Escolar Documentos
Profissional Documentos
Cultura Documentos
June 2006
AIRSPACE
INFRINGEMENT “Hindsight”
The ability or opportunity to understand and judge
an event or experience after it has occured.
IS AIRSPACE PENETRATION
AN ATC PROBLEM OR NOT?
See page 3
LOSS OF SEPARATION
THE BLIND SPOT
See page 15
RUNWAY INCURSIONS -
IT WILL NEVER HAPPEN TO ME ...
See page 18
CONTENTS
Editorial
Editorial Team
Editor in Chief
Tzvetomir Blajev
Editorial Secretary
Ian Wigmore
Editorial Committee
Bengt Collin; Dominique Van Damme; Yvonne Page; Jacques Beaufays; Max Bezzina;
Alexander Krastev; Gilles Le Galo; Philip Marien; Antoine Vidal; Stanislaw Drozdowski;
Charlie Goovarts; Francois Cervo
* In most European countries, national procedures are based on ICAO Standards and
Recommended Practices (SARPs); therefore the “Lessons Learned” listed in HindSight follow this
guidance. Where national procedures do not follow ICAO SARPs, some “Lessons Learned” might
not be applicable.
I can’t count the number of times I have heard someone say, “this is just pilot error, it
is not our responsibility”.
General aviation aircraft entering controlled airspace without authorisation, near misses
in class “E” airspace, military aircraft infringing civil-controlled airspace, infringements
of restricted access airspace, problems with gliders and parachute-dropping flights;
these are the types of scenarios I have in mind.
Pilot error? Does such a thing as “human error” really exist? More and more the aviation industry is considering human
error as a manifestation of a problem, rather than the problem itself. In our discussions we agree that human actions usually
make sense, given the dynamics and the context of the situation in which they are taken. It is very easy with the benefit of
hindsight, already knowing the outcome of the event, to find a different (better) course of action.
In spite of this, when we speak of airspace infringement we often say, “This is just pilot error.” We are tempted to think that
there is nothing we could have done, in the context in which the error happened i.e. regarding the airspace design and pro-
cedures, the quality of flight information service, the regulatory supervision of general aviation, etc. It seems that we agree on
the concept, but applying the concept to real examples like airspace infringement, level bust and other pilot error seems to be
beyond our ability. We sometimes even hear suggestions like, “the solution is simple - introduce fines for the pilots”.
Of course there is no escaping the fact that in the majority of cases the pilot is wholly responsible. I am not trying to suggest
anything to the contrary. But to say, “he is guilty - that is the end of the story” denies us an opportunity to make a real contri-
bution to reducing the chance for error.
The last Safety Improvement Sub-Group meeting decided to closely examine the whole subject of airspace infringements. A
new Safety Improvement Initiative has been launched to consider the factors that cause pilots to make errors and penetrate
controlled airspace. It will look at the context of the incidents and also the operational environment. Operational environment
and context cannot be determined while sitting alone in a closed office. For this reason, the SISG Secretariat has already estab-
lished close liaison with several agencies working in this field.
If it is true that there are different scenarios, it is also true that ATC is often part of the context. We must ask ourselves whether
ATC is perhaps contributing to the errors in some way. We must also ask, “even if we are not always part of the problem - could
we become part of the solution?”
UPA becomes AI
The EUROCONTROL initiative for the prevention of Unauthorised Penetration of Airspace (UPA) has been renamed as the
Airspace Infringement Initiative. This will comprise three areas of concern:
Unauthorised entry into controlled airspace;
Infringement of restricted, prohibited or other special use airspace; and,
Loss of separation in Class E airspace.
A precise definition of this initiative is under consideration.
You have in your hands the third edition of the HindSight publication. The main theme this time is airspace infringement. As
usual we also cover a range of different subjects, which I hope you will find interesting and useful.
ABOUT HINDSIGHT
The main function of the HindSight Some incidents relate to the perform- Coding of Subject Matter
magazine is to help operational air traf- ance of ATCOs or the ATM system, while
fic controllers to share in the experi- others illustrate pilot errors which can To aid identification of subject matter,
ences of other controllers who have arise from incorrect interpretation of each article is coded and marked by a
been involved in ATM-related safety ATC instructions, or other unpre- coloured icon which appears at its
occurrences. In this way, they will have dictable situations. head.
an opportunity to broaden their expe-
rience of the problems that may be The incidents fall into two categories:
encountered; to consider the available
solutions; and so to be better prepared Summaries of accident and seri-
should they meet similar occurrences ous incident reports
themselves.
The full report usually runs to many
Material contained in HindSight falls pages, so these reports must be sum-
into three distinct classes: marised and simplified, concentrating
on the ATM-related aspects and pass- Loss of
Editorial ing quickly over (or even ignoring) Separation
121.5 - Safety Alerts and other issues which have no direct rele-
The Briefing Room - Learning from vance to ATCOs. A reference to the orig-
Experience. inal report is always supplied.
Level Bust
On page 2, you will find a table of con- Dis-identified accounts of other
tents listing articles under these three ATM-related incidents
headings. Editorial material, such as this
article, needs no explanation but a few Typically, the original reports are not in
words on the other two classes may the public domain; however there are Runway
prevent any misunderstanding. important lessons to be learned from Incursion
them. The identifying features of the
121.5 Safety Alerts reports are altered without changing
the substance of the reports in order to
From time to time EUROCONTROL preserve the confidentiality of the Controlled Flight
into Terrain
issues Early Warning Messages and reporter.
Safety Reminder Messages to draw the
attention of the ATM community to Lessons Learned
.. . .
emerging safety issues. The messages
.. . . .
. . .. .
....
..
.. . . . . . . . . . .
.........
are intended to encourage discussion In the articles that follow, only the les- Airspace Infringement ..
.. .
. .. . . . .. .
on the prevalence and seriousness of sons learned from the featured acci-
the issue and on the most appropriate dents and incidents are listed. Posters
reaction to them. Summaries of some listing all relevant learning points are in
recent messages are included. the course of preparation.
Wake Vortex Turbulence
The Briefing Room - Learning Knowledge Base
From Experience
We intend to compile a Knowledge
The majority of HindSight is taken up Base of all types of ATM-related safety
reports, which may be accessed by per- Human Factors
with articles concentrating on specific
safety issues. These usually comprise a sons carrying out research on particu-
study of an actual accident or inci- lar subjects. This is a long-term project
dent(s) together with a summary of les- but we plan that the HindSight maga-
sons learned. These articles are coded zine should be integrated with it from
Other
to reflect the subject material. the outset.
Bert Ruitenberg is a TWR/APP controller, supervisor and ATC safety officer at Schiphol
Airport, Amsterdam, The Netherlands. He is the Human Factors Specialist for IFATCA
and also a consultant to the ICAO Flight Safety and Human Factors Programme.
controller forgetting to transfer an air- to come closer to a boundary than half ary of your airspace (or beyond it!)
craft to the next frequency. However, your radar separation minimum? make a point of coordinating with the
they may also be caused by a controller controller who is responsible for the
who thinks the other controller won’t Multi-radar tracking may have airspace on the other side. It could
mind if he continues to separate traffic increased the range and coverage of make life easier for your colleague -
just slightly inside the other’s airspace most radar operations today, yet that and also for yourself.
without coordination. Regardless of old rule is still in place (at least as far
how brilliant the evolving solution may as I know). Have you ever heard a con- Since I find myself on a somewhat edu-
be, from the other controller’s perspec- troller tell pilots “yes I know you have cational note here, I thought it might
tive this is just an airspace infringe- TCAS but there is traffic out there that be nice to end this column with an
ment! And how sure can the first con- you can’t see”? Well, the same may episode of the cartoon strip that I men-
troller be that on his radar he really apply to us as controllers working with tioned at the start. If airspace infringe-
sees all the relevant targets outside the multi-radar tracking. ments persist, perhaps education of
borders of his own airspace? Wasn’t the pilot community is the next step
there a rule in radar control some- So, whenever you find yourself issuing we have to consider...
where that you were never supposed instructions to aircraft near the bound-
to fly to a field on the other side of the What separates effective handling of controller may have to spend on deal-
TMA. The controller did not explicitly unauthorized entry into airspace from ing with the effects of his/her own
give the Cessna permission to cross the a less effective one? The Gothenburg delay rather than with the initial effects
TMA. Twenty minutes later, well into case strongly demonstrates that it is of the intrusion. Obviously, the later the
the TMA, the Cessna came into conflict only partly about a controller’s ability, detection of an intruder, the smaller a
with an A320 turning toward the final if at all. Yet it reveals interesting ways controller’s margins may have become.
approach into Gothenburg. A TCAS in which a sudden, escalating situation Later intervention can imply that the
alert helped the A320 pilots avoid the can create its own demands that stem tempo of assessments and actions will
Cessna, and minimum separation from the way it is managed. have to go up. It can also mean that
between the two aircraft became 1NM. Unexpected events such as an airspace more traffic may have become affected
They were at the same altitude. intrusion can produce a cascade of by the intrusion - which will give the
effects. Typically, demands for new controller more to do and less time in
For a controller, unauthorized entry knowledge increase (Who is this? which to do it.
into airspace, whether VFR or IFR traf- Where did he come from? Where is he
fic, almost always comes unexpectedly. going? Do I have a label somewhere?). In the case above, the controller did
Unexpected events - once detected - Demands for coordination increase too not know that the Cessna was in his
have a way of upsetting plans.Typically, (Whose airspace is he from or will he TMA until the announcement from the
they create additional workload and a go to? Does my planner know any- A320. This was not the controller’s fault.
need to revise tactics. The controller thing? Whose scope of responsibility It was the entire operation that was not
has to deal with the intrusion, but with- does this event fall into?). And all the well-prepared enough to recognize
out dropping everything else. In other time, margins and chances to rectify and absorb an intrusion in its plans.
words, the anomaly needs to be man- the problem may be shrinking.
aged while maintaining process The Gothenburg position could switch
integrity. This extra burden and the The later a controller begins to coun- off the labels of traffic not under con-
interactions it produces, places new, teract and compensate for this cas- trol. In normal practice, this “OTH OFF”
unanticipated demands on a controller. cade, the more difficult it can become switch is used only during short, work-
to recover from it, and the more time a load-intensive periods, to highlight the
traffic actually under control by that load of the incident. The controller in could be typical for such situations:
position. Automatic correlation of traf- this case essentially “forgot” three
fic such as the Cessna 172 was not an things. He “forgot” to put back “OTH Demands for cognitive activity
option at the time. A label would have ON”, he “forgot” to integrate the Cessna increase as the effects of the prob-
had to have been made and entered strip and programme a label for it, and lem cascade or suddenly explode
for it manually. Although the Cessna he “forgot” to give the Cessna a real into view. The need for more
had been radar-identified, the con- clearance to enter the TMA. All three knowledge is mounting or
troller did not make a label for it. With are “omissions”, which appear more increases suddenly. Actions to pro-
the position in “OTH OFF”, the Cessna likely after a workload peak (we can tect the integrity and safety of sys-
was not only uncorrelated, it was also, still only speculate about the possible tems need to be identified, carried
technically speaking, “OTH” traffic. psychological mechanisms). Omissions out, and monitored for their effec-
Irrelevant traffic. Traffic not under the are also more likely with fatigue (which tiveness. Existing plans need to be
control of that position. Traffic not in hinges on time-on-task, work and rest modified or new plans formulated.
the picture. schedules, previous sleep, etc.).
Demands for coordination increase
At this stage the only trigger to “see” But errors are not causes. Errors are as the effects of the problem cas-
the Cessna, and understand its inten- consequences. They are effects. They cade or suddenly come to the fore.
tions, was the controller’s memory of a come from somewhere. When con- Knowledge may reside in different
brief, two-phrase exchange a continu- fronted with a “human error”, we should people or different parts of the
ally increasing number of minutes ago. start our journey, our investigation - operational system.
No strip on the board, no label on the not conclude it. It is easy for us, in hind-
screen. Just a small dot of “OTH” traffic. sight, to say what the controller should The Cessna’s intrusion was unexpected,
It was only when the A320 announced have done. But this gets us nowhere. not necessarily because of the Cessna.
its TCAS alert and went around on the The controller must have come to work After all, it had planned to fly to that
basis of it, that the controller realised to do a good job, as we assume every- airport across the TMA all along, an
the Cessna had continued on its body does. Instead we should ask: why intention that had been communi-
course, right into his TMA, but “under did it make sense to delay the prepa- cated and acknowledged with a “roger”
the radar”, so to speak. ration, to delay the switch back to “OTH by the controller. The intrusion was
ON” after the evening traffic peak had unexpected because the ANS system
Left to wonder receded? It must have made sense at was unable to recognize the intention
the time - otherwise the controller for what it was worth, absorb it in the
The incident investigation tells us noth- would not have done it. And if it made rest of its work, and adapt to it. Is your
ing about the reasons for this self-con- sense to one controller, it could make operation well-calibrated enough to
structed, systemically-inbuilt brittle- sense to another, to you, to others in know whether and how it will handle
ness - which of course, is unfortunate. your organization. an intrusion like this? Unexpected
In the psychology behind the actions events such as unauthorized airspace
lie many of the keys to improving and Escalation intrusions will remain unexpected. But
preventing situations such as this one. that does not mean your operation
We could ask many questions. And we As it turned out, the margins for recov- cannot be prepared for them.
should seek answers to them. How nor- ery became slimmer and slimmer with
mal was it to have approach positions the increasing delay in recognizing the Source report:
in “OTH OFF”? Were there particular sit- intrusion. While “under the radar”, out of
uations in which this was more usual sight of the controller, the situation Swedish Accident Investigation Board
than others? Were some situations pro- escalated. What did not help was that (2003). Loss of separation between air-
scribed from having this switch on? Gothenburg did not have STCA. In craft SE-IBX and TS-INC in airspace
How normal was it for controllers to Sweden only Stockholm and Malmö north of Gothenburg/Landvetter air-
not switch back to “OTH ON”? Had oth- ATCC did at the time of the incident. port, 5 November 2002 (Report RL
ers been caught out by this too? How Without STCA, even more margins 2003:31). Stockholm, Sweden: SHK
often does programming unplanned were shaved from an increasingly slim (original report in Swedish).
VFR traffic get delayed? For how long? situation. The situation was made even
Whose role is it, if you have a two-per- worse by an operational system that
son system? Who double-checks? was not well-prepared for the unex-
pected. It exploded into view only
The investigation report relies, unfortu- when the A320 made its announce-
nately but not uncharacteristically, on ment. This generates a number of coor-
“human errors” to carry the explanatory dinative and cognitive effects which
121.5
SAFETY ALERTS
SAFETY WARNING THE PROBLEM INTERIM ICAO GUIDANCE
. .. .
.. . . .
. . .. .
.....
..
... . . . . .. . ..
........
..
...
.. . . . . . ..
AIRSPACE INFRINGEMENTS -
PILOTS’ PROBLEMS
The problem of airspace infringement to concentrate on the skills the student crossed controlled airspace. This is not
seldom affects airlines. Airlines usually pilot needs to handle the aircraft safely his own aircraft, but one he has hired
follow designated air routes within and pass the required examinations at from the local flying club. There is no
controlled airspace. The intended rout- the end of the course. Other matters altitude capture on his autopilot and
ing is known in advance and if, for are not dealt with at any great depth navigation will be by reference to
example, it must be changed due to and may even be ignored. For newly VOR/DME supplemented by visual
temporary restricted airspace, a re- qualified GA pilots, the learning curve observation. Weather conditions for
route is issued, often before the aircraft is steep; limited flying hours may mean the route are VMC but with some cloud
leaves the ground. The airline is usu- that a long time passes before a real below, making map-reading difficult.
ally under the control of an air traffic understanding of the airspace environ- He will have a tail-wind as he
unit from the moment it begins to taxi ment is acquired together with the approaches the airway. He is the only
until it comes to a halt at its destina- necessary skill and experience to navi- pilot on board but his non-flying girl-
tion, so any deviation from the cleared gate it safely and efficiently. friend is with him as passenger. While
flight plan is quickly detected and he is preparing his flight, his excited
equally quickly corrected. The oppor- On many GA flights there is only one passenger is full of questions, distract-
tunity for airspace infringement is pilot, so there is no-one with whom to ing him from the task in hand. To John,
small and the training and profession- share the workload or to discuss prob- the controller is an unknown quantity
alism of airline pilots makes it a rare lems. Even when two pilots are pres- - not quite an adversary but not a
event indeed. ent, the second pilot may be no more friend. Flight in controlled airspace,
experienced than the first. Light air- however brief, is an adventure, so he
General aviation (GA), on the other craft are often not very well equipped, takes time to consider where he
hand, operates largely outside con- with no auto-pilot or at best a very intends to enter controlled airspace,
trolled airspace. For the amateur pilot, basic instrument. Navigation may be what he will say and what he will do.
air routes, control areas and the like fairly primitive and where GPS is fitted,
may be something of a mystery, and lack of familiarity with the equipment John calls up for crossing clearance
the correct procedures for entering or may result in considerable distraction about 6 minutes before reaching the
crossing it may not be properly under- when re-programming is necessary. airway but the frequency is very busy
stood. Even the experienced flying Correct transponder setting may also and the controller tells him to stand by.
instructor or air-taxi pilot may not be present difficulties. Instead of turning away, he continues
fully conversant with the requirements. on heading expecting to receive cross-
It is not surprising, therefore, that the Added to this, many small aerodromes ing clearance soon. The cloud below,
majority of airspace infringement inci- do not have extensive flight-planning coupled with his inexperience at map-
dents involve general aviation. An facilities where the pilot may easily reading make navigation difficult and
appreciation of the pilots’ perspective brief himself on NOTAMs and the latest because he has not annotated his chart
will help us to understand their prob- changes to airspace structure and pro- with VOR radials and DME ranges he is
lems and the reasons why this takes cedures. If experienced staff are pres- uncertain of his position. Eventually he
place. This understanding may help us ent, the pilot may not know the right turns to avoid the airway, but with the
to take appropriate defensive action in questions to ask to equip himself for a tail-wind, he comes so close to an
good time and prevent airspace flight into controlled airspace. It is infringement that the controller has to
infringement incidents having danger- therefore clear that the possibilities for give avoiding action to airways traffic.
ous consequences. airspace infringement are consider-
able. Let us consider a hypothetical When the controller calls John back, he
Pilots’ Problems case. is not where he intended to be and his
carefully prepared information is out of
Unlike commercial airline pilots, private The Inexperienced Pilot date. He can’t remember his aircraft
pilot training is often very basic and registration, then remembers it is on a
standards are not subject to the same John is a PPL with less than 200 hours plate on his instrument panel. He
frequent rigorous checks. There is a total; it is several weeks since his last doesn’t know where he is relative to his
strong tendency for flying instructors flight and several months since he last intended entry point. The controller
LESSONS LEARNED
From the many lessons learned from Monitor the track of the aircraft Note that when vectoring aircraft
this and other incidents concerning when a “Standby” instruction is during the initial and intermediate
all members of the aviation commu- issued, to ensure that airspace approach phases, it is wise to
nity, the following relate particularly infringement does not take place. ensure that the flight trajectory will
to Air Traffic Controllers: not pass through Classes E or G air-
Pay particular attention to the space, where unknown traffic may
Familiarise yourself with the GA actions of apparently inexperi- appear without warning, causing a
pilot’s working environment, his enced pilots, to ensure that any potential conflict with the vectored
problems and his workload. unexpected deviation from clear- traffic.
ance is noted promptly.
Bear in mind that many GA aircraft Bear in mind that pilots engaged in
are poorly equipped and their Consider issuing a radar heading at aerial work within controlled air-
pilots may be very inexperienced, a level clear of other traffic and space may have to deviate from
and recognise the dangers that monitor the aircraft’s flight path their cleared flight parameters and
could result. closely if you suspect that a pilot communication may be difficult if
may be overloaded, or may have they are working a different fre-
Note that a “Standby” instruction difficulty complying with instruc- quency.
issued to an aircraft requesting tions.
crossing or joining clearance
should be followed as soon as pos-
sible by a call issuing clearance or
refusal.
LOSS OF SEPARATION
THE BLIND SPOT
Given the traffic density in some period after a handover (when you In cases of close proximity (less
European airspace, it is not surprising think you’ve ‘settled in’ on the sec- than 10 to 15 Nm and 1,000 ft),
that dangerous situations are very tor). STCA will only give a very short
occasionally overlooked. In most cases, warning before separation is
the problem will be detected by the Descending aircraft are often infringed or even when it is already
controllers themselves or STCA will be involved: inbound traffic often too late.
triggered in time to be able to correct needs to meet certain restrictions.
the situation. Coupled with aiming for the top-of- Quite a number of occurrences
descent point, this sometimes involve traffic under someone else’s
In other cases though, controllers of all results in an incomplete scan of the control. The different colour(s) used
experience levels sometimes com- affected traffic. In occasional climb- for these aircraft may lead to sub-
pletely overlook an aircraft when clear- ing situations, a crew’s request is consciously filtering them from
ing another in the direct vicinity (in acted on immediately without a your scan. Quite often, the over-
one area there were some 20 separa- proper scan of its immediate vicin- looked aircraft has already been
tion infringements in 3 years). There ity. passed to the next sector. As such,
are some examples below. it was considered ‘dealt with’,
The conflicting traffic may be in the erased from memory and over-
Common elements found in these inci- immediate vicinity of the cleared looked. The second person on the
dents: aircraft. Typically, the controller sector does not detect the prob-
spots potential problems that are lem; their workload often prevents
Most happen in low or medium further away, but doesn’t detect the them following the actual traffic sit-
traffic situations. The risk is traffic that is closest to the aircraft uation.
increased after a peak or during the that he/she is clearing.
Figure 1 - For ABC123 - the controller spots both PQR265 and XYZ312 but overlooks DEF763
Figure 2 - VRG231 is on the sector frequency and requests descent. Taking DCA337 into account, the controller overlooks XCM3018
Figure 3 - Controller focuses on making a restriction for STS837 and overlooks AAG125
LESSONS LEARNED
RUNWAY INCURSIONS -
IT WILL NEVER HAPPEN TO ME ...
By Bengt Collin
It will never happen to me. Well, like Not complicated at all; in addition this
many other people - that is just what I was a standard taxi route, an instruc-
thought. This article is about just that; tion you give day in and day out.
it is about runway incursions I never
expected to happen. But they did. And The tower at Arlanda is centrally
they can happen again. What can we located (very convenient for the lunch
do to prevent them in the future? break and the restaurants in nearby
Sky City) with good views in all direc-
Let’s make it perfectly clear: tions. Another aircraft just vacating
Stockholm-Arlanda is a safe airport. The runway 26 called; I turned to the right
airport layout is, if not perfect, very and looked north, away from the air-
good for the prevention of runway craft from gate 15 west of the tower, in had a bomb threat so it was decided
incursions. All terminals and aprons are order to monitor a conflict with a to tow aircraft to Ramp South instead.
located in the centre of the airport and towed aircraft. At the same time, the controller was
no runways need be crossed by air- busy with an aircraft returning with
craft. Then it happened. The outbound air- severe vibrations. Tug 12 received
craft did not turn 90 degrees to the instructions to tow west via taxiway X-
The first incursion happened during right, it only turned 60 degrees to a ray and south onto Yankee. Suddenly
the relatively quite hours at midday. It Rapid Exit Taxiway leading out to the the tower was contacted via the radio
is not unusual that incidents happen at runway (see the red line on the dia- from the Follow Me (on the “aircraft”
off-peak hours; perhaps you relax more gram) where another opposite aircraft frequency), asking the controller if she
and perhaps focus on things outside was about to depart. It took less than was aware that Tug 12 and the towed
your normal procedures. three seconds. This time everything aircraft were on runway 19. The con-
went well, the pilot understood he was troller instructed Tug 12 to vacate and
I was working at the ground controller wrong and stopped before the runway. the Follow Me confirmed when the
position, the traffic was low and only The signs were in accordance with runway was free. Instead of turning
one ground position was open. We ICAO standards and Stop Bars are used south on Yankee the tug had mistak-
used runway 26 for landing and run- H24. As a bonus, another controller, just enly continued straight ahead on YF!
way 19 (today 19R) for departure. The released, observed the incursion and (see Figure 2).
weather was nice as always; in Sweden alerted me, but I guess there is no guar-
most days are sunny, blue sky is stan- antee that that would happen again... The inbound aircraft (yes, the one with
dard and the visibility unlimited. vibrations) on one mile finals landed
The second incursion happened a long without problem; the controller aged
The aircraft involved was parked at time ago; this was before Surface by a couple of years.
gate 15 on Terminal 5. Following push- Movement Radar and Stop Bars were
back, the aircraft requested and introduced at Arlanda, probably just What can we learn from these runway
received taxi instructions for the hold- after World War II ended. In dark and incursions? Use the Action Plan for the
ing point of runway 19. The aircraft foggy weather (the sun does not shine Prevention of Runway Incursions*!
should taxi out on the south side of the when it is dark) a lot of interesting Make people aware of the recommen-
terminal, turn 90 degrees right for taxi- things happen; being new at the job dations. Follow them! Many of the rec-
way Yankee and finally straight ahead the controller used slightly different ommendations are things that you can
for around one and a half kilometres language when describing the inci- do right here, right now. Others may
(see green line on the diagram). dent. The old international terminal take longer, but if your Human-
* A copy of the European Action Plan for the Prevention of Runway Incursions can be obtained from the following e-mail address:
runway.safety@eurocontrol.int
LESSONS LEARNED
MISUNDERSTANDINGS -
WRONG QNH SETTING
A C9, operated by the US military, was Conclusion drawn by the air traffic
approaching a civil airport. The controller:
approach controller guided the aircraft
to the ILS during descent to an altitude If the correct QNH value is set for the
of 3000 FT. radar display, the actual altitude is
shown on the radar screen.
APP: “C9 descend altitude 3000 FT
QNH 996” Statement by the DFS Safety
C9: “Descending 3000 FT 996 C9” Management Department:
The pilot reported reaching 3000 FT The conclusion drawn by the ATCO is
but the Mode C indication on the radar correct since both the altimeter and
display said “A2400 FT”. The pilot con- radar data processing use 1013 hPa as
firmed being at A3000 FT, so a Mode C the reference value. For altitudes below
inaccuracy was assumed. After the air- the transition level, on-board as well as
craft had been cleared for ILS and had ground-based systems make a correc-
intercepted the LLZ, it was transferred tion according to the QNH set. In the
to the TWR frequency. incident described above, the altimeter
of the C9 had the wrong correction
When the pilot confirmed the QNH value (which the pilot cannot see!!)
after having been transferred from APP while the radar used the right correc-
to TWR, the cause of the presumed tion value and thus showed the actual
“Mode C inaccuracy” became apparent. altitude of the aircraft.
The pilot had misunderstood the QNH.
He had confused 996 hPa with 29.96 For values above 1000 hPa, the “1”
inches. The Mode C indication was clearly indicates that the air traffic con-
indeed correct; the aircraft was at an troller has given the value as hPa. For
altitude of 2400 FT. The difference QNH values below 1000 hPa, there is a
amounted to 19hPa, which corre- risk that (mainly US or military) pilots
sponds to approximately 570 FT (29.96 who are used to QNH values expressed
inches corresponds to 1015 hPa). in inches confuse the hPa QNH values
within the range of 900 with the QNH
The glide path was intercepted at values expressed in inches starting
A2400 FT. The ILS guided the aircraft with 29. The pilots appear to be used
safely to the airport despite the wrong to the missing “2”. This could perhaps
altitude. It does, however, raise the be the result of negligent phraseology
question as to what could have hap- applied by foreign colleagues ...
pened as a result of the wrong altime-
ter setting if the ILS had not been avail- According to present German
able but if an NDB approach had to be radiotelephony procedures, it is not
performed instead, with a low ceiling in mandatory to explicitly mention the
IMC. The OCA for an NDB approach to measurement unit of the QNH. In order
that airport is approximately 600 FT to avoid misunderstandings, however,
above aerodrome level; with an error of the following solutions might be advis-
570 FT, this would have only left 30 FT able for QNH < 1000 hPa.
or about 10m - with a considerable dis-
tance to cover before reaching the run- to add a preceding “0” (e.g. QNH
way! 0996), or
to add “hPa” (e.g. QNH 996 hPa).
LESSONS LEARNED Specifying the altitude reference Pilots from the USA and Canada
when this changes (e.g. “descend are accustomed to a standard TA
From the many lessons learned from to 3,000 feet QNH” or “set QNH 993 of 18,000 feet. There is therefore an
this and other incidents concerning hPa and descend to 3,000 feet”). enhanced risk of error when clear-
all members of the aviation commu- ing them to a flight level below
nity, the following relate particu- Passing the pressure setting to the 18,000 feet. This risk may be
larly to Air Traffic Controllers: pilot of a North American aircraft. reduced by repeating the clear-
In the USA and Canada, pressure ance (e.g. descend to flight level
The controller can reduce the likeli- settings are always expressed in one two zero I say again flight level
hood of error by paying close atten- in.Hg.; the pressure setting refer- one two zero).
tion to the use of standard phraseol- ence should therefore be stressed
ogy and by insisting on the correct (e.g. “set QNH 993 hPa,” not, “set
read-back procedure. 993”).
* The EUROCONTROL Level Bust Toolkit has been developed as a result of the EUROCONTROL Level Bust Initiative. It contains much important
information and advice to help combat the level bust threat. The EUROCONTROL Level Bust Toolkit may be obtained on CD ROM by contact-
ing the Coordinator Safety Improvements Initiative, Mr Tzvetomir Blajev, on tel.: +32 (02) 729 3965 fax: +32 (02) 729 9082
tzvetomir.blajev@eurocontrol.int
DESCENT BELOW
THE GLIDESLOPE
Recently, several serious incidents have Incident 2: NATS have in this context issued the
been reported to UK NATS that have following message:
occurred when aircraft on final A B747 was being vectored for an ILS
approach have descended significantly approach and reported established on “NATS KEY MESSAGE
below the glide-path. UK AAIB is inves- the localiser at 15 NM, maintaining
tigating these incidents, the most 4000 FT QNH. The pilot was given Controllers are reminded to ensure
recent of which has attracted the clearance to descend further on the that standard phraseology is used
attention of the media. None of these ILS, and descent commenced when the when clearing aircraft to descend
incidents were in any way attributable aircraft was at 13 NM. Shortly after for final approach.
to NATS; however, we are working to commencing descent the pilot asked
identify methods of assisting in the “do you have a problem with the These incidents are not caused by
detection and resolution of this type of glideslope?” - although the only clearly ATC error, but ATC can be very
event. Brief summaries of two of the readable part of this transmission was effective in preventing a serious
incidents are outlined below: the callsign and “glideslope”. As the air- incident from becoming a fatal
craft approached 9 NM, the controller accident by taking prompt action
Incident 1: realised that it was now indicating when it is recognised that an air-
Mode C 1800 FT and descending. The craft is dangerously positioned on
An A310 was being vectored for an ILS controller immediately instructed the final approach.
Localiser/DME approach (the glide- pilot to climb to 2000 FT, although the
path was not available). The aircraft aircraft actually descended further to If such an occurrence happens on
had been turned onto a base leg head- 1300 FT before levelling out and then final approach, consider issuing
ing and instructed to descend to 2000 commencing climb. Investigation has climb instructions immediately,
FT QNH. The pilot was then given a shown that the aircraft was descending before clarifying intentions or pres-
closing heading to establish on the at a rate of 2500 fpm. sure setting.
localiser. After reporting established
on the localiser at 10 NM, the aircraft Both of these serious incidents were If such an occurrence is noticed by
was released for descent with the pro- resolved through the prompt action of the Tower controller, be prepared
cedure and transferred to the Tower the controllers on duty, following early to issue immediate missed
frequency. Almost immediately follow- recognition that the aircraft were dan- approach instructions.
ing transfer to Tower, the Radar 2 con- gerously positioned. The controllers
troller noticed that the aircraft had involved should be commended for If such an occurrence is noticed by
begun to make a left turn, deviating their swift action in resolving the situ- the Radar controller, following
from the final approach track. Radar 2 ation. Work is ongoing to enable bet- transfer of the aircraft to the Tower
then contacted Tower to confirm the ter understanding of the full extent frequency, alert the Tower immedi-
aircraft’s intentions. The pilot reported and nature of this incident type. In the ately.
“affirm, we’re turning to the right” but meantime, controllers should be aware
by the time the aircraft reached an of the potential for this type of event File a safety report. We can only do
8NM final, the Radar 2 controller recog- and be prepared to take immediate something about these incidents if
nised that the aircraft was now action should an aircraft be seen to be we know about them.’’
descending rapidly and, again, alerted dangerously positioned, particularly
the Tower controller, who instructed when on final approach.
the aircraft to climb immediately. The
lowest altitude observed on radar was
600 FT (approx 2-300 ft AGL) approxi-
mately 7 miles from touchdown. The
Radar controller then directed the air-
craft for a further approach from which
the aircraft made a safe landing.
tzvetomir.blajev@eurocontrol.int
DISCLAIMER
© European Organisation for Safety of
Air Navigation (EUROCONTROL)
June 2006