Accredited Representative - Occurrence involving Malaysia Airlines Boeing 777-200, 9M-MRD, near Hrabove, eastern Ukraine, on 17 July 2014

Summary

On 17 July 2014 a Malaysia Airlines Boeing 777-200, registered 9M-MRD, en route from Amsterdam in the Netherlands to Kuala Lumpur, Malaysia, disappeared from air traffic services radar overhead the Ukraine. Aircraft wreckage was subsequently identified over a large area to the south and west of the village of Hrabove, eastern Ukraine. There were no survivors.

As the occurrence took place in the Ukraine, the National Bureau of Air Accident Investigation of Ukraine (NBAAI) commenced an accident investigation under Annex 13 to the Convention on International Civil Aviation Aircraft Accident and Incident Investigation (Annex 13) on 17 July 2014. As part of its investigation, the NBAAI requested assistance from the Australian Transport Safety Bureau (ATSB) and under clause 5.23 of Annex 13, the ATSB appointed an accredited representative and an adviser to the NBAAI investigation on 20 July 2014. In addition, an external investigation was initiated under the provisions of the Australian Transport Safety Investigation Act 2003.

The ATSB investigators departed for Kiev, Ukraine on 21 July 2014 to participate in the NBAAI accident investigation. Subsequently, on 23 July 2014, the Ukrainian Government delegated the conduct of the investigation to the Dutch Safety Board (DSB) under clause 5.1 of Annex 13. The ATSB investigators remained in Kiev to assist the Dutch investigation before relocating with the investigation team to the DSB headquarters in the Netherlands on 1 August 2014. The ATSB investigators returned to Australia on 8 August 2014.

During the investigation the ATSB and other accredited representatives contributed to the development of the DSB’s preliminary investigation report, which was released to the public on 9 September 2014. In addition, the ATSB representative attended two investigation progress meetings in The Netherlands. The second of these meetings included an examination of the reconstruction of the aircraft from recovered wreckage, items and components.

Subsequently, and consistent with Annex 13 standards and recommended practices, the ATSB and other accredited representatives received a copy of the draft investigation report for comment. The DSB considered these and comments from other relevant parties to the investigation before finalising their report.

The DSB has completed its investigation and report and, in accordance with the provisions of Annex 13, a final investigation report was published 13 October 2015. This report, together with information on the investigation, is available from the DSB’s website at www.onderzoeksraad.nl/en.

Any enquiries with respect to the DSB investigation should, in the first instance, be directed to:

Dutch Safety Board

PO Box 95404
2509 CK The Hague
The Netherlands

Telephone: +31 70 333 70 00 

Occurrence summary

Investigation number AE-2014-130
Occurrence date 17/07/2014
Location near Hrabove, eastern Ukraine
State International
Report release date 29/10/2015
Report status Final
Investigation level Systemic
Investigation type External Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Miscellaneous - Other
Occurrence class Other
Highest injury level Fatal

Aircraft details

Manufacturer The Boeing Company
Model 777-2H6ER
Registration 9M-MRD
Aircraft operator Malaysia Airlines
Sector Jet
Operation type Air Transport High Capacity
Departure point Amsterdam, The Netherlands
Destination Kuala Lumpur, Malaysia
Damage Destroyed

Collision with terrain involving a Mooney M20J, VH-JDY, Northam (ALA), Western Australia, on 5 September 2014

Final report

Report release date: 03/12/2014

What happened

On 5 September 2014, the pilot of a Mooney M20J aircraft, registered VH-JDY, conducted a solo training flight from Jandakot Airport to Northam aeroplane landing area (ALA), Western Australia. After a touch-and-go on runway 14 at Northam, the pilot conducted a second circuit with a missed approach from about 600 ft on final. The pilot then intended to conduct a third circuit with a touch-and-go. When on final, the pilot trimmed the aircraft in the approach configuration with full flaps (33°) and airspeed at about 70 kt.

The pilot flared the aircraft for landing and touched down about one third of the way along the runway. As the aircraft slowed, the pilot selected the flaps to 15° and applied full throttle along with right rudder to counteract the aircraft’s tendency to yaw left. As the airspeed increased to about 65 kt, the pilot rotated the aircraft for take-off and applied forward pressure against the control column as the aircraft nose tendency was to pitch up due to the combination of trim, flap and power settings. 

When at about 50 ft above ground level, the aircraft had drifted to the right of the runway centreline and the pilot reduced the right rudder input. Soon afterwards, the aircraft nose pitched up. The stall warning sounded and the pilot applied full right rudder and pushed forward on the control column in an attempt to level the aircraft wings and recover from the stall.  The left wing dropped as the aircraft stalled, and it collided with a hangar. The aircraft pivoted about the left wing and came to rest wedged between two hangars resulting in substantial damage.

Aviation Short Investigations Bulletin - Issue 36

Occurrence summary

Investigation number AO-2014-148
Occurrence date 05/09/2014
Location Northam
State Western Australia
Report release date 03/12/2014
Report status Final
Investigation level Short
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Collision with terrain
Occurrence class Accident
Highest injury level Minor

Aircraft details

Manufacturer Mooney Aircraft Corp
Model M20J
Registration VH-JDY
Serial number 24-1681
Sector Piston
Operation type Flying Training
Departure point Jandakot, Western Australia
Destination Northam, Western Australia
Damage Substantial

Navigation event involving a Fairchild SA227, VH-UUO, Brisbane Airport, Queensland, on 3 September 2014

Final report

Report release date: 12/02/2016

Safety summary

What happened

On 3 September 2014, at about 0215 Eastern Standard Time (EST),[1] a Fairchild SA227 aircraft, registered VH-UUO, took off from Brisbane Airport, Queensland for a freight charter flight to Bankstown Airport, New South Wales, with one pilot on board. Following the take-off, when at about 200 ft above ground level, the pilot observed the horizontal situation indicator (HSI) indicating a right turn although the aircraft was still maintaining runway direction. The pilot reported that the attitude indicator (AI) displayed alternately a nose up and nose down attitude.

When at about 1,600 ft above ground level, the pilot advised air traffic control of a ‘minor problem with heading’ and was directed to conduct a right turn onto an easterly heading to avoid noise sensitive areas. The pilot turned the aircraft to the right, towards the Pacific Ocean, while referring to the HSI on the co-pilot’s instrument panel, which was providing more accurate heading information. The pilot was aware that the captain’s AI and HSI instruments were providing erroneous indications, but became disoriented by continuing to scan those instruments. The pilot looked out of the window in an attempt to gain a visual reference but could see only blackness.

The pilot continued a shallow right turn until the lights of runway 19 became visible. The aircraft landed back at Brisbane, on runway 19 about 150 kg above the aircraft’s maximum landing weight.

What the ATSB found

The ATSB found that the cockpit was not configured correctly prior to taxi, nor was the incorrect heading reference detected or corrected during the taxi or line up. The left gyro slaving switch was selected to ‘free’ instead of ‘slave’ mode, resulting in the captain’s HSI indicating about 50° left of actual heading throughout the flight.

The AI probably intermittently malfunctioned after take-off, and the pilot became distracted by the two erroneous instrument indications. These, combined with the dark night and flight over water without visual reference, contributed to the pilot’s difficulty in maintaining orientation and achieving the planned departure track. The pilot therefore elected to return to land at Brisbane.

What has been done as a result

The aircraft operator developed a simulator exercise based on the incident, to ensure all company pilots demonstrated limited instrument panel skills – without reference to attitude indicator or direction indicator, and troubleshooting skills.

Safety message

This incident highlights the importance of completing pre-flight checks and ensuring the cockpit is correctly configured prior to taxiing. Particularly when operating at night or into instrument meteorological conditions, it is imperative to verify all reference instruments are indicating correctly. This incident also highlights the importance of communication, especially as emergencies arise. If a pilot is having difficulty controlling an aircraft and maintaining instrument or visual reference, then alerting air traffic control enables them to provide the necessary and appropriate assistance. 

[1]     Eastern Standard Time (EST) was Coordinated Universal Time (UTC) + 10 hours.

Occurrence summary

Investigation number AO-2014-147
Occurrence date 03/09/2014
Location Brisbane Airport
State Queensland
Report release date 12/02/2016
Report status Final
Investigation level Defined
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Navigation - Other
Occurrence class Serious Incident
Highest injury level None

Aircraft details

Manufacturer Fairchild Industries Inc
Model SA227-AC
Registration VH-UUO
Serial number AC 530
Sector Turboprop
Operation type Charter
Departure point Brisbane, Queensland
Destination Bankstown, New South Wales
Damage Nil

Loading event involving a Bombardier DHC-8, VH-LQK, Brisbane Airport, Queensland, on 25 August 2014

Final report

Report release date: 23/12/2014

What happened

On 25 August 2014, a QantasLink Bombardier DHC-8 aircraft, registered VH-LQK was being prepared for a scheduled passenger flight to Blackall and then Longreach, from Brisbane Airport, Queensland. Ground handlers loaded bags into the aircraft in accordance with the load instruction report: 12 bags with destination Blackall and 47 bags for Longreach in hold 41; 20 bags for Longreach in hold 42; and nil bags or cargo in locker 11.

A ground handling agent transcribed the baggage information onto a call back card, but indicated there were 12 bags in hold 41 instead of 59 bags. The call back card was then provided to the flight crew, who entered the baggage information into the iPad loading application to complete the final load sheet. 

The aircraft arrived in Blackall at 0915 Eastern Standard Time. A ground handler at Blackall completed the offload reconciliation procedure and identified a discrepancy of 47 bags or 676 kg in hold 41. The aircraft remained within centre of gravity limits and no structural limits were exceeded.

Data input errors, such as the incorrect loading figures being used, occur for many different reasons. The consequences of these errors can include a range of aircraft handling and performance issues.

Accurate weight and balance information is essential for the safety of every flight. Following standard procedures and checklists minimise the potential for error.

Aviaiton Short Investigations Bulletin - Issue 37

Occurrence summary

Investigation number AO-2014-145
Occurrence date 25/08/2014
Location Brisbane Airport
State Queensland
Report release date 23/12/2014
Report status Final
Investigation level Short
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loading related
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer Bombardier Inc
Model DHC-8-402
Registration VH-LQK
Serial number 4415
Aircraft operator Sunstate Airlines
Sector Turboprop
Operation type Air Transport High Capacity
Departure point Brisbane, Queensland
Destination Blackall, Queensland
Damage Nil

Collision with terrain involving Robinson R22, VH-YPC, 70 km north-west of Halls Creek, Western Australia, on 25 August 2014

Final report

Report release date: 16/12/2014

Safety summary

What happened

On the afternoon of 25 August 2014, the pilots of two Robinson R22 helicopters were ferrying the helicopters from Yeeda to Springvale via a refuelling stop at Leopold Downs, within the Kimberley region of Western Australia. The pilot who was ahead by about 10 NM (18 km) arrived at Springvale about 40 minutes after last light but the pilot of the second helicopter, registered VH‑YPC, did not arrive as expected.

A search using helicopters began early the next morning and the overdue helicopter was soon found in a seriously damaged state, close to the intended track and 25 NM (46 km) west of Springvale. The pilot had been fatally injured.

What the ATSB found

The ATSB found that the pilot of VH-YPC, who did not hold a night visual flight rules (VFR) rating or instrument rating, continued flying towards the destination after last light (end of civil twilight), then in dark night conditions without local ground lighting, inadvertently allowed the helicopter to descend into terrain.

Safety message

This accident highlights the inherent high risk of night flying in remote areas due to the absence or degradation of the visual references for establishing an aircraft’s attitude and position. This risk is increased to unacceptable levels when night flying is attempted by pilots without night VFR or instrument flying qualifications. To avoid the usually fatal consequences of disorientation, day VFR pilots need to plan to arrive at their destination at least 10 minutes before last light and to have a realistic ‘Plan B’ to use when it becomes apparent that an intended flight cannot be completed in daylight. It is important, also, for operators and others involved in the operation of aircraft to actively support safety-first pilot decision making.

The ATSB is concerned about the frequency of accidents – many fatal – that involve pilots flying with reduced visual cues. This has been highlighted on the ATSB website as a SafetyWatch priority along with a number of strategies to help manage the risk and links to relevant safety resources.

Occurrence summary

Investigation number AO-2014-144
Occurrence date 25/08/2014
Location 70 km north-west of Halls Creek
State Western Australia
Report release date 16/12/2014
Report status Final
Investigation level Defined
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Collision with terrain
Occurrence class Accident
Highest injury level Fatal

Aircraft details

Manufacturer Robinson Helicopter Co
Model R22 Beta
Registration VH-YPC
Serial number 4507
Sector Helicopter
Operation type Private
Departure point Yeeda Station, Western Australia
Destination Springvale Station, Western Australia
Damage Destroyed

Collision between V/Line train 8280 and MTM train 6502, Altona, Victoria, on 22 August 2014

Final report

Report release date: 06/07/2016

Safety summary

What happened

At about 1901[1] on 22 August 2014, a V/Line train travelling the Werribee line on the Melbourne Metropolitan Rail Network collided with a stationary Metro Trains Melbourne (MTM) passenger train between Maidstone Street level crossing and Kororoit Creek Road. The MTM train had come to an unintended stop due to a loss of air pressure in its braking system. The V/Line train had stopped at an Automatic[2] signal that was indicating a Stop aspect and after a short while proceeded past the stop signal. Trains can proceed past an Automatic signal at Stop under conditions specified by an operating rule. Shortly after passing the signal, the train collided with the rear of the stationary MTM train at 43 km/h. The MTM train was carrying 51 passengers at the time of the collision. The driver and conductor on the V/Line train, the driver of the MTM train and eight passengers on the MTM train sustained minor injuries in the incident.

What the ATSB found

The ATSB found that the operating rule permitted the V/Line train to proceed past a signal at Stop into a section that was occupied by the MTM train. The V/Line train was operated past the signal at Stop in a manner contrary to the operating rule and proceeded at a speed that reduced the opportunity to observe the train ahead and stop in time. The rule placed reliance on the train driver to provide separation between trains by line-of-sight observation and was not an effective defence against errors.

The ATSB also found that the marker lights on the MTM train (Comeng type) did not meet the requirements of the Australian Standard for Railway Rolling Stock Lighting and Rolling Stock Visibility, AS/RISSB 7531.3:2007 for permissive working[3]. This standard was developed by the Rail Industry Safety Standards Board (RISSB) and although MTM had adopted this Standard, it was not implemented on the Comeng trains in their fleet.

What's been done as a result

Metro Trains Melbourne has amended the existing procedure in Section 3 Rule 1 of The Book of Rules and Operating Procedures 1994 for permitting trains to pass an uncontrolled, unmonitored signal at Stop. The new amendments incorporate a procedure, which requires train drivers to contact and respond to an automated voicemail facility providing their details, the rail vehicle details and details of the signal at Stop.

Metro Trains Melbourne has advised the ATSB that a modification is being developed to increase the intensity of the marker lights of Comeng trains to a level compliant with the Australian Standard for Railway Rolling Stock Lighting and Rolling Stock Visibility, AS/RISSB 7531.3:2007.

Safety message

The rules pertaining to permissive signalling rely on a train driver to provide separation between trains by line-of-sight observation. In the hierarchy of hazard controls, rule based controls are considered the least effective defence against human error or violations. Train operators should institute additional risk mitigation measures, where safeworking systems allow permissive working.

__________

  1. The 24-hour clock is used in this report and is referenced from Eastern Standard Time (EST).
  2. See signalling arrangements section.
  3. Permissive working allows two or more trains to enter the same signal section subject to specific operational rules.

 

The occurrence

MTM Service 6502

At about 1840[4] on 22 August 2014, Metro Trains Melbourne (MTM) passenger train 6502 departed Werribee Railway Station on its scheduled service to Flinders Street Station. The train arrived at Laverton Railway Station at about 1852 without incident.

Figure 1: Location map – Showing train line from Werribee to Melbourne and location of collision

Figure 1: Location map – Showing train line from Werribee to Melbourne and location of collision

Source: Copyright Melway Publishing 2013, Edition 41 with annotations by the Chief Investigator, Transport Safety (Victoria)

The train departed Laverton Railway Station and all signal aspects from Laverton were at clear normal speed (Green over Red). At about 1855, the train achieved a maximum speed of 115 km/h — the maximum authorised line speed for this section of track. Shortly after passing signal GG630 (Figure 2) and when near Cherry Creek, the driver heard a ‘loud bang’ from under the train. He noted that the brake pipe pressure had decreased and the brake cylinder pressure had increased. There was an immediate reduction in speed and the driver placed the brake handle to the full service braking position. When the train came to a stop, he placed the Reverser to the off position, which automatically applied the park brake. The train came to a stop at 1855, with the rearmost car, 427M, at about the 16.53 rail km mark[5].

The driver looked back and concluded that the train had not derailed and that it was not fouling the adjacent running lines. He called Metrol[6] to advise them of the location of the train and that the train had lost brake pipe pressure. He then made an announcement on the public address system to the passengers to advise them that the train would be delayed due to a defect. The driver then called Metrol for authority to go on the track to conduct an inspection of the train.

Figure 2: Collision location and signals

Figure 2: Collision location and signals

Source: Metro Trains Melbourne with annotations by the Chief Investigator, Transport Safety (Victoria)

Figure 3: Signal GG630 and indication of collision site

Figure 3: Signal GG630 and indication of collision site

Source: Chief Investigator, Transport Safety (Victoria)

V/Line Service 8280

At about 1802 on the same evening, V/Line train 8280 departed Geelong for Southern Cross Railway Station. The train was returning to Southern Cross in preparation for a scheduled passenger service, and was crewed by a driver and a conductor but carried no passengers. At about 1832, the train came to a stand at Automatic signal GG1178 (between Little River and Werribee) which was at Stop and resumed its journey about 17 seconds later. After passing through Laverton Station, it proceeded at about 90 km/h past Automatic signal GG672 that was indicating a normal speed warning (Yellow over Red). The train then arrived at Automatic signal GG630 that was indicating a Stop aspect (Red over Red). This signal was at Stop as train 6502 had not cleared the block ahead. Train 8280 stopped at signal GG630 for about three seconds before resuming its journey. Trains can proceed past an Automatic signal at Stop under conditions specified by a rule in The Book of Rules and Operating Procedures 1994.

The collision and post collision events

After passing signal GG630, the V/Line train reached a speed of 43 km/h and collided at this speed with the rear of the stationary MTM service 6502 at about 1901. The MTM train had been stopped for about 6 minutes, before the collision. The data logger of the V/Line train indicated that emergency braking was applied by the driver 1.4 seconds before the collision.

The MTM train was shunted about 30 m due to the impact and the impacted cars stopped at about the 16.5 rail km mark, approximately 1210 m from signal GG630. The driver of the MTM train was thrown onto the cab floor by the impact. The V/Line driver was trapped between the train control console and the seat but managed to extricate himself by lowering the seat. He got out of his cab, walked towards the MTM train and spoke to passengers on the train to inquire as to their wellbeing and then spoke to the MTM driver who was still in the cab of his train.

MTM staff detrained the 51 passengers and escorted them to service replacement buses. The driver and conductor on the V/Line train, the driver of the MTM train and eight passengers from the MTM train sustained minor injuries in the incident. Both trains were significantly damaged (Figure 5).

Figure 4: Impacted trains

Figure 4: Impacted trains

Source: Chief Investigator, Transport Safety (Victoria)

Figure 5: Train damage

Figure 5: Train damage

Source: Chief Investigator, Transport Safety (Victoria)

__________

  1. The 24-hour clock is used in this report and is referenced from Eastern Standard Time (EST).
  2. Distance in track kilometres from a reference point near Melbourne’s Southern Cross Station.
  3. Metropolitan Train Control Centre.

Context

Location

The collision occurred on the MTM rail network between the Maidstone Street and Kororoit Creek Road level crossings in Altona, Victoria (Figure 6). Altona is approximately 22 km from Flinders Street Station, Melbourne.

Figure 6: Location of collision

Figure 6: Location of collision

Source: PASS Assets (Public Transport Victoria) with annotations by Chief Investigator, Transport Safety

Track and environmental conditions

The track infrastructure in this section consisted of a Broad Gauge East Line, a West Line and an independent parallel Standard Gauge line (Figure 2). Both trains were operating on the West Line. From the Maidstone Street level crossing, the track has a slight uphill gradient towards Cherry Creek. Clear sighting is available up to Cherry Creek from the Maidstone Street level crossing. The weather conditions were fine and it was a clear night with light winds.

Suburban train 6502

Train 6502 was of the Comeng type and consisted of two, 3-car sets, in a Motor (M) - Trailer (T) - Motor (M) three-car configuration. This train consisted of cars 338M - 1092T - 484M and 487M - 1052T - 427M. Comeng type Electrical Multiple Units (EMU) are single deck stainless steel car body trains, built by Commonwealth Engineering (Comeng) Dandenong, Victoria between 1982 and 1989.

Figure 7: Train 6502 configuration

Figure 7: Train 6502 configuration

Source: Chief Investigator Transport Safety, Victoria

MTM train crew

The MTM driver at the time of the incident had about 2½ years train driving experience. He held the required qualifications to operate the train, was route certified and assessed as medically fit for duty. Following the collision, the MTM train driver underwent mandatory drug and alcohol testing, returning a zero result.

Unintended stop of Comeng train

The train’s data recorder indicated that the brake application was not driver initiated or a vigilance[7] brake application. The evidence also did not indicate that the braking was a result of the activation of the trip lever[8]. The Comeng train was inspected after the collision, with particular attention to the braking system. Visual inspection and testing of the first three units 338M-1092T-484M did not reveal any damage to the brake pipes or the reservoirs. Inspection of the next three cars 487M-1052T-427M, revealed that the brake pipe of 427M was damaged and the suspension airbag on 487M was found to be leaking. The cause of the damage to these two cars could not be determined with certainty due to the impact damage.

Comeng train marker lights

Comeng train marker lights are located above the drivers cab windscreens and consist of an outer white light and an inner red light. The white light when illuminated indicates the front of the train, while the red light when illuminated indicates the rear of the train.

Figure 8 - Comeng train lights

Figure 8 - Comeng train lights

Source: Chief Investigator, Transport Safety (Victoria)

Post incident inspection and testing indicated that the train’s rear marker lights were operational. Analysis of CCTV footage of this train passing Laverton Railway Station also showed that the marker lights were on at the time of passing this station.

Rollingstock lighting standards

The Rail Industry Safety and Standards Board (RISSB) is owned by its funding members that include Commonwealth, State and Territory governments and Rail Transport Operators in Australia. RISSB develops and manages rail industry standards, rules, codes of practice and guidelines.

In 2007, RISSB published a standard for Railway Rolling Stock Lighting and Rolling Stock Visibility, AS 7531.3:2007 (AS/RISSB 7531:3:2007). The RISSB standard is not prescribed, but some operators including MTM have adopted this Standard. The standard states ‘If operating in a network where the Safeworking System allows Permissive Working then each tail light shall have a luminous intensity of at least 100 candela’.

Luminous intensity testing of marker lights

The luminous intensity of a new marker light (new lens, retro reflective sheeting and lamp) of the type fitted to Comeng trains was measured. An approximate luminosity reading of 33 Lux at one metre[9] was recorded. In comparison, MTM advised that the approximate luminosity of the Siemens train marker light was 30 Lux at one metre and the X’Trapolis train marker light was 200 Lux at 1 meter.

V/Line Service 8280

The V/Line train 8280 was a VLocity Diesel Multiple Unit consisting of VL05 (units 1105 and 1205), VL12 (units 1112 and 1212) and VL39 (units 1139, 1339 and 1239).

Figure 9: Train 8280 DMU configuration

Figure 9: Train 8280 DMU configuration

Source: Chief Investigator Transport Safety, Victoria

Post incident testing indicated that the train’s headlights were operational and the train’s data logger indicated that the train’s headlights were on at the time of the incident.

V/Line train crew

The V/Line train had two crewmembers, a driver and a conductor. The driver had been driving trains since qualifying in 1989 and was employed as a train driver by V/Line for the last 11 years. He held the required qualifications to operate the train, was route certified and assessed as medically fit for duty.

Control console

The driving control console of the VLocity is a wrap-around style instrument panel (Figure 10). The cab windows provide good visibility for the train driver. The Reverser is a four-position switch that is moved between Off, Forward, Neutral and Reverse positons. The Power/Brake Controller (PBC) is used to control traction power and brake effort. The PBC operates in power mode when pulled back from the centre ‘off’ position and in the brake mode when pushed forward from the centre position. There are six power notches that dictate the tractive effort. In brake mode, the controller moves seamlessly between minimum and full service braking. The Secondary Brake Controller (SBC) is used in the event of a brake control unit failure and braking effort becomes unavailable through the PBC. The SBC directly controls the brake pipe pressure to independently apply and release the brakes. Emergency braking can also be achieved by activating the emergency brake pushbutton located on the control console.

Figure 10 - Driver control console showing the main controls

Figure 10 - Driver control console showing the main controls

Crashworthiness performance of the trains

Both trains were designed for the possibility of a limited speed collision with another train or obstruction. Train body structures and fittings were designed to accommodate significant loads and each train included special crashworthiness features to absorb collision energy. Such features aimed to reduce injury to passengers and train crew, particularly in low to medium speed collisions.

Crashworthiness design features of the VLocity included:

  • energy absorption within multi-function couplers at #1 (driver cab) ends
  • energy absorption within semi-permanent couplers at #2 (non-driver) ends
  • shear-off plates at multi-function couplers
  • anti-climbers at both #1 and #2 ends
  • an energy absorbing structure protecting the driver’s cab.

Crashworthiness design features of the Comeng included:

  • energy absorption within multi-function couplers at #1 (driver cab) ends
  • energy absorption within semi-permanent couplers at #2 (non-driver) ends
  • anti-collision posts at both #1 and #2 ends.

The collision speed of 43 km/h exceeded the design capacity of several of the energy absorbing features. Nonetheless, many of the features performed as would be expected, absorbing energy and providing a level of protection to passengers and train crew. In particular, the energy absorbing structure protecting the driving position deformed as designed when the VLocity impacted the rear end of the stationary Comeng train.

VLocity car-to-car crashworthiness features performed as expected, with the following exceptions:

  • The shear off plates on the leading coupler functioned in advance of any significant absorption within the coupler itself.
  • The leading coupler of the second car set (car 1112) did not absorb energy as might have been expected in an end-to-end collision.
  • Anti-climbers between the lead and second car sets (between cars 1205 and 1112) have engaged but then distorted leading to some override by car 1205. Probably as a result of this climb, some members and connections within the structure protecting the cab have failed in advance of full absorption of collision energy. In turn, there was significant encroachment of the cab of car 1112.

Comeng car-to-car crashworthiness features performed largely as expected. Coupler energy absorption features functioned and car end collision posts remained intact.

The car body structures of both trains generally withstood the collision loading with some minor structural incursions at car ends. As a result, the level of damage within the passenger envelopes was not significant. In addition, on both trains there was only a small amount of equipment dislodgement within the passenger compartments.

Signalling system

A three-position colour light signalling system is in place between Laverton and Newport, and consisted of Home (Absolute) and Automatic signals (Permissive). Three position signals provide information to drivers regarding the compliance speed for the block[10] and information on the aspect of the signal ahead.

Home signals are controlled by a signaller or train controller. Home signals are Absolute signals and are not to be passed when displaying a Stop aspect unless written or verbal authority is provided as specified in the Book of Rules and Operating Procedures 1994.

An automatic signal is not directly controlled by a signaller or train controller but by the passage of trains detected by track circuits. Their function is to provide separation between trains travelling in the same direction on the same track in accordance with the line speed and headway requirements of that section of track.

When the track ahead is unoccupied, an Automatic signal will be at Proceed. In the MTM managed Melbourne Metropolitan Network the Safeworking System allows Permissive Working.

Permissive signalling

Historically permissive signalling systems were adopted to allow following train movements between controlled locations predominantly through areas where there were no communications. Permission to pass an automatic signal at Stop was provided in the form of a rule, to allow train movements to continue, under prescribed conditions, when a signaller could not be contacted.

Victoria

In Victoria, permissive signalling has been in operation since the introduction of 3-position signalling in 1915. There have been several changes to the rule pertaining to permissive signalling since its introduction. In the MTM managed Melbourne Metropolitan Network, the safeworking system allows Permissive Working.[11]

The current rule pertaining to permissive signalling is specified in Section 3 Rule 1 of The Book of Rules and Operating Procedures 1994.[12] This rule is also specified in the ARTC Code of Practice for the Victorian Main Line Operations, Section 3 (Rule TA 20). The rule extracted in part states that:

‘The Driver must bring the train to a stand for 30 seconds if an automatic signal displays ‘Stop’. If the automatic signal is still at ‘Stop’ after 30 seconds, the Driver may proceed, but must control the speed of the train at extreme caution, being prepared to find the section ahead occupied or obstructed, or the track damaged’.

The rule further states that:

‘Extreme caution is defined as being able to stop the train in half the distance that can be seen ahead; not exceeding 25 km/h or the posted track speed if that is the lesser, and always being prepared to find the section ahead occupied or obstructed, or the track damaged. Except where special instructions are issued to the contrary or where a disabled train requires assistance, a Driver must not pass any signal when it is known there is a train in the section’.

New South Wales

In New South Wales (NSW), the operating rule pertaining to permissive signalling systems is specified in the ARTC Operating Rule ANSG 608. The rule extracted in part states that:

  • If a Driver can see that the block ahead is obstructed, they must speak to the Signaller before passing an automatic signal at STOP.
  • If the whole of the block ahead cannot be seen, a Driver must try to speak to the Signaller before passing an automatic signal at STOP.
  • If the Driver is unable to speak to the Signaller, they may pass the signal at STOP.
  • A Driver may pass an automatic signal at STOP without speaking to the Signaller, if the Driver can see that the whole block ahead to the next signal is unobstructed.

As soon as practicable, the Driver must report to the Signaller at the next attended location:

  • the number or designation of the signal passed at STOP, and
  • the condition of the line.

At any time, the Signaller may tell the Driver not to pass the signal at STOP. In all cases, the Driver must record, in permanent form, the time and the signal number or designation of the signal passed at STOP.

Western Australia

In Western Australia, Automatic Signals are referred to as Approach Signals as they are situated on the approach side of a home signal.

The network rule for passing an Approach Signal states that:

The driver of a train stopped at a red Approach signal must contact the Train Controller and state:

  • train number and description,
  • signal number and section.

The Train Controller must then instruct the Driver to remain at the signal or pass the signal at Stop.

Where a Driver is instructed to pass the Approach signal at Stop, the Driver must proceed cautiously, prepared to find the line obstructed, or a broken or displaced rail.

If the Driver is unable to contact the Train Controller the Driver must wait one minute then pass the signal, proceeding cautiously, prepared to find the line obstructed, or a broken or displaced rail.

Monitoring trains on the network

Metropolitan Train Control Centre (Metrol) is the control centre for Melbourne's suburban rail network. Metrol has the ability to directly monitor approximately 43 per cent of the electrified metropolitan train network.

Signallers and train controllers located at Metrol directly control all train movements in the inner core of the suburban system including the operation of points and signals. Outside the suburban inner core, the movement of points and signals is carried out from remote signal boxes in consultation with Metrol.

Each signaller monitors a visual display unit indicating signals and points and there are five display units for Caulfield, Western, Northern, Burnley and Clifton Hill regions. The role of the signallers is to monitor the movement of trains, signals and points, and route trains as required.

Train drivers are required to contact signallers to clarify operational requirements, report faults or operational breaches.

There are three train control workstations and a radio operator’s workstation, each staffed by a signaller. The radio operator receives verbal information relayed to them by train drivers, station staff and signallers at the remote sites. The role of these signallers is to convey information received to the Metrol shift supervisor and other relevant personnel or fault rectification centres.

A portion of the metropolitan train network, including the incident area (Laverton), is currently not directly monitored by Metrol and is controlled and partially monitored from signal boxes located at remote sites. The incident area was controlled from the Newport signal box. The display unit at Newport does not provide specific information on the location of trains. In general, the signalling and station staff located at remote signal boxes will only contact Metrol when there is new information or an incident.

Compliance monitoring of Section 3 Rule 1

On the Melbourne Metropolitan Network, MTM has the dual role of the network manager and a train operator. MTM train drivers are subjected to regular safety audits but there is no specific network monitoring processes in place to measure compliance with Section 3 Rule 1. MTM does not monitor V/Line trains for compliance with the rule on their network.

From May 2015, MTM instituted an automated voicemail system, where train drivers on the metropolitan network are required to call on the system when they encounter an automatic signal at Stop and proceed past the signal as allowed by Section 3 Rule 1. Based on the voicemail data from 01 July 2015 to 31 December 2015, MTM and V/Line trains stopped and proceeded past automatic signals about 35 times per day.

Train communication

When a suburban train driver needed to contact Metrol, the driver was required to log a call to Metrol using the train’s radio system, the Urban Train Radio System[13] (UTRS). Once a call was logged, the driver had to wait for Metrol to respond. If the driver deemed the situation to be an emergency, they could contact Metrol using the emergency call button on the radio system or use their company-issued mobile phone. V/Line trains operating on the Melbourne metropolitan network cannot contact Metrol directly. They have to call Centrol[14] who contact Metrol to convey any information on V/Line train operations. Similarly, Metrol cannot contact V/Line trains and have to convey any information regarding their trains and network to Centrol, who convey that information to V/Line trains.

In this instance, the MTM driver did not consider the situation to be an emergency, hence waited for Metrol to call him after logging a call on the train’s radio system. While waiting for Metrol to respond, he contacted his supervisor on his mobile phone to discuss the mechanical defect that caused the Comeng train to come to a stop. After speaking to his supervisor, he called Metrol on his mobile phone and managed to get through to Metrol. During his mobile phone call with Metrol, Metrol called him on the train radio system, and he advised Metrol that he was already speaking to a controller on his mobile phone. During his conversation with Metrol, the V/Line train collided with the Comeng train.

Signal operation data logging

Laverton and Altona Junction utilises Computer Based Interlocking (CBI-SSI)[15]. The system provides safety interlocking between points, signals and train movements and a data logging facility.

The block section between Laverton and Altona Junction is indicated on the Laverton Data logging Facility as well as the Newport Logging Facility.

The area where the incident occurred is between these two locations and limited information is available from the incident area. The available data indicates that the Maidstone Street level crossing and the signals in the block section between Altona Junction and Laverton were operating satisfactorily. No signal aspect information is logged in the area between LAV732 and ALJ232; hence, there was no signal aspect information for Signal GG630. However, post incident testing of Signal GG630 indicated that the signal was functioning as required.

Previous occurrences associated with permissive signalling

There have been several incidents associated with Automatic signals and the application of the ‘Stop and Proceed’ rules.

On 17 June 1982, an Up[16] standard gauge freight train collided with rear of the Up Interstate passenger train Spirit of Progress at Barnawartha, Victoria. The freight train had passed the previous automatic signal at Stop as permitted by Regulation 74[17]. At the time of the incident, the passenger train was stationary due to a defective locomotive and there was heavy fog in the area. The driver and fireman operating the freight train were fatally injured and 20 passengers on the Spirit of Progress suffered injuries. Because of this incident, radio communications between the network control centre and locomotive drivers and the locomotive driver and train guard were introduced on the intrastate network.

On 8 October 1986, an Up freight train collided with the rear of another freight train, which was stationary at a Home signal waiting entry into the South Dynon yards in Victoria. The previous automatic signal was passed at Stop as permitted by Regulation 74. Visibility was restricted by track curvature. As a result of this incident, the Automatic signal involved was converted to a Home signal.

On 16 October 1989, a suburban passenger train collided with the rear of another suburban train, which was stationary at a Home signal at Ringwood in Victoria. The driver had passed the previous automatic signal as permitted by Regulation 74. Twenty-one passengers were injured in the collision. Because of this incident, the application of Regulation 74 was reinforced with train drivers.

On 20 November 1989, a suburban passenger train collided with the rear of another suburban passenger train, which was stationary at the Syndal Station platform in Victoria. The driver had passed the previous automatic signal as permitted by Regulation 74. The collision resulted in injury to 75 persons. Because of this incident, the application of Regulation 74 was reinforced with train drivers.

On 27 July 1998 a suburban passenger train collided with the rear of a stationary freight train near Aircraft Railway Station in Laverton, Victoria. Weather conditions at the time resulted in a limited viewing distance. At this time, Section 3 Rule 1 in the Victorian Book of Rules and Operating Procedures 1994 had superseded Regulation 74 (). Because of this incident, the application of Section 3 Rule 1 was reinforced with train drivers.

On 2 December 1999, an inter-urban train collided with the rear wagon of the Indian Pacific train at Glenbrook, New South Wales. The Indian Pacific train was stopped at an automatic signal displaying a Stop aspect. The driver of the inter urban train, on arriving at the previous automatic signal also displaying a Stop aspect, sought authority from a signaller to pass the signal. Once he received the authorisation he proceeded at a speed contrary to the relevant operating rule. On observing the rear wagon of the Indian Pacific train, the driver made an emergency brake application, but was unable to stop in time and collided with Indian Pacific train. The main recommendation from the inquiry into this incident was that the NSW Government should establish two separate independent authorities for regulating rail operations (Rail Safety Inspectorate) and investigating rail accidents (Rail Accident Investigation Board).

On 26 July 2000, a suburban express passenger train collided with the rear of another suburban passenger train that was stationary at the Holmesglen Station platform. The incident resulted in severe damage to both trains and 12 persons sustained injuries. Because of this incident, Section 3 Rule 1 was amended to include a mandatory maximum speed of 25 km/h after an automatic signal had been passed at Stop.

A report (dated May 2001) produced by the then Department of Infrastructure’s Office of the Director of Public Transport, Safety and Technical Services Branch recommended that the train operator assess the benefits and practicality of installing speed limiting equipment (after passing signals at danger) and data loggers to suburban trains. The train operator Connex assessed the benefits and practicality of installing the speed limiting technology but did not adopt it due to the perceived impacts on time performance, the limited effectiveness of the equipment and the complexity and costs involved.

On a Flinders Street to Craigieburn Metro Trains Melbourne suburban train, travelling on the Down[18] broad gauge line, ran into the rear wagon of a stationary Pacific National freight train between Roxburgh Park and Craigieburn stations in Victoria. At the time, the freight train was stopped at a signal. The investigation conducted by the Chief Investigator, Transport Safety, determined that the driver of the suburban train had passed two automatic signals after departing Roxburgh Park that presented a stop aspect. When passing the signals the driver did not comply with the network Rules and operating procedures. The investigation made recommendations with respect to the network’s ability to monitor the application of and compliance to Section 3 Rule 1 of the Book of Rules and Operating Procedures 1994, train speed limiting devices after passing signals at stop and the acceptance and application of industry standards for train tail signals.

In response to the Craigieburn incident Public Transport Safety Victoria (PTSV) now Transport Safety Victoria (TSV) issued a safety alert requesting transport providers and managers of rail infrastructure and rolling stock review the procedure and drivers compliance with the procedure for passing an automatic signal at stop. MTM carried out a review of Section 3 Rule 1 of the Book of Rules and Operating Procedures 1994 and concluded that no change was required to the Rule. Further, they reported that driver compliance monitoring was being carried out during the driver audit process. MTM also reported that they intended investigating the practicality of implementing speed limiting of trains when passing an Automatic signal at Stop and had adopted the standard Railway Rolling Stock Lighting and Rolling Stock Visibility, AS 7531.3:2007.

A recent example of an overseas incident was when a passenger train collided with a train that was stabled at a platform at Norwich station in the United Kingdom on 21 July 2013. Permissive working was authorised in the signal section of the station, hence the passenger train was authorised to proceed past a signal at Stop. The driver of the passenger train was aware that a train was stabled at the platform, and observed this train, when he made a brake application. The Rail Accident Investigation Board (RAIB) identified that the driver had either a lapse of concentration or a microsleep. The RAIB recommended that the rail operator review its audit procedures and non-compliance with their operational procedures, driver training, driver fatigue management and conduct a risk assessment of permissive working.

__________

  1. The vigilance control system verifies that the driver is not incapacitated by monitoring task linked activities and, in the absence of any such activities, provides intervention by applying the train’s brakes.
  2. When a signal is at Stop, the trip arm of the train-stop-unit located beside the track is raised so that the trip lever on the train will strike it causing the emergency air brake to be applied and the train to come to a stand.
  3. At a measuring distance of one metre, the values for candela and lux are the same.
  4. A block is a section of track between two signals.
  5. Book of Rules and Operating Procedures 1994 - Section 3 Rule 1 – Detention at Automatic Signals.
  6. The UTRS system has now been replaced by the Digital Train Radio System (DTRS), which has a call log facility (TCall), Train Emergency Call (TEC) and Rail Emergency Call (REC).
  7. Central Control, the operational control centre for Victoria’s regional broad gauge rail network.
  8. A proprietary processor based system developed originally by GEC-General Signal and Westinghouse Signals Ltd.
  9. Track heading towards Melbourne.
  10. This was the previous regulation, which applied to ‘Detention at Automatic Signal’.
  11. Track heading away from Melbourne.

Safety analysis

Unintended stop of Comeng train

The Comeng train’s data recorder indicated a sudden loss of brake pipe air pressure at about 18:55. At the same time, the data recorder indicated an instantaneous rise (a spike) in the lateral acceleration graph of car 484M. Visual inspection and testing of the train revealed that the brake pipe of car 427M was damaged and the suspension airbag on car 487M was leaking. The cause of the damage to these two cars and the sudden loss of brake pipe pressure could not be determined.

Permissive signalling systems

Section 3 Rule1 facilitates the flow of rail traffic on the network under certain circumstances by permitting trains to pass an uncontrolled, unmonitored signal, enter a section which may or may not be occupied by another train that is not immediately observable, or enter an unoccupied section where some infrastructure condition may be affecting the signal’s operation.

There are 925 automatic signals on the Melbourne metropolitan train network. A driver may be required to stop and proceed at any of these Automatic signals for any of the above reasons. On average, the provisions of Section 3 Rule 1 are applied about 35 times a day at these automatic signals, before proceeding past them at Stop.

Although permissive signalling is used in other jurisdictions in Australia and overseas, the Stop and Proceed Rules in these jurisdictions are more rigorous in that they permit drivers to proceed past an automatic signal at Stop only if they are unable to contact a signaler and under conditions specified in the rule.

In Victoria, the Rule does not require a driver to report that they are intending to pass an Automatic signal at Stop. Further, there is no monitoring of compliance with the Rule when a train passes an automatic signal at Stop. However, the system requires drivers to advise the train controller the reasons for not passing an automatic signal at Stop.

Since 1982 there have been seven collisions involving trains that have stopped and proceeded past automatic signals at Stop. These incidents resulted in changes to radio communication methods and minor changes to the Stop and Proceed Rule. Despite these changes, the Stop and Proceed Rule still relies on a train driver to provide separation between trains by line-of-sight observation. Considering the hierarchy of controls[19], administrative or rule based controls are low on the hierarchy and is considered the least effective defence against human error or violations.

Actions of the train driver and situational factors

Compliance with rule at and after passing signal GG630

After arriving at signal GG630, the V/Line train stopped at this signal for about three seconds before resuming its journey. The rule required drivers to stand at an Automatic signal at Stop for a minimum of 30 seconds and then travel at a speed not exceeding 25 km/h. The train reached a speed of 43 km/h before colliding with the stationary MTM train. This reduced the opportunity to observe the train ahead and stop in time.

Driver attention and distraction

Cognitive workload

The driver was familiar with the line and route. He was familiar with the operation of the VLocity train and the tasks required of him. There was no compelling evidence to suggest that the driver’s cognitive workload impeded the performance of his train driving tasks.

Fatigue

In the context of human performance, fatigue is a physical and psychological condition which can arise from a number of different sources, including time on task, time awake, acute and chronic sleep debt, and circadian disruption (disruption to normal 24-hour cycle of body functioning). Fatigue can have a range of influences on performance, such as decreased short-term memory, slowed reaction time, decreased work efficiency, reduced motivational drive, increased variability in work performance, and increased errors of omission.[20] Fatigue impairment has been identified as contributory in a significant number of rail accidents and incidents. Research has indicated that anything less than 5-6 hours sleep in 24 hours and 12 hours sleep in 48 hours is likely to lead to fatigue impaired performance.[21] [22]

The train driver’s roster indicated that he had been on afternoon shift for the previous fortnight. The driver indicated that his previous three shifts were ‘standby’ shifts and that the workload was light. On the day of the incident he was rostered to and signed on at about 1300. He travelled as a passenger on the 1320 Geelong train. In Geelong, he prepared a locomotive and then completed a run-around to Marshall and returned to Geelong. He was then assigned to take the 8246 empty service to Southern Cross Station, Melbourne.

Based on the evidence provided to the ATSB, the driver of the train obtained about 7-8 hours of sleep in the 24 hours leading up to the occurrence and about 16-18 hours of sleep in the 48 hours prior. There was no evidence to suggest that the quality of the driver’s sleep in the preceding days had been compromised. Further, the sleep opportunity periods provided while driving the afternoon shift had significant overlap with the circadian trough (around 0200 to 0600), when sleep is generally at its most restorative.

Considering all of the available evidence concerning quantity and quality of sleep obtained and reported alertness on duty, the driver’s cognitive performance was likely to have been at a manageable level at the time of the event. The available evidence did not support a contention of fatigue impairment as contributory to this accident.

Expectancy

The V/Line driver reported that typically, he followed the train ahead and adjusted his speed in order to ensure that the train had cleared the block before he approached the signal. This was to ensure that the signal changed to Caution (Yellow) when he approached it and he could proceed past the signal without stopping. He stated that the EMU should have been ‘gone’ from the section and did not expect it to be in the section. Further, the driver advised that he had encountered automatic signals at Stop before and had stopped and proceeded past the signal without encountering another train in the section ahead. It is unlikely that the driver would have operated the train in the manner he did, had he expected the track section to be occupied.

Driver distraction

Distraction can be understood as a type of inattention, where a person’s attention is diverted by a particular event or object. Potential sources of distraction for the train driver included his mobile phone and two-way radio in the cab. There was no evidence to indicate that the driver was operating or otherwise attending to any of this equipment on passing signal GG630.

The driver stated that the lights and noise from the refinery distracted him. Although the refinery is about three kilometres from the location of signal GG630, it is possible that the flame from the refinery’s flare stack may have distracted the driver.

Attentional disengagement (mind wandering)

While driver distraction is widely acknowledged as impeding performance of driving tasks, it is important to recognise that people can also become unintentionally inattentive to driving tasks without the presence of a competing activity.[23] Attentional disengagement, or mind wandering, can be described as occurring when attention normally directed toward the primary task momentarily shifts away from the external environment, even though the individual continues to show well practiced automatic responding.[24] [25] Mind wandering or ‘zoning out’ can occur in situations where tasks are protracted, unvarying, familiar, repetitive or undemanding.[26] It is therefore possible that the driver’s mind wandered and that his focus was not on the driving tasks and he did not observe the Comeng train ahead of him until it was too late.

Train marker lights

The Board of Inquiry into the incident near Aircraft Station in Victoria in 1998, made several recommendations with respect to end of train marker lights:

  • End of Train Markers (ETM) should denote the rear vehicle of a train to the driver of a following train during darkness and especially during inclement weather.
  • That a standard be developed for marker lights that allows viewing by the driver of a following train, as well as by signalling staff and others to ascertain a train is complete.
  • That a study be undertaken to assess the viewability of marker lights currently in use on all trains during inclement weather.
  • That a defined procedure for checking the viewability of ETMs and (if not already in place) other tail signals be adopted.

A standard for ETMs was first developed 2007 and the current version of the standard AS/RISSB 7531.3:2007 recommends that rolling stock operating in a network where the Safeworking System allows Permissive Working then each tail light shall have a luminous intensity of at least 100 candela (100 lux at one metre). The other recommendations by the board have not been implemented or carried out by subsequent train operators.

Tests carried out on the type of marker lights used on the Comeng and Siemens trains indicated a luminosity of 33 Lux at one metre and a luminosity of 30 Lux at one metre, both below the value recommended by the Standard. After the incident, Comeng train tail light sighting tests were conducted at night, in the incident site. An observer noted that the marker lights tended to disappear at night due to the refinery lighting and the LED signals. Low luminosity marker lights may not be discernible in areas of other illuminations. Although MTM had adopted the AS/RISSB Standard, they have not implemented it on their rail fleet.

Considering the above, it would be appropriate for MTM to institute measures to ensure that the luminous intensity of marker lights of all passenger trains in their fleet meet a railway industry approved and accepted standard.

__________

  1. Hierarchy of hazard control is a system used in industry to minimize or eliminate exposure to hazards. The controls are listed from strong controls to less effective controls and they are: elimination, substitution, engineering controls, administrative controls and personal protective equipment.
  2. Battelle Memorial Institute (1998). An Overview of the scientific literature concerning fatigue, sleep, and the circadian cycle. Report prepared for the Office of the Chief Scientific and Technical Advisor for Human Factors, US Federal Aviation Administration.
  3. Dawson, D. & McCulloch, K. (2005). Managing fatigue: It’s about sleep. Sleep Medicine Reviews, 9, 365-380.
  4. Thomas, MJW. & Ferguson, SA. (2010). Prior sleep, prior wake, and crew performance during normal flight operations. Aviation, Space, and Environmental Medicine, 81 (7), 665-670.
  5. Regan, M.A., Hallett, C., and Gordon, C.P. (2011). Driver distraction and driver inattention: Definition, relationship and taxonomy. Accident Analysis and Prevention, 43, 1771-1781.
  6. Smallwood, J. & Schooler, J.W. (2006). The Restless Mind. Psychological Bulletin, 132 (6), 946-958.
  7. Cheyne, J.A., Soman, G.J.F., Carriere, J.S.A., and Smilek, D. (2008). Anatomy of an error: A bidirectional state model of task engagement/disengagement and attention-related errors. Cognition, 111, 98-113.
  8. Cheyne, Soman, Carriere and Smilek, (2008).

Findings

The following findings are made with respect to the collision between a Metro Trains Melbourne passenger train 6502 and V/Line train 8280 between Maidstone Street level crossing and Kororoit Creek Road in Altona, Victoria. These findings should not be read as apportioning blame or liability to any particular organisation or individual.

Safety issues, or system problems, are highlighted in bold to emphasise their importance. A safety issue is an event or condition that increases safety risk and (a) can reasonably be regarded as having the potential to adversely affect the safety of future operations, and (b) is a characteristic of an organisation or a system, rather than a characteristic of a specific individual, or characteristic of an operating environment at a specific point in time.

Contributing factors

  • Comeng train 6502 stopped unexpectedly in the section.
  • The rules pertaining to passing a permissive signal at stop place sole reliance on the train driver to provide separation between trains by line-of-sight observation. In the absence of any additional risk mitigation measures, this administrative control provides the least effective defence against human error or violations. [Safety issue]
  • The V/Line train passed automatic signal GG630 at the Stop position in a manner contrary to the operating rule and proceeded at a speed that reduced the opportunity to observe the train ahead and stop in time.
  • The V/Line train driver did not observe the Comeng train ahead probably due to being distracted or disengaged from his driving tasks.

Other factors that increased risk

  • The marker lights on the Comeng train did not meet the requirements of the standard for Railway Rolling Stock Lighting and Rolling Stock Visibility, AS/RISSB 7531.3:2007. [Safety issue]

Safety issues and actions

The safety issues identified during this investigation are listed in the Findings and Safety issues and actions sections of this report. The Australian Transport Safety Bureau (ATSB) expects that all safety issues identified by the investigation should be addressed by the relevant organisation(s). In addressing those issues, the ATSB prefers to encourage relevant organisation(s) to proactively initiate safety action, rather than to issue formal safety recommendations or safety advisory notices.

All of the directly involved parties were provided with a draft report and invited to provide submissions. As part of that process, each organisation was asked to communicate what safety actions, if any, they had carried out or were planning to carry out in relation to each safety issue relevant to their organisation.

The initial public version of these safety issues and actions are repeated separately on the ATSB website to facilitate monitoring by interested parties. Where relevant the safety issues and actions will be updated on the ATSB website as information comes to hand.

Permissive Signalling System

The rules pertaining to passing a permissive signal at stop, place sole reliance on the train driver to provide separation between trains by line-of-sight observation. In the absence of any additional risk mitigation measures, this administrative control provides the least effective defence against human error or violations.

ATSB Safety Issue No: RO-2014-016-SI-01

ATSB safety recommendation: RO-2014-016-SR-38

Passenger Train Marker Light Standards

The marker lights on some MTM passenger trains do not meet the requirements of the standard for Railway Rolling Stock Lighting and Rolling Stock Visibility, AS/RISSB 7531.3:2007.

ATSB Safety Issue: RO-2014-016-SI-02

ATSB safety recommendation: RO-2014-016-SR-39

Sources and submissions

Sources of information

The sources of information during the investigation included:

  • Metro Trains Melbourne
  • V/Line Pty Ltd
  • Metro Trains Melbourne Train Driver
  • V/Line Train Driver.

References

Battelle Memorial Institute (1998). An Overview of the scientific literature concerning fatigue, sleep, and the circadian cycle. Report prepared for the Office of the Chief Scientific and Technical Advisor for Human Factors, US Federal Aviation Administration.

Cheyne, J.A., Soman, G.J.F., Carriere, J.S.A., and Smilek, D. (2008). Anatomy of an error: A bidirectional state model of task engagement/disengagement and attention-related errors. Cognition, 111, 98-113.

Dawson, D. & McCulloch, K. (2005). Managing fatigue: It’s about sleep. Sleep Medicine Reviews, 9, 365-380.

Regan, M.A., Hallett, C., and Gordon, C.P. (2011). Driver distraction and driver inattention: Definition, relationship and taxonomy. Accident Analysis and Prevention, 43, 1771-1781.

Smallwood, J. & Schooler, J.W. (2006). The Restless Mind. Psychological Bulletin, 132 (6), 946-958.

Thomas, MJW. & Ferguson, SA. (2010). Prior sleep, prior wake, and crew performance during normal flight operations. Aviation, Space, and Environmental Medicine, 81 (7), 665-670.

Submissions

Under Part 4, Division 2 (Investigation Reports), Section 26 of the Transport Safety Investigation Act 2003 (the Act), the Australian Transport Safety Bureau (ATSB) may provide a draft report, on a confidential basis, to any person whom the ATSB considers appropriate. Section 26 (1) (a) of the Act allows a person receiving a draft report to make submissions to the ATSB about the draft report.

A draft of this report was provided to V/Line, Metro Trains Melbourne, Public Transport Victoria, Transport Safety Victoria, Office of the National Rail Safety Regulator and the train drivers.

Submissions were received from V/Line, Metro Trains Melbourne, Public Transport Victoria, Transport Safety Victoria and the Office of the National Rail Safety Regulator. The submissions were reviewed and where considered appropriate, the text of the draft report was amended accordingly.

Purpose of safety investigations

The objective of a safety investigation is to enhance transport safety. This is done through:

  • identifying safety issues and facilitating safety action to address those issues
  • providing information about occurrences and their associated safety factors to facilitate learning within the transport industry.

It is not a function of the ATSB to apportion blame or provide a means for determining liability. At the same time, an investigation report must include factual material of sufficient weight to support the analysis and findings. At all times the ATSB endeavours to balance the use of material that could imply adverse comment with the need to properly explain what happened, and why, in a fair and unbiased manner. The ATSB does not investigate for the purpose of taking administrative, regulatory or criminal action.

Terminology

An explanation of terminology used in ATSB investigation reports is available here. This includes terms such as occurrence, contributing factor, other factor that increased risk, and safety issue.

Publishing information 

Released in accordance with section 25 of the Transport Safety Investigation Act 2003

Published by: Australian Transport Safety Bureau

© Commonwealth of Australia 2016

image_5.png

Ownership of intellectual property rights in this publication

Unless otherwise noted, copyright (and any other intellectual property rights, if any) in this report publication is owned by the Commonwealth of Australia.

Creative Commons licence

With the exception of the Coat of Arms, ATSB logo, and photos and graphics in which a third party holds copyright, this publication is licensed under a Creative Commons Attribution 3.0 Australia licence.

Creative Commons Attribution 3.0 Australia Licence is a standard form licence agreement that allows you to copy, distribute, transmit and adapt this publication provided that you attribute the work.

The ATSB’s preference is that you attribute this publication (and any material sourced from it) using the following wording: Source: Australian Transport Safety Bureau

Copyright in material obtained from other agencies, private individuals or organisations, belongs to those agencies, individuals or organisations. Where you wish to use their material, you will need to contact them directly.

Preliminary report

Report release date: 13/11/2014

This preliminary report details factual information established in the investigation’s early evidence collection phase and has been prepared to provide timely information to the industry and public. Preliminary reports contain no analysis or findings, which will be detailed in the investigation’s final report. The information contained in this preliminary report is released in accordance with section 25 of the Transport Safety Investigation Act 2003.

The Occurrence

The information contained in this Preliminary report is released in accordance with section 25 of the Transport Safety Investigation Act 2003 and is derived from the initial investigation of the occurrence. Readers are cautioned that new evidence will become available as the investigation progresses that will enhance the ATSB's understanding of the accident as outlined in this Preliminary report. As such, no analysis or findings are included in this report.

MTM Service 6502

At about 1840 on 22 August 2014, Metro Trains Melbourne (MTM) passenger train 6502 departed Werribee Railway Station on its scheduled service to Flinders Street Station. The train arrived at Laverton Railway Station at about 1852 without incident.

Figure 1: Location map – Greater Melbourne

RO-2014-016 - Fig 1


 
Source: Copyright Melway Publishing 2013, Edition 41 with annotations by the Chief Investigator, Transport Safety (Victoria)

The train departed Laverton Railway Station and all signal aspects from Laverton were at clear normal speed (Green over Red). At about 1855, the train achieved a maximum speed of 115 km/h — the maximum authorised line speed for this section of track. The train then passed signal GG630 (Figure 2) that was also indicating a clear normal speed aspect, and had just crossed over Cherry Creek, when the driver heard a ‘loud bang’ from under the train. He noted that the brake pipe pressure had decreased and the brake cylinder pressure had increased. There was an immediate reduction in speed and the driver placed the brake handle to the full service braking position. When the train came to a stop, he placed the Reverser to the off position, which automatically applied the spring park brake. The train came to a stop at 1855, with the rearmost car, 427M, at about the 16.53 rail km mark. 

The driver looked back and concluded that the train had not derailed and that it was not fouling the adjacent running lines. He called Metrol to advise them of the location of the train and that the train had lost brake pipe pressure. He then made an announcement on the public address system to the passengers to advise them that the train would be delayed due to a defect. The driver then called Metrol for authority to go on the track.

Figure 2 – Collision location and signals

RO-2014-016 - Fig 2


Source: Metro Trains Melbourne with annotations by the Chief Investigator, Transport Safety (Victoria)

V/Line Service 8280

At about 1802 on the same evening, V/Line train 8280 departed Geelong for Southern Cross Railway Station. The train was returning to Southern Cross Station in preparation for a scheduled passenger service, and it was crewed by a driver and a conductor but carried no passengers. At about 1832 the train came to a stand at Automatic signal GG1178 (between Little River and Werribee) which was at Stop and resumed its journey about 19 seconds later. After passing through Laverton Station, it proceeded at about 90 km/h past Automatic signal GG672 which was indicating a normal speed warning (Yellow over Red). The train then arrived at Automatic signal GG630 which was indicating a Stop aspect (Red over Red) and stopped for about eight seconds before resuming its journey. Trains are allowed to proceed past an Automatic signal at Stop under conditions specified by a rule in The Book of Rules and Operating Procedures 1994.

The collision and post collision events

After passing signal GG630 the V/Line train reached a speed of 43 km/h and collided at this speed with the rear of the stationary MTM service 6502 at about 1901. The MTM train was shunted about 30 metres due to the impact and the impacted cars stopped at about the 16.5 rail km mark, approximately 1210 m from signal GG630. The driver of the MTM train was thrown onto the cab floor by the impact. The V/Line driver was trapped between the train control console and the seat but managed to extricate himself by lowering the seat. He got out of his cab, walked towards the MTM train and spoke to passengers to inquire as to their wellbeing and then spoke to the MTM driver who was still in the cab of his train.

The driver and conductor on the V/Line train, the driver of the MTM train and four passengers from the MTM train sustained minor injuries in the incident. Both trains sustained significant damage (Figure 3 & 4).

Figure 3 – Impacted trains

RO-2014-016 - Fig 3

 Source: Chief Investigator, Transport Safety (Victoria) 

Figure 4 - Train damage

RO-2014-016 - Fig 4

 Source: Chief Investigator, Transport Safety (Victoria) 

Context

Location

The collision occurred on the MTM rail network between the Maidstone Street and Kororoit Creek Road level crossings in Altona.

Figure 5 - Location of collision

 

RO-2014-016 - Fig 5

Source: PASS Assets (Public Transport Victoria) with annotations by Chief Investigator, Transport Safety

Track and environmental conditions

The track infrastructure in this section consisted of a Broad Gauge East Line, a West Line and an independent parallel Standard Gauge line (Figure 2). Both trains were operating on the West Line. From the Maidstone Street level crossing the track is tangent with a slight downhill gradient towards Cherry Creek and Kororoit Creek level crossing. Clear sighting is available up to and beyond Cherry Creek from the Maidstone Street level crossing. The weather conditions were fine and it was a clear night with light winds.

Train and crew information

MTM Train and Crew

The MTM train 6502 was of the Comeng type and consisted of two, 3-car sets, 338M - 1092T - 484M and 487M - 1052T - 427M.

The MTM driver at the time of the incident had about 2½ years train driving experience. He held the required qualifications to operate the train, was route certified and assessed as medically fit for duty.

Following the collision the MTM train driver underwent mandatory drug and alcohol testing, the results of which were negative.

Post incident inspection and testing revealed that the train’s rear tail lights were operational.

V/Line Train and Crew

The V/Line train 8280 was a VLocity Diesel Multiple Unit consisting of VL05 (units 1105 and 1205), VL12 (units 1112 and 1212) and VL39 (units 1139, 1339 and 1239).

The V/Line train had two crew members, a driver and a conductor. The driver had been driving trains since qualifying in 1989 and was employed as a train driver by V/Line for the last 11 years. He held the required qualifications to operate the train, was route certified and assessed as medically fit for duty.

Post incident testing indicated that the trains head lights were operational and the train’s data logger indicated that the train’s headlights were on at the time of the incident.

Signalling system and rules

A three position colour light signalling system is in place between Laverton and Newport. Three position signals provide information to drivers regarding the compliance speed for the block and information on the the aspect of the signal ahead.  Multiple aspect signalling allows closer spacing of signals such that braking distances are spread over two signal blocks, allowing higher line speeds for the sector and can consist of Home (Absolute) and Automatic signals (Permissive).

Home signals are usually directly controlled by a signaller or train controller as well as by track circuits. Home signals are Absolute signals and are not to be passed when displaying a Stop aspect unless written or verbal authority is provided as specified in the Book of Rules and Operating Procedures 1994.

Automatic signals are not directly controlled by a signaller or train controller but by the passage of trains (track circuits) and their function is to provide separation between trains travelling in the same direction on the same track in accordance with the line speed and headway requirements of that section of track. 

A Permissive signal is an Automatic signal that is able to be passed at Stop under conditions specified by a rule in The Book of Rules and Operating Procedures 1994.

Ongoing investigation activities

The ATSB investigation is continuing and will focus on the:

  • Operation of the signalling system.
  • Operating rules pertaining to Permissive signalling systems and compliance.
  • Use of Permissive signalling systems in other jurisdictions.
  • Previous incidents associated with Permissive signalling systems.
  • Performance of train external lighting systems.
  • Use of safety technologies to maintain train separation.
  • Crashworthiness performance of the trains.
  • Mechanical condition of the trains, actions of the train crew and situational factors. 

Purpose of safety investigations

The objective of a safety investigation is to enhance transport safety. This is done through:

  • identifying safety issues and facilitating safety action to address those issues
  • providing information about occurrences and their associated safety factors to facilitate learning within the transport industry.

It is not a function of the ATSB to apportion blame or provide a means for determining liability. At the same time, an investigation report must include factual material of sufficient weight to support the analysis and findings. At all times the ATSB endeavours to balance the use of material that could imply adverse comment with the need to properly explain what happened, and why, in a fair and unbiased manner. The ATSB does not investigate for the purpose of taking administrative, regulatory or criminal action.

Terminology

An explanation of terminology used in ATSB investigation reports is available here. This includes terms such as occurrence, contributing factor, other factor that increased risk, and safety issue.

Publishing information

Released in accordance with section 25 of the Transport Safety Investigation Act 2003

Published by: Australian Transport Safety Bureau

© Commonwealth of Australia 2014

image_5.png

Ownership of intellectual property rights in this publication

Unless otherwise noted, copyright (and any other intellectual property rights, if any) in this report publication is owned by the Commonwealth of Australia.

Creative Commons licence

With the exception of the Coat of Arms, ATSB logo, and photos and graphics in which a third party holds copyright, this publication is licensed under a Creative Commons Attribution 3.0 Australia licence.

Creative Commons Attribution 3.0 Australia Licence is a standard form licence agreement that allows you to copy, distribute, transmit and adapt this publication provided that you attribute the work.

The ATSB’s preference is that you attribute this publication (and any material sourced from it) using the following wording: Source: Australian Transport Safety Bureau

Copyright in material obtained from other agencies, private individuals or organisations, belongs to those agencies, individuals or organisations. Where you wish to use their material, you will need to contact them directly.

Occurrence summary

Investigation number RO-2014-016
Occurrence date 22/08/2014
Location Altona
State Victoria
Report release date 06/07/2016
Report status Final
Investigation level Systemic
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Rail
Rail occurrence category Collision
Occurrence class Accident
Highest injury level Minor

Train details

Train operator Metro Trains Melbourne
Train number TD6502
Type of operation Passenger
Departure point Werribee Railway Station, Victoria
Destination Flinders Street Railway Station, Victoria
Train damage Substantial

Train details

Train operator V/Line Pty Ltd
Train number TD8280
Type of operation Empty cars
Departure point Marshall Railway Station, Victoria
Destination Southern Cross Railway Station, Victoria
Train damage Substantial

Fatigue assessment report: Assistance to TAIC New Zealand for the grounding of Rena on Astrolabe Reef, on 5 October 2011

Summary

On 4 October 2011, the container ship Rena departed Napier, New Zealand, bound for Tauranga, New Zealand, with an estimated arrival time of 0300 on 5 October. At about 0214 on 5 October, Rena grounded on Astrolabe Reef.

The Transport Accident Commission (TAIC) of New Zealand is undertaking a formal investigation into this accident. As part of that work, TAIC requested the assistance of human factors specialists at the Australian Transport Safety Bureau (ATSB), to assess the likelihood and extent of any performance impairment to the master and second mate due to fatigue. To protect the information supplied by TAIC, the ATSB initiated an investigation under the provisions of the Transport Safety Investigation Act (2003).

Following the analysis of the sleep and work data supplied by the TAIC, the ATSB conducted analysis of the fatigue likelihood and produced a report which was provided to TAIC on 26 August 2014. For further information on this occurrence and investigation, please contact the Transport Accident Investigation Commission of New Zealand.

Occurrence summary

Investigation number ME-2014-007
Occurrence date 05/10/2011
Location Astrolabe Reef, New Zealand
State International
Report release date 01/09/2014
Report status Final
Investigation level Defined
Investigation type External Investigation
Investigation status Completed
Mode of transport Marine
Occurrence class Accident
Highest injury level None

Fire on freight train 3DA2, near Snowtown, South Australia, on 21 August 2014

Final report

Report release date: 24/03/2015

Safety summary

What happened

At about 1055 on 21 August 2014, train 3DA2, carrying containerised freight (including dangerous goods), arrived at Snowtown, South Australia. While at Snowtown, the crew noticed smoke coming from one of the containers conveying dangerous goods. The crew contacted ARTC Network Control to arrange for the Country Fire Service to attend the site. An exclusion zone was set up around the site and the fire was brought under control with minimal damage sustained.  

What the ATSB found

The ATSB found that freight within the affected container, including undeclared dangerous goods, had been packed in a manner that was not in accordance with the code of practice for Transport of Dangerous Goods by Road or Rail, or the Genesee & Wyoming Australia dangerous goods policy.

  • Genesee & Wyoming Australia had a documented policy on the transportation of dangerous goods, including a Standard Condition of Carriage, which documented the obligations of GWA’s customers when providing freight for transportation. However, GWA had no active verification processes in place to check and confirm compliance with those requirements (either in total or in part through random selection). Such a process may have provided the opportunity to detect any undeclared dangerous goods or inappropriately packed freight before an incident or accident resulted.

What's been done as a result

GWA has undertaken an independent audit of their policies and procedures for consigning freight, including the adequacy of training in receiving handling and storage of dangerous goods. GWA has also undertaken to improve communications with customers at their Alice Springs and Darwin terminals to identify where deficiencies may exist and how they might be best addressed.

Safety message

This incident illustrates the importance of freight forwarders and rail operators ensuring that dangerous goods freight accepted for carriage meets the relevant requirements of the Transport of Dangerous Goods by Road or Rail code of practice. All rail operators should ensure that their policies and procedures for the acceptance of dangerous goods are effective in ensuring that the goods accepted have been appropriately packed to minimise the risk of incidents during transportation.

Fire damage to goods

Fire damage to goods

 

The occurrence

At about 09201 on 19 August 2014, train 3DA2, operated by Genesee & Wyoming Australia (GWA), departed from the Berrimah freight terminal (near Darwin, Northern Territory) bound for Islington Freight Terminal, South Australia. The train was scheduled to pick up and drop off freight at various locations during the journey.

At about 1015 on 20 August, the train arrived at the Alice Springs freight terminal where two freight wagons were dropped off and two picked up; one of which (FQAY0017H) was carrying dangerous goods. The two added wagons were marshalled into the second and third position behind the trailing crew van. Train 3DA2 departed the Alice Springs freight terminal at about 1105 and continued on towards Islington Freight Terminal with a train crew change scheduled at Snowtown, SA.

Figure 1: Location of Snowtown SA

Figure 1: Location of Snowtown SA

Source: Geoscience Australia annotated by the ATSB

At about 1055 on 21 August, train 3DA2 arrived at Snowtown, South Australia (Figure 1). The relief crew boarded 3DA2 and was preparing the train for departure when the driver noticed smoke coming from a container being conveyed on the centre platform of wagon FQAY 0017H. He checked the hazardous goods manifest and ascertained that the wagon contained hydrochloric acid solution. He then advised the Australian Rail Track Corporation (ARTC) Network Control Officer (NCO) that there was a fire in a wagon which had dangerous goods and to call the Country Fire Service (CFS) immediately. The crew then set up a 250 m exclusion zone and secured the train as part of their emergency procedure.

The NCO contacted the CFS at 1100 and also advised GWA Transport Control. The CFS arrived at 1130 and took control of the site. At about 1150 the train crew were removed from the train by the CFS. By 1310, the fire had been extinguished. There was some damage to goods in the direct vicinity of the fire but there was no damage to the wagon or rail infrastructure.

Through consultation with the CFS coordinator, the NCO authorised other train movements to pass the incident site via the loop track at about 1320 and 1508. The site was declared safe with no hazard for the public or the environment at about 1605.

The wagon was inspected by a GWA safety representative and deemed to be safe to continue its travel to Islington Freight Terminal. Train 3DA2 departed Snowtown at about 1624, arriving at Islington at about 1818 later that day.

Context

Train and crew information

Train 3DA2 was a GWA super freighter, consisting of two locomotives (GWU007 leading and CLP14 trailing) hauling 28 wagons of containerised freight, some of which included dangerous goods. It had a length of 1166 m and a trailing mass of 1821 t.

Train crew

The train crew possessed relevant competencies to operate the train and to transport dangerous goods. They were also trained in emergency management procedures.

Freight loading unloading at Alice Springs

The wagons attached to train 3DA2 at Alice Springs were loaded with containers packed by Toll Australia and delivered to the GWA freight terminal for transport to Islington Freight Terminal.

Container number 4CB215, loaded on wagon FQAY0017H, had been packed by Toll Australia with consignments from multiple customers, each with a consignment note signed by the customer. The consignment listed on the train’s manifest as dangerous goods consisted of hydrochloric acid solution, noted as 4 x 1000 l Intermediate Bulk Containers (IBC). The remaining consignments were general freight, though one also included an unsecured lead-acid battery2 which was not accompanied by a dangerous goods declaration.

The containers were received by GWA at their Alice Springs yard but were not inspected.

Fire on 3DA2 at Snowtown

GWA policy for train crew dealing with a fire event

GWA’s response plan for “on-rail’ emergencies involving a fire or dangerous goods event, required the train driver to take control of the site until they were relieved by a GWA Incident Response Coordinator or Incident Controller. To ensure train safety and integrity in accordance with the safe working regulations, the driver was required to remain at the controls in the lead locomotive. The response plan also required people to be evacuated if there were fire, smoke, vapour clouds or fumes and move to a safe distance uphill/up wind if there were dangerous goods involved. Transport (train) control was to be notified and required to constantly monitor the communications (radio) onsite.

In this case, once the relief crew noticed the smoke from the container, they obtained the train’s manifest to determine the nature of the freight inside. They identified that the smoke was coming from wagon FQAY0017H (container 4CB215), checked the hazardous goods manifest and determined the container contained hydrochloric acid solution. The driver immediately called the Network Control Officer (NCO), advised of the smoke coming from a container of dangerous goods and requested the fire brigade attend. The driver then set up a 250 m exclusion zone and remained with the train.
The NCO contacted the Country Fire Service (CFS) advised them of the fire and the quantity of hydrochloric acid solution that the manifest indicated was within the container.

The CFS contacted the customer of the hydrochloric acid solution and established that the quantity listed on the manifest differed to the actual amount being transported on board train 3DA2 – the containers being empty, with only residual acid product within.

The CFS further assessed the situation and determined that there was nothing leaking from the container. The decision by the CFS to physically access the container was deferred until the arrival of specialist equipment. The CFS permitted the NCO to operate other services past 3DA2 via the crossing loop track while waiting for the equipment. Once the equipment had arrived, the CFS requested that the NCO close the track again as they prepared to enter the container.

After an internal inspection of the container, the CFS determined that there were no further threats to personal safety or to the environment and allowed the track to be re-opened.

An inspection of the rolling stock was conducted by GWA to ensure the integrity of the train. Once it was determined that the risk of fire and contamination had been mitigated, and that the wagon was safe to continue, train 3DA2 departed Snowtown at 1624.

Emergency response to the dangerous goods fire

Network Control made the call to the emergency services and gave details about the type of dangerous goods and the amount involved. The initial assessment by the CFS was to approach the container fire with the expectation that there were substantial quantities of hydrochloric acid solution present.

The initial limited information available to the CFS on site hindered them in determining the possible ignition sources or the exact contents of the container. This compromised their most efficient response to the situation, including determining the extent of exclusion area or whether it was appropriate to commence a full evacuation. As such, the initial (default) response was to plan for the worst case and then to scale back the effort once more was known about the dangerous goods.

Throughout the incident, the NCO continued to coordinate with the emergency services, GWA and the train crew at the scene. The train crew and local staff managed the site according to their policy and procedures for on-rail emergencies.
The implementation of the GWA “on-rail emergency” plan and the coordination with ARTC effectively managed the incident and provided assistance and information to the emergency services as required.

Fire origin

Inspection of the container found a number of plastic tubs, one of which contained a lead-acid battery. At some point during the journey, an unsecured metal-framed portable chair had fallen across the exposed terminals of the battery (Figure 2).

The metal of the chair frame had shorted out the battery causing high current to flow and heat the metal frame. The heat transmitted from the chair frame resulted in the melting and combustion of the plastic tubs (Figure 3). The smoke produced by the burning plastic was subsequently observed coming from the container by the GWA train crew.

Figure 2: Tub with battery and metal frame of the chair.

Figure 2: Tub with battery and metal frame of the chair.

Source: Genesee & Wyoming Australia annotated by the ATSB.

Figure 3: Damaged freight in situ in the container

Figure 3: Damaged freight in situ in the container

Source: Genesee & Wyoming Australia annotated by the ATSB

Dangerous goods

Transportation of dangerous goods at the time of this incident was governed by the Australian Dangerous Goods (ADG) Code 7.3 edition. The ADG Code is subject to regular reviews that keep pace with international developments and local industry best practice. The current edition is based on the recommendations of the Dangerous Goods Model Regulations 17th edition, United Nations, 2011.

The Code must be read in conjunction with the Model Act on the Transport of Dangerous Goods by Road or Rail3.The model act sets out, in general terms, the legal requirements for transporting dangerous goods by road and rail in Australia. It establishes the broad regulatory framework for the transport of dangerous goods and is complemented by the Model Subordinate Law.

Dangerous goods on train 3DA2

The train consist included wagon FQAY 00017H; a 5-pack4 48-foot artic skeletal wagon designed to carry containers, with an overall length of 79.1m. (Figure 4)

Figure 4: 5-Pack 48 foot artic skeletal wagon

Source: Genesee & Wyoming Australia

The train manifest showed the wagon was located 6th in the sequence and was loaded with seven containers, including container number 4CB215, which contained dangerous goods and was the subject of the fire.

The container manifest for 4CB215 showed that it was loaded with 19 different consignments under individual consignment notes. There were three consignments listed in the category of dangerous goods, although these were not listed in the first part of the documentation as required by the ADG Code. The goods were listed as hazardous class 2.1 (gas sample) and hazardous class 8 (empty intermediate bulk containers of hydrochloric acid).

Genesee & Wyoming requirements for transporting dangerous goods

Genesee & Wyoming requirements for the transportation of dangerous goods are set out in their Domestic Intermodal Infopak. Within the Domestic Intermodal Infopak, Pacific National’s Freight Loading Manual (FLM) indicates how the freight should be handled during its transport.

Pacific National requirements for transporting dangerous goods

Pacific National sets out in its Freight Loading Manual, requirements for freight forwarders when consigning dangerous goods. Section FLM-01-_05 Transit of Dangerous Goods by Rail details the stowage of dangerous goods and also goods that are transported along with dangerous goods.

Safety analysis

Receiving of dangerous goods for transport by rail

The Dangerous Goods Code required that customers declare dangerous goods, and that those goods were adequately described, packaged and secured. The code further provided that batteries were classified as dangerous goods within the meaning of the code (and thus needed to be declared), if they were not secured within equipment. If they were carried with other goods, then all the goods were to be adequately secured to prevent movement or damage, or in the case of batteries, to prevent the terminals bridging and shorting.

Transporting dangerous goods by Genesee & Wyoming Australia

Genesee & Wyoming Australia policy on the transportation of dangerous goods is set out in their Intermodal Domestic Infopak document, which referred to Pacific Nationals Freight Loading Manual (FLM) for transporting freight.

Pacific National’s requirement for dangerous goods states that:

Stowage of non-dangerous goods within the container must be done in a manner to prevent damage to any dangerous goods packing. All other loading must be secured within the container; there must be no loose items.

The FLM provides for the inspection of goods and freight before the freight is accepted – in particular if there is any ambiguity to the type of freight to be conveyed. There is also a function within the FLM to undertake random auditing of the freight to ensure compliance with the relevant stowage and declaration requirements.

While not referred to in GWA’s documentation, Pacific National’s Load Inspection Authority also states that random audits can be conducted while freight is still attached to the prime mover at the terminal gate or yard. Their standard condition of carriage also states that the customer authorises Pacific National to:

…open any container or inspect the goods to determine their nature, conditions, ownership or destination.

GWA’s equivalent document, Standard Condition of Carriage, makes no provision for inspection of freight that may contain undeclared dangerous goods. However, there is a requirement that:

The customer authorises GWA to open any container or inspect the goods to determine their nature, condition, ownership or destination.

and that:

the customer has not asked GWA to handle, transport or store the goods in any way that could be unlawful.

While the intent was that any goods provided to GWA by customers shall be in a condition that is lawful, and while the provisions for inspection were present in the various associated documents, there was no procedure in place for the actual verification of compliance (either in total or in part through random selection). If such a procedure had been in place, it may have provided an opportunity to discover any undeclared dangerous goods (such as the exposed battery) and any loosely and inappropriately packed freight.

Findings

From the evidence available, the following findings are made with respect to the fire on the fourth wagon of train 3DA2 that occurred near Snowtown, SA, on 21 August 2014. These findings should not be read as apportioning blame or liability to any particular organisation or individual.

Safety issues, or system problems, are highlighted in bold to emphasise their importance. A safety issue is an event or condition that increases safety risk and (a) can reasonably be regarded as having the potential to adversely affect the safety of future operations, and (b) is a characteristic of an organisation or a system, rather than a characteristic of a specific individual, or characteristic of an operating environment at a specific point in time.

Contributing factors

  • When consigned for transport, freight container 4CB215 contained an undeclared lead-acid battery packed alongside other freight that had not been secured in accordance with the operator’s requirements or those of the Australian National Code of Transport of Dangerous Goods by Road and Rail.
  • During transport, it was likely that an unsecured metal-framed chair shorted the battery terminals, with the resulting heat melting and igniting the plastic tubs surrounding the battery.

Other factors that increased risk

  • Genesee & Wyoming Australia had no procedure in place to verify (either in total or by random selection) that the nature or condition of freight provided by their customers, complied with their Standard Condition of Carriage. [Safety issue]

Other findings

  • The procedures followed by Genesee & Wyoming Australia and ARTC Network Control, in their management of the fire emergency, were effective and followed their documented response protocols.

Safety issues and actions

The safety issues identified during this investigation are listed in the Findings and Safety issues and actions sections of this report. The Australian Transport Safety Bureau (ATSB) expects that all safety issues identified by the investigation should be addressed by the relevant organisation(s). In addressing those issues, the ATSB prefers to encourage relevant organisation(s) to proactively initiate safety action, rather than to issue formal safety recommendations or safety advisory notices.

All of the directly involved parties were provided with a draft report and invited to provide submissions. As part of that process, each organisation was asked to communicate what safety actions, if any, they had carried out or were planning to carry out in relation to each safety issue relevant to their organisation.

Genesee & Wyoming Australia procedures for acceptance of dangerous freight

Genesee & Wyoming Australia had no procedure in place to verify (either in total or by random selection) that the nature or condition of freight provided by their customers, complied with their Standard Condition of Carriage.

ATSB Safety issue: RO-2014-015-SI-01

Safety issue description:

Genesee & Wyoming Australia had no procedure in place to verify (either in total or by random selection) that the nature or condition of freight provided by their customers, complied with their Standard Condition of Carriage.

Proactive safety action taken by Genesee & Wyoming Australia

Action number: RO-2014-015-NSA-006

As a result of this occurrence, Genesee & Wyoming Australia advised that they have undertaken an independent audit of their policies and procedures for the receiving, storage, handling, transporting and delivery practices at the Alice Springs and Darwin yards – relative to dangerous goods on GWA-accredited intermodal trains. The audit encompassed the following aspects;

  • Communications with customers re DGs at the time bookings are made – chain of responsibility.
  • Receipt of DGs at terminal and adequacy of the receipting process. Documentation relative to GWA’s responsibilities and gaining assurance as to nature of the goods – chain of responsibility.
  • Segregation and placarding of loaded and compliance of same with code of practice.
  • Adequacy of training delivered to train crews, transport controllers and supervisors.
  • Existence and adequacy of emergency/evacuation plans relative to DGs at the terminal.
ATSB comment in response

While the likelihood of such events is relatively low, Genesee Wyoming Australia’s review of policy and procedures will help identify opportunities to further mitigate the risks of transporting dangerous goods. The ATSB is satisfied that, when fully implemented, the actions proposed by Genesee & Wyoming Australia should address this safety issue.

Current status of the safety issue:

Issue status: Safety action pending
Justification: At the time of this report release, the safety action advised by Genesee & Wyoming Australia had not yet been fully implemented.

Sources and submissions

Sources of information

The sources of information during the investigation included:

  • Genesee & Wyoming Australia
  • Australian Rail Track Corporation
  • Pacific National
  • Toll Ipec

References

Australian code for the Transport of Dangerous Goods by Road & Rail Edition 7.3, August 2014

Pacific National Freight Loading Manual FLM 00-97 Transit of dangerous goods by rail FLM 01-06_05.

Pacific National Freight Loading Manual FLM 00-97 Provisional load process FLM 01-12

Pacific National Freight Loading Manual FLM 00-97 Acceptance of loading FLM 01-02

Pacific National Freight Loading Manual FLM 00-97

Genesee & Wyoming Australia Domestic Intermodal Infopak, October 2013

Genesee & Wyoming Standard Condition of Carriage Rev A

Genesee & Wyoming Australia Provisional Load Procedure GWA-FLP-03-006_01

Genesee & Wyoming Australia Response plan for “on rail” emergencies RS-PRC-006 version 008

Submissions

Under Part 4, Division 2 (Investigation Reports), Section 26 of the Transport Safety Investigation Act 2003 (the Act), the Australian Transport Safety Bureau (ATSB) may provide a draft report, on a confidential basis, to any person whom the ATSB considers appropriate. Section 26 (1) (a) of the Act allows a person receiving a draft report to make submissions to the ATSB about the draft report.

A draft of this report was provided to Genesee & Wyoming Australia, The Office of National Rail Safety Regulator (ONRSR), Toll Ipec, the Australian Rail Track Corporation, Pacific National and the train crew of 3DA2.

Responses and/or submissions were received from Genesee & Wyoming Australia, The Office of National Rail Safety Regulator (ONRSR), Toll Ipec, the Australian Rail Track Corporation, Pacific National and the train crew of 3DA2. The submissions were reviewed and where considered appropriate, the text of the report was amended accordingly.

Purpose of safety investigations

The objective of a safety investigation is to enhance transport safety. This is done through:

  • identifying safety issues and facilitating safety action to address those issues
  • providing information about occurrences and their associated safety factors to facilitate learning within the transport industry.

It is not a function of the ATSB to apportion blame or provide a means for determining liability. At the same time, an investigation report must include factual material of sufficient weight to support the analysis and findings. At all times the ATSB endeavours to balance the use of material that could imply adverse comment with the need to properly explain what happened, and why, in a fair and unbiased manner. The ATSB does not investigate for the purpose of taking administrative, regulatory or criminal action.

Terminology

An explanation of terminology used in ATSB investigation reports is available here. This includes terms such as occurrence, contributing factor, other factor that increased risk, and safety issue.

Publishing information 

Released in accordance with section 25 of the Transport Safety Investigation Act 2003

Published by: Australian Transport Safety Bureau

© Commonwealth of Australia 2015

image_5.png

Ownership of intellectual property rights in this publication

Unless otherwise noted, copyright (and any other intellectual property rights, if any) in this report publication is owned by the Commonwealth of Australia.

Creative Commons licence

With the exception of the Coat of Arms, ATSB logo, and photos and graphics in which a third party holds copyright, this publication is licensed under a Creative Commons Attribution 3.0 Australia licence.

Creative Commons Attribution 3.0 Australia Licence is a standard form licence agreement that allows you to copy, distribute, transmit and adapt this publication provided that you attribute the work.

The ATSB’s preference is that you attribute this publication (and any material sourced from it) using the following wording: Source: Australian Transport Safety Bureau

Copyright in material obtained from other agencies, private individuals or organisations, belongs to those agencies, individuals or organisations. Where you wish to use their material, you will need to contact them directly.

_____________________

1. The 24 hour clock is used in this report to describe the local time of day, Central Standard Time (CST)

2. The Dangerous Goods Code provides that cells and batteries, except when installed in equipment, must be packed in inner packaging that completely enclose the cell or battery or must be protected so as to prevent short circuits.

3. Source: Australian Code for the Transport of Dangerous Goods by Road and Rail available at www.ntc.gov.au

4. An articulated wagon comprising five platforms, the adjacent ends of individual units being supported on a common bogie and permanently connected by a device which permits free rotation in all planes. RISSB, Glossary of Railway Terminology - Guideline

Occurrence summary

Investigation number RO-2014-015
Occurrence date 21/08/2014
Location Near Snowtown
State South Australia
Report release date 24/03/2015
Report status Final
Investigation level Defined
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Rail
Rail occurrence category Fire
Occurrence class Incident
Highest injury level None

Train details

Train operator Genesee & Wyoming Australia Pty Ltd
Train number 3DA2
Type of operation Freight
Departure point Darwin, Northern Territory
Destination Adelaide, South Australia
Train damage Nil

Wirestrike involving Robinson R66, VH-JRX, near Giru, Queensland, on 20 August 2014

Final report

Report release date: 15/10/2014

What happened

On 20 August 2014, the pilot of a Robinson R66 helicopter, registered VH-JRX, conducted a site inspection from a vehicle prior to commencing aerial spraying near Giru, Queensland. The pilot identified powerlines running along the eastern, southern and northern boundaries of the paddock to be sprayed. He then conducted a flight over the paddock and assessed the hazards in the area and confirmed he was able to see all of the powerlines he had identified from the ground.

At about 1500 Eastern Standard Time (EST), the pilot commenced aerial spraying in an east-west direction. At the end of each run, the pilot climbed the helicopter up and over the powerlines, turned then descended once clear of the powerlines and sprayed the paddock in the opposite direction.

At about 1645, the pilot commenced the final clean-up run. The helicopter was operating along the southern boundary of the paddock, parallel to the powerlines running along the southern and northern borders. The pilot was aware of those powerlines, however when about 5 m from the eastern boundary, he sighted the powerlines running perpendicular to the direction of flight. The pilot assessed that it was too late to climb over the powerlines and elected to fly underneath them and to ensure the helicopter remained above the crop.

The main rotor blade hub struck the powerlines and the helicopter collided with the ground. The helicopter was substantially damaged, and the pilot sustained minor injuries.

This incident provides a reminder to pilots to conduct an aerial reconnaissance to confirm wire locations and other hazards.

Aviation Short Investigation Bulletin - Issue 35

Occurrence summary

Investigation number AO-2014-142
Occurrence date 20/08/2014
Location Townsville SE 50 km (near Giru)
State Queensland
Report release date 15/10/2014
Report status Final
Investigation level Short
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Wirestrike
Occurrence class Accident
Highest injury level Minor

Aircraft details

Manufacturer Robinson Helicopter Co
Model R66
Registration VH-JRX
Serial number 0151
Sector Helicopter
Operation type Aerial Work
Departure point Near Giru, Queensland
Destination Near Giru, Queensland
Damage Substantial

Collision during landing involving a GA8 Gippsland Airvan, VH-XHV, 19 km south-south-east of Murray Field Airport (Pinjarra Skydiving Airstrip), Western Australia, on 24 August 2014

Final report

Report release date: 23/12/2014

What happened

On 24 August 2014, the pilot of a Gippsland Aeronautics Airvan aircraft, registered VH-XHV had just completed a parachute drop and was on descent to land at the Pinjarra Skydiving Airstrip, Western Australia.

At about 1,000 ft above the ground, the aircraft was configured for landing with full flap selected. The pilot reported that the airspeed was about 80 kt on base and that day, and during the landing roll noticed the wing of a Classic Aircraft Corporation WACO aircraft was over the runway.

The pilot applied some braking but could not stop the aircraft in the 836 metres available. In an effort to avoid a collision, the pilot manoeuvred the aircraft to the left of the runway. Shortly after, the wing of the Airvan struck the WACO causing the Airvan to spin rapidly. The propeller struck a parked trailer and then an unoccupied 4WD.

The pilot was not injured, however two people on the ground sustained minor injuries and both the Airvan and Waco sustained substantial damage.

This accident serves as an important reminder of the need to initiate a go-around as soon as there is doubt about the suitability of the approach and landing. In this instance, the pilot had assumed that the full length of the runway was available and had left the option of a safe go-around too late.

Aviaiton Short Investigations Bulletin - Issue 37

Occurrence summary

Investigation number AO-2014-143
Occurrence date 24/08/2014
Location North Pinjarra (ALA)
State Western Australia
Report release date 23/12/2014
Report status Final
Investigation level Short
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Runway excursion
Occurrence class Accident
Highest injury level Minor

Aircraft details

Manufacturer GippsAero
Model GA8-TC 320
Registration VH-XHV
Serial number GA8-TC 320-10-158
Sector Piston
Operation type Private
Departure point Pinjarra, Western Australia
Destination Pinjarra, Western Australia
Damage Substantial