exploration of the Correlation Structure of a Survey for

Evaluating Airline Safety Culture Technical Report AHFD-04-06/FAA-04-, Prepared for Federal Aviation Administration,

Atlantic City International Airport, NJ, USA.

Hendershot, D. (2007) Process Safety Culture. Journal of Chemical Health and Safety Volume 14, Issue 3, May-June

2007, Pages 39-40.

Hudson, P. (2001) Safety Culture: The Ultimate Goal. Flight Safety Australia September - October, CASA, Canberra.

ICAO (1993) Human Factors Digest No. 10: Human Factors, Management and Organization. Circular 247. International

Civil Aviation Organization, Montreal.

ICAO (2006) Safety Management Manual. Doc 9859 /460. International Civil Aviation Organization, Montreal.

Mahon, P. T. (1981) Report of the Royal Commission to inquire into the crash on Mount Erebus, Antarctica of a DC-10

aircraft operated by Air New Zealand Limited. Wellington.

Mail Reporter (2006) Crash Land Crew Axed [WWW] http://www.redorbit.com/news/

business/591262/crash_land_crew_axed__drama_pilot_error_behind_aircraft/index.html (28 May 2008)

Maurino, D. F., Reason, J., Johnston, N. and R. B. Lee (1995), Beyond Aviation Human Factors, Avebury Aviation,

Aldershot, UK.

Perrow, C. (1999) Normal Accidents, Princeton University Press.

Quinn, B. (2008). Jumbo jet pilot sacked for ‘fly-by’ at 28 feet [WWW]. http://www.timesonline.co.uk/tol/news/uk/

article3427696.ece (28 May 2008)

Rasmussen, J. (1983) Skills, Rules, and Knowledge: Signals, Signs, Symbols and Other Distinctions in Human

Performance Models. IEEE Transactions on Systems: Man and cybernetics, 13

Reason, J. (1990) Human Error. Cambridge University Press.

Reason, J. (1997) Corporate Culture and Safety. Paper presented at the National Transportation Safety Board Corporate

Culture and Transportation Safety Symposium. 24-25 April. Arlington, Virginia.

Reason, J. (1997b) Managing the Risks of Organizational Accidents. Ashgate, Aldershot.

Wagenaar, W. A. and Groeneweg, J. (1987) Accidents at Sea: Multiple Causes and Impossible Consequences,

International Journal of Man-Machine Studies 27, pp. 587–598.

46

The Role of Safety Culture in Aircraft Accidents

Zohar, D. (1980). Safety Climate in Industrial Organizations: Theoretical and Applied Implications. Journal of Applied

Psychology, 65, (1), pp. 96-102.

Zohar, D. (2000). A Group-Level Model of Safety Climate: Testing the Effect of Group Climate on Microaccidents in

Manufacturing Jobs. Journal of Applied Psychology, 85, (4), pp. 587-596.

ABSTRACT

Aviation Technology

Each new generation of aircraft has increased its capacity by becoming longer and wider while increasing the number of landing gear to support the extra weight. Pavement design procedures in existence before the introduction of these new aircraft were not adequate for analysing how these aircraft would affect the design life of existing pavements. Extrapolation of existing criteria indicated that the pavements would need to be strengthened at a cost of approximately US$1.7 billion over several years. The Federal Aviation Administration (FAA) undertook a 10-year comprehensive research and development (R&D) programme to resolve this dilemma. An essential element of the plan was a comprehensive test and verification programme performed on real pavements subjected to full-scale loading. The FAA’s National Airport Pavement Test Facility is capable of full-scale loading of up to 75,000 pounds per wheel on two landing gears with six wheels per gear. The 60-feet wide test sections provide two traffic lanes to compare the performance of six-wheel and four-wheel gears simultaneously. In operation since 1999, the facility is providing exciting new information in updating pavement design technologies around the world.

State-of-the-Art Technology in Airport Pavement

ABOUT THE AUTHOR

State-of-the-Art Technology in Airport Pavement

Dr Satish K Agrawal

Dr Satish K Agrawal is Manager of the Airport Technology Research and Development Team at the William J Hughes Technical Center in Atlantic City, New Jersey, US for the Federal Aviation Administration. He is responsible for formulating, directing, managing and conducting research in airport pavement technology, runway surface technology, airport visual guidance, runway incursions, wildlife hazards, airport planning and design technology, and post-crash aircraft rescue and fire-fighting. He earned his Master’s degree from the University of Iowa, US and his Doctorate from the Pennsylvania State University, US.

47

Aviation Technology

Dr Satish K Agrawal

Federal Aviation Administration, US

INTRODUCTION

In 1927, the Ford Motor Company built one of the world’s

first paved runways at Ford Airport in Dearborn, Michigan,

US. With no aviation experience and no airport pavement

design specifications, engineers built this and other early

runways using pavement thicknesses similar to those of

early highways. In fact, until World War II, airport engineers

based concrete pavement design on the anticipated loads

imposed by the trucks refueling the airplanes, rather than

the airplanes themselves.

For many years after the war, airport pavement research

and technology benefitted from advances in highway

research, as well as from the US Department of Defense

research supporting military aircraft and airfields. Added

complications in today’s design estimates, however, stem

from the fact that aircraft weigh far more than they did

when the basic relationships were established, and landing

gear layouts are far more complicated, with many more

wheels per gear and more gears per aircraft.

Runways, taxiways and aprons may be either “flexible” or

“rigid”, depending on the type of surface layer material.

Flexible pavements are constructed of asphalt, while rigid

pavements consist of concrete slabs. At larger airports,

both types of pavements generally include a stiffened,

or “stabilised”, base layer to provide additional support.

As aircraft get bigger and heavier, with new kinds of

landing gear, added stresses and strains are exerted on

airport pavements. Complex wheel load interactions within

pavement structures can contribute to premature failure of

the pavement structures, and must therefore be considered

in pavement design analyses. When traditional, empirically-

based pavement design methods are used to analyse loads

State-of-the-Art Technology in Airport Pavement

48

State-of-the-Art Technology in Airport Pavement

from the new generation of landing gear, they require pavements that seem unrealistically thick.

Hence, new heavy aircraft may require airports to overlay, reinforce, or even rebuild runways to

adapt to heavier loads.

PROBLEM STATEMENT

Moving ahead to 1995, the FAA was faced with the imminent introduction of a new generation of

heavy civil transport aircraft. These new aircraft included models that weighed up to 1.3 million

pounds and have complex, multiple-wheel, multiple truck landing gear systems. For example, the

Boeing 777 (B777) aircraft had two six-wheel main landing gears to support a gross weight of up

to 777,000 pounds. The six-wheel gear loads applied to airport pavements by this aircraft and

by the new aircraft from Airbus (i.e. the A380, weighing up to 1.3 million pounds) which are quite

different from the loads applied by the older generation of commercial airplanes.

Existing pavement thickness design procedures were inadequate for analysing the effect of these

new aircraft on the life of existing pavements. The question was whether the new aircraft would

cause more damage to existing runways than the existing aircraft in operation at that time. There

was no response or performance data, guidelines, or standards available anywhere in the world to

answer this question. Extrapolation of the existing criteria indicated that existing pavements would

need to be strengthened, costing approximately US$1.7 billion over several years.

Determining the compatibility of these new, heavier aircraft with the existing pavements was crucial

to the airlines and airport operators. If compatibility could not be established, there were two

options – operate the aircraft with reduced payload or pay increased landing fees to compensate

for the additional damage these aircraft would cause to the pavement. Neither of these options

were acceptable. The net effect would be a negative impact on the sale of aircraft to airline

operators or the unnecessary expenditure to strengthen airport pavements; the former effect

having a serious negative impact on the US economy and balance of trade.

THE RESEARCH & DEVELOPMENT PLAN

In response to this urgency, the FAA undertook a very comprehensive 10-year research and

development (R&D) programme aimed at upgrading and developing pavement design procedures

to accommodate these new aircraft. This programme was undertaken in response to these serious

contemporary issues facing airport pavement design. It utilises modern design and evaluation

procedures that concentrate on long-life pavements for existing as well as new and heavier

aircraft. It fulfills the US transportation needs by supporting the introduction of new aircraft,

protecting the multi-billion dollar investment in US airport pavements, and assuring continuing US

leadership in aviation technologies.

49

Journal Aviation Management 2008

The approach adapted by the FAA represents a return to fundamentals which will result in a

common pavement design methodology based on sound theoretical principles and full-scale

validation tests. It takes advantage of today’s enhanced computational abilities and provides the

flexibility to deal with new, complex landing gear configurations that were never visualised or

contemplated when the then current design procedures were developed. When completed, the

plan will reaffirm FAA’s leadership responsibilities as a key player of the aerospace industry.

THE NATIONAL AIRPORT PAVEMENT TEST FACILITY

An essential element in the development and implementation of new design procedures is a

comprehensive test and verification programme performed on real pavements subjected to full-

scale loading. The pavement test vehicle, with its ability to apply actual landing gear wheel loads

to test pavements, is the focal point of the National Airport Pavement Test Facility (NAPTF) (see

Figure 1). The NAPTF, located near Atlantic City, New Jersey, US, is where the FAA conducts full-scale

traffic tests on airport pavements.

The NAPTF was built to update pavement thickness design procedures for six-wheel airplane

landing gears, and to determine, through controlled tests, whether the existing procedures over

predict or under predict the load interaction effects from six wheels for the asphalt pavements. For

concrete pavements, the goals were similarly to get performance data to update outdated design

procedures, as well as to identify failure modes not adequately captured in the existing models.

In both cases, a fundamental approach to the problem requires conducting full-scale tests to total

pavement failure.

Figure 1: The National Airport Pavement Test Facility near Atlantic City, New Jersey, US

50

State-of-the-Art Technology in Airport Pavement

Facility Specifications

The test facility is capable of full-scale loading representing new generation, heavy civil transport

aircraft. This load may comprise up to 75,000 pounds per wheel on two landing gears with six

wheels per gear (total of 12 wheels). It will handle single, dual tandem, and tridem loading

configurations, and has the capability to change wheel spacing and gear spacing, with a maximum

tyre size at 56 inches (142 cm) overall diameter and 24 inches (61 cm) maximum width.

The test pavement is 900 feet (270 m) long and 60 feet (18 m) wide. The width of 60 feet is

necessary to investigate load interaction effects. It contains three subgrade materials (in the range

of three to 20 percent California Bearing Ratio or CBR) and asphalt and concrete surfaces, with a

total of nine test sections.

Tests are performed to the point of pavement structural failure, with the failure of one test

section to occur in one year or less. Speeds of the test vehicle represent worst case pavement

response, with the facility having the capability to conduct testing of up to a speed of 15 miles

per hour (24 km/h) while running tests in both directions. The facility is capable of accommodating

lateral wander patterns typical of airport runway operations. The test vehicle can be operated

continuously and automatically, with automatic tyre loading. Pavement response sensors measure

strain, deflection, pressure, moisture and temperature.

The 60-feet wide test pavement provides two traffic lanes so that two gear configurations can be

tested simultaneously. For example, it is possible to traffic a six-wheel B777 gear in one lane and a

four-wheel B747 gear in the other lane. The tests are run until all sections have completely failed.

Obviously we will have to define failure first. The test vehicle can be programmed to skip, or “fly

over”, a failed section or sections. This direct comparison of two different gears is particularly

important in finding a resolution for computing the aircraft classification number.

MAJOR ACCOMPLISHMENTS

The test facility became operational in 1999. A few major accomplishments from the 10-year R&D

plan are described below:

Development of the FAA Rigid and Flexible Iterative Elastic Layered Design – The New Pavement Thickness Design Procedure

To assess pavement requirements for heavier aircraft, and in an effort to create more cost-effective,

longer lasting airport pavements, FAA researchers have developed criteria and methods for design,

evaluation, performance and serviceability of airport pavements. In 2006, the FAA completed

a new consolidated, computerised design procedure called the FAA Rigid and Flexible Iterative

Elastic Layered Design (FAARFIELD). This procedure is contained in the FAA Advisory Circular

(AC) 150/5320-6E, ‘Airport Pavement Design and Evaluation’. A complete rewrite of this AC was

completed in March 2008 and is currently undergoing internal FAA review prior to public release.

51

Journal Aviation Management 2008

The design package, FAARFIELD, was developed after several intermediate efforts. Prior to the first flight of the B777 aircraft, the existing FAA design standard for airport pavements – the FAA AC 150/5320-6D, had been used for over 25 years. This standard, however, could not accurately assess damage to airport pavement as a result of the complex gear loads of the B777. To better predict wheel load interactions and to provide the airport community with a pavement design methodology addressing the needs of new, heavier aircraft, FAA researchers developed a design programme called the Layered Elastic Design (LED) FAA method, or LEDFAA.

As a result of this research effort, in 1995, the FAA issued a new Advisory Circular, AC 150/5320-16, implementing LEDFAA as a new standard for design of airport pavements intended to serve the B777 airplane. To ease the difficulties of implementing the LED procedure, and to empower design engineers with the required computational tools to perform the numerical computations, FAA’s researchers also developed the LEDFAA programme package with a user-friendly graphical interface. The programme minimises user input variables and the design thickness of the airport pavement is automatically computed. The next major revision came in 2004, when the FAA further modified the LEDFAA programme to accommodate the A380-800 aircraft. This effort was included in Change 3 to AC 150/5320-6. Change 3 specifies that LEDFAA can be used as an alternative FAA design standard for airport pavements handling all traffic mixes, not just those intended to serve the B777, and replaced AC 150/5320-16. The current revision to the design standard, AC 150/5320-6E, replaces both LEDFAA and the old design charts with the new programme, FAARFIELD.

From a user’s point-of-view, FAARFIELD is similar to LEDFAA. However, there are major internal changes. In this programme, a three-dimensional finite element model (3D-FEM) is used to describe the rigid pavement structure. The 3D-FEM method can handle greater detail and more complex characterisations of construction materials than the LED method. It is particularly useful for modelling rigid pavements, since the slab edges are often the critical components in rigid pavements. In addition, the 3D-FEM method can incorporate non-linear and non-elastic material models. Lastly, the 3D-FEM method is capable of more accurately simulating the structural response of airport pavements to complex loading configurations, including aircraft with six or more wheels per gear.

Aircraft Classification Number — an International Aircraft Compatibility Criteria

Another major accomplishment has been the resolution to the question of compatibility of the new heavy aircraft with airport runways around the world. In 1995, when the Boeing Company announced the introduction of B777 aircraft, the FAA did not have any data available to provide compatibility of this aircraft with existing runways in the US or anywhere else in the world. The compatibility of other large aircraft, such as B747, which were already operating, is determined by what is known as the Aircraft Classification Number (ACN). ACN is a measure of the amount of damage an aircraft causes to an airport pavement in relation to other airplanes operating on the pavement. For larger and heavier aircraft, the ACN is reduced by an “alpha factor” which is less than one. The International Civil Aviation Organization (ICAO) allowed the use of an interim “alpha factor” for the then new B777 aircraft. Selecting a suitable factor for permanent adoption was not possible because the B777 landing gear configuration had never been run in full-scale tests to pavement structural failure.

52

State-of-the-Art Technology in Airport Pavement

Between 2000 to 2002, comprehensive testing was conducted by the FAA covering most possible

variables and under the scrutiny of international researchers and ICAO. In 2006, ICAO proposed

that Alpha Factors at 100 coverages for four and six wheel gears be redefined for use in calculating

the ACN of airplanes operating on flexible pavements. The new Alpha Factor values are 0.800 and

0.720 for four and six wheel gears respectively, and are based on analysis of FAA NAPTF. With

these changes, Alpha Factors at other numbers of wheels, and over the full range of coverages for

design, required redefinition to maintain consistency in the CBR procedure for flexible pavement

thickness design, as required for ACN calculations.

Adoption of new Alpha Factors for computation of ACN was approved by ICAO on 19 June 2007,

and formally adopted on 16 October 2007 by a letter to the member States designating the new

Alpha Factors listed above as ‘Revised Alpha Factor Values’. The letter to the member States also

requested that the aircraft manufacturers revise the ACN values for their respective aircraft types

on various subgrade types, currently available as guidance material. The ICAO Pavement Design

Manual contains the new Alpha Factor values for one, two, four, six, eight, 12, 18, and 24 wheels;

it also contains information for computing Alpha Factors for other wheel combinations, and a

new methodology to allow calculation of Alpha Factor over the full range coverages. The new

methodology has been implemented in the computer programme COMFAA, which is available at

the FAA website.

Roughness Measurements

As pavements age and suffer damage from repeated loading or, more rarely, construction

deficiencies, their roughness increases and ride quality deteriorates. With increasing traffic and

airport utilisation rate, it is becoming evermore important to efficiently prioritise and schedule

maintenance. The need is increasing for airports to periodically survey their pavements and to

characterise the roughness using established methodologies. Improvements and availability of

equipment to accurately measure profiles and computer systems to do the analysis, together

with overall declining cost, are encouraging airports to include profile and roughness data in their

pavement management systems.

To address this new opportunity, the FAA is preparing a new AC intended to provide guidelines

for measuring and reporting airfield pavement roughness. Initially, the new Advisory Circular will

address the identification of isolated disturbances on pavements by the use of the Boeing Bump

criteria. When completed, the AC will address the problems of characterising the roughness of

a pavement over its full length and identifying numerical limits for triggering maintenance or

rehabilitation based on these alternative measures. Supporting the guidelines in the Circular is a

software package for analysing airfield pavement profiles called ProFAA. Figure 2 shows a vehicle

mounted profile measurement system.

53

Journal Aviation Management 2008

Figure 2: A portable profiler

8 AND 10 WHEEL LANDING GEAR

As the issues raised by the six-wheel gear are resolved, new questions are raised from the

operation of more complex wheel and gear design containing eight or more wheels per landing

gear. In order to remain a step ahead, we are adding new wheel modules to the NAPTF. The new

modules will allow us to test complex gear configurations. The capabilities of the test vehicle will

soon be expanded with the addition of two new load modules to supplement the existing three

load modules on each of its two movable carriages (see Figure 3). This enhancement will allow

researchers at the NAPTF to simulate eight and 10 in-line landing gear wheel loads.

Figure 3: Additional modules

While the existing configuration of the test vehicle was adequate to emulate almost all present

commercial airline landing gears, with the addition of the new load modules, the 10 in-line landing

gear wheel configuration of freighter aircraft manufactured by Antonov ASTC (see Figure 4) can

now be simulated. In addition, data derived from pavement testing using the new loading modules

will give commercial aircraft designers the ability to perform landing gear configuration studies for

future aircraft with more confidence than previously possible.

54

State-of-the-Art Technology in Airport Pavement

Figure 4: Antonov ASTC

While the new load modules will look very similar to the existing ones, there are a few new

features that have been built into the new modules to help the NAPTF further its mission of airport

pavement research. One of the goals at the NAPTF has been the study of “pavement shoving”,

which results when transverse shearing forces are applied to the top layer of an asphalt pavement.

These effects are often seen at the low speed turn areas of a runway. Design modifications were

introduced into the new landing modules to permit +/- five degrees of steering of the new loading

module. Future studies will use this new steering feature to evaluate the shearing resistance of

various asphalt mixes.

Design changes to the tyres and rims will allow for the installation of radial tyres. These refinements

will permit the test module to move into the actual performance testing of aircraft tyres at as

future date.

Provided that the module installation progresses according to plan, the NAPTF will be able to take

advantage of the upgraded test vehicle for pavement testing beginning in early 2009. With these

upgrades, the NAPTV test vehicle will be ready for the next decade of airport pavement research.

The author wishes to thank Dr Gordon Hayhoe, Mr Donald Barbagallo and Dr David Brill from the

Airport Technology R&D Team, FAA, for providing material for this article.

NOTE: Following documents and software are available for download.

Advisory Circular

BAKFAA

Bisar

COMFAA

FAARFIELD

JuleaWW

ProFAA

ABSTRACT

Crisis Management

Modern day emergency trauma care is based on the principles of the “golden hour”. Time from injury to definitive control of airway, and hemorrhage is vital if morbidity and mortality is to be minimised. To achieve this, urban communities in developed countries emphasise the importance of responsive and highly trained emergency medical services providing on scene trauma life support evaluation and interventions. Rapid transport to a recognised designated trauma centre has been shown to be of crucial importance.

Incidents involving airplanes often result in casualties with traumatic injuries just like in our day to day emergencies in the community. However, these incidents tend to produce more than one casualty and create additional challenges apart from providing the best care to a single casualty. This paper will explore the current evidence in trauma care that is of relevance to emergency planners involved in airport emergency planning. This will provide an opportunity for readers to re-visit and re-examine their own plans in relation to the current evidence.

Evidence-based Medical Response to Mass Casualty Event at Airports

ABOUT THE AUTHOR ABOUT THE AUTHOR

Dr Mark Leong

Dr Mark Leong is Senior Consultant and Deputy Head of Department of Emergency Medicine, Singapore General Hospital and Senior Consultant (Disaster Medicine) with Operation Readiness and Control Division, Ministry of Health.

He is actively involved in disaster and civil emergency planning and operations in Singapore and is currently the Field Medical Commander of Disaster Site Medical Command, Ministry of Health. His international and regional experience in natural disasters include leading and participating in humanitarian relief missions to India, Sri Lanka, Taiwan and Nias Indonesia.

Dr Leong holds a number of academic and teaching portfolios at the National University of Singapore and the Society of Emergency Medicine in Singapore and Ministry of Health. He is a fellow of the Royal College of Surgeons and Academy of Medicine Singapore.

Evidence-based Medical Response to Mass Casualty Event at Airports

55

Crisis Management

Dr Mark Leong

Singapore General Hospital

INTRODUCTION

The aviation industry is renowned for its quest towards

excellence in safety. However, with increasing air travel and

higher passenger carrying capacities of modern airplanes,

the potential exists for a major aircraft incident eg.

air crash causing traumatic mass casualties. Meanwhile,

responding agencies, eg. Fire and Rescue and Emergency

Medical Services (EMS) are facing increasing demands

from daily routine emergencies. Many services are facing

increasing response times, reduced capacity eg. hospital

beds, and longer waits. With emergency response agencies

and responders stretched, an added pressure of a major

aircraft incident at airports producing large numbers of

traumatic casualties will severely test the entire rescue

and medical chain. Communities that have to deal with

mass casualties on a more frequent basis, have come up

with strategies and recommendations to help others cope

with sudden surge in the need for medical services. This

paper examines the types of injuries that may arise from

an air crash, the principles of medical and mass casualty

management based on current available evidence, and the

current and future challenges confronting us.

INJURIES AFTER AN AIR CRASH

Are injuries sustained by passengers following an air crash

similar to those involved in a typical motor vehicle collision

on our roads? It is not difficult to imagine that being

in an aircraft is like being strapped in a motor vehicle

except that the passengers are being moved and hurled at

much higher speeds. Lillehei and Robinson (1994), in

their critical analysis of the fatal injuries resulting from

Continental flight 1713 disaster, found that the injuries

sustained were predominantly blunt injuries which were

Evidence-based Medical Response to Mass Casualty Event at Airports

56

remarkably similar to the deceleration injuries seen in motor vehicle collisions. Head and torso

injuries with associated spinal injuries were the most common cause of fatalities. For those who

survived the crash, burn injuries from resulting aircraft fires can be expected.

PRINCIPLES OF TRAUMA MANAGEMENT

The current widely accepted paradigm in managing a cardiac arrest victim is encapsulated in the

chain of survival starting from early access, cardiopulmonary resuscitation, cardiac defibrillation

and advanced cardiac life support. A chain of survival for the injured casualty should include the

following: bystander first aid, early access to EMS, on scene critical interventions, rapid evacuation,

hospital resuscitation, and access to advanced imaging, operating theatres and intensive care, and

rehabilitation services. The goal is to bring the casualty to a definitive medical facility with the

capability to arrest internal hemorrhage within one hour from the time of injury (ie. the “Golden

Hour”). The eventual outcome for the injured casualty is dependent on each and every element in

the chain. The strength of the chain is dependent on its weakest element. For medical responders

to mass casualties at airports, the emphasis is on pre-hospital elements of the chain.

1. Bystander first aid First aid is defined as assessments and interventions that can be performed by a bystander (or

by the victim) with minimal or no medical equipment. Following a major airport incident, it is

likely that the first responders will have more formal training than the lay public responding to

a road side motor vehicle collision. Responders eg. fire and rescue professionals should assess

imminent dangers and then begin rapid assessment of their casualties paying particular attention

to their airway, conscious level, breathing, and circulatory status while maintaining proper

cervical spine control in accordance to basic life support (BLS) guidelines. These knowledge

and skills are taught in courses such as International Trauma Life Support (ITLS, formerly Basic

Trauma Life Support) and Pre-Hospital Trauma Life Support (PHTLS). These courses provide

BLS training.

Many have also advocated paying particular attention in the first few minutes following injury.

The “Platinum Minutes” concept was developed to emphasise to pre-hospital care providers

the crucial first few minutes with relation to airway obstruction, undetected hypoxia, and

uncontrolled external hemorrhage. In response to this, many communities have promoted the

use of rapid access vehicles such as motorcycles to allow paramedics to deliver medical care in

the platinum minutes.

2. Early access to EMS With existing collaboration with other external agencies such as EMS, and Health, early

involvement of EMS is usually not a problem. However, if fire and rescue professionals are also

trained to provide BLS, life saving interventions with the platinum 10 minutes can be provided

much earlier.

Evidence-based Medical Response to Mass Casualty Event at Airports

57

Journal Aviation Management 2008

3. On scene critical interventions Casualties who are severely injured may require on scene critical interventions such as orotracheal

intubation, and chest decompression, skills which are not routinely taught to BLS providers.

Advanced life support (ALS) providers such as EMS/Medical/Health responders, often from other

agencies, are equipped with skills and equipment to perform these interventions. However, it is

important to note that despite the proven efficacy of these interventions performed in a hospital

setting, interventions have not been conclusively shown to be superior to just providing BLS to

injured casualties at the scene.

4. Rapid evacuation Current management of major trauma patients revolves around the concept of the “Golden

Hour”. Within an hour from the occurrence of an injury, the casualty should be in a definitive

medical facility with the capability of arresting any internal hemorrhage. This concept came

about following the work of Trunkey (1973, 1989) who first reported the trimodal distribution of

trauma deaths.

The first peak of death occurs minutes after the injury is a result of non survivable injuries such

as brain and major blood vessel injury. The second peak of death occurs over the next four

hours and is often attributed to uncorrected hypoxia from airway obstruction and respiratory

injuries, and hemorrhagic shock from uncontrolled external and internal hemorrhage. This

underpins the rationale of a “scoop and run” strategy from the scene to a medical facility where

definitive care can be provided. The debate and controversy of “scoop and run” versus “stay

and play” is still ongoing. The concept of “scoop and run” has been adopted by communities

who firmly believe that for severely injured casualties, rapid evacuation and timely access to a

major operating facility to stop ongoing internal hemorrhage is of paramount importance.

Other communities however emphasises the importance of providing initial resuscitation and

stabilisation on scene by highly trained paramedics and emergency physicians and transporting

them rapidly via land or air evacuation assets to the most appropriate hospital. The answer to

which system is best is a very complex and difficult one. In an urban environment with very

short transport times, it appears logical to employ a “scoop and run” strategy. However, in a

more rural environment with limited accessibility, greater travelling distances and transport

times, some form of initial stabilisation may be required for casualties to be delivered in a more

stable condition beyond the Golden Hour. The strategy to be used depends on many different

factors and the local operating environment.

58

5. Hospital management (Resuscitation, Major Operating Capabilities, Intensive Care and Rehabilitation)

From the pre-hospital perspective, the final delivery of the injured casualty to the nearest

medical facility within the “Golden Hour” appears to be the ultimate goal. However, with

global changes and rapid advancement in trauma management, delivering the casualty to the

nearest medical facility is no longer considered the standard of care. In the last four decades,

trauma care has evolved from rapid evacuation to the nearest facility to a designated trauma

centre which is part of a community based inclusive trauma care system. A recent study in the

US has shown that outcomes of injured patients were better when they were managed in a

trauma centre.

PRINCIPLES OF MASS CASUALTY MANAGEMENT

When a major airport incident occurs, a potential for mass casualties event eg. air crash exists.

The goals and challenges encountered in the delivery of trauma care to a single severely injured

casualty are now multiplied and magnified manifold placing severe stress on both the emergency

responders and their organisations. It is not unusual to find EMS and hospital services stretched

on a daily basis with an emphasis on prudence, productivity and efficiency. Unlike fire and rescue

agencies where the equipment and personnel are ready 24 hours a day to respond to any potential

incident, EMS and healthcare systems often function in an over capacity mode. This has resulted

in global problems such as emergency department overcrowding, high hospital bed occupancy

rates and increasing EMS response times. The coming together of these factors will invariably

produce an extremely challenging problem for health care providers, airport emergency planners and

policy regulators.

These challenges are not insurmountable. Communities who have experiences in dealing with

mass casualties on a more regular basis have developed strategies to cope. The fundamental

aims of a mass casualty event response are rapid evacuation from a hazardous incident scene

and reduce the mortality of critically injured casualties. Some important concepts in mass casualty

management for pre-hospital phase include:

• Disaster medical triage

• Appropriate intervention for appropriate casualty

• Multi-agency collaboration

• Incident command, control, communication and coordination

Disaster Medical Triage

In any mass casualty event, triage is perhaps the most crucial element that sets it apart

from single casualty incident. When demands on medical care exceed the capacity to provide

care, there is a need to conserve and prioritise care to those who most require it and benefit

from it. There is no place for futile care and “over-servicing” of casualties. In Fryberg’s (2002)

Evidence-based Medical Response to Mass Casualty Event at Airports

59

Journal Aviation Management 2008

study on mass casualty bombing events, it is shown that critical mortality of casualties

increase with an increase in over triage rates. In routine single casualty events, over triage

is the norm and a deliberate strategy to ensure no casualty slips through the safety net.

However, in mass casualty events, over triage over burdens the finite medical resources

– manpower, logistics and system, resulting in an increase in critical mortality. Conversely,

under triage (an underestimation of injury) can produce an equally bad outcome. Therefore

the act of segregating the casualties into several triage categories allows the limited number

of responders, equipment and supplies to focus on providing critical intervention and

expeditious evacuation of the critically injured, ensuring the lowest critical mortality rate.

There are many different disaster triage protocols in use. Regardless of the system used,

triage is performed by the most experienced responder with a good knowledge of the

medical system. This may initially be a senior experienced fire rescuer, a paramedic or senior

physician when more expertise becomes available.

Appropriate Intervention for Appropriate Casualty

During routine emergencies, emergency medical care at the scene is commonly provided

by first aiders (public) or EMS (EMTs, paramedics). However, in mass casualty events, ALS

medical teams from hospitals with physicians and nurses are often called upon to provide

care at the scene. As these ALS providers function in usually well equipped, environmentally

optimal infrastructure with the goal of delivering maximal care for the individual patient, they

may not be familiar with the constraints and limitations in performing critical interventions

on mass casualties. Experienced practitioners of mass casualty incidents advocate limiting

the critical interventions on scene of mass casualties to advanced airway maneuvers,

cervical spine stabilisation, chest decompression for tension pneumothorax and splinting

of fractures.

Multi-agency Collaboration

Very often agencies tend to be very focused on their own tasks and objectives. In mass

casualty events, all agencies have to come towards a common understanding and develop a

clear goal. From a health care perspective, the overriding goal is to ensure the best outcome

possible for all casualties ie. saving lives. It is imperative, regardless of primary responsibility

of all responding agencies, that the multiagency and multidisciplinary response is clearly

focused on producing such an outcome.

Incident Command, Control, Communications and Coordination

A clear chain of command is essential to bring order to an expected initial chaos with

multiple responding agencies, each with their own roles and responsibilities. Lessons from

recent mass casualty events continue to highlight communication and coordination as one of

the most challenging problems. Problems do not just lie with technology and its use, but can

often be due to poor human compliance and discipline. All agencies and incident command

systems must be able to continue with its response if all fails. An incident command system

and plan with minimal use of technology can be a good starting point with the availability

of modern digital and wireless communications a bonus.

60

AIRPORT EMERGENCY PLANNING

The International Civil Aviation Organization (ICAO) provides a model for emergency medical

response to a major aviation incident involving mass casualties within the airport. Casualties

are rescued, and moved to a casualty collecting area (CCA) where triage takes place and initial

emergency medical care can be provided. Casualties are then prioritised to be evacuated to the

most appropriate medical facility for definitive care.

In Singapore, the airport emergency plan (AEP) follows this recommendation. Casualties gathered

at the CCA usually within the vicinity of the crash but at a safe distance, are evacuated to a casualty

clearing station (CCS) where casualties can be triaged and given initial emergency medical care

by responding EMS units and field medical teams comprising of doctors and nurses from public

hospitals. After initial stabilisation, they are evacuated to hospitals under the direction of Ministry

of Health (MOH). Currently, the airport fire stations are designated as the CCS at Singapore Changi

Airport. It provides an easily recognisable, safe, environmentally stable and secured location for

initial casualty care by multi-agency and multi-disciplinary responders under mutual aid agreement

of the AEP.

CHALLENGES AND THE FUTURE

Does your AEP work? The short answer is it works when it works. Would a prior agreed upon

plan by all stakeholders that is regularly exercised gives us the assurance of a good outcome?

Lee et al, in their review of the emergency response after a B747 crashed on take off from Chiang

Kai Shek International Airport in 2000, showed that the anticipated benefits from having a mass

casualty plan with recent emergency preparedness and validation exercise were not achieved. The

main reasons cited for this failure is poor compliance by responders to a plan which has certain

structural problems. A major deviation from the plan was the absence of casualty triage and

initial management. This incident serves as a timely reminder to emergency planners and incident

managers the significant impact of how people and organisations are likely to act, rather than

expecting them to change their behavior to conform to the plan.

A proper and practically designed mass casualty incident (MCI) plan, good compliance of responders,

and a strong support system of responding agencies are the most important factors for successful

emergency response. An overly orchestrated exercise with less than realistic simulation to find out

whether a plan works is unlikely to produce the desired answers.

CONCLUSION

Major incidents in our airports are infrequent events which have the potential to generate a

complex event with mass casualties requiring a well prepared multi-agency response. Applying the

best evidence for trauma and mass casualty management, and learning from recent events will

result in the best possible outcome. Unrealistic planning and preparedness activities can result in

a false sense of assurance.

Evidence-based Medical Response to Mass Casualty Event at Airports

61

Journal Aviation Management 2008

References

Allgower M. Trauma care systems in Europe. Am J Surg. 1991; 161(2): 226-9

American Heart Association and American Red Cross (2005). Guidelines for First Aid. http://www.redcross.org/static/

file_cont4913_lang0_1727.pdf accessed 26 June 2008

Anantharaman V. Disaster - site medical support organization in a small country. PDM. 1991;6(1):43-6

Benson M, Koenig KL, Schultz CH. Disaster triage: START, then SAVE--a new method of dynamic triage for victims of

a catastrophic earthquake. Prehosp Disaster Med. 1996; 11(2):117-24

Campbell J E. International Trauma Life Support. ITLS for Prehospital Care Providers Manual 6th Edition ISBN 978-0-

13-237982-3

Cayten C, Murphy JG, Stahl W M. Basic Life Support versus Advanced Life Support for injured patients with an injury

severity score of 10 or more. J Trauma. 1993; 35(3):460-467.

Coats T J, Davis G. Prehospital care for road traffic casualties. BMJ 2002; 324 (11): 1135-1138

Cowley R A, Hudson F, Scanlan E, Gill W, Lally R J, Long W, Kuhn A O. An economical and proved helicopter program

for transporting the emergency critically ill and injured patient in Maryland. J Trauma. 1973; 13(12): 1029-38

Cummins RO, Ornato JP, Thies WH, et al. Improving survival from sudden cardiac arrest : the “chain of survival”

concept. Circulation 1991;83(5):1832-47.

Cummins RO. The “chain of survival” concept: how it can save lives. Heart Dis Stroke 1992;1(1):43-5.

Eckstein M, Chan L, Schneir A, Palmer R. Effect of Prehospital Advanced Life Support on Outcomes of Major Trauma

Patients. J Trauma. 2000; 48(4):643-648

Frykberg E R. Medical Management of Disasters and Mass Casualties from Terrorist Bombings: How can we cope? J

Trauma. 2002; 53(2): 201-212

Hirshberg A, Holcomb J, Mattox K L. Hospital Trauma Care in Multiple-Casualty Incidents: A Critical View. Ann Emerg

Med. 2001; 37(6): 647-652

Institute of Medicine. Hospital-Based Emergency Care: At the Breaking Point. 2006. National Academies Press. ISBN-

10: 0-309-10173-5.

International Civil Aviation Organization. 2005 ICAO Airport Services Manual Part 7. Airport Emergency Planning, Chp

9 – Triage and Medical Care.

Kennedy K, Aghababian R V, Gans L, Lewis C P. Triage: Techniques and Applications in Decisionmaking. Ann Emerg

Med. 1996; 28(2):136-144

62

Lee W H, Chiu T F, Ng C J, Chen J C. Emergency Medical Preparedness and Response to a Singapore Airliner Crash.

Acad Emerg Med. 2002, 9(3):194-198

Leong M K F, Briggs S. Classic Concepts in Disaster Medical Response – Chapter in “Humanitarian Crisis-The Medical

and Public Health Response”.1999, Harvard University Press

Liberman M, Mulder D. Sampalis J. Advanced or basic life support for trauma: meta-analysis and critical review of the

literature. J Trauma. 2000; 49:584–599

Liberman M, Mulder D, Lavoie A, Denis R, Sampalis J S. Multi Center Canadian study of prehospital trauma care. Ann

Surg. 2003; 237(2):153-160

Lillehei K O, Robinson M N. A Critical Analysis of the Fatal Injuries resulting from Continental flight 1713 airline

disaster: Evidence in favor of improved passenger restraint systems. J Trauma. 1994; 37(5):826-830

Lockey D J, MacKenzie R, Redhead J, Wise D, Harris T, Weaver A, Hines K, Davies G E. London bombings July 2005:

The immediate pre-hospital medical response.Resuscitation. 2005; 66: ix-xii

Mackenzie E J, Rivara F P, Jurkovich G J, Nathens A B, Frey K P, Egleston B L, Salkever D S, Scharfstein D O. A National

Evaluation of the effect of Trauma-Center care on mortality. NEJM. 2006; 354(4):366-378

Ministry of Health. Ministry of Health Emergency Response Plan, Operations Civil Emergency. 2005

Nathens A , Brunet F , Maier R. Development of trauma systems and effect on outcomes after injury. Lancet. 2004;

363:1794–801

National Association of Emergency Medical Technicians 2007. Pre Hospital Trauma Life Support Sixth Edition. Mosby

National Association of Emergency Medical Technicians. Pre-hospital trauma life support. St Louis: Mosby; 1994.

Oliveira M S, Egipto P, Costa I, Cunha-Ribeiro L M. Emergency Motorcycle: Has it a place in a medical emergency

system? AJEM. 2007; 25, 620–622

Potter D et al. A Controlled Trial of Prehospital Advanced Life Support in Trauma. Ann Emerg Med. 1988; 17(6):582-588

Quarantelli EL. Organizational behavior in disasters and implications for disaster planning, Report series 18. Newark,

DE: Disaster Research Center, University of Delaware; 1985

Rainer T H, Houlihan K P G, Robertson C E, Beard D, Henry J M, Gordon M W G. An evaluation of paramedic activities

in prehospital trauma care. Injury. 1997; 28:623-627

Redhead J, Ward P, Batrick N. .Prehospital and Hospital Care. NEJM. 2005; 353(6): 546-547

Sacco W J, Navin D M, Fiedler K E, Waddell R K , Long W B, Buckman R F Jr. Precise formulation and evidence-based

application of resource-constrained triage. Acad Emerg Med. 2005; 12(8):759-70

Evidence-based Medical Response to Mass Casualty Event at Airports

63

Journal Aviation Management 2008

Sampalis J S. Lavoie A, Williams J I, Mulder D, Kalina M. Impact of on-site, prehospital time, and level of in-hospital

care on survival in severely injured patients. J Trauma. 1993; 34(2):252-261

Sampalis J S, Denis R, Lavoie A, Frechette P, Boukas S, Nikolis A, Benoit D, Fleiszer D, Brown R, Churchill-Smith M,

Mulder D. Trauma Care Regionalization: A Process-Outcome Evaluation. J Trauma. 1999; 46(4):565-581

Super G, Groth S, Hook R. START: simple triage and rapid treatment plan. Newport Beach (CA): Hoag Memorial

Hospital Presbyterian; 1994

Stein M, Hirshberg A:Medical consequences of terrorism - the conventional weapon threat. Surg Clinics of North

America. 1999; 79(6):1537-1552

Trunkey DD. Trauma. Sci Am. 1983; 249(2):28-35

West J G, Trunkey D D, Lim R C. Systems of trauma care. A study of two counties. Arch Surg. 1979; 114(4): 455-60

64

ABSTRACT

Airport Management

The opening of new air passenger terminals at major airports has always attracted great attention, both from the local populace, as well as the mass media. This interest could be because air terminals are typically expensive investments with complex operations and have an infamous track record of newsworthy chaos or disruptions on opening day.

Singapore opened its new Terminal 3 (T3) on 9 January 2008, 27 years after Changi Airport started operations with its first terminal in 1981. This paper seeks to share the T3 experience in ensuring the smooth operations of the terminal on opening day and beyond.

Opening of New Terminals – Changi Airport’s T3 experience

ABOUT THE AUTHOR

Mr Foo Sek Min

Mr Foo Sek Min is currently Senior Director of the Airport Management Group at the Civil Aviation Authority of Singapore (CAAS) where he oversees the Airport Operations Division, Commercial Division and Aviation Security Unit. Mr Foo also serves on the Board of Crimson Logic Pte Limited, a leading Singapore-based IT service provider. Mr Foo has over 12 years of extensive experience in various aspects of passenger terminal and air cargo operations. He has been project lead for various infrastructural upgrading and expansion projects. These include the extension of the Terminal 2 finger piers, Terminal 2 upgrading, the construction and opening of Budget Terminal as well as the new Terminal 3.

Opening of New Terminals – Changi Airport’s T3 experience

65

Airport Management

Mr Foo Sek Min

Civil Aviation Authority of Singapore

INTRODUCTION

The opening of T3 is the fulfillment of the airport masterplan

envisioned in the 1970s. The seven-storey building with

three basements and four above-ground levels, occupies

380,000 square metres. T3 was built at a cost of S$1.75

billion and brings the total airport capacity to about 70

million passenger movements annually.

DESIGN CONCEPT

Clarity

Changi Airport planners recognised that a key stress point

for many travellers is wayfinding. T3 was hence designed to

allow travellers to find their passage through the terminal

with ease. This is possible as T3 adopts a see-through

layout concept, making it easier for travellers to orientate

themselves. Signage is upsized and multi-lingual to enhance

wayfinding. In current times, where air terminals tend to be

mega structures with high ceilings, it is important to ensure

that the font size of signage is not perceived to be small

relative to the huge expanse of space.

External Views

With a full glass facade, passengers have extensive visual

access to the external landscape that surround them.

This gives a sense of expansive space and openness,

besides giving travellers views of take-offs and landings

of airplanes.

Natural Lighting

T3 features a unique roof architecture which allows

soft natural light into the building while keeping the

tropical heat out. The first-of-its-kind roof design has 919

intelligent computer-controlled skylights with specially

Opening of New Terminals – Changi Airport’s T3 experience

66

designed butterfly-shaped reflectors which automatically adjust themselves according to the

outdoor sunlight intensity. This allows an optimal flow of soft and uniform daylight into the terminal

building during the day. Inside the terminal building, “louvers” spanning across the entire ceiling

deliberately diffuse the sunlight entering the building to create a warm and comfortable ambience.

At night, the skylights glow with artificial lighting delicately concealed below the reflector panels.

The overall effect is a soothing ambience at all times of the day.

Of course, for the airport operator, it is highly risky to create so many “holes” in the roof, especially

during the rainy season. A rigorous “wet” testing programme was carried out at each skylight and

a subsequent maintenance programme was put in place to ensure water-tightness. Recovery and

contingency plans were also developed to deal with leakage in the event it happens.

The introduction of abundance of natural light into the building in turn helped achieve two

objectives. Firstly, for about five hours a day, there is no need for artificial lighting. Together with

an air-conditioning system that emits cold air via binnacles rising from the ground, the result

was a substantial reduction in energy consumption and savings in energy bills. Secondly, lush

landscaping could be introduced into the building.

Going Back to Nature

Airport designs have evolved over the years, with newer airports and terminals developed with

striking architecture and each trying to carve out their own identities. For Changi Airport, T3 is a

reflection of Singapore’s Garden City image. Coming into T3, one will be awed by the five-storey

high vertical garden, called the “Green Wall”. Spanning 300 metres across the main building, it can

be admired from both the Departure and Arrival Halls. The “Green Wall” is a tapestry of climbing

plants, interspersed with four cascading waterfalls and a hand-carved sandstone art wall display.

At the transit mall, travellers can relax amongst fig trees, koi ponds or visit the World’s First

Butterfly Garden in an airport.

Comparison of Changi Airport’s Three Terminals

Terminal 1 Terminal 2 Terminal 3

Terminal floor area 280,020 m2 358,000 m2 380,000 m2

Handling capacity per annum

21 million 23 million 22 million

No. of aerobridge gates

29 35 28

No of A380 gates 5 5 6 8

Opening of New Terminals – Changi Airport’s T3 experience

67

Journal Aviation Management 2008

PREPARATIONS FOR OPERATIONS

Choosing an Operational Opening Date

Sufficient time of about six months should be given for the operational readiness programme,

which comprises integrated systems testing, operational testing and passenger-flight trials. This

often cannot be assessed until the building infrastructure is completed and individual stand-alone

systems installed, tested and commissioned. However, a firm date for operational opening is needed

for the airport operator to get stakeholders to ready themselves and for public communication

purposes to travellers.

From past experience, it is better to start operations during a quieter period than a period with

higher traffic, to allow the new terminal to open without excessive stress. Hence the opening

date should not coincide with peak periods of travel (such as school holidays, public holidays

or year-end travel season), when passenger traffic would be significantly heavier. In addition, it

is advisable to start operations on a quieter mid-week day (i.e. a Wednesday). This operational

opening date should also allow for a continuous ‘quiet’ period of at least three weeks for operations

to stabilise before the next peak travel event occurs. The operational opening date would also be

dependent on the expected date that the terminal building would receive its temporary occupation

permit (TOP).

To provide clarity for all the parties involved in T3 preparations, the opening date was communicated

internally to all airport agencies and stakeholders on 2 Nov 2006. This gave agencies a date to

focus on and also more than a year to prepare. The Minister for Transport, Mr Raymond Lim,

publicly announced the 9 January 2008 operational opening date during his visit to T3 on 29 May

2007. T3 received its TOP in two phases - 31 April 2007 and 19 July 2007.

ORGANISING OURSELVES

As airport operations is a multi-agency affair involving many complex and integrated systems, it

is necessary to organise efforts to track progress and resolve policy issues quickly and decisively.

A T3 Live Steering Committee, chaired by CAAS, comprising key members from top management

of airport organisations was formed in November 2006. Its aims were to jointly oversee the

operational readiness plan for T3 opening; set key policies and decisions related to T3; and to

align efforts and programmes of various agencies.

The Steering Committee was in turn supported by nine key subgroups and staffed by a secretariat

project team. Please see Figure 1.

68

Figure 1: Structure and organization of T3 Live Steering Committee

EQUIPMENT AND IT SYSTEMS TESTING AND COMMISSIONING

Stand-alone system tests were carried out on all equipment at T3. This included escalators,

travellators, lifts, aerobridges, air-conditioning system, people mover system (called the ‘Skytrain’

at Changi) and others. This was followed by the development of contingency procedures and plans

for equipment failure and the exercising of these procedures and plans.

We also focused on three major critical information technology (IT) systems, the flight information

display system, baggage handling system and airline departure control system. Due to the degree

of integration between these three systems and their importance and complexity, a comprehensive

test programme and stress testing of these systems were carried out. Contingency plans were

also developed and exercised. For example, archived historical data were used to stress test the

systems and surfaced software bugs. Thirty thousand bags of different shapes and sizes, filled with

newspapers to simulate different weights, were purchased and put through the baggage handling

system to assess system capacity and reliability.

Efforts were also made to ensure that new systems introduced into the terminal, such as the new

biometric door access system and the new 16-car skytrain worked well and that staff are familiar

with these new equipment.

Opening of New Terminals – Changi Airport’s T3 experience

69

Journal Aviation Management 2008

STAFF FAMILIARITY AND TRAINING

Recognising that staff familiarity is crucial to the smooth operations of T3, all airport staff, both

new and existing, had to undergo site familiarisation and training before being issued with an

airport pass to work in T3. All airport employees were included, regardless of whether they were

operations staff, front-line staff or service staff. Even temporary employees such as airport guides

were also trained to ensure familiarity.

Existing staff who have to work in T3 were required to participate in the operational testing and

trials programme. As a guideline, all staff were required to operate the actual equipment at T3

onsite or to participate in trials at least twice.

Staff of third party service providers and maintenance contractors were also required to undergo

a similar familiarisation and training programme.

A T3 information kit was created and distributed to enhance staff’s knowledge of the workings,

layout, features and operations of the new T3. In the initial stages, bus shuttle services linking

T3 with other terminals were provided to facilitate staff to visit T3 on their own. Staff switched to

using the inter-terminal skytrain after it was ready for service.

A “Workshop on T3 Operations Readiness” was organised on 2-3 April 2007 as part of the airport-

wide preparation for T3 opening and to get the entire Changi community galvanised for the

terminal opening.

GROUND TRANSPORTATION

Besides focusing on airport staff who are directly employed onsite at the new Terminal, we also

engaged the various ground transport service providers to ensure that they are familiar with the

traffic patterns of the new Terminal. Taxi drivers were engaged via their company newsletters, car

decals and live taxi familiarisation exercises so that they would be familiar with the taxi holding

and taxi queue areas. Public buses and train companies were also engaged to start their services

at T3 earlier. Other transport service providers, such as ambulance drivers, limousine drivers and

tour coaches were also engaged to visit T3 to familiarise themselves with the traffic patterns.

RENOVATION AND MOVE-IN SCHEDULE

With over 100 shops and 40 food and beverage (F&B) outlets, we developed a three-stage move-

in schedule programme for all these tenants. These involved firstly working closely with the

Commercial division to ensure early award of tenders and allocation of office space. Secondly,

multiple parties were roped in to smoothen the approval process of shop designs and renovation

plans, followed by the actual renovation of the concession outlets and tenanted space. Lastly,

stocking-up and debris clearance plans were implemented.

70

INTEGRATED TRIALS AND LIVE FLIGHTS

A comprehensive trial programme was developed to integrate man, method and machine. The trials

started in June 2007 with volunteers from grassroots associations and students from local tertiary

education institutes acting as passengers. They were organised to simulate basic passenger arrival,

transit and departure flows and to test out wayfinding at the new terminal. Roadway and car park

trials were carried out by volunteers from car clubs to test out traffic flows and wayfinding and to

identify safety issues. Improvements were made following feedback from these basic trials.

The trials programme progressed to the next level of realism by operating live flights at T3.

Starting with chartered military flights from August 2007, actual travelling servicemen and their

meeters/greeters used T3 and tested the various systems and operational procedures.

Subsequently, chartered commercial flights with paying passengers were organised to use T3 in

September 2007.

By October 2007, T3 was ready for the first live commercial flight. In all, 43 departure and arrival

live commercial flights were conducted. The involvement of transfer passengers and baggage

increased the complexity of trials.

The integrated live flight trials culminated in a five-hour “live” cut-over exercise one week before

actual opening. This cutover exercise essentially replicated everything that would have occurred

on the actual opening day, down to the last detail. For example, the live commercial flights during

the exercise mirrored the flight schedule on opening day. All shop concessions were required to

operate as per opening day. All ground and service staff who are supposed to report to work on

Opening Day, did so for the cutover exercise.

PUBLIC OPEN HOUSE, INDUSTRY VISITS AND FEEDBACK

A public open house was organised over five weeks during the year end school holidays to give

the public a chance to visit the terminal before its actual opening. This would facilitate these future

customers who would be more familiar when they next use T3 for their flights. At the same time,

it would avoid having the public crowd the terminal unnecessarily during the operational opening

period. Lastly, opening the Terminal to the public would encourage the shop and restaurants to

complete their renovation on time in order to tap business from the visitors.

In addition, prior to the public open house, organised guided tours were held for groups ranging

from politicians, business partners, government agencies, travel trade industry, schools and

community centres. In all, about 16,000 visitors participated in these guided tours.

The T3 Public Open House event took place from 12 November to 9 December 2007 where more

than 240,000 members of the public explored the terminal on self-guided tours or join guided

tours of the transit area.

Opening of New Terminals – Changi Airport’s T3 experience

71

Journal Aviation Management 2008

PUBLICITY AND INFO-COMMUNICATIONS

A publicity and communication plan was developed to communicate two key messages, the actual

opening date and SIA’s expanded hub operations over two terminals.

With SIA operating from both T2 and T3, the challenge is to assist SIA to inform its departure

passengers on the correct terminal for their flights. At the same time, due to the need to optimise

SIA’s fleet utilisation, the arrival terminals are not fixed and arrival flight information would only

be available two hours prior to estimated arrival time.

To facilitate the communications on SIA’s expanded hub operations to travellers, measures were

put in place to remind passengers to check their flight information before they depart. Jointly

developed brochures were distributed onsite at the airport and up streamed to the travel trade

industry and overseas stations. Partners like transport operators, airport agencies, travel trade

and hospitality industry were also roped in to help disseminate the information and distribute

brochures to their customers/guests. Above-the-line campaigns were also launched, using online

and radio advertisements to communicate these messages to the general public.

ACTUAL OPENING – ORGANISATION

Various service recovery measures were anticipated beforehand and put in place in case passengers

ended up in the wrong terminal. Examples of such measures include free shuttle service between

T2 and T3, engagement of 100 temporary airport guides, additional signages and flight information

televisions.

The Civil Aviation Authority of Singapore had also set up a 24-hour Terminal Operations Command

Centre to monitor operations closely during the critical opening period. Daily co-ordination meetings

among the agencies were also convened to resolve operational issues and identify enhancements

to ground processes and airport facilities.

CONCLUSION

Precise planning and careful execution of all measures put in place is essential to ensure the

smooth opening of a new passenger terminal for all travelling passengers. T3 opened on 9 January

2008 with smooth flowing operations, marking yet another historical landmark in Singapore’s

aviation industry.

72

ABSTRACT

Sustainable Aviation

The ICAO States have risen to environmental challenges for aviation in the past: most notably on aircraft noise and on emissions which affect local air quality. The latest challenge is how the industry can develop a sustainable aviation sector which balances economic growth, social responsibility and environmental impact. In October 2007 the

36th ICAO Assembly agreed to the establishment of a senior level Group on International Aviation and Climate Change to develop a clear policy for international aviation. This will

be considered by the 15th Conference of the Parties to the United Nations Convention on Climate Change when it meets in Copenhagen at the end of 2009. This paper reviews previous ICAO measures on environmental matters and the present actions to address the development of a sustainable aviation industry.

Towards Sustainable Aviation

ABOUT THE AUTHOR ABOUT THE AUTHOR

Mr Michael Rossell

Michael Rossell is Representative of the United Kingdom on the Council of ICAO in September 2006. Mr Rossell headed up the international branch responsible for U.K. policy on aviation and the environment. He represented the UK in various working groups of the ICAO Committee on Aviation Environmental Protection (CAEP), and served as co-Rapporteur of a working group on market-based measures for reducing the environmental impact of aircraft engine emissions.

Towards Sustainable Aviation

73

Sustainable Aviation

INTRODUCTION

Growth of the aviation sector is likely to continue for as long

as increasing global wealth stimulates travel for business

and pleasure. But, aviation is a highly visible mode of

transport and its environmental impact is of growing

concern to the public and policy-makers. The International

Civil Aviation Organization (ICAO) has taken action over

the years to set standards for noise and emissions of

exhaust gases which affect local air quality, but there is a

pressing need for early action to limit or reduce emissions

of greenhouse gases. ICAO has made a start on this latest,

and most difficult challenge, through the agreement in

the 36th Assembly to establish the Group on International

Aviation and Climate Change (Resolution A36-22). Time is

pressing and ICAO must demonstrate leadership ahead

of the 15th Meeting of the Parties to the United Nations

Framework Convention on Climate Change (UNFCCC) at the

end of 2009.

SUSTAINABLE DEVELOPMENT

Sustainable development is not synonymous with

environmental protection. Sustainable development has

distinct, but closely linked, elements and in the UK are in

respect of five principles1. We should live within environmental

limits and achieve a just society, and do so by means of

sustainable economy, good governance and sound science.

Towards Sustainable AviationMr Michael Rossell

International Civil Aviation Organization

1 Internet, http://www.defra.gov.uk/sustainable/government/what/principles.htm (4 November 2008)

74

This is best illustrated in Figure 1:

Figure 1: Five Principles of Sustainable Development

For sustainable aviation, there are three main considerations, as follows:

• Economic effects: which, in essence, means growth of the sector. In Europe, as elsewhere, the

industry is adding terminal capacity, considering new runways and even new airports; new

airlines are emerging and existing ones expanding; and businesses rely on the benefits of just-

in-time deliveries that only a well integrated express packets industry can provide.

• Social consequences: both for good and bad. There are positive benefits for friends and families,

for businesses and commerce, and for employment throughout the industry – both directly and

indirectly. However, there are also negatives which arise largely from the environmental impacts,

e.g. from road traffic congestion at and around airports.

• Environmental impacts: aircraft noise and the effect of emissions on local air quality are well

understood and appropriate measures continue to be developed to address them. The effects

of greenhouse gas emissions are better understood than several years ago, but the scientific

community continues to develop its understanding, in particular of the effects of these emissions

at altitude.

In developing a sustainable aviation policy all three elements must be addressed – and addressed

in a very public way which shows that the industry is accountable and can be a good neighbour.

Towards Sustainable Aviation

Achieving a Sustainable EconomyBuilding a strong, stable and sustainable economy which provides prosperity and opportunities for all, and in which environmental and social costs fall on those who impose them (Polluter Pays), and efficient resource use is incentivised.

Using Sound Science ResponsiblyEnsuring policy is developed and implemented on the basis of strong scientific evidence, whilst taking into account scientific uncertainty (through the Precautionary Principle) as well as public attitudes and values.

Promoting Good GovernanceActively promoting effective, participative systems of governance in all levels of society - engaging people’s creativity, energy, and diversity.

Living Within Environmental LimitsRespecting the limits of the planet’s environment, resources and biodiversity - to improve our environment and ensure that the natural resources needed for life are unimpaired and remain so for future generations.

Ensuring a Strong, Healthy & Just SocietyMeeting the diverse needs of all people in existing and future communities, promoting personal well - being, social cohesion and inclusion, and creating equal opportunity for all.

75

Journal Aviation Management 2008

AIRCRAFT NOISE

Individually, newly designed and built aircraft are significantly quieter for their size, and often

in absolute terms, than aircraft of 20 years ago. The phase-out of the noisiest aircraft listed in

Chapter 2 at major airports around the world has meant that despite increased traffic, the number

of people living within a given noise footprint has reduced. However, the problem of aircraft noise

has not been solved. Increased traffic and sensitivity of people living near airports and under

flight paths – sometimes distant from airports – has meant that continuing efforts are necessary

to reduce the impact of aircraft further.

Developing standards and policies to deal with aircraft noise has been a major long term success

of co-operative work through ICAO. Over the years, successively stricter standards for aircraft

noise have been agreed upon. ICAO’s Committee on Aviation Environmental Protection (CAEP) has

worked in partnership with the industry to ensure that standards are environmentally effective,

technologically feasible and economically reasonable before recommending them to the ICAO

Council for adoption.

CAEP, Council and successive Assemblies have also developed Resolutions to promulgate policies

to get the best possible outcomes from the adoption of the new standards. Two important

Resolutions, still extant as A36-22, Appendix D and Appendix E (ICAO, 2007) deal respectively with:

the phasing out of the noisiest aircraft, starting with the developed countries and encouraging

others to do so as they are able; and, the adoption to the “balanced approach” to aircraft noise

management which encourages the application of land use planning measures and operational

measures before restricting the operation of certain aircraft types either at night (curfews) or at all

(e.g. by banning aircraft which do not meet specific certificated levels).

LOCAL AIR QUALITY

Smoke trailing behind departing aircraft prompted the first round of work within ICAO to develop

standards to reduce emissions which would have an impact on local air quality. This work

continues, consistent with the partnership approach with industry and the CAEP principles to

develop new standards for gaseous emissions including for nitrogen oxides (NOx) and to introduce

progressively stricter standards for new aircraft.

Emissions from aircraft are only part of those which have an impact on local air quality – they

are added to those which are in the ambient air for the region, from local industry, from road

transport and from airport-based vehicles. But, as measures are taken to reduce emissions from

other sources, and as the number and size of aircraft increases, the proportionate contribution

from aircraft will also increase unless corrective measures are taken.

Resolution A36-22, Appendix H (ICAO, 2007), recognises aviation’s impact on local air

quality and includes specific resolutions on the need to further develop understanding of the

processes, improve technological and operational practice, and to develop guidance on how the

76

impacts attributable to aviation might be ameliorated. There is also a specific Resolution which

requires the Council (advised by CAEP) “to continue its work to develop long-term technological

and operational goals with respect to aviation environmental issues, including nitrogen oxides

from aircraft.”

The manufacturing industry is acutely aware of the need to take action to reduce emissions of NOx

further, and in 2001 a report was published, which among its conclusions proposed an 80percent

cut in nitrogen oxide emissions from newly manufactured aircraft (Arguelles, P. et al, 2001). The

industry is investing heavily in new material development and technologies to achieve this. There

is also pressure on airports to reduce emissions from ground-based sources, such as tugs and

auxiliary power units, and also to increase the provision of public transport, so as to reduce the

number of private cars accessing airports.

GREENHOUSE GAS EMISSIONS

How aviation is to deal with its greenhouse gas emissions is currently its greatest challenge. How

ICAO responds to that challenge will mark its continued relevance in the field of aviation and the

environment.

The context in which emissions of greenhouse gases from aviation have to be considered is

established under the United Nations Framework Convention on Climate Change – UNFCCC (UNEP,

1999) and its Kyoto Protocol – KP (Climate Change Secretariat, 1998). Under Article 10 of the

UNFCCC, all Parties agree to work cooperatively, taking into account their common but differentiated

responsibilities and their specific national and regional development priorities, objectives and

circumstances but without introducing any new commitments for Parties not included in Annex I

(the developed countries).

In 1997, the Parties to the UNFCCC agreed in the KP to binding targets for the Annex 1 States. The

overall reduction would be 5.2percent in the period 2008 – 2012 compared to 1990. The KP also

established some flexible mechanisms by which emissions reductions could be achieved:

• Joint Implementation: projects between Annex 1 States,

• Clean Development Mechanism: projects where Annex 1 States could secure emissions reductions

in non-Annex 1 States, and

• Emissions Trading: which allowed States to use emissions reductions achieved in one area to

offset emissions somewhere else.

However, because of the complexities related to the allocation of emissions from international

aviation and shipping (bunker fuels), these emissions were not included in national totals under

the KP. Instead, Article 2.2 provided that Annex 1 Parties should pursue limitation or reduction of

them, working through the ICAO and the International Maritime Organization, respectively.

Towards Sustainable Aviation

77

Journal Aviation Management 2008

ICAO responded by initiating work with the Inter-governmental Panel on Climate Change (IPCC) to

assess the global impact of aviation on climate change. It produced a substantive peer-reviewed

report, the ‘IPCC Special Report on Aviation and Global Atmosphere’ in 1999. The report took

stock of what was known about the science of climate change and specifically aviation’s impact at

altitude, the available and projected technology, the anticipated trends in terms of growth of the

industry, and current and possible future measures which might be taken to mitigate the impacts

of aviation on the climate. Importantly, the report examined the known and possible impacts of

different gaseous emissions and developed quantified plausible scenarios for the future under

different policy choices. The document, which was finalised by government policy-makers in April

1999, was widely recognised as a step change in the understanding of aviation and climate change

and has established the basis for future work in this sphere.

This work has subsequently been updated by the IPCC 4th Assessment Report (IPCC, 2007),

which has estimated that aviation was responsible for around 2percent of global carbon dioxide

emissions. But these emissions are increasing as the industry grows and without further action

are expected to double within the next 20 years. In addition, emissions of NOx at high altitude,

through a complex chemical reaction with sunlight to produce ozone, increases the warming

effect of emissions from aviation. Furthermore, aircraft engines produce large quantities of water

vapour which create contrails and often persistent cirrus clouds – the warming potential of which

is thought to be significant but, as yet, difficult to quantify.

Some have asked the question “Is 2percent of CO2 emissions something we should worry about?”

To which the answer must be an emphatic yes. To put this amount in context, it is larger than most

countries’ individual emissions, and that is not taking into account the effects of NOx and water

vapour. Also, those Annex 1 States which are Parties to the KP have agreed to binding targets to

reduce their collective emissions by 5.2percent. Since international aviation emissions are outside

the national totals, any increase would erode that reduction.

Domestic aviation emissions fall within national totals and it is for States to make their own

policy decisions on how they address these in relation to emissions from other sources. Whether

they are treated in the same way or differently may depend in part on the relative quantity of

emissions from each source – consider for example the theoretical difference between the US with

its predominantly domestic market, and Singapore.

Since publication of the IPCC Special Report, CAEP and Council have continued to work on

improving their understanding and working on policy options, most notably in the development

of market-based measures. At the 33rd Assembly in 2001, the Assembly agreed Resolution

A33-7, Appendix I2 (ICAO, 2007), which for the first time recognised the need for a specific policy

on market-based measures regarding aircraft emissions. The Resolution specifically noted that

market-based measures were policy tools designed to achieve environmental goals at a lower cost

2 Superseded by A36-22

78

and in a more flexible manner than traditional regulatory measures, and the increasing recognition

of governments of their use in protecting the environment. The Resolution noted that work on

emissions trading was for the longer term whilst voluntary measures (under which industry and

governments agree on a target and/or to a set of actions to reduce emissions) could serve as a

first step.

RECENT DEVELOPMENTS

Although work continued in ICAO, it was developments outside which have set the pace. In

December 2006, the European Commission published a proposal to include emissions from

international aviation in its already operational emissions trading scheme (European Commission,

2006). The scheme had been established to deal with emissions from large point source emitters

such as power stations, cement works, smelters etc., but it could easily be adapted to include

other major emitters, provided it was possible to measure and account for their emissions. This

proposal has been refined through negotiation and the current position agreed with the European

Parliament is that the emissions trading scheme would apply to all services to and from the EU

from 2012. The cap for 2012 will be set at 97percent of the average annual emissions between

2004 and 2006; and the cap for 2013 at 95percent of those average annual emissions. 15percent

of the allocations would be auctioned.

There were also developments within the industry and at the International Air Transport Association

(IATA)’s AGM in 2007, Mr Giovanni Bisignani, Director General & CEO of IATA, challenged the

industry to adopt a bold vision of zero carbon aircraft by 20503 (Bisignani, G., 2007).

In September 2007, the 36th ICAO Assembly, fully cognisant of these developments, worked to

develop its own vision for the future. Under the chairmanship of the President of the Assembly, a

small group of “friends” worked to develop a draft Resolution to define this vision. While some

progress was made, a consensus was not possible. Instead, the President proposed, and the

Assembly agreed, to the establishment of a Group on International Aviation and Climate Change

(GIACC). The broad Terms of Reference for the group were established in Assembly Resolution A36-

22 Appendix K (ICAO, 2007). GIACC would be a small, senior level group of policy and decision-

makers – as distinct from CAEP’s technical experts – who would be charged with formulating a

coherent strategy for ICAO to address aviation’s impact on climate change.

GIACC met for the first time on 22-24 February 2008 in Montreal, Canada and took evidence from

senior representatives from the industry. It agreed on a way forward and specifically agreed that

Members should respond to a structured template of questions about States views on the role of

ICAO and its, and their own, response to greenhouse gas emissions from aviation.

The second meeting of GIACC was held on 14 - 16 July, again in Montreal, to review and debate

the collected responses to the templates. The initial discussions recognised that there were three

main clusters of policy to be addressed, these were:

3 This was adopted as IATA policy in April 2008.

Towards Sustainable Aviation

79

Journal Aviation Management 2008

• Goals for the short, medium and long term. Consistent with Appendix K the goals would be

aspirational and focus on improvements in fuel efficiency – but it was recognised that firmer

targets might be considered, in addition, for the medium and longer term.

• Measures to reduce greenhouse gas emissions. It was recognised that emissions reductions

would need to be achieved from a wide range of activities. These included design and

manufacture of more efficient aircraft; improved operations to reduce wastage from less than

optimal operational practice; improvements to management of airports to ensure maximum

efficiency of movements on the ground; optimisation of airspace design and control to permit

aircraft to fly the most direct routes and at the most efficient speed or on routes where they

could take advantage of jet-stream winds; and the use of market-based measures, both to

provide positive incentives for the foregoing, but also, through the KP flexible mechanisms to

enable the aviation industry to take advantage of emissions reductions in other areas at lower

cost than they could be achieved internally.

• Monitoring and reporting. This would be a key task to ensure that there was full information

collected on a consistent basis about fuel consumption, passenger/cargo miles flown etc. It

would be essential to have a transparent system so that participants have confidence that they

were operating in an equivalent environment with their competitors.

Although much work has already been done to examine these issues, GIACC agreed to establish

three Working Groups to develop this work in the context of a global strategy and to report back

to the Group as a whole in February 2009.

A degree of urgency had been injected into the process by the Secretariat of the UNFCCC who

explained that ICAO should prepare at least an interim response by mid-2009 if it was to be properly

considered by the 15th Conference of the Parties when it meets in Copenhagen at the end of 2009.

The UNFCCC had also been examining the issues surrounding emissions from international aviation

and shipping and had been considering options that would change the respective responsibilities

of ICAO and the Parties.

In addition, as explained above, in mid-2008 the European Parliament reached an agreement with

the Council of the European Union on the terms of aviation’s inclusion in the European Emissions

Trading Scheme.

At the time of writing, the Council of the EU had not formally agreed to the compromise but

was expected to do so later in the year, with just over three years before the provisions come

into effect.

80

NEXT STEPS

In setting up GIACC, the ICAO States recognised the important and complex interaction with the

UNFCCC process and in particular the need to establish a clear policy for international aviation for

the commitment period from 2013 to 2017, i.e. the successor to the KP. It therefore envisioned two

further meetings of GIACC – one in February 2009, and the other, fourth meeting later in the year.

Council would also need to determine when to hold a high level meeting with respect to the role

it wished to play in Copenhagen.

The Council would also need to prepare for the 37th ICAO Assembly scheduled for late 2010 in

which existing Resolutions would need to be reviewed and, if necessary, new ones agreed upon.

CONCLUSION

ICAO has a clear objective in Article 44(a) of the Chicago Convention to promote aviation. This means

promoting a sustainable industry which can continue to grow to deliver the many economic and

social benefits, that profit developed and developing countries alike. But, this must be consistent

with the third of ICAO’s Strategic Objectives, ie. it must be environmentally responsible.

ICAO has faced challenges on the environment in the past - on noise and on local air quality.

The Council and the Assembly have acted to produce consensus agreements. Climate change is

the biggest challenge yet and it will be essential that ICAO takes decisive action to address this

challenge. Without this action, ICAO will certainly lose its leadership role and the initiative will

pass to others – which will not have the interests of aviation foremost in their minds.

The GIACC has the opportunity to take bold steps, to set credible and demanding targets, to show

the way forward to achieving those targets, and to inject a leadership vision for international

aviation. For the sake of a sustainable future for aviation, the industry must fervently hope that

it succeeds.

REFERENCES

Arguelles, P. et al. (2001). European Aeronautics: A Vision for 2020, Meeting society’s needs and winning global

leadership. [WWW] http://www.acare4europe.com/docs/Vision%202020.pdf (15 July 2008).

Bisignani, G. (2007). Speech to the Annual General Meeting of the Arab Air Carriers’ Organisation. [WWW] http://www.

iata.org/pressroom/speeches/2007-24-10-01 (4 November 2008).

Climate Change Secretariat. (1998). United Nations Framework Convention on Climate Change, The Kyoto Protocol.

Germany. Climate Change Secretariat.

European Commission. (2006). Proposal for a Directive of the European Parliament and of the Council amending

Directive 2003/87/EC so as to include aviation activities in the scheme for greenhouse gas emission allowance trading

within the Community. [WWW] http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=COM:2006:0818:FIN:EN:PDF (4

November 2008).

Towards Sustainable Aviation

81

Journal Aviation Management 2008

ICAO. (1999). Aviation and the Global Atmosphere. Cambridge University Press.

ICAO. (2005). Annex 16 to the Convention on International Civil Aviation, Environmental Protection, Volume I Aircraft

Noise. Montreal.

ICAO. (2007). Assembly Resolutions in Force (as of 28 September 2007), Assembly Resolution A36- 22 Appendix D,

Doc 9902, Part I, p. 60. Montreal.

ICAO. (2007). Assembly Resolutions in Force (as of 28 September 2007), Assembly Resolution A36- 22 Appendix E,

Doc 9902, Part I, p. 61. Montreal.

ICAO. (2007). Assembly Resolutions in Force (as of 28 September 2007), Assembly Resolution A36- 22 Appendix H,

Doc 9902, Part I, p. 65. Montreal.

ICAO. (2007). Assembly Resolutions in Force (as of 28 September 2007), Assembly Resolution A36- 22 Appendix K,

Doc 9902, Part I, p. 68. Montreal.

ICAO. (2007). Assembly Resolutions in Force (as of 28 September 2007), Assembly Resolution A36- 22 Appendix L,

Doc 9902, Part I, p. 72. Montreal.

ICAO. (2008). Annex 16 to the Convention on International Civil Aviation, Environmental Protection, Volume II Aircraft

Engine Emissions. Montreal.

Inter-governmental Panel on Climate Change. (2007). IPCC 4th Assessment Report. [WWW] http://www.ipcc.ch/ (17

November 2007).

UNEP. (1999). United Nations Framework Convention on Climate Change, Convention on Climate Change, Article 10.

Switzerland. UNEP.

82

JOURNAL OF AVIATION MANAGEMENT 2009 CONTRIBUTOR GUIDELINES

The Journal of Aviation Management is an annual publication by the Singapore Aviation Academy,

the training arm of the Civil Aviation Authority of Singapore. It aims to provide an intellectual forum

for the sharing of views and experiences on new developments and topical management issues in

civil aviation amongst leading experts from Singapore and around the world.

It is distributed to a worldwide audience of experts and professionals in the field of civil aviation.

Journal papers are also posted on SAA’s Alumni website under ‘Article of the Month’. We welcome

contributions of papers and feedback from members of the aviation community.

CopyrightAuthors submitting papers for publication should warrant that the work is not an infringement

of any existing copyright (and will indemnify the publisher against any breach of such warranty).

Authors should indicate if their paper has been presented/published elsewhere. If he/she does not

do so, it will be assumed that the paper is an original contribution. Papers published will become

the legal copyright of the published, unless otherwise agreed.

Preparation of PaperLength: Preferred length is between 3,000 and 4,000 words.

Title: Should identify the subject matter as briefly and clearly as possible.

Abstract: Authors are requested to provide an abstract of about 150 words.

Figures and Tables: Should be typed separately from the text, and numbered and captioned

clearly.

Illustrations: Where possible, provide high resolution digital files. High quality black and white and

colour transparencies, slides or prints are also acceptable.

Footnotes: To be used as sparingly as possible. Footnotes should be numbered consecutively

(1,2,3) and appear on the page they are referred to.

ReferencingReferences to other works should be presented according to the APA Referencing Style as

follows:

• Reference to articles

Author (family name/last name followed by initials). Year of Publication in brackets. Title of article.

Name of the publication in which it appears, volume, issue (in brackets), page reference, date

of issue.

Example: Bells, W G. (1993). Guidelines for emergency management in fixed site installations.

Journal of Disaster Prevention and Management, 2, (4), pp. 6-16.

• References to books or preports

Author (surname followed by initials). Year of publication in brackets. Book title, including

subtitle (underlined). Edition (in brackets). Place of publication. Publisher.

Example: Wells, A T. (1996). Airport Planning and Management (3rd edn). New York. McGraw-Hill.

• References to websites or a WWW document

Author (surnamed followed by initials). Year of publication in brackets. Document title

(underlined). Format (WWW). URL including filename extension. Date accessed in brackets.

Example: Lee, J. (1999). Salvador Dali. (WWW)

http://dali.kores.ac.kr/SalvadorDali_biography.html (30 July 2001).

• Please list references chronologically in alphabetical order.

• Where necessary, in-text referencing should be included.

– When quoting, referencing should be reflected in brackets immediately after quote, as

(author’s surname, year, page reference)

Example: (Aust, 200,p75)

– When paraphrasing, referencing should be reflected as author’s surname (year, page

reference).

Example: Aust (2000,p.75) argued that….

Biography and Photograph

Authors are requested to submit a brief biography (50-100 words) outlining their current

title/appointment, qualifications and relevant career highlights, as well as a photograph of

themselves.

Submission of Paper

Authors are requested to submit a printed copy of the paper as well as a softcopy in cd or via

email, preferably in Microsoft Word format. Copy deadline for the 2009 issue is 31 March 2009.

Papers should be submitted to:

The Editor

Journal of Aviation Management

Singapore Aviation Academy

1 Aviation Drive

Singapore 499867

Fax: (65) 6542 9890/ 6543 2778

Email: [email protected]

JOURNAL OF AVIATION MANAGEMENT 2008

An annual publication since 2000, the Journal serves to provide an intellectual forum for sharing of views and experiences on critical issues affecting international civil aviation among leading experts from Singapore and around the world.

I wish to purchase copies of the Journal of Aviation Management at S$36* (inclusive of postage per copy. Please send them to:

Name: _____________________________________________________________________________________________

Designation: _______________________________________________________________________________________

Organisation: _______________________________________________________________________________________

Mailing Address:_____________________________________________________________________________________

___________________________________________________________________________________________________

Postal Code: _______________________________ Country: ________________________________________________

Tel No: ____________________________________________________________________________________________

Email Address: ______________________________________________________________________________________

No. of copies: ______________________________________________________________________________________

Total amount payable: S$ ____________________________________________________________________________

*Alumni members are entitled to a 10% discount.

Payment Details (Please tick where applicable)

Bank draft/ Money Order/ Cheque No.________________________________________________________________

Telegraphic transfer to Citibank, Main Office, Singapore Account No.:0-70203-25

Credit Card: Visa/ Mastercard/ Diners/ Amex Card No.: __________________________________________________

Expiry date: _____________________________________________________________________________________

Payment must be made in S$ to “Civil Aviation Authority of Singapore”. Cash-and-carry purchases are welcomed.

Journals will not be dispatched until payment has been received. Please submit completed Journal Order Forms with

payment to:

The Editor

Journal of Aviation Management

Singapore Aviation Academy

1 Aviation Drive, Singapore 499867

Fax: (65) 6542 9890/ 6543 2778

Orders for the Journal (including past issues) may also be made through the Singapore Aviation Academy website

at http://www.saa.com.sg.