Boeing 737 MAX
Overview of Organizational and Governance Failures in Commercial Aviation
Detailed working paper analysis published by David F. Larcker (James Irvin Miller Professor of Accounting at Stanford Graduate School of Business) and Brian Tayan (Researcher at Stanford Graduate School of Business).
Primary Focus: Exhaustive investigation into the organizational, leadership, cultural, and regulatory breakdowns that caused the catastrophic failure of the Boeing 737 MAX aircraft program.
Chronology of Crashes:
October/November 2018: Lion Air Flight 610 crashed off the coast of Indonesia shortly after takeoff, killing all passengers and crew members.
March 2019: Ethiopian Airlines Flight 302 crashed during ascent en route from Ethiopia to Nairobi, killing all passengers and crew members.
Industry Impact at Grounding:
International regulatory authorities implemented a global grounding of the aircraft type.
Approximately Boeing 737 MAX aircraft were actively operating worldwide.
Over aircraft were in production or on order.
Aircraft Manufacturing Complexity and Regulatory Framework
Structural and Manufacturing Complexity:
Modern commercial aircraft are among the most complex engineered structures in existence, comprising approximately individual parts.
The fuselage alone consists of parts.
Global Supply Chain Integration: While Boeing manufactures fuselages in the United States, major structural components—including engines, wings, rudders, flaps, tail sections, and landing gear—are built independently by contractors in separate locations globally and flown to the U.S. for final assembly.
Software Integration and Interconnectivity:
Software-based flight control systems have dramatically expanded aircraft operational capabilities and performance.
Software integration significantly increases design complexity, rendering failure modes harder to predict and necessitating rigorous multi-disciplinary engineering collaboration and verification testing.
Safety Architecture and Regulatory Oversight:
Aviation safety relies on multiple layers of protection and system redundancy.
Federal Aviation Administration (FAA) Scope of Authority in the U.S.:
Certification of aircraft designs, engines, propellers, and individual components.
Approval of manufacturing and production processes.
Airworthiness certification for every individual aircraft prior to deployment.
Oversight and approval of maintenance operations and return-to-service authorizations.
Safety Metric: Fatal accidents in U.S. commercial aviation occur at a rate lower than in every flights, establishing commercial air travel as the safest mass transportation mode.
Boeing’s Historical Legacy of Engineering Excellence
Model 80 (1928): Introduced a fully enclosed, welded steel fuselage (replacing open-air seating), -person capacity, forced-air ventilation, leather seating, and hot/cold running water.
307 Stratoliner (1930s): Incorporated pressurized cabin technology adapted from Boeing’s B-17 bomber, allowing commercial flight operations at altitudes up to .
707 (1950s): Transitioned commercial aviation from propeller to jet propulsion, carrying up to passengers across transcontinental and trans-Atlantic routes.
737 (1960s): Designed with seats per row and engines mounted under the wings to minimize noise and cabin vibration. Became the most widely deployed commercial aircraft model in aviation history.
747 (1970): World's first "jumbo jet" featuring a wide-body layout, dual aisles, upper-deck first-class seating, and a -passenger capacity optimized for long-haul international routes.
Advanced Composite Innovation: Introduced composite structural materials to replace traditional aluminum frames and tail structures, decreasing weight while enhancing durability and fuel efficiency.
Corporate Restructuring, Merger, and Cultural Transformation
Competitive Context & Acquisition:
Boeing faced persistent competition from McDonnell Douglas in the United States and Airbus in Europe.
Financial deterioration at McDonnell Douglas enabled Boeing to acquire its domestic rival in August 1997.
Executive Leadership Transitions:
Phil Condit: Boeing CEO who assumed leadership of the merged entity.
Harry Stonecipher: Former McDonnell Douglas CEO appointed President and Chief Operating Officer (COO) of Boeing; retired briefly in 2002, returned as CEO in December 2003 following Condit’s retirement; resigned in March 2005 due to ethics violations.
Jim McNerney: Former 3M CEO and General Electric executive recruited as CEO in March 2005; served until retirement in July 2015.
Dennis Muilenberg: Former head of defense division and COO; appointed CEO in July 2015.
Cultural Shift from Engineering to Financial Discipline:
Historical Culture: Boeing maintained a primary organizational focus on engineering quality and technological superiority.
Post-Merger Shift: Leadership from McDonnell Douglas (including Stonecipher and former McDonnell Douglas executives as CFO) pivoted internal priorities toward aggressive financial performance metrics and shareholder return.
Explicit Cultural Intent: Harry Stonecipher publicly acknowledged this intentional shift, stating: "When people say I changed the culture of Boeing, that was the intent, so it's run like a business rather than a great engineering firm. It is a great engineering firm, but people invest in a company because they want to make money."
Corporate Relocation (2001):
Corporate headquarters moved from Seattle, Washington (location of the commercial aircraft manufacturing operations) to downtown Chicago, Illinois.
Strategic Rationale: Executive management sought a "neutral location" to signal diversification into defense, fighter jets, and helicopter manufacturing.
Governance Impact: Created physical and psychological distance () between senior executives and project engineers, diminishing spontaneous communication and risk escalation.
Competitive Dynamics and the Conception of the 737 MAX
Market Share Erosion:
In the early 1990s, Boeing delivered approximately out of every commercial aircraft globally.
By the late 1990s and early 2000s, Boeing's market share of new orders dropped below , driven by Airbus's A320 (single-aisle) and A380 (superjumbo).
The Airbus A320neo Shock (December 2010):
Airbus announced the A320neo ("new engine option"), featuring larger, highly efficient engines delivering a improvement in fuel consumption.
Economic Context: Jet fuel accounts for to of total airline operating expenditures. Tiny efficiency gains heavily dictate fleet acquisition decisions.
Commercial Ultimatum: American Airlines—historically an exclusive Boeing client—notified Boeing of its intent to place a massive order for A320neos unless Boeing provided an equivalent fuel-efficient alternative.
Boeing's Strategic Dilemma: Clean-Sheet Design vs. Model Modification:
Option 1: Clean-Sheet New Aircraft Design.
Advantages: Unconstrained technological leapfrogging across fuselage, engines, avionics, and flight controls.
Disadvantages: Capital intensive; high development risk; certification timeline of to years, allowing Airbus to capture dominant market share.
Option 2: Modification of Existing 737 Airframe.
Advantages: Compressed amended regulatory approval process ( to years); lower capital costs; minimal pilot re-training requirements.
Disadvantages: Severe physical design constraints due to the legacy airframe architecture.
Strategic Decision: In August 2011, Boeing officially launched the 737 MAX program based on the modified airframe approach.
Engineering Constraints and the Design of MCAS
Airframe Height and Engine Placement Constraints:
Ground Clearance Limitations: The 737 airframe was designed in the 1960s to sit low to the ground with short landing gear. The larger, high-bypass turbofan engines required for fuel efficiency could not fit under the wings with adequate ground clearance.
Alternative Rejected: Redesigning landing gear height would require structural redesign of the wings and fuselage, triggering mandatory simulator-based flight training.
Selected Design Choice: Engineers relocated the engines further forward and higher up relative to the wing leading edge.
Aerodynamic Consequence: Under high-thrust conditions during takeoff and steep ascents, the forward engine placement generated unexpected aerodynamic lift, causing the nose of the aircraft to pitch upward autonomously, creating a severe risk of aerodynamic stall.
Maneuvering Characteristics Augmentation System (MCAS):
Purpose: A software-based automatic stall-prevention system introduced specifically to force the nose of the plane downward when high pitch angles were detected.
Sensor Input and Lack of Redundancy:
MCAS measured pitch using external Angle of Attack (AOA) sensors mounted on both sides of the nose.
Crucial Design Failure: Despite the aircraft possessing two external AOA sensors, the MCAS software read data from only single AOA sensor during any given flight, eliminating redunancy.
Pilot Training and Commercial Constraints:
FAA Training Tiers: Level A and B require minimal classroom or computer tutorials. Level C through E mandate expensive flight simulator or in-flight training.
Southwest Airlines Clause: Contractually obligated Boeing to rebate per delivered aircraft if the FAA mandated simulator-based training (Level C or higher) for 737 MAX transition.
Development Timeline and Commercial Launch
June 2012: Boeing submitted preliminary certification documentation to the FAA detailing modifications to the legacy 737 airframe.
July 2013: Final configuration of the 737 MAX was completed.
January 2016: The 737 MAX completed its first successful test flight.
March 2017: FAA granted airworthiness certification for the 737 MAX.
May 2017: Commercial deliveries commenced.
Sales Success: The 737 MAX became the fastest-selling aircraft in Boeing history, accumulating over orders within its first year and over total orders prior to its grounding (compared to nearly cumulative orders for the A320neo family).
Detailed Chronology of the Disasters
Lion Air Flight 610 (October 29, 2018):
Aircraft crashed into the Java Sea off Indonesia minutes after takeoff.
Casualties: All passengers and crew lost their lives.
Technical Mechanics: A faulty AOA sensor installed the prior day transmitted erroneous high pitch data to MCAS. MCAS activated automatically more than times, pitching the nose down despite pilot resistance.
Operational Factors: The flight crew lacked awareness of MCAS's existence and underlying operation; ground crew reports from prior flights had not fully captured sensor malfunctions.
Regulatory Response: Boeing released a technical bulletin reiterating AOA troubleshooting procedures; FAA issued an Emergency Airworthiness Directive to update flight manuals.
Pilot Reaction: Allied Pilots Association (representing U.S. pilots) publicly criticized Boeing for withholding MCAS specifications from flight operations manuals.
Ethiopian Airlines Flight 302 (March 10, 2019):
Aircraft crashed during ascent after takeoff from Addis Ababa, Ethiopia, bound for Nairobi.
Casualties: All passengers and crew lost their lives.
Technical Mechanics: MCAS activated times based on erroneous single-sensor data. The flight crew executed manual override procedures by turning off electric trim power per memory items, but aerodynamic forces acting on the horizontal tail prevented manual mechanical leveling via trim wheels at high speeds.
Global Grounding & Public Stance:
Regulatory agencies in China, Europe, the U.S., and worldwide grounded all operational 737 MAX planes.
Executive Reaction: CEO Dennis Muilenberg publicly defended the core design, stating: "We've confirmed that [MCAS] was designed per our standards, certified per our standards, and we're confident in that process… So, we haven't seen a technical slip or gap in terms of the fundamental design and certification of the approach."
Systematic Organizational and Governance Breakdown
Modification-First Mindset: Categorizing the project as an amended certification compelled engineers to view all technological design choices through regulatory approval optimization rather than pure engineering safety.
Suppression of Training Materials: To protect customer promises (e.g., avoiding Southwest’s per-plane penalty), Boeing personnel intentionally omitted MCAS references from pilot manuals and training modules.
Extreme Production Schedule Pressures:
Management placed physical "countdown clocks" in executive conference rooms counting down to first factory power-on and initial flight tests.
Engineers worked at roughly double the normal pace, under explicit warnings that project delays carried massive financial costs.
Critical Engineering Safety Compromises:
Single-point failure dependency on an AOA sensor known to have high failure rates.
Disabling standard cockpit AOA discrepancy warning lights unless airlines purchased optional avionics packages.
Omitting explicit cockpit indicator lights for MCAS activation.
Programming MCAS to fire repeatedly in rapid succession with unrestricted stabilizer authority.
Internal Communication Disconnects (Whistleblower & Internal Messages):
Employee quote: "Would you put your family on a MAX simulator trained aircraft? I wouldn't."
Employee quote: "This airplane is ridiculous."
Employee quote: "Sometimes you have to let big things fail so that everyone can identify a problem. … Maybe that’s what needs to happen."
Lack of Candor with Regulatory Bodies (FAA):
Boeing characterized MCAS as a minor modification to the existing speed trim system rather than an entirely new flight control function.
Concealment of Simulator Hazards: In 2012, a Boeing test pilot took to respond to an uncommanded MCAS activation in a flight simulator, resulting in a rating of "catastrophic" (indicative of fatal loss). Boeing failed to disclose this outcome to the FAA.
Regulatory engineer quote: "basically lied to the regulators (unknowingly)."
Organizational Delegation: The FAA excessively delegated safety verification oversight to Boeing internal representatives (Organization Designation Authorization), who routinely failed to escalate critical safety concerns to regulators.
Executive Isolation and Flawed Engineering Reporting Structures:
Non-engineering leadership dominated the C-suite.
Engineers working on the 737 MAX did not report to the Chief Project Engineer; instead, they reported directly to commercial business unit managers focused on cost and schedule.
Under sworn testimony, the Chief Project Engineer admitted to being completely unaware that MCAS relied on a single AOA sensor and possessed multi-fire automatic capabilities.
Board of Directors Oversight Failures:
The Board lacked a dedicated standing committee for aerospace safety.
Safety matters were relegated to the Audit Committee and were not regular agenda items.
No institutionalized channels existed for frontline engineering complaints to reach the Board.
Board member internal perception: "Safety was just a given."
Financial, Legal, and Corporate Fallout
Executive and Leadership Departures:
CEO Dennis Muilenberg was stripped of the Chairmanship in October 2019 and terminated in December 2019 (replaced by board member David Calhoun).
The CEO of the Commercial Airplanes division and the corporate General Counsel were forced to resign.
Criminal and Regulatory Sanctions:
DOJ Settlement: Boeing agreed to pay to settle federal criminal fraud charges.
SEC Settlement: Settled regulatory enforcement actions regarding materially misleading public representations claiming the MAX was "as safe as any airplane that has ever flown."
DOJ Indictment: Chief Technical Pilot was criminally indicted for deceiving the FAA (subsequently acquitted at trial).
Direct Financial Impacts:
dedicated fund to compensate families of crash victims.
in direct financial compensation paid to airline customers for grounded aircraft and cancelled flights.
in direct operational costs resulting from plant shutdowns and production restarts.
estimated in additional long-term production cost inefficiencies.
Billions in foregone top-line revenue from cancelled orders throughout the 20-month grounding period.
Shareholder Derivative Litigation:
In September 2021, a federal judge rejected the Board's motion to dismiss a shareholder suit, ruling that the Lion Air crash was an obvious red flag the Board ignored and stating the board "publicly lied about if and how it monitored the 737 MAX's safety."
Boeing's Board settled the shareholder derivative suit out of court for .
Post-Crisis Technical Redesign and Governance Reforms
Engineering Fixes to MCAS:
Dual-Sensor Dependency: Re-engineered software to require flight computer validation from both external AOA sensors simultaneously.
Single-Activation Constraint: Restricted MCAS to activate only once per high-pitch event.
Control Limit Bounds: Capped the maximum physical control authority of MCAS so that a single pilot using manual flight controls could easily override system inputs.
Regulatory Re-certification:
FAA officially cleared the design updates in November 2020.
Commercial flights resumed globally in 2021.
Structural Governance Reforms:
Created a standing Aerospace Safety Committee on the Board of Directors.
Established a Product and Services Safety group inside corporate management.
Realigned engineering reporting lines: all product engineers report directly to the Boeing Chief Engineer rather than business unit managers.
Formalized design memory systems to systematically incorporate historical design practices, lessons learned, and failure points into new product design.
Mandated that the Chief Engineer personally review all internal corporate safety reports.
Expanded anonymous safety reporting tools for both internal employees and external global supply-chain vendors.
2024 FAA Independent Expert Panel Findings:
An independent panel of engineering and labor experts identified persistent organizational breakdowns, including ongoing gaps between executive leadership and operations, inadequate safety culture integration, and insufficient pilot feedback in aircraft design.
The FAA issued a formal directive mandating Boeing submit a comprehensive quality-control remediation plan within .
Historical Chronology of Selected Events
August 1997: Boeing completes acquisition of McDonnell Douglas.
December 2003: Phil Condit retires; Harry Stonecipher appointed CEO.
March 2005: Harry Stonecipher resigns; Jim McNerney named CEO.
December 2010: Airbus publicly announces the A320neo program.
August 2011: Boeing officially announces the 737 MAX project.
July 2013: Boeing completes firm configuration parameters for 737 MAX.
July 2015: Jim McNerney retires; Dennis Muilenberg appointed CEO.
January 2016: Boeing conducts first test flight of the 737 MAX.
March 2017: FAA awards official airworthiness certification.
May 2017: First commercial flight delivery of the 737 MAX.
October 29, 2018: Lion Air Flight 610 crashes off the coast of Indonesia.
March 10, 2019: Ethiopian Airlines Flight 302 crashes; global fleet grounded.
December 2019: Dennis Muilenberg resigns; David Calhoun named CEO.
March 2020: Global aviation operations disrupted by COVID-19 shutdowns.
December 2020: FAA lifts grounding; 737 MAX re-enters commercial service in early 2021.
Case Study Reflection and Analytical Questions
Question 1: Competitive vs. Organizational Pressures
The Boeing Corporation has a long history of technological and engineering innovation, and yet in the case of the 737 MAX, the company made fundamental mistakes in design, development, and testing. How did competitive pressures contribute to these mistakes? How did organizational and leadership failures contribute? Why did the board not recognize these failures?
Question 2: Trade-offs of Amended Certification and Pilot Training Constraints
Many of Boeing’s design, development, and testing choices were constrained by the decisions to certify the 737 MAX as a modified aircraft (rather than a new aircraft) and to minimize pilot training requirements. Was Boeing’s senior leadership wrong to make these two decisions? From a competitive perspective, could Boeing have afforded to cede the market to Airbus for the additional years required to make more significant design changes? What role did the board of directors play in this strategic choice? Was the board informed of this choice?
Question 3: Red Flags and Communication Breakdown
The design flaws of the 737 MAX were in part a byproduct of the competitive pressure that Boeing felt to modify the aircraft under a compressed time schedule. What "red flags" indicated that the company’s development schedule was too aggressive? Who within the organization should have detected these red flags? What organizational and communication failures prevented the escalation of these concerns to senior leadership and the board?
Question 4: Impact of Cultural Shift from Engineering to Finance
Some people blame the 737 MAX on a cultural shift that took place within Boeing, whereby an engineering orientation was supplanted by a focus on financial results. Is this criticism valid? How much engineering talent does an engineering company require in the C-Suite, the CEO position, and on the board? Can "business" executives oversee the development of advanced technological products? What role did the board play in allowing these cultural shifts to take place?
Question 5: Geographic Separation and Governance Risk
People also blame the 737 MAX in part on communication breakdowns that occurred following the company’s decision to relocate headquarters from Seattle to Chicago. What role does geographic proximity have on communication and risk oversight? Does organizational risk increase as companies expand into new geographies and as operations become more dispersed? If so, how can senior leadership and the board counter these trends? Should the compliance function have been redesigned as the organizational structure of Boeing evolved?
Question 6: Board Oversight Failures and Board Efficacy
Boeing’s board appears to have failed on multiple dimensions, including inadequate oversight of objective setting, failure to monitor tone at the top, risk management, and internal controls. Could the tragedy of the 737 MAX have been averted if Boeing’s board had performed better on these basic duties? Did the board have the necessary information to effectively evaluate and monitor management choices?