The System Theoretic Accident Modelling and Process (STAMP) of medical pilot knock-out events: Pilot incapacitation and homicide-suicide

Abstract After the Germanwings flight 4U9525, mental health issues of pilots have been raised as a hazard to flight safety. Pilot homicide-suicide, as a special subtype of pilot incapacitation, can be examined at different levels of commercial aviation. We extended the System Theoretic Process Analysis (STPA), based on the System Theoretic Accident Modelling and Process (STAMP), to pilot behaviour to investigate how these knock-out events may be encountered in the whole system. Several safety actions have been identified to prevent hazardous pilot behaviour caused by medical incapacitation and homicidal-suicidal behaviour at different levels of the system. Pilot incapacitation is already handled very well in practice with respect to the regulations and procedures in current usage. In contrast, the prevention of pilot homicide-suicide is currently managed by aeromedical decision-making regulations and pilot support programs. The design of the flight deck compartment door and the balancing of privacy laws and public safety remain trade-offs amid a medical risk.

[1]  Pentti Kujala,et al.  Systems-Theoretic Process Analysis of Maritime Traffic Safety Management in the Gulf of Finland (Baltic Sea) ☆ , 2017 .

[2]  Jan Erik Vinnem,et al.  Deriving verification objectives and scenarios for maritime systems using the systems-theoretic process analysis , 2018, Reliab. Eng. Syst. Saf..

[3]  Nancy G. Leveson,et al.  Engineering a Safer World: Systems Thinking Applied to Safety , 2012 .

[4]  Patrick Waterson,et al.  ‘Accident investigation in the wild’ – A small-scale, field-based evaluation of the STAMP method for accident analysis , 2016 .

[5]  Nancy G Leveson,et al.  Rasmussen's legacy: A paradigm change in engineering for safety. , 2017, Applied ergonomics.

[6]  Nancy G. Leveson,et al.  A new accident model for engineering safer systems , 2004 .

[7]  Charles A DeJohn,et al.  In-flight medical incapacitation and impairment of airline pilots. , 2006, Aviation, space, and environmental medicine.

[8]  Michael Dambier,et al.  Medical Incapacitation im Cockpit - Inzidenz, Ursachen und Folgen , 2008 .

[9]  Neville A. Stanton,et al.  Systems Theoretic Accident Model and Process (STAMP) safety modelling applied to an aircraft rapid decompression event , 2017 .

[10]  Matthias Egger,et al.  Homicide-suicides compared to homicides and suicides: systematic review and meta-analysis. , 2013, Forensic science international.

[11]  Sidney Dekker,et al.  Just Culture: Balancing Safety and Accountability , 2012 .

[12]  Nancy G. Leveson,et al.  Hazard Analysis of Complex Spacecraft Using Systems-Theoretic Process Analysis , 2014 .

[13]  Nancy G. Leveson.  Applying Systems Thinking to Aviation Psychology , 2013 .

[14]  Cody H. Fleming,et al.  Safety assurance in NextGen and complex transportation systems , 2013 .

[15]  Kjell Ivar Øvergård,et al.  A STAMP-Based Causal Analysis of the Korean Sewol Ferry Accident , 2016 .

[16]  Nancy G. Leveson,et al.  Safeware: System Safety and Computers , 1995 .

[17]  Thomas H. Bradley,et al.  Application of systems theoretic process analysis to a lane keeping assist system , 2017, Reliab. Eng. Syst. Saf..

[18]  Timothy R. Rice,et al.  Preventing plane-assisted suicides through the lessons of research on homicide and suicide–homicide , 2015, Acta Neuropsychiatrica.

[19]  Christopher Kenedi,et al.  Suicide and Murder-Suicide Involving Aircraft. , 2016, Aerospace medicine and human performance.

[20]  Nektarios Karanikas,et al.  Application of STPA on Small Drone Operations: A Benchmarking Approach , 2017 .

[21]  A. Evans,et al.  International Regulation of Medical Standards , 2006 .

[22]  David Harris,et al.  A human‐centred design agenda for the development of single crew operated commercial aircraft , 2007 .

[23]  Liu Hong,et al.  STAMP-based analysis on the railway accident and accident spreading: Taking the China-Jiaoji railway accident for example , 2010 .

[24]  Sally Evans,et al.  The annual incapacitation rate of commercial pilots. , 2012, Aviation, space, and environmental medicine.

[25]  Alexander C. Wu,et al.  Airplane pilot mental health and suicidal thoughts: a cross-sectional descriptive study via anonymous web-based survey , 2016, Environmental Health.

[26]  Nancy G. Leveson,et al.  A systems approach to risk management through leading safety indicators , 2015, Reliab. Eng. Syst. Saf..

[27]  Nektarios Karanikas,et al.  Using STPA in the Evaluation of Fighter Pilots Training Programs , 2015 .

[28]  Harry W Orlady,et al.  Human factors in multi-crew flight operations , 1999, The Aeronautical Journal (1968).

[29]  Nancy G. Leveson,et al.  Improving Hazard Analysis and Certification of Integrated Modular Avionics , 2014, J. Aerosp. Inf. Syst..

[30]  Ritesh G Menezes,et al.  The airplane crash in the French Alps: A preventable tragedy. , 2015, Asian journal of psychiatry.

[31]  Stefan Wagner,et al.  A Systematic Approach Based on STPA for Developing a Dependable Architecture for Fully Automated Driving Vehicles , 2017 .

[32]  Joakim Sturup,et al.  Homicide-suicide offences: description, classification and short case studies , 2015 .

[33]  Peng Tang,et al.  STAMP-Based Safety Control Approach for Flight Testing of a Low-Cost Unmanned Subscale Blended-Wing-Body Demonstrator , 2015 .

[34]  Paul M Salmon,et al.  Who is in control of road safety? A STAMP control structure analysis of the road transport system in Queensland, Australia. , 2016, Accident; analysis and prevention.

[35]  Marko Čepin.  Event Tree Analysis , 2011 .

[36]  Athanasios Rentizelas,et al.  Introducing the STAMP method in road tunnel safety assessment , 2012 .

[37]  Robert J. de Boer,et al.  The Integration of Drones in Today's Society , 2015 .