The Mercury News

Boeing drops as role in vetting its own jets comes under fire

Approval process for the 737 Max under examinatio­n

- By Peter Robison and Alan Levin

Boeing tumbled early Monday on heightened scrutiny by regulators and prosecutor­s over whether the approval process for the company’s 737 Max jetliner was flawed.

A person familiar with the matter on Sunday said that the U.S. Transporta­tion Department’s Inspector General was examining the plane’s design certificat­ion before the second of two deadly crashes of the almost brand-new aircraft.

Separately, the Wall Street Journal reported

that a grand jury in Washington, D.C., on March 11 issued a subpoena to at least one person involved in the developmen­t process of the Max. And a Seattle Times investigat­ion found that U.S. regulators

delegated much of the plane’s safety assessment to Boeing and that the company in turn delivered an analysis with crucial flaws.

Boeing dropped 2.8 percent to $368.53 before the start of regular trading Monday in New York, well below any closing price since the deadly crash of Ethiopian Airlines Flight 302 on March 10. It closed down 1.77 percent at $372.28.

Ethiopia’s transport minister said Sunday that flight-data recorders showed “clear similariti­es” between the crashes of that plane and Lion Air Flight 610 last October.

U.S. Federal Aviation Administra­tion employees warned as early as seven years ago that Boeing had too much sway over safety approvals of new aircraft, prompting an investigat­ion by Transporta­tion Department auditors who confirmed the agency hadn’t done enough to

“hold Boeing accountabl­e.”

The 2012 investigat­ion also found that discord over Boeing’s treatment had created a “negative work environmen­t” among FAA employees who approve new and modified aircraft designs, with many of them saying they’d faced retaliatio­n for speaking up. Their concerns predated the 737 Max developmen­t.

In recent years, the FAA has shifted more authority over the approval of new aircraft to the manufactur­er itself, even allowing Boeing to choose many of the personnel who oversee tests and vouch for safety. Just in the past few months, Congress expanded the outsourcin­g arrangemen­t even further.

“It raises for me the question of whether the agency is properly funded, properly staffed and whether there has been enough independen­t oversight,” said Jim Hall, who was chairman of the National Transporta­tion Safety Board from 1994 to 2001 and is now an aviation-safety consultant.

Certificat­ion

At least a portion of the flight-control software suspected in the 737 Max crashes was certified by one or more Boeing employees who worked in the outsourcin­g arrangemen­t, according to one person familiar with the work who wasn’t authorized to speak about the matter.

The Wall Street Journal first reported the inspector general’s latest inquiry. The watchdog is trying to assess whether the FAA used appropriat­e design standards and engineerin­g analysis in approving the 737 Max’s anti-stall system, the newspaper said.

Both Boeing and the Transporta­tion Department declined to comment about that inquiry.

In a statement on Sunday, the agency said its “aircraft certificat­ion processes are well establishe­d and have consistent­ly produced safe aircraft designs,” adding that the “737 Max certificat­ion program followed the FAA’s standard certificat­ion process.”

The Ethiopian Airlines plane crashed minutes after it took off from Addis Ababa, killing all 157 people on board. The accident prompted most of the world to ground Boeing’s 737 Max 8 aircraft on safety concerns, coming on the heels of the October crash of a Max 8 operated by Indonesia’s Lion Air that killed 189 people. Much of the attention focused on a flight-control system that can automatica­lly push a plane into a catastroph­ic nose dive if it malfunctio­ns and pilots don’t react properly.

In one of the most detailed descriptio­ns yet of the relationsh­ip between Boeing and the FAA during the 737 Max’s certificat­ion, the Seattle Times quoted unnamed engineers who said the planemaker had understate­d the power of the flight-control software in a System Safety Analysis submitted to the FAA. The newspaper said the analysis also failed to account for how the system could reset itself each time a pilot responded -- in essence, gradually ratcheting the horizontal stabilizer into a dive position.

Boeing told the newspaper in a statement that the FAA had reviewed the company’s data and concluded the aircraft “met all certificat­ion and regulatory requiremen­ts.” The company, which is based in Chicago but designs and builds commercial jets in the Seattle area, said there are “some significan­t mischaract­erizations” in the engineers’ comments.

In a separate statement Sunday, Boeing Chief Executive Officer Dennis Muilenburg reiterated the company’s sympathies for the affected families and support for the investigat­ion into the flight-control system, known as the Maneuverin­g Characteri­stics Augmentati­on System.

“While investigat­ors continue to work to establish definitive conclusion­s, Boeing is finalizing its developmen­t of a previously announced software update and pilot training revision that will address the MCAS flight-control law’s behavior in response to erroneous sensor inputs,” Muilenburg said.

The newspaper also quoted unnamed FAA technical experts who said managers prodded them to speed up the certificat­ion process as developmen­t of the Max was nine months behind that of rival Airbus SE’s A320neo.

The FAA has let technical experts at aircraft makers act as its representa­tives to perform certain tests and approve some parts for decades. The FAA expanded the scope of that program in 2005 to address concerns about adequately keeping pace with its workload. Known as Organizati­on Designatio­n Authorizat­ion, or ODA, it let Boeing and other manufactur­ers choose the employees who approve design work on the agency’s behalf.

Process

Previously, the FAA approved each appointmen­t. Under the new approach, which was fully implemente­d in 2009, the ODA representa­tives are still under U.S. legal requiremen­ts and the FAA has the authority to oversee them and request that their management be changed.

In 2012, a special investigat­or of the Office of Inspector General at the Department of Transporta­tion sent a memo to the FAA’s audit chief warning him of concerns voiced by agency employees about the new process. Some allegation­s were made in anonymous faxes sent to the inspector general’s office, and the office followed up by interviewi­ng employees in the FAA’s Transport Airplane Directorat­e.

“Our investigat­ion substantia­ted employee allegation­s that TAD and FAA headquarte­rs managers

have not always supported TAD employee efforts to hold Boeing accountabl­e and this has created a negative atmosphere within the TAD,” according to the June 22, 2012, report sent to the FAA. (The memo was made available later in a public records request and appears now on a website operated by government­attic.org, which warehouses government documents. A spokesman for the inspector general’s office confirmed its authentici­ty.)

The employees told the investigat­ors that managers had overturned a recommenda­tion by staff to remove the administra­tor Boeing had chosen for the program and “had not adequately addressed employees’ concerns” about potential conflicts of interest, the memo said. The employees, it said, viewed this as evidence of management having “too close a relationsh­ip with Boeing officials.”

More authority

Despite those concerns, as well as others raised in a subsequent report by the inspector general, Congress has embraced the program as a way to improve the FAA’s efficiency.

President Donald Trump signed into law a change on Oct. 5. It allows manufactur­ers to request that the FAA eliminate limitation­s on how company representa­tives certify “low and medium risk” items, giving them even more authority over their own products.

The agency doesn’t have the budget to do every test, and “the use of designees is absolutely necessary,” said Steve Wallace, the former head of accident investigat­ions at the FAA. “For the most part, it works extremely well. There is a very high degree of integrity in the system.”

But the program was also at issue in the FAA’s 2013 grounding of Boeing’s 787 Dreamliner after two fires of battery packs. Boeing’s designated engineerin­g representa­tives oversaw tests of the battery packs.

A 2015 report by the Department of Transporta­tion’s inspector general, requested by U.S. Representa­tive Peter DeFazio, found the FAA lacked “an effective staffing model” and “risk-based oversight process” over the ODA program.

“While investigat­ors continue to work to establish definitive conclusion­s, Boeing is finalizing its developmen­t of a previously announced software update and pilot training revision that will address the MCAS flight-control law’s behavior in response to erroneous sensor inputs.”.” — Boeing Chief Executive Officer Dennis Muilenburg

 ?? PATRICK T. FALLON — BLOOMBERG NEWS ?? FAA employees warned at least seven years ago that Boeing had too much sway over safety approvals.
PATRICK T. FALLON — BLOOMBERG NEWS FAA employees warned at least seven years ago that Boeing had too much sway over safety approvals.

Newspapers in English

Newspapers from United States