Human Factors in Aircraft Maintenance
Overview and Fundamentals of Human Factors
Objectives of Human Factors Training:
Create awareness of the "Human" aspect of aircraft maintenance.
Develop safeguards to lessen human cause factors in maintenance.
Examine the human role in maintenance that leads to aviation occurrences.
Formulate methods to prevent or reduce the severity of aviation occurrences.
Definition of Human Factors:
Human Factors concerns people in their working and living environments.
It analyzes the relationships of individuals with equipment, procedures, and the environment.
It places equal importance on interpersonal relationships between colleagues.
It encompasses the overall performance of human beings within the aviation system.
It seeks to optimize human performance through the systematic application of human sciences, integrated within a system engineering framework.
The twin core objectives are safety and efficiency.
Statistical Trends and Influencing Factors in Aviation Maintenance
Historical Accident Causes:
Statistical data tracking aviation occurrences from 1903 to the present demonstrates a shift in primary accident causes.
Technical causes accounted for the majority of early aviation accidents but have declined steadily to approximately of occurrences.
Human causes now account for of all aviation accidents.
Safety awareness serves to foresee and mitigate the risks associated with human error.
Human Factors Impacting Aircraft Maintenance Technicians (AMTs):
Boring or repetitive jobs
Personal life problems
Poorly designed testing for skill and knowledge
Poor instructions
Smelly fumes
Loud noises
Incomplete or incorrect documentation
Substance abuse
Fatigue
Extreme weather conditions such as snow
Lack of spare parts
Poor tool control
Slippery floors
Poor communication
Unrealistic deadlines
Poor training
Lack of tools and equipment
Organizational and System Failures: Active vs. Latent
Systemic Nature of Human Error:
Human error is an integral element of the human condition and cannot be completely eradicated.
Errors play an essential role in trial-and-error learning processes; errors without adverse consequences can provide positive learning value, though they must not be confused with errors causing bad effects.
In aviation, errors with harmful consequences cannot be tolerated.
When a maintenance error occurs, the engineer who last worked on the aircraft is conventionally assigned blame.
Many errors stem from systemic failures inherent to the environment; the engineer involved is frequently just one point in a chain of failure.
In flawed operational systems, the environment itself encourages specific errors or rule violations regardless of which individual is performing the task.
Active Failures:
Failures committed by individuals who are in direct physical contact with the operational system.
Examples include errors made by aircraft maintenance engineers directly servicing an aircraft.
Latent Failures:
Failures resulting from decisions made by managers, supervisors, or technical authors who are separated in time and space from the physical execution of the task.
Example: A technical writer drafts a procedural document for a task with which they are not fully familiar. If the written procedure contains a single error, it systematically induces the engineer executing the procedure to commit an error.
Theoretical Models of Human Factors
The SHELL Model:
S = Software: Procedures, symbology, documents, and rules.
H = Hardware: Machinery, tools, and physical equipment.
E = Environment: Social, physical, and organizational surroundings.
L = Liveware: The central human element as well as peripheral individuals.
Core Principle: The match or mismatch at the interface between the central Liveware and other components is as important as the individual characteristics of the blocks themselves. Any interface mismatch acts as a primary source of human error.
Integrated Human Factors (IHF) Interface Diagnostic Questions:
Software Interface: Are written procedures up to standard?
Hardware Interface: Do personnel have the correct equipment to perform their duties?
Environment Interface: Is the working environment conducive to productivity?
Liveware Interface: Is there a healthy operational atmosphere among colleagues?
Central Liveware Impact: What net effect are these combined elements exerting on the individual?
The British Airways 'PEEP' Model:
Focuses on the integration and interfaces between the aircraft engineer and environment factors affecting performance.
Paperwork: Rules, procedures, and documentation.
Environment: Work area, lighting, and ambient heating.
Equipment: Tools and hangar/building facilities.
People: Colleagues, team members, and management structures.
Central Focus: The individual Engineer.
Interdependence Principle: A modification to any single element directly impacts all remaining elements in the system.
Reason's Swiss Cheese Model:
System Architecture: System defenses are modeled as successive slices of Swiss cheese, where each slice represents an organizational department or defense layer (e.g., Design/Manufacturer, Procedures/Training, Quality Assurance, Base/Line Engineers, Specialists).
Defensive Holes: Holes within the slices represent operational flaws or inadequate organizational defenses.
Error Trajectory: Arrows representing errors typically get blocked by subsequent slices when detected and corrected. An accident occurs when holes across all slices momentarily line up, allowing an error trajectory to pass completely through the system.
Failure Breakdown:
Latent Failures: Originate in higher system layers including Organization, Supervision, and Preconditions/Personnel.
Active Failures: Occur at the operational boundary as Unsafe Acts committed by line personnel, directly leading to an accident.
The Weakest Link Model:
System Interconnectedness: Safe aircraft operations depend on coordinated efforts across multiple specialized functional departments.
Departmental Links: Technical College, Finance, Planning, Technical Records, Stores, Fleet Support, Quality Assurance, Engineer, and Pilot.
Operational Principle: Each task forms a link in an integrated chain connecting departmental operations to the aircraft. A chain is only as strong as its weakest link; if a single link fails, the integrity of the aircraft operation fails.
Categories and Mechanisms of Human Error
Four Primary Categories of Human Error:
Slips:
Definition: Execution-phase errors where an action is not carried out as intended or planned.
Examples: Transposing digits when transcribing part numbers or executing procedural steps in an incorrect sequence.
Lapses:
Definition: Memory or attention failures characterized by omitted actions or missed steps.
Mechanism: Results from failures in information storage or retrieval mechanisms.
Example: Forgetting to replace and secure an engine oil cap.
Categorization: Classified as a skill-based error.
Mitigation: Minimizing operational distractions/interruptions and utilizing targeted reminders.
Mistakes:
Definition: Planning-phase errors resulting from a faulty plan, intention, or incorrect judgment, where an individual performs an action believing it to be correct when it is wrong.
Example: Selecting incorrect bolt sizes when installing an aircraft windscreen or failing to calibrate engine instruments.
Violations:
Definition: Deliberate, non-compliant actions where rules or official procedures are knowingly bypassed.
Context: Often well-intentioned by technicians attempting to take "short cuts" to complete tasks within tight deadlines.
Requirement: Procedures must be strictly followed to protect both safety and financial costs.
Contributing Factors to Human Error
Key Drivers of Maintenance Errors:
Inadequate Information: Visual or verbal communication gaps that lead personnel into making assumptions. Insufficient information requires immediate clarification before proceeding.
Lack of Understanding: Caused by poor documentation or insufficient training, leading individuals to make false presumptions regarding procedural steps.
Poor Design: Equipment or procedural designs that induce errors despite good intentions.
Murphy's Law: "Whatever can go wrong, will go wrong" or "Things will go wrong in any given situation, if you give them a chance." Design must account for the reality that if a component can be installed incorrectly, someone will eventually do so.
Lapses of Attention: Errors creeping into simple, repetitive, or familiar tasks. As an individual becomes an expert, less conscious attention is allocated to routine tasks, paradoxically increasing the probability of error.
Mistaken Actions: Performing the wrong action under the belief that it is correct, frequently seen when engineers substitute approved methods with personal shortcuts.
Misperceptions:
Definition: A mistaken belief, idea, or sensory interpretation of an input.
Context: High occurrence in repetitive tasks where individuals see or hear what they expect rather than reality. Requires constant vigilance.
Cognitive Processes: Attention, Perception, Decision Making, and Memory
Attention Mechanisms:
Definition: The concentration of mental effort on specific sensory or internal mental events.
Operational Limit: Attention can shift rapidly between items but processes only one item at a time.
Four Types of Attention:
Selective Attention: Monitoring multiple input sources simultaneously while allocating primary focus to the most critical input. Secondary sources are sampled in the background (known as the "cocktail party effect").
Divided Attention: Performing multiple tasks concurrently (referred to as "time sharing"). Performance on one or both tasks deteriorates, especially when tasks share similar characteristics.
Focused Attention: Focussing mental resources strictly on a single input source while successfully filtering out surrounding distractions.
Sustained Attention: Maintaining alertness and continuous focus over extended periods (e.g., radar monitoring or detailed visual inspection tasks).
Perception Mechanics:
Definition: Organizing and interpreting sensory data to transform raw data into meaningful context, filtering out irrelevant inputs based on prior knowledge and experience.
Perceptual Phenomena Examples:
Retinal images are two-dimensional and inverted, yet human perception constructs a three-dimensional, upright visual scene.
Turning the head alters the spatial pattern on the retina, yet surrounding objects are perceived as fixed in location.
Perceptual Filling and Context:
The perceptual system automatically fills missing information gaps using past experience, which can lead to incorrect conclusions.
Contextual expectation alters perception (e.g., reading an identical graphic character as the letter "B" in an alphabetic sequence versus the number "" in a numeric sequence ).
The system sub-consciously filters out redundant input, such as failing to notice a repeated word in text (e.g., missing the second "THE" in the phrase "A BIRD IN THE THE HAND").
Case Study - Aloha Airlines Incident:
Event: An section of the upper cabin structure of a Boeing 737 detached during flight due to structural fatigue.
Pre-flight Inspection: The aircraft was inspected prior to the flight by two senior inspectors (one with of experience, and the chief inspector with of experience). Neither detected structural faults.
Post-Accident Findings: Over were present in the lap joints and skin at the time of the inspection.
Decision Making Support:
Humans are not fully aware of all underlying cognitive sub-processes during decision-making.
Maintenance documentation, manuals, and fault diagnosis procedures serve as structural tools to supplement human decision-making abilities.
Memory Architecture:
Core Memory Processes:
Registration: The initial entry of sensory data into memory.
Storage: The retention of registered information over time.
Retrieval: The recovery and extraction of stored information.
Three Memory Stores:
Ultra Short-Term Memory (Sensory Storage):
Duration: Up to .
Function: Acts as a buffer to allow time for conscious processing of sensory inputs.
Short-Term Memory (Working Memory):
Function: Retains temporary information for active operational use.
Capacity: discrete items (range of to items).
Duration: to .
Long-Term Memory:
Capacity: Unlimited.
Function: Stores inactive information including physical world models, motor programs, personal beliefs, language, and problem-solving skills.
Division 1 - Semantic Memory: Storage of general factual knowledge, concepts, rules, and language independent of personal context.
Division 2 - Episodic Memory: Memory of specific personal events and past experiences placed within spatial/temporal contexts. Highly subject to distortion based on individual expectations.
Situational Awareness, Phobias, and Environmental Work Conditions
Situational Awareness:
Definition: Comprehensive perception and understanding of current environmental variables, spatial orientation, operational states, and system conditions.
Impact: Disconnects between sensed data and perceived reality degrade situational awareness.
Physical and Psychological Work Constraints:
Claustrophobia: Pathological or abnormal fear of enclosed spaces. Moderate physical/psychological discomfort in tight spaces is normal, but extreme reactions impair performance.
Physical Access Challenges: Maintenance requires working in cramped areas (fuel tanks, flight instrument panels, rudder pedal wells), elevated structures (cherry pickers, staging), under adverse climate conditions (extreme heat, cold, rain, wind, high noise), compounded by poor lighting or heavy breathing gear.
Acrophobia: An extreme, pathological fear of heights belonging to space and motion discomfort phobias.
Fear of Heights: Experienced during high-level structural inspections (e.g., crown inspections of upper fuselages or wing surfaces). Distressed technicians become preoccupied with securing themselves to access equipment rather than executing maintenance tasks.
Social Environment, Team Dynamics, and Leadership
The Social Maintenance System:
Technicians operate within a nested organizational structure:
Core: Maintenance Engineer (Knowledge, skills, abilities, personal traits).
Layer 1: Immediate Environment (Facilities, weather, aircraft design, tooling, parts, manuals, time constraints, teamwork, communication).
Layer 2: Supervision (Planning, prioritizing, delegating, instruction, On-the-Job Training [OJT], feedback, performance tracking).
Layer 3: Organization (Corporate philosophy, policies, standard operating procedures, selection, training, Quality Assurance).
Layer 4: Regulation (Safety regulations, oversight styles, safety promotion).
Outer Layer: Wider Environment (Economic climate, public safety perceptions).
Organizational Culture:
Defined as the collective, established "ways of doing things" within an enterprise.
Individual versus Group Responsibilities:
Individual Accountability: Historically emphasized in aviation due to trade licensing structures (Licensed Aircraft Engineers [LAE] vs. Non-Licensed Staff) and legal certification of work.
Group/Team Dynamics: Work is typically structured into shift teams or shop groupings organized by trade or aircraft type. While individual tasks are assigned, ultimate goal achievement rests on the team.
Advantages of Group Responsibility: Encourages cross-checking of peer work, shared safety accountability, and proactive challenging of unsafe practices.
Disadvantages of Group Responsibility:
Diffusion of Responsibility: The risk that individuals assume "someone else will check/do it," diluting personal accountability across the group.
Group Polarisation: The tendency for group deliberation to shift collective decisions toward extreme ends (either overly cautious or significantly riskier than any individual member would choose on their own; the latter is termed Risky Shift).
Social Loafing: The reduction of individual effort when working in a group setting due to the perception that individual contributions are pooled and unidentifiable.
Leadership and Supervisory Roles:
Management Role: Managers must navigate trade-offs between operational demands and optimal safety practices, such as evaluating staffing shortages or extended overtime ("ghosters"). Safety Management Principles provide objective tools for risk assessment.
Supervisory Role: Supervisors monitor technical execution, evaluate individual strengths/weaknesses, oversee safety culture, and actively prevent the formation of unsafe work norms.
Key Qualities of an Effective Maintenance Leader:
Motivating the Team: Clearly communicating manageable goals, shift targets, and operational challenges while encouraging collective solutions.
Reinforcing Good Attitudes and Behaviour: Formally and informally recognizing safe, efficient performance while constructively correcting bad habits.
Demonstrating by Example: Establishing personal standards of safety, showing operational competence, and building team respect.
Maintaining the Group: Exercising firm leadership and serving as the direct operational link between executive management and line technicians.
Fulfilling a Management Role: Organizing daily shift schedules, delegating tasks, and managing workload distribution.
The "Dirty Dozen" Human Factors in Aircraft Maintenance
1. Lack of Communication:
Definition: Failure to exchange key operational information and current task status between personnel or incoming/outgoing shifts.
Safety Nets: Detailed use of logbooks and worksheets; active shift handovers clearly outlining completed work and pending tasks; never assuming work has been performed.
Communication Rule: Use 2 ears, 2 eyes, and 1 mouth in that order.
Communication Guidelines:
Avoid: Debating, detouring, pre-planning responses while listening, tuning out.
Do: Ask clarifying questions, paraphrase statements, maintain eye contact, display positive body language.
2. Complacency:
Definition: A false sense of security and self-satisfaction accompanied by a loss of awareness of potential hazards.
Safety Nets: Train to expect faults; never sign off on tasks not personally performed or directly witnessed; strictly follow work cards/checklists; avoid working from memory; periodically alter work routines.
3. Lack of Knowledge:
Definition: Executing tasks without adequate technical understanding, training, or current technical data.
Safety Nets: Complete formal type-specific school training; obtain supervised On-the-Job Training (OJT); use current, up-to-date maintenance manuals; consult technical representatives.
4. Distraction:
Definition: Anything that draws a technician's mental focus away from an active task, leading to omitted steps upon returning.
Safety Nets: Complete a task or secure connections before stepping away; mark uncompleted work clearly; apply torque seal or safety wire; perform self/peer double inspections; always go back three (3) steps in the procedure when returning to an interrupted task.
5. Lack of Teamwork:
Definition: Uncoordinated execution of tasks involving multiple personnel without mutual understanding.
Safety Nets: Formally discuss and plan task execution (Who, What, When, Where, How); confirm that all team members thoroughly understand and agree to the plan.
6. Fatigue:
Definition: The body's physiological and mental response to prolonged physical or mental exertion.
Classifications:
Acute Fatigue: Short duration; resolved by a single period of restful sleep.
Chronic Fatigue: Long duration; continuous build-up over extended periods requiring prolonged recovery.
Primary Causes: Long work hours, high-intensity stress, severe temperature fluctuations, continuous noise exposure exceeding , long-duration physical vibration.
Symptoms: Requirement for stronger stimuli to trigger a response, reduced attention span, impaired memory, withdrawn mood, circadian rhythm disruptions (time-of-day drop in alertness).
Safety Nets: Recognize fatigue symptoms in self and peers; avoid scheduling complex maintenance during circadian troughs; maintain regular sleep and exercise habits; implement mandatory peer cross-checking.
7. Lack of Resources:
Definition: Inability to secure essential tools, parts, documentation, or equipment to execute a task safely.
Safety Nets: Inspect suspect work areas early during inspections to identify required parts immediately (AOG ordering); pre-order anticipated spares; establish part-pooling or loaning agreements; preserve high standards by grounding aircraft when proper resources are absent.
8. Pressure:
Definition: Real or perceived operational urgency to complete maintenance tasks quickly.
Safety Nets: Confirm pressure is not self-induced; communicate operational limits to management; request additional manpower; say "No" to unsafe operational demands.
The STOP-LOOK-LISTEN-ACT Method:
STOP: Cease wasting emotional energy.
LOOK: Evaluate the operational scenario rationally.
LISTEN: Listen to rational internal logic rather than emotional pressure.
ACT: Express concerns clearly, request help, or negotiate required time.
9. Lack of Assertiveness:
Definition: Failure to confidently express legitimate safety concerns, state opinions, or maintain professional standards against pressure.
Safety Nets: Log all completed maintenance steps in journey logbooks; sign off exclusively for work verified as serviceable; strictly refuse to compromise airworthiness standards.
Stress:
Definition: A state of mental, physical, or emotional strain resulting from job demands or personal life events exceeding an individual's coping capacity.
Mechanism: Performance degrades when the combination of Basic Living Stress and Basic Job Stress exceeds individual Coping Capacity, driving the technician into Caution and Distress zones.
Safety Nets: Implement the STOP-LOOK-LISTEN-ACT process; ensure solutions focus on self-controllable actions ("I"); take regular breaks; discuss challenges with uninvolved third parties; maintain regular physical exercise.
Lack of Awareness:
Definition: Failure to recognize the full scope, systemic consequences, or physical context of maintenance actions.
Safety Nets: Mentally project the chain of events that could result from an error; verify if proposed work conflicts with prior repairs or structural modifications; request independent checks from peers.
Norms:
Definition: Unofficial, unapproved operational practices or shortcuts that become standard practice through long-standing local routine.
Safety Nets: Perform all maintenance strictly In Accordance With (I/A/W) official manuals or formally initiate manual revision requests; recognize that long-standing custom does not make an unapproved procedure safe or correct.