Track obstruction risks

A passenger train sustained minor damage after colliding with a metal awning from a modified shipping container that was being transported by a freight train, which had opened in transit before striking a bridge and falling onto the track.

The 20 foot container, modified with a large side opening awning for use as a canteen, was travelling on Pacific National train 7WB3 from Newcastle to Brisbane on 17 June 2018. As the container passed over Wilson River Bridge, near Telegraph Point in NSW, the open awning struck the bridge superstructure and fell onto the track.

The ATSB investigation into the incident established that the awning had opened twice previously during transit. On both those occasions the crew re-secured the awning, but they were unaware of the third opening before the awning struck the bridge.

Train 7WB3 then continued north and stopped in the Telegraph Point passing loop to allow southbound passenger train NT32 to pass on the mainline. As NT32 crossed south over the Wilson River Bridge, it struck the awning and sustained minor damage to brake equipment on the train’s leading bogie.

The ATSB found that the awning was only held closed by spring-loaded bolts accessed from the inside of the container. This was not compliant with Pacific National’s Freight Loading Manual (FLM), which required a system that could be locked and was externally visible to assure that openings remained secure and enable examination by inspection staff. Further, inspections conducted by Pacific National terminal operators at the departure location did not identify the modified container or the absence of locks.

Any item on a container that can open into the rail corridor represents a potential risk as, should they come open, they may strike infrastructure, opposing trains or bystanders.

“The absence of externally visible locks meant there was no way of knowing whether the modified container’s awning was adequately secured,” ATSB Transport Safety Director Dr Stuart Godley said.

“Should any opening come open during operation, they may strike infrastructure, opposing trains or bystanders.”

The ATSB also noted that, while Pacific National made the FLM available to customers, they did not actively advise them when they had a responsibility identified by the manual and did not have a process for ensuring customers complied with the manual’s requirements. Therefore, in this case, the customer did not notify Pacific National that the container was modified as they were not aware of a requirement to do so. Additionally, the training and checking processes for terminal operators who carried out inspections did not include the FLM requirements for modified containers. This removed an opportunity for the requirements to be reinforced and practiced during training and regular checking of inspection staff.

“This incident highlights the importance of having processes in place to advise customers of the requirements for the safe transport of modified containers and to ensure compliance,” Dr Godley said

Since the incident, Pacific National has implemented a range of processes to ensure customers are aware of, and are compliant with their FLM requirements. This has included the development of an online course and an auditing program to monitor compliance and performance.

In addition, Pacific National have also introduced a number of training and checking measures for inspection staff.

Read the final report: Track obstruction due to loss of freight from train 7WB3 and subsequent impact of passenger train NT32 with track obstruction, near Telegraph Point, New South Wales, on 17 June 2018

Accident highlights hypoxia risk

The pilot of a Cessna Grand Caravan was almost certainly incapacitated, possibly from hypoxia, when his aircraft flew uncontrolled into the ocean off the east coast of Japan.   

The Australian-registered Cessna 208B (VH-FAY) was being ferried from Perth to Mississippi in the United States via the Northern Pacific when on the morning of 27 September 2018 it departed from Saipan Airport in the Northern Mariana Islands bound for New Chitose Airport in Hokkaido, Japan.

After climbing for about an hour, the aircraft levelled off at 22,000 feet, while after 2 hours and 20 minutes into the flight, the pilot contacted Tokyo Radio flight information service on HF radio to make a mandatory position report. The aircraft was next due to report about an hour and 20 minutes later, when overhead the SAGOP reporting point, but no contact with Tokyo Radio was made. Tokyo Radio subsequently made repeated attempts to communicate with the pilot, without success.

About 4.5 hours after the pilot’s last communication, two Japan Air Self-Defense Force (JASDF) aircraft intercepted the Cessna. The pilot did not respond to the intercept in accordance with international intercept protocols, either by rocking the aircraft wings or turning, and the aircraft continued to track at 22,000 feet on its planned flight route. The JASDF pilots were unable to see into the cockpit to determine whether the pilot was in his seat or whether there was any indication that he was incapacitated.

After about 30 minutes, the JASDF pilots observed the aircraft descend into cloud. The aircraft descended rapidly and disappeared from radar less than 2 minutes later. Within 2 hours, search and rescue personnel located the aircraft’s rear passenger door. No other aircraft parts were located and the pilot was not found.

Rear passenger door

Figure 3: Rear passenger door.
Source: Aircraft operator

Source: Aircraft operator

The ATSB’s subsequent investigation found that while the aircraft was in the cruise on autopilot, the pilot almost certainly became incapacitated. Consequently, about 5 hours after the last position report, without pilot intervention to change fuel tanks, the aircraft’s engine stopped, likely due to fuel starvation. This resulted in the aircraft entering an uncontrolled descent into the ocean.

The effects of hypoxia can be insidious.

Director Transport Safety Stuart Macleod said that while the cause of the incapacitation could not be determined, and a medical event could not be ruled out, the pilot was operating alone in an unpressurised aircraft at 22,000 feet and probably using an unsuitable oxygen system, which increased the risk of experiencing hypoxia.

“Operating unpressurised aircraft above 10,000 feet requires careful oxygen management and planning,” Mr Macleod said.

“Where an increased risk of hypoxia exists, good risk management practices should be used for flight planning. Because the effects of hypoxia can be insidious, training in recognition of early symptoms of hypoxia can increase the time available to react, descend and resolve any issues.”

As a result of this accident, the aircraft operator amended its operation manual to include additional guidance for international ferry flights. It also created an oxygen-use guide and a specific risk assessment for positioning (ferry) flights.

Read the report: Collision with water involving Cessna 208B, VH-FAY, 185 km north-east of Tokyo, Japan, on 27 September 2018

Bogie fatigue cracking

A fatigue crack in a coal train wagon bogie went undetected during preventative maintenance before it escalated to a full fracture, increasing the risk of derailment, an ATSB investigation has highlighted.

On 12 December 2017 Pacific National coal train TM78A was undergoing a roll-by inspection at Kooragang Coal  Terminal in Kooragang, New South Wales, when a maintenance worker identified a fracture on the lead bogie of the train’s 35th wagon. The train was stopped and the wagon was removed for inspection.

An investigation into the cracking, conducted on behalf of the ATSB by NSW’s Office of Transport Safety Investigation (OTSI), found that the fatigue crack had gone undetected during earlier preventative maintenance, and that it was probable that the fracture was visible the day before during unloading of the wagon, but had gone undetected.

Identifying this fracture in time likely prevented a derailment.

The NDCA bogie frame design has a history of fatigue cracking, which increases the risk of derailment if the cracking is not identified. Pacific National had processes in place to identify fatigue cracking, but this crack was likely not detected due to the location of the defect on the bogie frame.

OTSI COO and Deputy Chief Investigator Kevin Kitchen said the incident highlights how asset managers should ensure that inspection techniques effectively monitor and report on the condition of assets.

“Risk controls should also be continuously assessed to control risk to an acceptable level through the life cycle of an asset,” Mr Kitchen said.

In response to the incident, Pacific National has made changes to the maintenance standard used during scheduled maintenance, increasing the area of the bogie frame subjected to non-destructive testing. This change is aimed at identifying and addressing fatigue cracking prior to any escalation of defects.

“Identifying this fracture in time likely prevented a derailment,” Mr Kitchen said. “However, if the worker who identified the defect had been positioned on the opposite side of the train, it could have been missed.”

Read the final report: Fractured bogie frame on coal train TM78A, at Kooragang, New South Wales, on 12 December 2017

Fatigue crack engine failure

A fatigue crack in a turbine blade spread rapidly, causing a helicopter’s engine failure, an ATSB investigation found.   

The incident occurred when a twin-engined Airbus Helicopters AS355F-1 helicopter, registered VH-SEV, was completing an air-taxi from a hangar to a maintenance facility at Sydney’s Bankstown Airport. On board were the pilot and one passenger.

As the skids touched the ground on landing, the pilot heard a loud ‘squeal’ from the helicopter’s right-hand side. The pilot scanned the instrument panel and observed the engine gas generator speed (Ng) drop to 55 per cent and the right-hand engine chip light illuminate. A few seconds later, the pilot observed smoke coming from that side of the aircraft and immediately shut down the right-hand engine.

Mechanics from a nearby workshop quickly extinguished the engine fire. There was substantial damage to the engine, and minor heat damage to the surrounding structure of the helicopter.

Any pilot, regardless of their level of experience, can find themselves confronted with an unexpected failure.

“Any pilot, regardless of their level of experience, can find themselves confronted with an unexpected failure,” said ATSB Director Transport Safety Stuart Macleod. “The pilot’s quick response to the unexpected failure helped ensure the best possible safety outcome.”

The ATSB investigation found that single third-stage turbine wheel blade failed due to fatigue cracking, resulting in secondary damage to the engine, and total engine failure.

“This incident reinforces that it is important for pilots to monitor aircraft performance parameters continuously for abnormal indications,” said Mr Macleod.

Engine manufacturer Rolls-Royce advised the ATSB that, with the Rolls-Royce 250 enhanced power turbine engine, a dwell of just a few seconds can be enough to initiate damage and propagate a crack to failure.

In response, Rolls-Royce is redesigning the third-stage turbine wheel to improve its tolerance to fatigue cracking and operation at responsive wheel modes.

The report AO-2018-021, provides important advice for operators of aircraft with Rolls-Royce 250 enhanced power turbine engines.

Read the final report: Engine failure involving an Airbus Helicopters AS355F-1, VH-SEV, Bankstown Airport, New South Wales, on 12 March 2018

Sling load accident

The ATSB is highlighting the precautions necessary for sling load operations after a load unexpectedly fell from a Bell 205 helicopter, striking and seriously injuring a worker on the ground.

The helicopter, registration VH-HUE, was being used for external sling loading operations to move equipment from a staging area near Tantangara Dam to a drilling site about 3 km away, south-east of Talbingo, New South Wales, on 10 January 2019. As the helicopter approached the drop-off site, the load, comprising drill rod racks weighing about 1,200 kg, unexpectedly disconnected from the cargo hook. The falling load struck and seriously injured a loadmaster assisting on the ground.

In the course of investigating the incident, the ATSB examined the slings, shackle and hook, but could not determine the reason for the load being released from the hook. However, the ATSB found that the ground personnel had not been maintaining a safe distance from the load.

This incident highlights the dangers associated with external sling load operations.

“This incident highlights the dangers associated with external sling load operations,” ATSB Director Transport Safety Stuart Macleod said. “Unexpected events can occur, and ground personnel should take care to ensure they maintain their separation from external slung loads that are above head height.”

In this accident, the positioning of the ground personnel, in combination with the significant movement of the load as it contacted the ground, meant that they were exposed to higher risk.

“Each sling load operation can be unique, with different locations, different load shape, and different environmental conditions combining to create different safety considerations,” Mr Macleod said. “As a consequence, clear written procedures and detailed discussions prior to commencement of each operation are essential to ensure that all participants are aware of the unique dangers of the operation.”

Read the report: External sling loading accident involving Bell 205, VH-HUE, 39 km south east of Talbingo, New South Wales, on 10 January 2019

Floatplane and boat collision

A collision between a Cessna Caravan floatplane and a small aluminium boat highlights the importance of scanning and assessing landing areas for potential hazards during amphibious flying.

The floatplane had just completed a water landing at Berowra Creek, in the Hawkesbury River catchment north of Sydney, on 29 June 2019.  After slowing down to taxi speed, the aircraft’s front left float bumped into a small stationary boat. There was no damage to the aircraft or boat, while one person in the boat sustained minor injuries.

The ATSB’s investigation into the incident found that the pilot did not see the boat due to a combination of factors including the weather conditions on the day as well as the colour, size, lack of movement and location of the boat as it was positioned in the aircraft’s direct path.

This incident highlights the importance of scanning and assessing landing areas for any potential hazards, and of the joint responsibility of both aircraft and marine vessels to see and avoid other aircraft and vessels operating on the water.

“This incident highlights the importance of scanning and assessing landing areas for any potential hazards, and of the joint responsibility of both aircraft and marine vessels to see and avoid other aircraft and vessels operating on the water,” said ATSB Director Transport Safety Dr Stuart Godley.

 “When choosing an operating speed for any vessel or aircraft on the water, consideration should be given to any potential blind spots and areas where other vessels could emerge.”

Subsequent to the incident the aircraft operator has advised its pilots to remain on the right hand side of the waterway to reduce the risk of a blind spot near the area of the incident.

In addition, as a standard operation, company pilots are to reduce the speed of the aircraft to an idle power taxi speed after landing, 100 m before the start of the 4-knot zone at Berowra.  

Read the final report: Collision with vessel involving Cessna 208, VH-ZWH, Berowra Waters, New South Wales, on 29 June 2019

Buffer stop collision

ro2019006_bufferstop.jpg

Source: ONRSR

The slow-speed collision of an empty passenger train into a buffer stop on 25 February 2019 highlights the importance of train safety systems to protect against driver error and incapacitation, an ATSB investigation notes.

After its passengers had disembarked, Metro Trains Melbourne train TD 6591 departed Newport Station for a siding where it was to be stabled (parked and secured). As the train approached the stabling location, the brakes were not applied in sufficient time to stop the train and it collided with the buffer stop.

The collision resulted in substantial damage to the front of the train and the buffer stop, and the driver was hospitalised with minor injuries.

In subsequent interviews the driver reported losing consciousness for a period of time prior to the collision, recalling entering the siding but having no other recollections until after impact. A subsequent medical examination found the driver may have fainted due to dehydration and lack of nutrition.

Analysis of data from the driver cabin’s Vigilance Control Event Recorder System (VICERS) showed that a brake application consistent with emergency braking was made about 1.5 seconds before impact, but that was after passing the required stopping point.

Train safety systems are an important protection against driver error and incapacitation.

“The driver may have been incapacitated immediately prior to the accident and therefore temporarily lost awareness, leading to the train not stopping at the designated stopping point as the driver did not apply the brakes in sufficient time,” said ATSB Director Transport Safety Dr Stuart Godley.

“However, due to limited and conflicting evidence the cause, duration and presence of incapacitation could not be determined.”

While the train was equipped with a safety system, comprising a pilot valve as part of the master controller, that was designed to apply the brakes in situations such as driver incapacitation, it did not activate in this incident. The recorded data indicated that sufficient pressure was maintained on the master controller, and therefore the only aspect of the train safety system that could have activated and applied the brakes to protect against driver incapacitation was not triggered.

Post-accident testing of the train’s braking system and the master controller hand pilot valve found no faults that would have contributed to a failure to stop.

“Train safety systems are an important protection against driver error and incapacitation,” Dr Godley noted.

“In addition, drivers are reminded to maintain their health and fitness for work to reduce the likelihood of incapacitation including maintaining adequate levels of nutrition and hydration as well as consideration of the potential impact of fatigue,” Dr Godley said.

Information on fatigue is available on the ATSB website.

Read the final report: Collision of passenger train TD 6591 with buffer stop, Newport siding, Victoria, on 25 February 2019

Flap and landing gear overspeed

Incorrectly calculated take-off speeds contributed to an Airbus A320 experiencing flap and landing gear retraction overspeed events, an ATSB investigation has established.

While preparing for a flight from Sydney to Melbourne, the flight crew of the Jetstar Airways A320 were unable to use two electronic flight bags to calculate and check take-off performance data, and instead used manual take-off charts.

But the flight crew inadvertently calculated speeds that were higher than required for the actual aircraft weight and environmental conditions, and those incorrect take-off speeds were not identified by independent verification and cross-checking.

Consequently, the aircraft did not rotate to the correct pitch attitude during its take-off roll, resulting in a higher acceleration rate than anticipated. As a result, the aircraft’s speed at rotation was only 16 knots below the maximum flap extended speed.

Following rotation, the pitch rate remained under the recommended rate, and continued to reduce with the aircraft’s speed increasing. The pilot flying was not alerted to the incorrect pitch attitude rotation; however the pilot monitoring called ‘speed, speed’ to assist in the management of airspeed. The flap extended limit speed was exceeded five seconds after rotation. 

This incident highlights the importance of independent validation and crosscheck of flight performance data, in particular performance speeds and aircraft weight.

When alerted to the impending overspeed, the pilot flying reduced the engine power in response, rather than increasing the aircraft pitch. The action of reducing the engine power was taken when the aircraft was below the safe altitude above ground.

Then, climbing through 2,800 feet, the flight crew reported hearing a buffeting noise, and they soon determined that the landing gear was still extended. The pilot flying immediately called ‘gear up’ and the pilot monitoring quickly retracted the landing gear without looking at the speed indication, which was 30 knots above the maximum landing gear retraction speed.

The flight crew discussed the occurrence and with no known adverse indications, they continued the flight to Melbourne without further incident.

“This incident highlights the importance of independent validation and cross-check of flight performance data, in particular performance speeds and aircraft weight,” ATSB Transport Safety Director Dr Stuart Godley said.

The ATSB found that when using the manual take-off charts, the procedure for the calculation for the correct take-off performance speed for the aircraft’s actual total take-off weight was not completed, resulting in a calculated rotation speed based on an aircraft weight significantly heavier than their actual take-off weight.

“This error was not detected through an independent validation crosscheck,” Dr Godley said.  

“This investigation emphasises the importance of considering reasonability and accuracy checks, consulting company procedures manuals in the event of electronic flight bag issues, and conducting a normal rotation followed by reference to the Speed Reference System,” Dr Godley said.

Read the report: Incorrect configuration involving Airbus A320, VH-VFX, Sydney Airport, New South Wales, on 29 September 2018

Running line collision

ro2017003_figure-7_final.png

Source: Google Earth, annotated by ATSB

A collision involving a track worker and a passenger train at Petrie Station, north of Brisbane, highlights the need for sufficient resources, including time, information about the work environment, train movements and adequate protection to minimise risk to rail workers, a new ATSB investigation report says.

Late in the evening on 29 May 2017, a passenger train approaching Petrie Station from the north struck and fatally injured a Queensland Rail (QR) protection officer. He was part of a team of four protection officers implementing a planned track closure for maintenance of the Kippa-Ring rail corridor from Petrie Station to Kippa-Ring station. The protection officers were using personal continual vigilance (PCV), which requires track workers to see that tracks are clear, frequently look in both directions for approaching rail traffic and not rely on another person to give warning, when walking within three metres of a track (known as the Danger Zone).

The protection officer had placed permanent way protection* to warn approaching train drivers to stop and mark the outer limits of protection for the track maintenance worksite on the Kippa-Ring lines. The collision occurred while the protection officer was walking on the Up Caboolture line, which was open for rail traffic and not part of the track maintenance worksite.

The ATSB’s investigation found that the protection officer did not apply personal continual vigilance techniques while walking within the track Danger Zone. The investigation noted that while it was evident that immediately prior to the collision the protection officer’s attention was diverted by the mobile phone clipped to the front of his shirt illuminating, the protection officer was already in a position of danger with a collision imminent by this point, and the direction he was walking meant that his back was facing the train involved in the collision.  

This investigation highlights that to minimise risk, rail organisations should ensure processes relating to track work include provisions for protection officers to have sufficient resources, including time for task, information about the work environment, including train movements, and adequate protection available for the work.

“Although the reasons why the protection officer did not apply continual vigilance techniques could not be determined, it was possible that he had no expectation of rail traffic, and a number of factors that increased risk were identified,” ATSB Director Transport Safety Dr Godley said.

Those factors included time pressures, protection officers not being familiar with the new rail infrastructure layout at Petrie Station for the Kippa-Ring line (which officially opened in October 2016), no processes being in place for ensuring adequate time for protection officers to familiarise themselves with new or changed work sites, and the night shift protection officer supervisor inadvertently marking some open lines as closed on the Train Notice Diagram for Petrie Station that was used by the protection officers. Independent verification of the Train Notice Diagram was not undertaken, and so that error was not identified.

“This investigation highlights that to minimise risk, rail organisations should ensure processes relating to track work include provisions for protection officers to have sufficient resources, including time for task, information about the work environment, including train movements, and adequate protection available for the work,” Dr Godley said.

In response to the accident, QR have commissioned a number of independent reviews on its safe work on track processes and practices, including the use and selection of personal continual vigilance, mobile devices in the rail corridor and its worksite protection compliance inspection systems.

QR have also re-enforced the message of ‘the right to stop work and getting safety right before commencing’ as part of its ongoing network pre-start brief project.

* Permanent way protection: One or more devices approved by Access Providers that provide warning to protect rail traffic crew and workers. The device or devices may be used in conjunction with signalling or blocking facilities.

Read the final report: Running line collision with worker involving passenger train T570, Petrie, Queensland, on 29 May 2017

Loss of containers

mo2018008_figure-3_final.jpg

Source: ATSB

The loss of 81 containers overboard from the container ship YM Efficiency highlights the importance of safe and effective container stowage planning, an ATSB investigation has found.

Just after midnight on 1 June 2018, the YM Efficiency was steaming slowly into strong gale force winds and very rough seas off Newcastle, en route to Sydney, when it suddenly rolled heavily, causing container stacks to collapse and topple. As a result, 81 containers were lost overboard and a further 62 were damaged, while the ship sustained structural damage to its lashing bridges, superstructure, and accommodation ladder.

Substantial debris from the lost containers subsequently washed ashore on the New South Wales coast. At the time of the ATSB investigation report’s finalisation, search efforts for those containers – including with the use of remote underwater vehicles – had identified 66, with a few having washed ashore or close to shore. Five containers have been removed, and 15 containers have yet to be found.

Source: ATSB

The ATSB investigation determined that the forces generated during the sudden, heavy rolling placed excessive stresses on containers stowed aft of the ship’s accommodation. This resulted in the structural failure of containers and components of the lashing system, leading to the loss of containers overboard.

All potential causes for the sudden rolling were investigated, such as the possibility of an abnormal wave, but there was insufficient evidence to establish a definitive cause.

Further, the condition of the ship’s lashing equipment was considered not to have contributed to the loss of containers. However, the investigation found that the weights and distribution of containers in the affected bays were such that calculated forces exceeded allowable force limits as defined in the ship’s Cargo Securing Manual (CSM).

Dislodged containers six days after the accident

Figure 11: Dislodged containers six days after the accident.
Source: ATSB

Source: ATSB

ATSB Chief Commissioner Greg Hood said the safe carriage of containers at sea depends on loading, stowing, and securing them in compliance with the ship’s CSM.

“Checking stowage plans for compliance with the Cargo Securing Manual requirements is increasingly achieved through loading computer systems. Notwithstanding the efficiency of computerised loading systems, the scale and pace of modern container ship operations puts significant pressure on ship’s officers to check and amend or approve proposed stowage plans at a late stage.”

Mr Hood noted that in that context, the planning process ashore offers the best opportunity to take all practical measures to ensure that the proposed stowage plan presented to ships officers complies with the CSM and is as safe as reasonably practicable.

The ATSB investigation found that the weights and distribution of containers in the affected bays were such that calculated forces exceeded allowable force limits as defined in the ship’s CSM. The investigation also identified that the stowage arrangement was not checked for compliance with the CSM’s calculated lashing force limitations during the cargo planning process ashore.

“This left sole responsibility for compliance with the ship’s officers, with limited options to resolve deficiencies at a late stage in the process without unduly impacting operations,” Mr Hood said.

Further, the officers did not use the ship’s loading computer system and its lashing calculation program to check if the stowage arrangement complied, as they probably did not have an adequate understanding of the system.

“Weather forecasting, routing and good navigational practices in adverse weather all play a part in minimising the risk of injuries to crew and damage to ship, cargo and environment,” Mr Hood said.

“However, safe and effective container stowage planning is the primary control measure in managing the risks involved in carrying containers by sea.”

As a result of this accident, the ship’s managers, Yang Ming, have taken a number of safety actions to address the identified issues. These include requiring checks of lashing forces during the initial cargo stowage planning stage ashore, providing regular training of shore planners in multiple aspects of cargo loading and securing, and training responsible ship’s officers in the use of the ship’s loading computer system.

“The ATSB considers that the safety actions taken by Yang Ming have adequately addressed the issues that our investigation identified,” Mr Hood said.

Read the final report: Loss of containers overboard involving YM Efficiency, 16 NM east-south-east of Newcastle, New South Wales, on 1 June 2018