Pilots flying the two Boeing 737 Max jets that crashed in the past year were bombarded by multiple warnings that the flights were going dangerously wrong.
Boeing has said the pilots should have been able to swiftly diagnose the problem and follow a long-standing procedure to fix it.
But a report Thursday from federal accident investigators questions whether Boeing and the Federal Aviation Administration underestimated how a blizzard of visual and auditory warnings would slow the pilots' ability to respond quickly enough to avoid disaster.
The National Transportation Safety Board issued seven recommendations stemming from its role as an adviser to investigations of the crashes in Indonesia and Ethiopia, which together killed 346 people.
It will be up to investigators in those countries to determine what caused the accidents. Preliminary reports have pointed to an anti-stall system that kicked in based on faulty sensor readings and pushed the noses of the planes down.
The NTSB said Boeing assumed that pilots flying the Max would respond to an automated nose-down push by taking "immediate and appropriate" steps. Federal regulations allow manufacturers to make such assumptions, and Boeing even used test pilots in flight simulators to check its assumptions.
Boeing presented highly trained test pilots with a single alert indicating a condition known as runaway stabilizer trim, which can be triggered by an anti-stall system called the maneuvering characteristics augmentation system, safety board officials said. They said Boeing failed to consider that an underlying problem like sensor failures -- which triggered the anti-stall system in both Max crashes -- would set off several alarms.
In the Lion Air and Ethiopian Airlines crashes, signs of trouble showed up early and often.
Shortly after Lion Air Flight 610 took off from Jakarta on Oct. 29, stick shakers on the pilots' control columns vibrated to warn of an impending stall. Other alerts -- some visual, some sound -- would have gone off because altitude and speed readings were unreliable.
The crew of Ethiopian Airlines Flight 302 on March 10 would have gotten similar alerts, plus a loud voice recording that warned, "Don't sink" -- they were flying too close to the ground -- adding to the cacophony and confusion.
"That's the actual scenario that never got evaluated in the simulator," said Dana Schulze, the NTSB's director of aviation safety.
Schulze said years of research have shown that when multiple alarms compete for the attention of pilots, it can lead to a situation in which "pilots will not respond as perhaps you might have intended."
Dennis Tajer, spokesman for the American Airlines pilots union, agreed with the investigators.
"They completely discounted the human factor component, the startle effect, the tsunami of alerts in a system that we had no knowledge of that was powerful, relentless and terrifying in the end," Tajer said of Boeing.
The safety board called on the FAA, which certified the Max, to evaluate the effect that all possible cockpit alerts might have on pilot response. The board also recommended that the FAA require Boeing to include changes in cockpit design or pilot training to help pilots follow proper procedures when responding to the Max's automated control systems.
Schulze told reporters that the board wants the FAA to take those steps before it lets the Max fly again, although the board did not put a timetable in its formal recommendations. She suggested that tests include regular airline pilots, not just highly experienced test pilots.
The Max has been grounded worldwide since March, shortly after the second crash. Boeing is nearing completion of changes that will make the anti-stall system less powerful and tie it to a second sensor measuring the plane's pitch instead of relying on input from just one sensor.
Boeing expects airlines to be able to fly the plane later this year, although many analysts think early 2020 is more likely.
The safety board also recommended that the FAA examine whether other aircraft besides the Max might have been approved without considering how multiple alarms could distract pilots. And it said the FAA should encourage regulators in Canada, Europe and elsewhere to do the same thing.
"We are committed to working with the FAA in reviewing the NTSB recommendations," said Boeing spokesman, Gordon Johndroe.
An FAA spokesman, Lynn Lunsford, said the agency "will carefully review these and all other recommendations as we continue our review of the proposed changes to the Boeing 737 Max."
Results of an internal review by Boeing, which its board made public Wednesday, recommended changes to the design of cockpits and the company's organizational structure to improve safety.
Information for this article was contributed by David Koenig and Tom Krisher of The Associated Press; and by Natalie Kitroeff of The New York Times.
Business on 09/27/2019