FAA and Boeing defend oversight of 737 MAX

FAA and Boeing defend oversight of 737 MAX

Questions have been raised of an overly cozy relationship between the FAA and the airline industry.

By Michael Laris, Luz Lazo, Ashley Halsey III and Lori Aratani / The Washington Post

WASHINGTON — Under grilling Wednesday about two deadly crashes involving the Boeing 737 Max 8 jet, federal transportation officials promised renewed oversight, and Boeing detailed software upgrades and increased training for pilots. But both also defended the system that certified the aircraft and Boeing reiterated that its product is safe.

Facing questions on Capitol Hill, Daniel Elwell, the acting administrator of the Federal Aviation Administration, defended the federal government’s approach of delegating broad oversight powers to Boeing. More than 2,000 miles away, in Renton, Washington, Mike Sinnett, Boeing’s vice president of product strategy and development, said new updates give him “complete confidence in the safety” of the 737 Max.

The company’s newest model of plane has been involved in two crashes in less than five months, killing 346 people.

“The 737 is a safe airplane,” Sinnett said. “The 737 family is a safe airplane family, and the 737 Max builds on that history of safety that we have seen for almost 50 years,” Sinnett said at a briefing before company officials met with more than 200 pilots, technical leaders, airline representatives and regulators from around the world.

Mike Sinnett, Boeing’s Vice President of Product Strategy, reads from notes as he talks to reporters on Wednesday about software and training updates for their 737 MAX 8 airplane in Renton. (AP Photo/Ted S. Warren)

Mike Sinnett, Boeing’s Vice President of Product Strategy, reads from notes as he talks to reporters on Wednesday about software and training updates for their 737 MAX 8 airplane in Renton. (AP Photo/Ted S. Warren)

Boeing said it will take about an hour for technicians to load a software update for the planes. The update is meant to fix an automated anti-stalling safety feature that investigators believe may have contributed to the Oct. 29 crash in Indonesia and the March 10 crash in Ethiopia. All 737 Max pilots will undergo new training.

It will be up to the world’s aviation authorities to decide what happens next, and when.

“Returning to flight will be at the regulators’ discretion,” Sinnett said, explaining what he described as the “rigor and the thoroughness of the design and testing” that went into the updates.

But congressional hearings Wednesday and ongoing federal probes demonstrated how many questions remain about the broad safety assurances Boeing and the FAA made about the plane.

“Overconfidence breeds complacency, and complacency breeds disaster. We’ve seen it here, and we will see it again unless we mandate safety as something which is not optional,” Sen. Edward Markey, D-Mass., said at a sometimes tense hearing of the subcommittee on aviation and space.

More broadly, the company’s software fixes will change the way the automated anti-stall feature, known as MCAS, receives information, requiring feeds from both outside sensors before it is triggered. Following the two crashes, aviation experts expressed surprise that in an industry that stresses redundancy, the feature could be triggered by information from just one sensor.

Investigators of the Lion Air crash in Indonesia suspect that the automated feature received incorrect information from one sensor, prompting it to force the plane’s nose down over and over even as pilots struggled to pull it up.

Even with the changes, both the FAA and Boeing will need to rebuild trust among lawmakers, the public and aviation authorities around the world, observers said. The United States, for example, was the last major country to ground the plane.

For both Boeing and the FAA, “the credibility is damaged,” said Thomas Anthony, a former FAA investigator who runs the University of Southern California’s Aviation Safety and Security Program. “The only way they can regain the credibility is to prove their commitment, to establish a process that can identify hazards, listen to all users, and make transparent changes.”

The Justice Department’s criminal division is looking into the 737 Max, and the Transportation Department’s inspector general is investigating the way the certification was handled, as is Congress and a special committee set up by Transportation Secretary Elaine Chao.

Transportation Department Inspector General Calvin Scovel said the FAA hadn’t given its oversight teams “tools or guidance on data they should used to identify the high-risk areas” they should prioritize. He said the FAA would introduce a new process in July that would represent a “significant change” in its approach, by developing “new evaluation criteria” and particular areas of focus for oversight, such as training and the way companies “self- audit.”

“Recent accidents highlight important concerns about FAA’s safety oversight,” said Scovel, whose office has launched an audit of FAA’s certification process. He said he hopes to have the work complete in 10 months, but said the complexity of the task could cause it to take longer.

Shem Malmquist, a Boeing 777 captain and a visiting professor at the Florida Institute of Technology, said a critical step would be for U.S. regulators to recognize and act on their own flaws.

“It’s as simple as that the regulations haven’t kept up with the industry,” Malmquist said. “The question is why are we using outdated standards to try to certify modern aircraft that have complex computer systems.”

“We have a good regulatory agency. We have an excellent aerospace company,” he added. “It’s just a matter of updating the standards to match reality and maybe have a regulatory framework that keeps up with changes in technology — because right now it doesn’t.”

Congress has, for many years, instructed the FAA to hand over more of its safety oversight to companies such as Boeing, which have pushed hard for the changes on Capitol Hill. The stated goal was increasing efficiency at the agency, which critics within the industry and in Congress said was too slow in certifying the extraordinarily complex aircraft, slowing economic growth.

In this photo taken with a fish-eye lens, a Boeing 737 MAX 8 airplane sits on the assembly line during a brief media tour in Boeing’s 737 assembly facility on March 27 in Renton. (AP Photo/Ted S. Warren)

In this photo taken with a fish-eye lens, a Boeing 737 MAX 8 airplane sits on the assembly line during a brief media tour in Boeing’s 737 assembly facility on March 27 in Renton. (AP Photo/Ted S. Warren)

But crashes raised questions about the process Boeing, with the FAA’s help, used to certify that planes were safe and that pilots understood the aircraft’s automated features.

“At this time last year, the FAA was widely viewed as the ‘gold standard’ for safety in the aviation industry, but it is becoming clear that these tragedies resulted from a cascading chain of failures — from manufacturer to regulator to airline,” Sen. Tammy Duckworth, D-Ill., said. “We must ensure each and every weakness in this chain is addressed, not just one of them. And we must work end the culture of coziness in aviation safety oversight to help prevent similar tragedies from happening again.”

At a Senate Appropriations Committee hearing Wednesday morning, Chao defended the FAA’s system for delegating oversight authority, which was set up in 2005 and is known as the Organizational Designation Authorization program.

Sen. Susan Collins, R-Maine, pressed Chao on Boeing’s relationship with the FAA, citing concerns that using the program “to accelerate the commercial aims of Boeing or other manufacturers sacrifices, potentially, the safety of the traveling public.”

Chao said efforts to rely more on the companies themselves have gone on for many years, adding that Congress took further action last year.

“More authority was given to the FAA to work with those who build the planes who actually know what is going on in this process,” Chao said. “The FAA does not build planes; they certify.”

But Chao added: “I am of course concerned about any allegations of coziness, with any company, manufacturer, whatever.”

While the FAA is a professional organization, with 44,000 people whose “main mission every day” is safety, “these questions, when they arise, if they arise, are troubling, because we should have absolute confidence in the regulators that they are certifying properly.”

Chao said she expects ongoing probes “will yield some answers.”

The FAA has previously said its “experts, including chief scientists, engineers and flight test pilots conducted in-flight testing” of the 737 Max’s flight control system, including the MCAS.

In testimony prepared for Wednesday’s hearing, Elwell added that the overall process included 297 certification flight tests and noted that the FAA was “directly involved in the System Safety Review of” the MCAS features.

At the heart of inquiries into the FAA’s role overseeing the plane — and into Boeing’s work developing the aircraft and working with regulators to certify it — are questions about exactly what information Boeing had about the risks of the automated features, what information the FAA required from the company, and what information Boeing provided the FAA.

Federal Aviation Administration Acting Administrator Daniel Elwell speaks at a Senate Transportation subcommittee hearing on commercial airline safety on Wednesday in Washington. (AP Photo/Andrew Harnik)

Federal Aviation Administration Acting Administrator Daniel Elwell speaks at a Senate Transportation subcommittee hearing on commercial airline safety on Wednesday in Washington. (AP Photo/Andrew Harnik)

He said the certification process was robust, but later events added critical new information.

“The certification process was detailed and thorough, but, as is the case with newly certified products, time yields more data to be applied for continued analysis and improvement,” Elwell said. “As we obtain pertinent information, identify potential risk, or learn of a system failure, we analyze it, we find ways to mitigate the risk, and we require operators to implement the mitigation. And that is what has happened in the case of the 737 MAX.”

He also emphasized to lawmakers: “We actually don’t know the cause of the crash. There’s a lot more to find out through the investigation.”

With more than 380 of the jets grounded worldwide, and some airlines demanding they be reimbursed for their losses, Boeing is anxious to get them back in the air. The company has suspended delivery of all new 737 Max planes, though production continues. At least one carrier, Indonesia’s national airline, Garuda Indonesia, has canceled an order for 50 of the Max planes.

In developing the software update, Boeing said its testers used simulators to create “the most challenging scenarios” possible, and saw what would happen with various human and technical errors.

Simulator “pilots worked with the software design team to incorporate multiple layers of protection in the event of sensor errors or other erroneous inputs. They assessed a broad range of piloting techniques, in order to ensure that normal airmanship skills are sufficient to control the airplane,” a Boeing spokesman said.

They then put the updates in a real plane for an “engineering verification” flight with several steep or otherwise problematic maneuvers on Feb. 7, then held a certification flight with the FAA on March 12, two days after the Ethiopian Airlines flight crashed.

MCAS, which stands for maneuvering characteristics augmentation system, is a new feature on Boeing’s 737 Max planes designed to compensate for changes in the plane’s design by automatically pushing the plane’s nose downward if it appears it is too high and at risk of stalling. To do that, MCAS relies on information from one of two “angle-of-attack” sensors mounted on the plane’s nose.

In the case of the Lion Air crash, investigators suspect that the MCAS system received incorrect information from one sensor, prompting it to force the plane’s nose down even as pilots were trying to pull it up. In the wake of that crash, the FAA issued an emergency order warning that erroneous inputs from angle-of-attack inputs “can potentially make the horizontal stabilizers pitch the nose of the airplane downward, making the aircraft difficult to control.” U.S. operators were ordered to revise flight manuals so crews would have procedures for dealing with such an occurrence.

In the Oct. 29 Lion Air crash, a malfunctioning sensor and an automated response from the aircraft’s software impeded the pilots’ efforts to control the ill-fated Indonesian flight from plunging into the sea, killing all 189 people on board, according to a preliminary investigative report.

The angle of attack sensor was showing erroneous readings throughout the time the plane was airborne. With the sensor insisting the nose was too high, the MCAS kicked in, sending the plane down as the cockpit crew fought to regain control, according to the preliminary report.

Every time the flight crew pulled the nose back to level, within seconds, the MCAS tipped it back downward.

Black-box data released by Indonesian investigators showed pilots were pulling back on the control column, attempting to raise the plane’s nose, applying almost 100 pounds of pressure to it before they crashed into the Java Sea just 12 minutes after takeoff.

Pilots have mixed opinions on whether the new instruments are necessary.

John Cox, an airline safety consultant with the aviation consulting firm Safety Operating Systems, said the pilot community has long debated whether the additional display and warning light are needed.

“It’s not an easy yes-or-no question,” said Cox, a former pilot. “If you look at most airplanes around the world, most airlines don’t have it.”

He said pilots with military backgrounds often prefer to have the gauges because they are standard on many high-performance military aircraft, but pilots who come from the civilian ranks don’t necessarily see a need for them.

In the United States, only American Airlines paid extra to have both the warning light and angle of attack indicators installed in their cockpits. Southwest Airlines had the indicator light, but it was only after the Lion Air crash that it opted to also include the indicator in the cockpit as well.

Officials at American Airlines said they included them because their pilots prefer to fly with them.

Both airlines declined to say how much the extra features cost, as did Boeing.

United’s Max 9 jets aren’t equipped with the instruments because officials did not think they were necessary.

“We did not install these features because our aircraft is already equipped with anti-stall indicators, which are proven and safe,” a spokesman said. “None of United’s airplanes have angle of attack on their primary flight display, as pilots are trained to use airspeed, pitch and power for the safe operation of aircraft.”

The Washington Post’s Aaron Gregg contributed to this report.

Talk to us

More in Nation-World

FILE - Britain's Queen Elizabeth II looks on during a visit to officially open the new building at Thames Hospice, Maidenhead, England July 15, 2022. Buckingham Palace says Queen Elizabeth II is under medical supervision as doctors are “concerned for Her Majesty’s health.” The announcement comes a day after the 96-year-old monarch canceled a meeting of her Privy Council and was told to rest. (Kirsty O'Connor/Pool Photo via AP, File)
Queen Elizabeth II dead at 96 after 70 years on the throne

Britain’s longest-reigning monarch and a rock of stability across much of a turbulent century died Thursday.

A woman reacts as she prepares to leave an area for relatives of the passengers aboard China Eastern's flight MU5735 at the Guangzhou Baiyun International Airport, Tuesday, March 22, 2022, in Guangzhou. No survivors have been found as rescuers on Tuesday searched the scattered wreckage of a China Eastern plane carrying 132 people that crashed a day earlier on a wooded mountainside in China's worst air disaster in more than a decade. (AP Photo/Ng Han Guan)
No survivors found in crash of Boeing 737 in China

What caused the plane to drop out of the sky shortly before it was to being its descent remained a mystery.

In this photo taken by mobile phone released by Xinhua News Agency, a piece of wreckage of the China Eastern's flight MU5735 are seen after it crashed on the mountain in Tengxian County, south China's Guangxi Zhuang Autonomous Region on Monday, March 21, 2022. A China Eastern Boeing 737-800 with 132 people on board crashed in a remote mountainous area of southern China on Monday, officials said, setting off a forest fire visible from space in the country's worst air disaster in nearly a decade. (Xinhua via AP)
Boeing 737 crashes in southern China with 132 aboard

More than 15 hours after communication was lost with the plane, there was still no word of survivors.

In this photo taken from video provided by the Ukrainian Presidential Press Office, Ukrainian President Volodymyr Zelenskyy speaks to the nation in Kyiv, Ukraine, Sunday, Feb. 27, 2022. Street fighting broke out in Ukraine's second-largest city Sunday and Russian troops put increasing pressure on strategic ports in the country's south following a wave of attacks on airfields and fuel facilities elsewhere that appeared to mark a new phase of Russia's invasion. (Ukrainian Presidential Press Office via AP)
Ukraine wants EU membership, but accession often takes years

President Volodymyr Zelenskyy’s request has enthusiastic support from several member states.

FILE - Ukrainian servicemen walk by fragments of a downed aircraft,  in in Kyiv, Ukraine, Friday, Feb. 25, 2022. The International Criminal Court's prosecutor has put combatants and their commanders on notice that he is monitoring Russia's invasion of Ukraine and has jurisdiction to prosecute war crimes and crimes against humanity. But, at the same time, Prosecutor Karim Khan acknowledges that he cannot investigate the crime of aggression. (AP Photo/Oleksandr Ratushniak, File)
ICC prosecutor to open probe into war crimes in Ukraine

U.N. human rights chief Michelle Bachelet confirmed that 102 civilians have been killed.

FILE - Refugees fleeing conflict from neighboring Ukraine arrive to Zahony, Hungary, Sunday, Feb. 27, 2022. As hundreds of thousands of Ukrainians seek refuge in neighboring countries, cradling children in one arm and clutching belongings in the other, leaders in Poland, Hungary, Bulgaria, Moldova and Romania are offering a hearty welcome. (AP Photo/Anna Szilagyi, File)
Europe welcomes Ukrainian refugees — others, less so

It is a stark difference from treatment given to migrants and refugees from the Middle East and Africa.

Afghan evacuees disembark the plane and board a bus after landing at Skopje International Airport, North Macedonia, on Wednesday, Sept. 15, 2021. North Macedonia has hosted another group of 44 Afghan evacuees on Wednesday where they will be sheltered temporarily till their transfer to final destinations. (AP Photo/Boris Grdanoski)
‘They are safe here.’ Snohomish County welcomes hundreds of Afghans

The county’s welcoming center has been a hub of services and assistance for migrants fleeing Afghanistan since October.

FILE - In this April 15, 2019, file photo, a vendor makes change for a marijuana customer at a cannabis marketplace in Los Angeles. An unwelcome trend is emerging in California, as the nation's most populous state enters its fifth year of broad legal marijuana sales. Industry experts say a growing number of license holders are secretly operating in the illegal market — working both sides of the economy to make ends meet. (AP Photo/Richard Vogel, File)
In California pot market, a hazy line between legal and not

Industry insiders say the practice of working simultaneously in the legal and illicit markets is a financial reality.

19 dead, including 9 children, in NYC apartment fire

More than five dozen people were injured and 13 people were still in critical condition in the hospital.

15 dead after Russian skydiver plane crashes

The L-410, a Czech-made twin-engine turboprop, crashed near the town of Menzelinsk.

FILE - In this March 29, 2018, file photo, the logo for Facebook appears on screens at the Nasdaq MarketSite in New York's Times Square. Facebook prematurely turned off safeguards designed to thwart misinformation and rabble rousing after Joe Biden defeated Donald Trump in the 2020 elections in a moneymaking move that a company whistleblower alleges contributed to the deadly Jan. 6, 2021, invasion of the U.S. Capitol. (AP Photo/Richard Drew, File)
Facebook, WhatsApp, Instagram in hourslong worldwide outage

Something made the social media giant’s routes inaccessable to the rest of the internet.

Oil washed up on Huntington Beach, Calif., on Sunday, Oct. 3, 2021. A major oil spill off the coast of Southern California fouled popular beaches and killed wildlife while crews scrambled Sunday to contain the crude before it spread further into protected wetlands. (AP Photo/Ringo H.W. Chiu)
Crews race to limited damage from California oil spill

At least 126,000 gallons (572,807 liters) of oil spilled into the waters off Orange County.