At about 1411 on 12 February 2014, 10 wagons of a loaded grain train en-route from Birchip to North Geelong derailed at Emu in North Central Victoria. The weather was hot with a forecast temperature of 36° C.
As a consequence of the derailment there was damage to about 210 m of track. Five wagons overturned resulting in significant damage and a loss of load. The subsequent rolling stock recovery and track repair activities closed the line for five days. Emu Loop was not reinstated as a crossing location.
What the ATSB found
The ATSB found that rail creep readings within Emu Loop had been identified by V/Line as a Priority 2 defect – requiring prioritisation for rectification – and that this rectification had not been carried out by the time the derailment had occurred. The hot conditions of the day together with a latent rail creep condition contributed to the rails within Emu Loop assuming a state of longitudinal compression.
The track-train dynamics generated by the passage of 9130, even at the relatively low speed, in combination with the compressed state of the rail, produced lateral loads that exceeded the lateral resistance of the ballast, causing misalignment. The lateral misalignment was of a sufficient magnitude to result in derailment.
Due to the high forecast temperature, train speed restrictions and special track heat patrol requirements had come into force. Speed restrictions were met and a heat patrol was planned to be conducted over the length of line where the derailment occurred. However, as the train was in possession of an authority through the section, the patrol was not conducted ahead of the train.
What's been done as a result
V/Line is undertaking a review of the current procedure for managing Priority 2 rail creep defects. This will be completed by November 2015.
Safety message
This derailment highlights the need for rail infrastructure managers to monitor and address rail creep conditions and track lateral stability, particularly prior to the onset of hot weather conditions.
On 10 February 2014, at about 1500 Central Standard Time, the pilot of a Robinson R22 helicopter, registered VH-LZR, commenced take-off for a private local flight from a property about 100 km east of Mataranka, Northern Territory.
As the helicopter became airborne heading to the south-east, the pilot sighted an object moving to his right. At about 10 ft above ground level, the pilot was distracted looking outside the door at the object and the helicopter collided with a tree. The helicopter sustained substantial damage and the pilot was uninjured.
This incident shows that distractions can have a significant impact on flight safety.
On 1 February 2014, a crew member carrying out routine maintenance on the passenger ship Seven Seas Voyager’s waste incinerator was injured when a pneumatically (air) operated valve closed against his body. The ship was berthed in Sydney and the crew member, a fitter, was taken to a local hospital.
The fitter was treated for serious bruising and shock before returning to the ship. While it was expected that the fitter could resume duties after 2 days, his condition did not sufficiently improve and he was later discharged from the ship to recuperate at home.
What the ATSB found
The ATSB found that the incinerator ash dump valve’s control systems had not been properly isolated and residual air pressure remained in the valve’s operating system. The fitter assumed that it was safe to start his assigned task of replacing the incinerator ash grates, and accessed the incinerator through the ash dump valve. He then inadvertently activated the electric sensor that automatically closed the valve – driven by the pressure of the residual air remaining in the valve operating system.
The investigation identified that Seven Seas Voyager’s engineering staff did not have an adequate understanding of the incinerator’s control systems and its maintenance. Furthermore, the task of replacing the ash grates was not adequately planned and shipboard safety management system requirements, including taking necessary risk mitigation measures and completion of a permit to work before the task, were not complied with.
The investigation also found that neither the ship’s planned maintenance system (PMS) nor the incinerator manufacturer’s instruction manual contained any information with respect to the maintenance or replacement of the ash grates. Such information would have been useful to shipboard staff planning the grate replacement task, particularly with identifying all the risks associated with the task.
What's been done as a result
The ATSB has issued a recommendation to Seven Seas Voyager’s manager to take action to address the safety issue with respect to the ship’s PMS. The ATSB has also recommended that the incinerator manufacturer address the safety issue concerning the equipment’s instruction manual.
Safety message
Shipboard equipment and machinery commonly incorporates automated, power-operated systems which must be isolated, stored energy released and locked out before undertaking maintenance or repair tasks. Safely completing a task relies on personnel having a proper understanding of the system involved, coupled with adequate planning, risk assessment and the effective implementation of all safety management system requirements - including permits to work.
Context
Seven Seas Voyager
Seven Seas Voyageris a passenger ship with a capacity of 730 guests. At the time of the incident, it was operated by Prestige Cruise Holdings and engaged in round-the-world cruises. It was registered in the Bahamas and classed with Lloyd’s Register (LR).
The ship had a multi-national crew of 451, including the master who joined the ship on the day of the incident. The master had 20 years of seagoing experience, of which the last 12 had been on passenger ships. He held a master mariner’s certificate of competency and had been sailing as master for 3 years. This was his sixth time on board Seven Seas Voyager.
The staff chief engineer had 27 years of seagoing experience, of which the last 21 years had been on passenger ships. He held a certificate of competency as a chief engineer and had been sailing in that rank for 5 years .This was his first time on board Seven Seas Voyager and he had been on board for about 2 weeks.
The first engineer had about 7 years of seagoing experience, of which the last 4 years had been spent on passenger ships. He held a second engineer’s certificate of competency and had been sailing as first engineer for 1 month. This was his fourth time on board Seven Seas Voyager and had been on board for 2 months.
The fitter had 10 years of seagoing experience, of which 4 years had been with Prestige Cruise Holdings. He held a degree in marine engineering from the Philippines. This was his first time on board Seven Seas Voyager and he had been on board for 5 months.
Waste incinerator
Seven Seas Voyager was fitted with a 300 kg/hour ISIR Pyrall 150 ADA type waste incinerator (Figure 3). Shredded solid waste was fed from the deck above into the incinerator furnace through its forward end. The furnace internals were refractory lined and the incinerator was fired via a side-mounted gas oil burner.
Figure 3: Sketch of incinerator ash dumping system and sensors
Source: ATSB
Figure 4: New ash grates (for replacement)
Source: ATSB
The accumulated ash in the incinerator’s ash chamber was held in check by two cast iron grates (figure 4). A sliding ash dump valve was located below the grates and sealed the incinerator ash chamber. When dumping ash, the sliding ash dump valve was opened and the grates swung down to open. This allowed the ash to fall out of the incinerator into an ash bin.
The ash grates and ash dump valve were operated by pneumatic cylinders which were fitted with sensors to detect their position (open or closed). Another sensor was fitted to detect when an ash bin was in place under the incinerator. A control switch was mounted on the side of the incinerator for manual activation of the ash dumping system.
Ash removal
Accumulated ash had to be periodically manually released by the incinerator operators (Figure 5). To do this, the incinerator was shut down, allowed to cool and a waste bin was placed under the ash dump valve, making contact with the bin sensor, energising the control circuit.
Figure 5: Diagram listing ash removal instructions and photograph of control panel
Source: ATSB
When the control switch was moved to position 1, the ash dump valve would open and then in position 2, the grates would open and the ash would fall into the ash bin. When the ash bin was full, the control switch would be moved to position 0. The grates would close and, once in the fully closed position, the dump valve would close. If the ash bin was removed while the manual control switch was not in position 0, the grates and dump valve would automatically close in the same sequence. If either grate did not fully close, the dump valve would not receive the signal to close and, hence, would remain open.
Ash grate replacement
The incinerator ash grates rotated on a steel shaft passing longitudinally through the grate body and were secured to the shaft with tapered pins (Figure 6). The ash grates opened in a downwards direction and released ash below. However, this did not allow access to remove the tapered pins. The grates needed to be swung 90° upwards to expose the bottom of the pin. This would require disconnection of the pneumatic cylinders, which in turn depressurised the system.
Figure 6: Ash grate removal (photograph shows the worn out ash grates)
Source: ATSB
Findings
On 1 February 2014, a fitter carrying out routine maintenance on Seven Seas Voyager’s waste incinerator was injured when the pneumatically operated ash chamber dump valve closed against his body. He was freed and taken to a hospital ashore where he received treatment for serious bruising and shock. The fitter returned to the ship that day and was subsequently repatriated 10 days later to recuperate at home.
From the evidence available, the following findings are made. These findings should not be read as apportioning blame or liability to any particular organisation or individual.
Safety issues, or system problems, are highlighted in bold to emphasise their importance. A safety issue is an event or condition that increases safety risk and (a) can reasonably be regarded as having the potential to adversely affect the safety of future operations, and (b) is a characteristic of an organisation or a system, rather than a characteristic of a specific individual, or characteristic of an operating environment at a specific point in time.
Contributing factors
Assuming that it was safe, the fitter accessed the incinerator’s ash chamber to replace its ash grates and inadvertently activated the electric sensor that automatically closed the ash chamber dump valve against his body.
The ash dump valve’s electro-pneumatic control systems were not properly isolated and air pressure in the valve’s operating system was not released, leaving residual pressure that allowed the valve to close.
The ship’s engineering staff did not have an adequate understanding of the incinerator’s control systems and requirements of this specific task.
The ash grate replacement task was undertaken on an opportunistic basis and not in accordance with shipboard safety management system requirements and good work practices. Consequently, the task was not adequately planned and risk assessed, and the necessary permit to work and conditions required by the permit were not in place.
Other factors that increased risk
Seven Seas Voyager’s planned maintenance system (PMS) contained no information about waste incinerator ash grate replacement, a task that would have been periodically undertaken by different engineering staff since 2003. Therefore, in this respect, the shipboard procedures that documented requirements for the PMS had not been effectively implemented. [Safety issue]
The manufacturer’s instruction manual for Seven Seas Voyager’s waste incinerator contained no specific instructions for ash grate maintenance or replacement. Such instructions would have provided useful information for the ship’s crew to plan and safely complete periodic ash grate maintenance. [Safety issue]
Safety analysis
The incident
At 0850 on 1 February 2014, when the incinerator operator completed dumping ash into the ash bin, the de-ashing toggle switch was left in position 2 (Figure 5). The subsequent removal of the ash bin released the bin sensor switch, initiating the closing sequence for the ash grates and then the ash dump valve. However, as the after ash grate did not fully close, the ash dump valve was not signalled to close and remained open.
Figure 7: Fitter’s position standing in the ash chamber
Source: ATSB
Shortly after 0900, the fitter decided to see what the ash grate replacement task involved. The open ash dump valve allowed him to access the grates (Figure 7). Assuming that it was safe to start removing the grates, he began punching the taper pins holding the grates. Unable to hit the punch squarely on the pin, he then stood up within the opening of the dump valve and the deteriorated ash grates to get a better view.
As he stood with his upper body inside the ash chamber, the fitter began moving the grates to better position them and punch the taper pins out. When he moved the after grate to the fully closed position, the sensor switch signalled the ash dump valve to close. The air to the valve’s operating system had been shut off but residual air in the system allowed the valve to close against the fitter’s body.
At the time, the incinerator electro-pneumatic control systems had not been properly isolated and it was not safe to start the grate replacement task. Isolating the air to the system was only one part of the process. The residual air pressure in the pneumatic system still needed to be released. In addition, it was necessary to isolate the system’s electrical power and prevent sensor switches activating.
Planned maintenance
All maintenance tasks on board Seven Seas Voyager were managed through the ship’s computerised planned maintenance system (PMS). Scheduled (routine) maintenance checks for the incinerator system were detailed on individual work orders. They stated safety precautions were to be observed and the manufacturer’s instruction manual referred to prior to and during maintenance.
The incinerator operator was responsible for reporting all technical problems (and related issues) with the incinerator to the first engineer. It was then the first engineer’s responsibility to maintain the machinery as required. This included updating the PMS, such as entering non-scheduled work orders and job histories.
While such systems provide flexibility and convenience, their effectiveness is directly related to the information used to populate various fields and the ongoing recording of maintenance related information.
In early 2013, the deteriorated condition of the ash grates was reported to the first engineer. The first engineer ordered replacement ash grates, which were received in April. In November that year, the first engineer’s handover notes indicated that the ash grates required replacement.
However, Seven Seas Voyager’s planned maintenance system (PMS) contained no information about waste incinerator ash grate replacement, a task that would have been periodically undertaken by different engineering staff since 2003. Therefore, in this respect, the shipboard procedures that documented requirements for the PMS had not been effectively implemented.
Manufacturer’s instructions
The incinerator manufacturer’s instruction manual contained detailed instructions for isolating its control systems before starting any maintenance (Figure 8). The instructions warned that the loss of electrical power to the control system while there was residual air pressure in the pneumatic circuit would result in the ash dump valve automatically closing. The electro-pneumatic control cabinet door also had a warning notice that stated ‘before maintenance to sluice valves (ash grates) discharge the pressure inside the pneumatic circuit’.
However, the manual contained no instructions or guidance for ash grate replacement. With the incinerator being used regularly, the grates would deteriorate and need periodic replacement. Therefore, it could reasonably be expected that the manual should have provided some instructions or guidance to safely complete the task.
While the instructions for isolating the system and the warnings on the electro-pneumatic cabinet were appropriate, they were not followed on 1 February. It is possible that shutting off the air was considered sufficient isolation for the task at hand. The inclusion of some level of instructions in the manual could have prompted other precautions to be taken. Such instructions could also have been included by the ship’s engineers in the PMS during the ship’s life.
Figure 8: Isolation of pneumatic system
Source: ATSB
Risk management
Replacement of the incinerator ash grates was a non-scheduled and non-routine operation.
Seven Seas Voyager’s safety management system (SMS) contained procedures for non-routine operations, requiring that a risk assessment be undertaken for the task using a defined process.
According to the ship’s SMS, such tasks needed to be planned and broken down into logical steps, with the assumption that the work team did not have any specific knowledge of the activities to be carried out. All identified hazards associated with each step were to be assessed and the associated risks identified and minimised. Subsequently, the general equipment and area were also to be inspected and any other hazards identified and minimised. Regarding the incinerator, this step would have included isolation of the energy supplies (power and air) and locking out of the system. A pre-work briefing was required to explain the essential elements of the completed risk assessment to the work team.
The ATSB investigation found that the Seven Seas Voyager’s engineering staff had had ample time to correctly scope and plan the work. Spare ash grates had been ordered and received on board several months before the incident. Furthermore, the need to replace the grates was identified in the handover notes of the first engineer a couple of months earlier.
However, on 1 February, the ash grate replacement task was not planned or undertaken in the manner described above. On that day, the incinerator had cooled, its operation was not required, spare grates were available and there was sufficient time to complete the task. The discussion at the morning meeting primarily covered these aspects of the task and assigning a team for it.
Permit to work
As part of the broad risk management process, the ship’s SMS also required that a permit to work be completed for the task. The permit to work process formalised and documented the key actions required to ensure that all the necessary safety checks and conditions were in place before work was allowed to start. Accurate completion of the permit to work required a sound knowledge of the systems and equipment being worked on.
In this instance however, neither the first engineer nor the fitter had any previous experience of this particular task. The actual work involved in replacing the ash grates was to be determined as the task progressed. Furthermore, there were no specific manufacturer’s instructions available for the grate replacement task and the ship’s PMS did not contain any information and history to assist the engineering staff.
In preparation for the commencement of work, the first engineer had correctly shut off the operating air to the control system but had not released the residual air pressure or isolated the electrical power because of his limited understanding of the control system. The permit to work that he had started to prepare was not completed when the fitter started work on the incinerator.
At interview, the fitter indicated that he thought the incinerator’s system had been isolated and the permit to work had been completed. He had assumed the system was safe to work on. The work team had not discussed the precautions, the work permit conditions or when it would be safe to start work and who was responsible for giving the go ahead to start work.
Safety issues and actions
The safety issues identified during this investigation are listed in the Findings and Safety issues and actions sections of this report. The Australian Transport Safety Bureau (ATSB) expects that all safety issues identified by the investigation should be addressed by the relevant organisation(s). In addressing those issues, the ATSB prefers to encourage relevant organisation(s) to proactively initiate safety action, rather than to issue formal safety recommendations or safety advisory notices.
All of the directly involved parties were provided with a draft report and invited to provide submissions. As part of that process, each organisation was asked to communicate what safety actions, if any, they had carried out or were planning to carry out in relation to each safety issue relevant to their organisation.
Where relevant, these safety issues and actions will be updated on the ATSB website as information comes to hand. The initial public version of these safety issues and actions are in PDF on the ATSB website.
Planned maintenance system
Seven Seas Voyager’s planned maintenance system (PMS) contained no information about waste incinerator ash grate replacement, a task that would have been periodically undertaken by different engineering staff since 2003. Therefore, in this respect, the shipboard procedures that documented requirements for the PMS had not been effectively implemented.
The manufacturer’s instruction manual for Seven Seas Voyager’s waste incinerator contained no specific instructions for ash grate maintenance or replacement. Such instructions would have provided useful information for the ship’s crew to plan and safely complete periodic ash grate maintenance.
On 31 January 2014, the 206 m long passenger ship Seven Seas Voyager (Figure 1) berthed alongside the wharf at the Overseas Passenger Terminal (OPT) in Sydney. The ship was scheduled to remain in port overnight and sail for Brisbane on the following evening.
Figure 1: Seven Seas Voyager
Source: ATSB
At 0730[1] on 1 February, the staff chief engineer[2] held the daily meeting to discuss the work plan for the day with the first engineer, mechanics, fitters and wipers. The first engineer suggested replacing the waste incinerator ash grates with spare grates on board. The incinerator had been shut down for about 30 hours and had cooled sufficiently. The staff chief engineer agreed with the suggestion and a fitter was assigned to assist the first engineer with the task.
At 0800, the first engineer briefed the assigned fitter about the personal protective equipment (PPE) and the tools that would be required for the ash grate replacement. The fitter began arranging the necessary items for the task in the incinerator room, while the first engineer started to fill out a permit to work.
At 0840, the first engineer inspected the incinerator furnace through the inspection hatch (Figure 2) and found that it needed to be cleaned of ash before work could commence. The incinerator operator attended and used the manual controls to open the ash grates and the sliding ash chamber dump valve to release the ash into an ash waste bin. The first engineer then shut off the air to the incinerator’s operating system.
At 0850, after the ash bin had filled, the incinerator operator removed it and returned to his other duties. When the first engineer inspected the internals of the incinerator furnace, he noted that further cleaning was required. He organised a wiper to vacuum the ash out.
At about 0900, the vacuum cleaner stopped after its dust bag filled so the wiper went to get a replacement dust bag. At about the same time, the first engineer went to change into working clothes before starting the task.
By then, the fitter had prepared tools and donned PPE. He moved to a position under the incinerator to inspect the ash grates through the open ash chamber dump valve and determine how to remove the grates. He saw the taper pins holding the grates in place and attempted to hammer the pins free. Unsuccessful, the fitter then stood up through the open ash dump valve and the partially closed, worn out grates. He could now look down on the grates as he moved them back and forth.
Meanwhile, the wiper had returned to the incinerator room and started changing the vacuum cleaner dust bag. He did not notice that the fitter was standing under the incinerator with his upper body inside it.
Figure 2: Diagram showing main components of waste incinerator
Source: ATSB
At about 0908, as the fitter went about moving the grates, the ash dump valve began to close. The fitter did not notice the slowly moving dump valve until it was too late for him to get clear. As the valve closed on his lower body, he began to shout for help.
At about 0910, when the first engineer returned to the incinerator room, he heard the fitter’s shouts. The first engineer was on the deck above the incinerator, where its electro-pneumatic control cabinet was located, and he quickly checked that the air supply was still closed.
At 0912, the first engineer phoned the staff chief engineer and advised him of the incident and the need for immediate assistance. At the same time, the wiper phoned the bridge and advised the officer of the watch, who then broadcast an all ship medical emergency for the incinerator room.
At 0913, the staff chief engineer arrived in the incinerator room. The first engineer was unable to move the dump valve by hand or by the control system, so he and the staff chief engineer began removing the air pipes to the dump valve and ash grate pneumatic cylinders. Shortly afterwards, the ship’s senior officers and the medical response team and arrived on the scene.
When the staff chief engineer and first engineer had removed the air lines, they were able to force the dump valve open and free the fitter. He was stretchered to the ship’s hospital for assessment and treatment. An ambulance soon arrived at the OPT wharf and the fitter was taken to a local hospital for further treatment.
At the hospital, the fitter was treated for serious bruising and shock before returning to the ship later that day. He returned to light duties 2 days later but continued to suffer from the effects of the incident. Consequently, on 11 February, he was discharged from the ship to recuperate at home.
On 3 February 2014, investigators from the ATSB attended Seven Seas Voyager while the ship was berthed in Brisbane, Queensland. The master and directly involved crew members were interviewed and each provided their account of the accident. Photographs of the ship and copies of relevant documents were obtained, including log books, statutory certificates, reports, manuals and procedures.
Submissions
Under Part 4, Division 2 (Investigation Reports), Section 26 of the Transport Safety Investigation Act 2003, the ATSB may provide a draft report, on a confidential basis, to any person whom the ATSB considers appropriate. Section 26 (1) (a) of the Act allows a person receiving a draft report to make submissions to the ATSB about the draft report.
A draft of this report was provided to Seven Seas Voyager’s master, staff chief engineer, first engineer, environmental officer, fitter, wiper and incinerator operator, the Australian Maritime Safety Authority, Prestige Cruise Services, ISIR Impianti Srl and the Bahamas Maritime Authority.
Submissions were received from Seven Seas Voyager’s master, the Australian Maritime Safety Authority, and the Bahamas Maritime Authority. The submissions were reviewed and where considered appropriate, the text of the report was amended accordingly.
Purpose of safety investigations & publishing information
Purpose of safety investigations
The objective of a safety investigation is to enhance transport safety. This is done through:
identifying safety issues and facilitating safety action to address those issues
providing information about occurrences and their associated safety factors to facilitate learning within the transport industry.
It is not a function of the ATSB to apportion blame or provide a means for determining liability. At the same time, an investigation report must include factual material of sufficient weight to support the analysis and findings. At all times the ATSB endeavours to balance the use of material that could imply adverse comment with the need to properly explain what happened, and why, in a fair and unbiased manner. The ATSB does not investigate for the purpose of taking administrative, regulatory or criminal action.
Terminology
An explanation of terminology used in ATSB investigation reports is available here. This includes terms such as occurrence, contributing factor, other factor that increased risk, and safety issue.
Publishing information
Released in accordance with section 25 of the Transport Safety Investigation Act 2003
Ownership of intellectual property rights in this publication
Unless otherwise noted, copyright (and any other intellectual property rights, if any) in this report publication is owned by the Commonwealth of Australia.
Creative Commons licence
With the exception of the Coat of Arms, ATSB logo, and photos and graphics in which a third party holds copyright, this publication is licensed under a Creative Commons Attribution 3.0 Australia licence.
Creative Commons Attribution 3.0 Australia Licence is a standard form licence agreement that allows you to copy, distribute, transmit and adapt this publication provided that you attribute the work.
The ATSB’s preference is that you attribute this publication (and any material sourced from it) using the following wording: Source: Australian Transport Safety Bureau
Copyright in material obtained from other agencies, private individuals or organisations, belongs to those agencies, individuals or organisations. Where you wish to use their material, you will need to contact them directly.
The aircraft, with the pilot and three passengers on board, departed Tjuntjunjarra with fuel sufficient for the flight. The auxiliary tanks were selected after the aircraft reached a cruising altitude of 3,500 ft AMSL. The cruising altitude, which was 2,200 ft above ground level, was selected because of potentially adverse wind conditions at higher altitudes. The pilot was unsure of the precise contents of the auxiliary fuel tanks, because of an indicator inaccuracy, but he expected to gain at least a further 30 minutes endurance from them. Twenty five minutes after departure the right engine lost all power.
The pilot assumed that the right auxiliary tank had run dry and he selected the right fuel selector to the main tank. The engine did not re-start and the pilot observed the fuel flow to be zero. To ensure that the left engine continued to run the pilot selected the left fuel selector to the main tank.
The pilot then attempted to select the right auxiliary fuel pump to HIGH (the settings are OFF, LOW and HIGH) but inadvertently selected the left pump to HIGH. Realising his mistake, the pilot reversed the selections. Shortly after, the left engine also lost all power.
In an attempt to rectify the situation, the pilot carried out an engine failure and re-start check on the right engine, selecting HIGH on the auxiliary fuel pump (as directed by the Engine Failure During Flight check list). He also altered the fuel selections for both engines, from main to auxiliary and back to main. At no stage did he feather either propeller. During the attempts to re-start the engines the left auxiliary fuel pump was also selected too HIGH. The only response to the pilot's actions was a momentary surge of power from the right engine.
During the trouble-shooting process the pilot had placed the aircraft in a glide descent and turned towards the nearest clear area. Within approximately 2 minutes of the first loss of power the aircraft was approaching 500 ft above ground level, and the pilot decided to concentrate his efforts on completing a successful forced landing and ceased his trouble-shooting activities. He lined the aircraft up on a clear area and attempted a landing, using full flap, with the landing gear retracted. The aircraft touched down heavily before colliding with several trees and sliding to a stop.
The occupants, all of whom received back injuries, evacuated the aircraft through the forward cabin door and the baggage compartment door.
A check of expected fuel consumption against auxiliary tank contents indicated that the right auxiliary fuel tank ran dry at about the time that it should have. Consequently, the most likely reason for the initial loss of power in the right engine was exhaustion of the fuel in the right auxiliary tank.
The Aircraft Flight Manual contains the following CAUTION.
'If the auxiliary fuel pump switches are placed in the HIGH position with the engine-driven fuel pumps operating normally, total loss of engine power may occur.'
Operation of the auxiliary fuel pump in conjunction with the engine-driven pump can cause an over-supply of fuel to the engine and an excessively rich air/fuel mixture which can lead to a power loss.
As both engine-driven fuel pumps appeared to be operating normally up until the time of the power loss, the most likely reason for the loss of power in the left engine and the failure of both engines to re-start normally was that the pilot had selected both the auxiliary fuel pump switches to HIGH during his troubleshooting.The momentary surge of power from the right engine probably occurred as the fuel pressure passed through the normal range, with HIGH selected, as it built up to a level that caused the engine to lose power again.
The pilot was aware of a cockpit placard which indicated that the auxiliary fuel pump should be selected to HIGH if there was very low or no fuel pressure. He was also aware that the engine failure checklist indicated that he could operate the auxiliary fuel pump on HIGH if the fuel pressure was deficient. His initial selection of HIGH was based on his observation of a zero-fuel pressure reading. The pilot was not aware of the CAUTION in the Aircraft Flight Manual nor of the danger of operating the auxiliary fuel pump switches on HIGH. He could not recall covering this during his endorsement training on the type. However, his instructor believed that it had been.
The aircraft should have been capable of maintaining height on one engine. The immediate priority following the right engine failure should have been to ensure continued operation of the left engine. The pilot's perception of the urgency of the situation caused him to divert his attention to the restoration of power to the right engine. As a result, his actions exacerbated the problem.
The deficiency in the pilot's knowledge concerning the use of the auxiliary fuel pump HIGH setting, and which action should have had priority, was not identified by the operator's check and training system, as the pilot was employed on a casual basis and had not been checked by the operator in the Cessna 310.
The low cruising altitude chosen by the pilot reduced the amount of time available to trouble-shoot the problem before he had to make a commitment to the landing.
Significant Factors
The following factors were considered relevant to the development of this accident:
1. The pilot's preparation for flight in the Cessna 310 was inadequate, in that his knowledge of the aircraft's systems was insufficient to meet the requirements of a basic abnormal situation.
2. The operator's procedures were deficient in that they did not attempt to identify the pilot's level of system knowledge prior to allocating him to a commercial task.
3. The low cruise altitude reduced the amount of time available for the pilot to trouble-shoot the situation.
On 21 January 2014, a pilot and check pilot were conducting a check flight in a Eurocopter EC120B, registered VH-JYV, at Port Hedland aerodrome, Western Australia.
At about 1600 Western Standard Time (WST), when at about 1,500 ft above ground level, and overhead the runway 32 threshold, the check pilot reduced the throttle to idle and stated that they had a simulated engine failure. The pilot lowered the collective and reduced airspeed, and entered the autorotation, simultaneously commencing a 360° turn. After about 3 seconds, the check pilot observed the ‘GEN’ warning light illuminate. He pushed the generator switch and attempted to restart the generator, without success, and the light remained on. The fuel pressure light then illuminated, and the check pilot selected the electric fuel pump on. The engine turbine continued to wind down and, when about 800 ft AGL, the check pilot called ‘engine failure’ and the oil pressure light illuminated. The pilot continued the autorotation to the ground. The helicopter landed smoothly, completing 360° of rotation, in the undershoot of runway 32, and no damage or injuries were sustained.
The check pilot then conducted a walk-around inspection, finding no damage or evidence of oil or other mechanical fault. As the helicopter was in the runway undershoot and two passenger aircraft were inbound to Port Hedland, the pilot attempted to restart the engine. No warnings were illuminated, and all vehicle and engine multifunction display (VEMD) indications were normal.
The pilot relocated the helicopter to the company base helipad, recorded the engine flameout on the maintenance release and advised the senior base engineer of the incident.
The successful completion of the autorotation highlights the benefits of practice autorotations.
At about 0700 WST on 4 February, 2014 a student pilot departed Merredin Aerodrome, Western Australia for his first solo flight to the training area. He was flying a Grob G-115 aircraft, registered VH-BFW (BFW).
The wind was a light easterly when he departed to the north from runway 10. When the training area practice sequences were completed, he returned to the aerodrome by overflying the airfield at 3500 ft, prior to joining the circuit. He noted the windsock now indicated a left crosswind, but as there was already an aircraft landing on runway 10, he elected to continue and join for this runway.
After completing crosswind, downwind and base legs of the circuit he configured the aircraft for the final approach and landing, including selecting full flap. As he commenced the round out, he realised the aircraft was about 15-20 ft above the ground and too high to continue with the landing, so commenced a go around. He applied full power and a small amount of rudder, but mindful of a previous instruction not to move the elevator forward while close to the ground, did not make any other changes to the aircraft configuration.
The application of power caused the nose of the aircraft to rise. It then encountered a gust of wind, which pushed the nose even higher, with a resultant loss of airspeed. The stall warning started to sound and the aircraft began to sink. The student attempted to recover the aircraft from the stall, but shortly after, the left wing struck the ground. The aircraft bounced back into the air and struck the ground again. The student was not injured but the aircraft was substantially damaged.
As a result of this accident, and to maximise safety at the flying school, management have split the Safety and Quality Manager position into two distinct positions. This will allow each incumbent to work separately, to maximise safety at the flying school. Management have also briefed all flight instructors on the importance of using correct phraseology when briefing and teaching students; as well as the importance of their role to ensure a safe environment for the students.
Section 21 (2) of the Transport Safety Investigation Act 2003 (TSI Act) empowers the Australian Transport Safety Bureau (ATSB) to discontinue an investigation into a transport safety matter at any time. Section 21 (3) of the TSI Act requires the ATSB to publish a statement setting out the reasons for discontinuing an investigation.
On 6 January 2014 at 1808 Coordinated Universal Time (UTC), a GippsAero GA8 Airvan aircraft, registered F-ORPH, was destroyed when it collided with terrain shortly after take off from Félix Eboué Airport, Cayenne, French Guiana. The pilot had returned for maintenance due to an engine problem during an initial take off attempt. The collision occurred after the pilot declared a MAYDAY two minutes after a second take off. One occupant was seriously injured while the other suffered minor injuries.
As the accident occurred in an overseas department of France, the Bureau d'Enquêtes et d'Analyses pour la sécurité de l'aviation civile (BEA) of France is responsible for investigating this accident. In accordance with international convention, the BEA notified the Australian Transport Safety Bureau (ATSB) as Australia is the State of Manufacture of the aircraft. In accordance with clause 5.18 of Annex 13 to the Convention on International Civil Aviation, the ATSB appointed an accredited representative to liaise with the BEA and initiated an investigation under the Australian Transport Safety Investigation Act 2003.
Given the time since the accident took place and that the BEA has not requested any assistance from Australia, the ATSB has decided to discontinue its investigation.
On 26 January 2014, a Boeing 737-300F aircraft, registration ZK-TLC, was conducting freight operations from Brisbane, Qld. to Honiara, Solomon Islands. During the landing on runway 24 at Honiara International Airport, the right main landing gear collapsed, causing substantial damage to the landing gear assembly and the adjacent inboard wing surfaces. The three crew members were uninjured.
The Civil Aviation Authority of the Solomon Islands (CAASI) is responsible for investigating this accident. As part of that investigation, CAASI requested technical assistance from the Australian Transport Safety Bureau (ATSB) in the download and presentation of data and audio from the aircraft's flight data and cockpit voice recorders.
In accordance with clause 5.23 of Annex 13 to the Convention on International Civil Aviation (ICAO Annex 13), the ATSB appointed an Accredited Representative to the investigation, and initiated an external investigation under the provisions of the Australian Transport Safety Investigation Act 2003, providing appropriate protection for the recorded information.
Both flight recorders were received at the ATSB's Canberra laboratories on 5 February 2014, accompanied by a representative of the New Zealand Transport Accident Investigation Commission (TAIC) - representing the State of Registry of the aircraft under Annex 13 protocols. ATSB specialists successfully downloaded the cockpit voice recorder (CVR) and Flight Data Recorder (FDR), using the manufacturers' standard procedures.
Copies of the recorded audio and flight data were subsequently provided to CAASI representatives, together with a selection of graphical plots representing selected parameters from the accident landing at Honiara, and two previous landings at Honiara that were also available from the FDR. The recorder units were returned to the aircraft operator on 7 February 2014.
The CAASI is responsible for releasing a final investigation report on this occurrence. The CAASI may be contacted via the Pacific Aviation Safety Office (PASO).
______________
Released in accordance with section 25 of the Transport Safety Investigation Act 2003.
On 29 January 2014, the pilot prepared PA31 registered VH-OFF for a private flight from Aldinga ALA to Kangaroo Island, South Australia.
To check the fuel quantities, the pilot entered the cockpit, turned on the master switch, and placed the left and right fuel selectors onto the Main tank (inboard) position. The gauge for each tank showed just under half full. He then placed each fuel selector onto the auxiliary (outboard) tank position, where the gauge indicated the right and left auxiliary tanks were each about a quarter full. He did not return the selectors to the main tanks. He estimated that refuelling the main tanks would allow sufficient fuel for the flight with over an hour in reserve. He exited the aircraft while it was refuelled and continued preparing for the flight
The pilot conducted his normal memory pre take-off checks; however on this flight he did not complete his usual final check of reaching down with his right hand to confirm the position of the fuel selectors.
During the take-off, just after rotation both engines began surging, there was a loss of power, and the aircraft yawed from side to side. As there were no warning lights, he retracted the landing gear in an attempt to get the aircraft to attain a positive rate of climb, so he could trouble shoot at altitude.
At about 50 ft, the pilot realised the aircraft was not performing so he selected a suitable landing area. He focussed on maintaining a safe airspeed and landed straight ahead.
The aircraft touched down and slid before coming to rest. The pilot and passenger exited the aircraft.
One of the safety concerns of the ATSB SafetyWatch is fuel mismanagement leading to exhaustion or starvation.
On 7 June 2013, during a routine inspection at Auckland International Airport, New Zealand of a Jetconnect Boeing 737-800 aircraft, registered ZK-ZQG, maintenance personnel discovered damage to the horizontal stabiliser mechanism.
An investigation into the circumstances of this incident is being conducted by the Transport Accident Investigation Commission (TAIC) of New Zealand. The TAIC investigation reference is 13-007/AO-2013-007.
On 29 January 2014 the TAIC requested Australian Transport Safety Bureau (ATSB) assistance in gathering aircraft maintenance information from the Australian-based maintenance provider and certain of its personnel. In accordance with paragraph 5.23 of Annex 13 to the Convention on International Civil Aviation Aircraft Accident and Incident Investigation, the ATSB appointed an accredited representative to the TAIC investigation. To facilitate this support, the ATSB initiated an external investigation under the provisions of the Transport Safety Investigation Act 2003. The information gathered by the ATSB was provided to the TAIC on 28 March 2014.
The TAIC is responsible for, and will administer the release of the final investigation report into this incident. Any enquiries regarding the TAIC investigation should, in the first instance, be directed to:
Deputy Chief Investigator of Accidents Transport Accident Investigation Commission PO Box 10323, The Terrace Wellington 6143, New Zealand.
