National Transportation Safety Board Safety Recommendation May 8, 2001
**** Hidden Message ***** 7350<BR>National Transportation Safety Board<BR>Washington, D.C. 20594<BR>Safety Recommendation<BR>Date: May 8, 2001<BR>In reply refer to: A-01-16 through -22<BR>Honorable Jane F. Garvey<BR>Administrator<BR>Federal Aviation Administration<BR>Washington, D.C. 20591<BR>On November 20, 2000, about 1222 eastern standard time, a flight attendant/purser was<BR>killed during an emergency evacuation of American Airlines flight 1291, an Airbus<BR>Industrie A300B4-605R, N14056, at Miami International Airport (MIA), Miami, Florida. The<BR>airplane was pressurized until the flight attendant/purser opened the left front door (1L); he was<BR>then forcibly ejected from the airplane. Visual meteorological conditions prevailed, and an<BR>instrument flight plan was filed. The flight was operating as a 14 Code of Federal Regulations<BR>Part 121 scheduled international passenger flight. There were 133 persons on board. During the<BR>emergency evacuation, in addition to the 1 flight attendant/purser who was killed, 3 passengers<BR>sustained serious injuries; 18 passengers and 1 flight service director1 sustained minor injuries; and<BR>the 2 pilots, 6 flight attendants, 1 off-duty flight attendant, 1 flight service director, and the<BR>remaining 100 passengers reported no injuries. The airplane sustained minor damage.<BR>The flight departed MIA for Port Au Prince International Airport, Haiti, and had been<BR>airborne for about 8 minutes when the flight crew encountered a problem with the automatic<BR>pressurization system. The captain stated to National Transportation Safety Board investigators<BR>that the automatic cabin pressurization controllers would not control cabin pressure when the<BR>airplane was climbing through 16,000 feet and that the electronic centralized airplane monitor<BR>1 Flight service directors are language translators who receive emergency procedures training for land and<BR>over-water evacuations for the aircraft to which they are assigned.<BR>2<BR>(ECAM) display2 showed the forward outflow valve3 opened fully.4 The cabin altitude was<BR>climbing at a rate of 2,000 feet per minute, and the cabin altitude indicator showed 7,000 feet.<BR>The captain decided to operate the pressurization system in the manual mode (and closed the<BR>outflow valves) and, about 11 minutes after departure, indicated to air traffic control (ATC) that<BR>the flight would return to MIA. At that point, the pilots began performing the American Airlines<BR>A3005 Cabin Pressurization Manual Control Checklist,6 which is contained in the American<BR>Airlines A300 operating manual.<BR>The captain stated to Safety Board investigators that during the return to MIA, the flight<BR>attendant call chimes sounded erratically and the lavatory smoke detectors sounded continually.<BR>Passengers and cabin crewmembers complained about pressure in their ears. About 3 minutes<BR>before landing, the captain declared an emergency to ATC and requested that aircraft rescue and<BR>firefighting (ARFF) personnel stand by for the landing. After the airplane landed at MIA, ARFF<BR>personnel checked the exterior of the airplane and reported no signs of fire. The cockpit voice<BR>recorder indicates that a flight attendant reported smelling smoke to the flight crew. The captain<BR>indicated to Board investigators that he observed the illumination of a cargo loop light7 on the<BR>cockpit overhead panel. The captain then ordered an emergency evacuation of the airplane, and<BR>the American Airlines A300 Ground Evacuation Checklist8 was performed. The flight attendants<BR>heard the sounding of the evacuation signaling system and attempted to open the emergency exits<BR>to begin the emergency evacuation but were having difficulty doing so. A flight attendant<BR>reported to the flight crew that the doors would not open. While the flight attendant/purser was<BR>struggling to open the 1L door of the airplane, the door suddenly burst open, and he was forcibly<BR>ejected onto the ramp and was killed. Preliminary findings from the investigation revealed that<BR>excess air pressure inside the cabin caused the door to burst open.<BR>Although this accident investigation is ongoing,9 the Safety Board identified several safety<BR>issues that require the Federal Aviation Administration’s (FAA) attention.<BR>2 The ECAM display is a cathode ray tube screen located in the cockpit. The system is automatic and displays<BR>messages and system diagrams to pilots. It provides operational assistance for both normal and abnormal airplane<BR>system situations.<BR>3 The two outflow valves open and close during flight and on the ground to maintain control of cabin<BR>pressurization.<BR>4 Postaccident examination of the accident airplane by the Safety Board’s Systems Group revealed that<BR>insulation blankets partially blocked the forward outflow valve and almost fully blocked the aft outflow valve.<BR>5 All A300 airplanes that American Airlines operates are A300-600 airplanes.<BR>6 The American Airlines A300 Cabin Pressurization Manual Control Checklist is similar to that of Airbus.<BR>The entire checklist cannot be performed at one time; rather, pilots must initiate the checklist and then complete it<BR>later in flight. According to the accident captain, he did not perform all of the items in the Cabin Pressurization<BR>Manual Control Checklist because of his other priorities at the time, including addressing the smoke indications<BR>and landing the airplane.<BR>7 Illumination of a cargo loop light may indicate a fire in the cargo compartment. No evidence of fire was<BR>found in the Safety Board’s postaccident examination of the airplane.<BR>8 The American Airlines A300 Ground Evacuation Checklist, which is contained in the American Airlines<BR>A300 operating manual, is similar to the Airbus A300-600 On Ground/Emergency Evacuation Checklist.<BR>9 The description for this accident, MIA01FA029, can be found on the Safety Board’s Web site at<BR><<A href="http://www.ntsb.gov">http://www.ntsb.gov</A>>.<BR>3<BR>Pressurization System<BR>Airplane pressurization systems can be operated in automatic and manual modes. The<BR>manual mode of operation, which is considered by both the Airbus A300-600 and American<BR>Airlines A300 operating manuals10 to be an abnormal procedure, is used on the A300-600 airplane<BR>when the automatic mode becomes inoperative and allows the flight crew to manually operate the<BR>electric motors that control the outflow valves. The Airbus A300-600 and American Airlines<BR>A300 Cabin Pressurization Manual Control Checklists, which are contained in the companies’<BR>respective operating manuals, both address the manual mode of the pressurization system. With<BR>the pressurization system in the automatic mode, the airplane is pressurized upon landing, but the<BR>outflow valves automatically open slowly (and depressurize the airplane) within 45 seconds of<BR>landing, assisting in passenger comfort. However, with the pressurization system in the manual<BR>mode, the airplane does not automatically depressurize after landing because the automatic<BR>operation of the electric motors that open and close the outflow valves is inhibited. Therefore,<BR>when operating the airplane’s pressurization system in the manual mode, the flight crew must fully<BR>open the outflow valves as indicated in the Cabin Pressurization Manual Control Checklist by<BR>selecting the Cabin Vertical Speed Control switch to the UP position before landing to ensure that<BR>the airplane is depressurized.<BR>As indicated earlier, the accident captain began performing the items in the Cabin<BR>Pressurization Manual Control Checklist but did not complete the checklist, including the item<BR>that instructs pilots to select the Cabin Vertical Speed Control switch to the UP position to open<BR>the outflow valves and depressurize the airplane before landing. The captain indicated that he did<BR>not complete the checklist because of his other priorities at the time. During postaccident<BR>interviews with Safety Board investigators, the pilots of the accident airplane stated that they<BR>were not aware that the airplane would not automatically depressurize after landing because this<BR>issue was not mentioned in the operating manuals or during training.<BR>The investigation confirmed that the pressurization system description section in the<BR>Airbus Industrie A300-600 operating manual does not state that the airplane will not<BR>automatically depressurize after landing if the pressurization system is being operated in the<BR>manual mode. The investigation also confirmed that the American Airlines A300 operating<BR>manual does not contain this information. Further, because the American Airlines training<BR>program for the A300-600 airplane only covers the information in the American Airlines A300<BR>operating manual, the training program also fails to address this issue.<BR>The Safety Board is concerned that because of the lack of information in the Airbus<BR>Industrie A300-600 operating manual and the American Airlines A300 operating manual and<BR>training program about this issue, flight crews of Airbus Industrie A300-600 airplanes might be<BR>unaware that the airplane does not automatically depressurize upon landing when the<BR>pressurization system is in the manual mode. Although proper completion of the Cabin<BR>Pressurization Manual Control Checklist should result in the airplane being depressurized upon<BR>10 The manufacturer’s operating manual provides flight crewmembers with information on the technical,<BR>procedural, and performance characteristics of the aircraft. This manual is suitable for training and may be used as<BR>a crew manual or to aid operators in developing operating manuals and procedures.<BR>4<BR>landing, the Board’s experience has shown that pilots sometimes do not properly complete<BR>checklists, as occurred in this case. This investigation found that pilots may not be aware that one<BR>of the repercussions of failing to complete the checklist is the airplane remaining pressurized upon<BR>landing. The Board notes that regardless of a flight crew’s reasons for failing to complete the<BR>checklist, if the pilots had known that the airplane was still pressurized, they would likely have<BR>depressurized the airplane before permitting the door to be opened.11 Therefore, the Safety Board<BR>believes that the FAA should require that the Airbus Industrie A300-600 operating manual clearly<BR>state that automatic depressurization of the airplane upon landing will not occur when the<BR>pressurization system is being operated in the manual mode. Further, the Safety Board believes<BR>that the FAA should review all Airbus Industrie A300-600 operators’ operating manuals and<BR>training programs and require revisions, if necessary, to ensure that they clearly indicate that<BR>automatic depressurization of the airplane upon landing will not occur when the pressurization<BR>system is being operated in the manual mode.<BR>Checklists for Emergency Ground Evacuation<BR>The Airbus Industrie A300-600 On Ground/Emergency Evacuation Checklist and the<BR>American Airlines A300 Ground Evacuation Checklist, which are contained in the companies’<BR>respective operating manuals, direct the flight crew to select the Ram Air switch to the<BR>ON position during a ground evacuation. This switch allows fresh outside air to flow into the<BR>airplane when it is airborne and depressurizes the airplane by opening both outflow valves when<BR>the airplane is in flight or on the ground and the pressurization system is being operated in the<BR>automatic mode. When the pressurization system is being operated in the automatic mode, the<BR>Ram Air switch is used as a backup method of ensuring that the outflow valves are open and is<BR>also used to open the outflow valves if the evacuation occurs less than 45 seconds after landing.<BR>However, the Ram Air switch does not control the outflow valves if the pressurization system is<BR>being operated in the manual mode. Therefore, when the flight crew of the accident airplane<BR>selected the Ram Air switch to the ON position while performing the checklist for ground<BR>evacuation,12 the outflow valves did not open and depressurize the airplane because the<BR>pressurization system was being operated in the manual mode.<BR>The pilots of the accident airplane stated to Safety Board investigators that they were<BR>unaware that the Ram Air switch did not control the outflow valves when the pressurization<BR>system was being operated in the manual mode and that this information was not included in their<BR>ground or simulator training or documented in the operating manuals. The investigation<BR>confirmed that the Airbus Industrie A300-600 operating manual does not state that the Ram Air<BR>switch will not control the outflow valves if the pressurization system is being operated in the<BR>manual mode. The investigation also confirmed that the American Airlines A300 operating<BR>11 As indicated earlier, postaccident examination of the accident airplane by the Safety Board’s Systems Group<BR>revealed that insulation blankets partially blocked the forward outflow valve and almost fully blocked the aft<BR>outflow valve. Although the manual opening of the outflow valves would likely have allowed the airplane to<BR>depressurize, the depressurization would have occurred at a rate that is substantially slower than normal because of<BR>the partial blockage of the valves.<BR>12 The Airbus and American Airlines checklists for emergency ground evacuation do not include information<BR>about the operation of the pressurization system in manual mode.<BR>5<BR>manual does not contain this information. Further, because the American Airlines training<BR>program for the A300-600 airplane only covers the information in the American Airlines A300<BR>operating manual, the training program also fails to address this issue.<BR>The Safety Board is concerned that because of the lack of information in the Airbus<BR>Industrie A300-600 operating manual and the American Airlines A300 operating manual and<BR>training program about this issue, flight crews of A300-600 airplanes might be unaware that the<BR>Ram Air switch will not control the outflow valves if the pressurization system is being operated<BR>in the manual mode. The Board notes that if the pilots of the accident airplane had known that<BR>the Ram Air switch would not control the outflow valves when the pressurization system was<BR>being operated in the manual mode, they would likely have depressurized the airplane before<BR>permitting the door to be opened. Therefore, the Safety Board believes that the FAA should<BR>require that the Airbus Industrie A300-600 operating manual clearly state that the Ram Air switch<BR>will not control the outflow valves and depressurize the airplane when the pressurization system is<BR>being operated in the manual mode. Further, the Safety Board believes that the FAA should<BR>review all Airbus Industrie A300-600 operators’ operating manuals and training programs and<BR>require revisions, if necessary, to ensure that they clearly indicate that the Ram Air switch will not<BR>control the outflow valves and depressurize the airplane when the pressurization system is being<BR>operated in the manual mode.<BR>The Airbus Industrie A300-600 operating manual states that maximum differential<BR>pressure13 at landing should not exceed 1 pound per square inch (psi) and that the Ram Air switch<BR>should not be selected ON when the differential pressure exceeds 1 psi. These design limitations<BR>ensure that the airplane is not rapidly depressurized, which could cause passenger discomfort.<BR>Further, according to the Airbus Industrie A300-600 operating manual, the cabin doors should<BR>not be opened unless the cabin differential pressure is 0 psi because any pressure in the airplane<BR>would make operation of the doors difficult and could result in an opening similar to the one that<BR>occurred during this accident.<BR>The Airbus Industrie A300-600 On Ground/Emergency Evacuation Checklist and the<BR>American Airlines A300 Ground Evacuation Checklist do not require the flight crew to ensure<BR>that the cabin differential pressure is 0 psi before signaling the flight attendants to begin the<BR>emergency evacuation (and, therefore, open the doors). Further, because the American Airlines<BR>training program for the A300-600 airplane only covers the information in the American<BR>Airlines A300 operating manual, the training program also fails to address this issue. The Safety<BR>Board notes that an additional item in the ground evacuation checklist directing the flight crew to<BR>check the differential pressure before signaling the flight attendants to begin the emergency<BR>evacuation would have alerted the accident flight crew that a pressurization problem existed.<BR>Therefore, the Safety Board believes that the FAA should require that the Airbus Industrie A300-<BR>600 On Ground/Emergency Evacuation Checklist direct flight crews to ensure that the cabin<BR>differential pressure is 0 psi before signaling flight attendants to begin an emergency evacuation.<BR>Further, the Safety Board believes that the FAA should review all Airbus Industrie A300-600<BR>13 Differential pressure, indicated by a cabin differential pressure gauge on the pressurization panel in the<BR>cockpit, is the difference between the pressure inside the airplane and that outside the airplane.<BR>6<BR>operators’ checklists and training programs for emergency ground evacuation and require<BR>revisions, if necessary, to ensure that they direct flight crews to verify that the cabin differential<BR>pressure is 0 psi before signaling flight attendants to begin an emergency evacuation.<BR>Parking Checklist<BR>The accident airplane was not parked at a gate; therefore, the pilots did not perform a<BR>parking checklist. However, the Safety Board notes that during its investigation of this accident,<BR>a safety issue related to parking checklists was identified that requires the FAA’s attention.<BR>The Parking Checklist in the Airbus Industrie A300-600 operating manual contains an<BR>item requiring the flight crew to ensure that the cabin differential pressure is 0 psi before<BR>permitting the flight attendants or gate agents to open the cabin doors upon arrival at the gate.<BR>However, the Parking Checklist in the American Airlines A300 operating manual does not contain<BR>this item. Further, because the American Airlines training program for the A300-600 airplane<BR>only covers the information in the American Airlines A300 operating manual, the training program<BR>also fails to address this issue. The Safety Board is concerned that a similar accident could occur<BR>anytime the cabin doors are opened and the cabin differential pressure has not been verified at 0<BR>psi. Therefore, the Safety Board believes that the FAA should review all Airbus Industrie A300-<BR>600 operators’ checklists and training programs for parking and require revisions, if necessary, to<BR>ensure that they direct flight crews to verify that the cabin differential pressure is 0 psi before<BR>permitting flight attendants or gate agents to open the cabin doors upon arrival at the gate.<BR>Therefore, the National Transportation Safety Board recommends that the Federal<BR>Aviation Administration:<BR>Require that the Airbus Industrie A300-600 operating manual clearly state that<BR>(1) automatic depressurization of the airplane upon landing will not occur when<BR>the pressurization system is being operated in the manual mode; (A-01-16) and<BR>(2) the Ram Air switch will not control the outflow valves and depressurize the<BR>airplane when the pressurization system is being operated in the manual mode.<BR>(A-01-17)<BR>Review all Airbus Industrie A300-600 operators’ operating manuals and training<BR>programs and require revisions, if necessary, to ensure that they clearly indicate<BR>that<BR>(1) automatic depressurization of the airplane upon landing will not occur when<BR>the pressurization system is being operated in the manual mode; (A-01-18) and<BR>(2) the Ram Air switch will not control the outflow valves and depressurize the<BR>airplane when the pressurization system is being operated in the manual mode.<BR>(A-01-19)<BR>Require that the Airbus Industrie A300-600 On Ground/Emergency Evacuation<BR>Checklist direct flight crews to ensure that the cabin differential pressure is<BR>7<BR>0 pounds per square inch before signaling flight attendants to begin an<BR>emergency evacuation. (A-01-20)<BR>Review all Airbus Industrie A300-600 operators’ checklists and training programs<BR>for emergency ground evacuation and require revisions, if necessary, to ensure that<BR>they direct flight crews to verify that the cabin differential pressure is 0 pounds per<BR>square inch before signaling flight attendants to begin an emergency evacuation.<BR>(A-01-21)<BR>Review all Airbus Industrie A300-600 operators’ checklists and training programs<BR>for parking and require revisions, if necessary, to ensure that they direct flight<BR>crews to verify that the cabin differential pressure is 0 pounds per square inch<BR>before permitting flight attendants or gate agents to open the cabin doors upon<BR>arrival at the gate. (A-01-22)<BR>Acting Chairman CARMODY and Members HAMMERSCHMIDT, BLACK, and<BR>GOGLIA concurred in these recommendations.<BR>By: Carol J. Carmody<BR>Acting Chairman
页:
[1]