Aviation safety means the state of an aviation system or organization in which risks associated with aviation activities, related to, or in direct support of the operation of aircraft, are reduced and controlled to an acceptable level. It encompasses the theory, practice, investigation, and categorization of flight failures, and the prevention of such failures through regulation, education, and training. It can also be applied in the context of campaigns that inform the public as to the safety of air travel.
In 1926 and 1927 there were a total of 24 fatal commercial airline crashes, a further 16 in 1928, and 51 in 1929 (killing 61 people), which remains the worst year on record at an accident rate of about 1 for every 1,000,000 miles (1,600,000 km) flown. Based on the current numbers flying, this would equate to 7,000 fatal incidents per year.
For the ten-year period 2002 to 2011, 0.6 fatal accidents happened per one million flights globally, 0.4 per million hours flown, 22.0 fatalities per one million flights or 12.7 per million hours flown.
From 310 million passengers in 1970, air transport had grown to 3,696 million in 2016, led by 823 million in the United States then 488 million in China. In 2016, there were 19 fatal accidents of civil airliners of more than 14 passengers, resulting in 325 fatalities : the second safest year ever after 2015 with 16 accidents and 2013 with 265 fatalities. For planes heavier than 5.7 t, there were 34.9 million departures and 75 accidents worldwide with 7 of these fatal for 182 fatalities, the lowest since 2013 : 5.21 fatalities per million departures.
In 2017 there were 10 fatal airliner accidents, resulting in 44 occupant fatalities and 35 persons on the ground: the safest year ever for commercial aviation, both by the number of fatal accidents as well as in fatalities.
|Vertical bar chart Accidents per million departures of Aviation safety between 2012 and 2016|
Runway safety represents 36% of accidents, Ground Safety 18% and Loss of Control in-Flight 16%.
|Controlled Flight into Terrain||
|Loss of Control in-Flight||
|Injuries to and/or Incapacitation of Persons||
The main cause is Pilot in Command error. Safety has improved from better aircraft design process, engineering and maintenance, the evolution of navigation aids, and safety protocols and procedures.
There are three main ways in which risk of fatality of a certain mode of travel can be measured: Deaths per billion typical journeys taken, deaths per billion hours traveled, or deaths per billion kilometers traveled. The following table displays these statistics for the United Kingdom 1990–2000. Note that aviation safety does not include the transportation to the airport.
|Type||Deaths per billion|
|Space Shuttle ||104477611.9||441897.6||16.2|
The first two statistics are computed for typical travels for respective forms of transport, so they cannot be used directly to compare risks related to different forms of transport in a particular travel "from A to B". For example: according to statistics, a typical flight from Los Angeles to New York will carry a larger risk factor than a typical car travel from home to office. But a car travel from Los Angeles to New York would not be typical. It would be as large as several dozens of typical car travels, and associated risk will be larger as well. Because the journey would take a much longer time, the overall risk associated by making this journey by car will be higher than making the same journey by air, even if each individual hour of car travel can be less risky than an hour of flight.
It is therefore important to use each statistic in a proper context. When it comes to a question about risks associated with a particular long-range travel from one city to another, the most suitable statistic is the third one, thus giving a reason to name air travel as the safest form of long-range transportation. However, if the availability of an air option makes an otherwise inconvenient journey possible, then this argument loses some of its force.
Aviation industry insurers base their calculations on the deaths per journey statistic while the aviation industry itself generally uses the deaths per kilometre statistic in press releases.
Since 1997 the number of fatal air accidents has been no more than 1 for every 2,000,000,000 person-miles flown (e.g., 100 people flying a plane for 1,000 miles (1,600 km) counts as 100,000 person-miles, making it comparable with methods of transportation with different numbers of passengers, such as one person driving an automobile for 100,000 miles (160,000 km), which is also 100,000 person-miles), and thus one of the safest modes of transportation when measured by distance traveled.
Between 1990–2006, there were 1441 commuter and air taxi crashes in the U.S. of which 373 (26%) were fatal, resulting in 1063 deaths (142 occupational pilot deaths). A disproportionate number of all U.S. aircraft crashes occur in Alaska, largely as a result of severe weather conditions. Alaska accounted for 513 (36%) of the total U.S. crashes.
The number of deaths per passenger-mile on commercial airlines in the United States between 2000 and 2010 was about 0.2 deaths per 10 billion passenger-miles. For driving, the rate was 150 per 10 billion vehicle-miles for 2000 : 750 times higher per mile than for flying in a commercial airplane. There were no fatalities on large scheduled commercial airlines in the United States in 2015 for the sixth year running.
Another aspect of safety is protection from attack currently known as Security (as the ISO definition of safety encompasses non-intentional (safety_safety) and intentional (safety_security) causes of harm or property damage). The terrorist attacks of 2001 are not counted as accidents. However, even if they were counted as accidents they would have added about 2 deaths per 2,000,000,000 person-miles. Two months later, American Airlines Flight 587 crashed in New York City, killing 256 people including 5 on the ground, causing 2001 to show a very high fatality rate. Even so, the rate that year including the attacks (estimated here to be about 4 deaths per 1,000,000,000 person-miles), is safe compared to some other forms of transport when measured by distance traveled.
The first aircraft electrical or electronic device avionics system was Lawrence Sperry’s autopilot, demonstrated in June 1914. The Transcontinental Airway System chain of beacons was built by the Commerce Department in 1923 to guide airmail flights. Gyrocopters were developed by Juan de la Cierva to avoid stall and spin accidents, and for that invented cyclic and collective controls used by helicopters. It first flew on 17 January 1923
During the 1920s, the first laws were passed in the USA to regulate civil aviation, notably the Air Commerce Act of 1926 which required pilots and aircraft to be examined and licensed, for accidents to be properly investigated, and for the establishment of safety rules and navigation aids, under the Aeronautics Branch of the United States Department of Commerce.
One of the first air navigation to be introduced in the USA in the late 1920s was airfield lighting to assist pilots to make landings in poor weather or after dark. The Precision Approach Path Indicator was developed from this in the 1930s, indicating to the pilot the angle of descent to the airfield. This later became adopted internationally through the standards of the International Civil Aviation Organization (ICAO).
Jimmy Doolittle developed Instrument rating and made his first “blind” flight in September 1929. The March 1931 wooden wing failure of a Transcontinental & Western Air Fokker F-10 carrying Knute Rockne, coach of the University of Notre Dame’s football team, comforted all-metal airframes and led to a more formal accident investigation system. On Sept. 4, 1933, a Douglas DC-1 test flight was conducted with one of the two engine shut down during the takeoff run, climbed to 8,000 ft., and completed its flight, proving twin aircraft engine safety. With greater range than lights and weather immunity, radio navigation aids were first used in the 1930s, like the Australian Aeradio stations guiding transport flights, with a light beacon and a modified Lorenz beam transmitter, the German blind-landing equipment preceding the modern instrument landing system (ILS). ILS was first used by a scheduled flight to make a landing in a snowstorm at Pittsburgh, Pennsylvania, in 1938, and a form of ILS was adopted by the ICAO for international use in 1949.
Hard runways were built worldwide for World War II to avoid waves and floating hazards plaguing seaplanes. Developed by the U.S. and introduced during World War II, the LORAN replaced the sailors' less reliable compass and celestial navigation over water and survived until it was replaced by the Global Positioning System.
Following the development of Radar in World War II, it was deployed as a landing aid for civil aviation in the form of ground-controlled approach (GCA) systems then as the airport surveillance radar as an aid to air traffic control in the 1950s. A number of ground based Weather radar systems can detect areas of severe turbulence. A modern Honeywell Intuvue weather system visualizes weather patterns up to 300 miles away.
Distance measuring equipment (DME) in 1948 and VHF omnidirectional range (VOR) stations became the main route navigation means during the 1960s, superseding the low frequency radio ranges and the non-directional beacon (NDB): the ground based VOR stations were often co-located with DME transmitters and the pilots could establish their bearing and distance to the station.
With the arrival of Wide Area Augmentation System (WAAS), Satellite navigation has become accurate enough for altitude as well as positioning use, and is being used increasingly for instrument approaches as well as en-route navigation. However, because the GPS constellation is a single point of failure, on-board Inertial Navigation System (INS) or ground-based navigation aids are still required for backup.
Rockwell Collins reports it costs more to certify than to develop a system, from 75% engineering and 25% certification in past years. It calls for a global harmonization between certifying authorities to avoid redundant engineering and certification tests rather than recognizing the others approval and validation.
In June 2014, the International Air Transport Association said it was working on implementing new measures to track aircraft in flight in real time. A special panel was considering a range of options including the production of equipment especially designed to ensure real-time tracking.
Since pilot error accounts for between one-third and 60% of aviation accidents, advances in automation and technology could replace the aircraft pilots after eliminating the Flight Engineer, but in complex situations with severely degraded systems the problem-solving and judgement capability of humans seems difficult to achieve by automated systems, like the United Airlines Flight 232 or Qantas Flight 32.
While the accident rate is very low, to ensure they do not rise with the air transport growth, learning from consequence-less incidents should develop through blame-free atmosphere and information sharing for better reporting.
Foreign object debris (FOD) includes items left in the aircraft structure during manufacture/repairs, debris on the runway and solids encountered in flight (e.g. hail and dust). Such items can damage engines and other parts of the aircraft. Air France Flight 4590 crashed after hitting a part that had fallen from another aircraft.
A pilot misinformed by a printed document (manual, map, etc.), reacting to a faulty instrument or indicator (in the cockpit or on the ground), or following inaccurate instructions or information from flight or ground control can lose spatial orientation, or make another mistake, and consequently lead to accidents or nearmisses.
Boeing studies showed that airliners are struck by lightning twice per year on average; aircraft withstand typical lightning strikes without damage.
The dangers of more powerful positive lightning were not understood until the destruction of a glider in 1999. It has since been suggested that positive lightning might have caused the crash of Pan Am Flight 214 in 1963. At that time, aircraft were not designed to withstand such strikes because their existence was unknown. The 1985 standard in force in the US at the time of the glider crash, Advisory Circular AC 20-53A, was replaced by Advisory Circular AC 20-53B in 2006. However, it is unclear whether adequate protection against positive lightning was incorporated.
The effects of typical lightning on traditional metal-covered aircraft are well understood and serious damage from a lightning strike on an airplane is rare. The Boeing 787 Dreamliner of which the exterior is carbon-fiber-reinforced polymer received no damage from a lightning strike during testing.
Even a small amount of icing or coarse frost can greatly impair the ability of a wing to develop adequate lift, which is why regulations prohibit ice, snow or even frost on the wings or tail, prior to takeoff. Air Florida Flight 90 crashed on takeoff in 1982, as a result of ice/snow on its wings.
An accumulation of ice during flight can be catastrophic, as evidenced by the loss of control and subsequent crashes of American Eagle Flight 4184 in 1994, and Comair Flight 3272 in 1997. Both aircraft were turboprop airliners, with straight wings, which tend to be more susceptible to inflight ice accumulation, than are swept-wing jet airliners.
Airlines and airports ensure that aircraft are properly de-iced before takeoff whenever the weather involves icing conditions. Modern airliners are designed to prevent ice buildup on wings, engines, and tails (empennage) by either routing heated air from jet engines through the leading edges of the wing, and inlets, or on slower aircraft, by use of inflatable rubber "boots" that expand to break off any accumulated ice.
Airline flight plans require airline dispatch offices to monitor the progress of weather along the routes of their flights, helping the pilots to avoid the worst of inflight icing conditions. Aircraft can also be equipped with an ice detector in order to warn pilots to leave unexpected ice accumulation areas, before the situation becomes critical. Pitot tubes in modern airplanes and helicopters have been provided with the function of "Pitot Heating" to prevent accidents like Air France Flight 447 caused by the pitot tube freezing and giving false readings.
An engine may fail to function because of fuel starvation (e.g. British Airways Flight 38), fuel exhaustion (e.g. Gimli Glider), foreign object damage (e.g. US Airways Flight 1549), mechanical failure due to metal fatigue (e.g. Kegworth air disaster, El Al Flight 1862, China Airlines Flight 358), mechanical failure due to improper maintenance (e.g. American Airlines Flight 191), mechanical failure caused by an original manufacturing defect in the engine (e.g. Qantas Flight 32, United Airlines Flight 232, Delta Air Lines Flight 1288), and pilot error (e.g. Pinnacle Airlines Flight 3701).
In a multi-engine aircraft, failure of a single engine usually results in a precautionary landing being performed, for example landing at a diversion airport instead of continuing to the intended destination. Failure of a second engine (e.g. US Airways Flight 1549) or damage to other aircraft systems caused by an uncontained engine failure (e.g. United Airlines Flight 232) may, if an emergency landing is not possible, result in the aircraft crashing.
Examples of failure of aircraft structures caused by metal fatigue include the de Havilland Comet accidents (1950s) and Aloha Airlines Flight 243 (1988). Now that the subject is better understood, rigorous inspection and nondestructive testing procedures are in place.
Composite materials consist of layers of fibers embedded in a resin matrix. In some cases, especially when subjected to cyclic stress, the layers of the material separate from each other (delaminate) and lose strength. As the failure develops inside the material, nothing is shown on the surface; instrument methods (often ultrasound-based) have to be used to detect such a material failure. In the 1940s several Yakovlev Yak-9s experienced delamination of plywood in their construction.
Devices to warn the pilot when the aircraft's speed is decreasing close to the stall speed include stall warning horns (now standard on virtually all powered aircraft), stick shakers, and voice warnings. Most stalls are a result of the pilot allowing the airspeed to be too slow for the particular weight and configuration at the time. Stall speed is higher when ice or frost has attached to the wings and/or tail stabilizer. The more severe the icing, the higher the stall speed, not only because smooth airflow over the wings becomes increasingly more difficult, but also because of the added weight of the accumulated ice.
Crashes caused by a full stall of the airfoils include:
Safety regulations control aircraft materials and the requirements for automated fire safety systems. Usually these requirements take the form of required tests. The tests measure flammability of materials and toxicity of smoke. When the tests fail, it is on a prototype in an engineering laboratory rather than in an aircraft.
Fire and its toxic smoke have been the cause of accidents. An electrical fire on Air Canada Flight 797 in 1983 caused the deaths of 23 of the 46 passengers, resulting in the introduction of floor level lighting to assist people to evacuate a smoke-filled aircraft. In 1985, a fire on the runway caused the loss of 55 lives, 48 from the effects of incapacitating and subsequently lethal toxic gas and smoke in the British Airtours Flight 28M accident which raised serious concerns relating to survivability – something that had not been studied in such detail. The swift incursion of the fire into the fuselage and the layout of the aircraft impaired passengers' ability to evacuate, with areas such as the forward galley area becoming a bottle-neck for escaping passengers, with some dying very close to the exits. Much research into evacuation and cabin and seating layouts was carried out at Cranfield Institute to try to measure what makes a good evacuation route, which led to the seat layout by Overwing exits being changed by mandate and the examination of evacuation requirements relating to the design of galley areas. The use of smoke hoods or misting systems were also examined although both were rejected.
South African Airways Flight 295 was lost in the Indian Ocean in 1987 after an in-flight fire in the cargo hold could not be suppressed by the crew. The cargo holds of most airliners are now equipped with automated halon fire extinguishing systems to combat a fire that might occur in the baggage holds. In May 1996, ValuJet Flight 592 crashed into the Florida Everglades a few minutes after takeoff because of a fire in the forward cargo hold. All 110 people on board were killed.
At one time, fire fighting foam paths were laid down before an emergency landing, but the practice was considered only marginally effective, and concerns about the depletion of fire fighting capability due to pre-foaming led the United States FAA to withdraw its recommendation in 1987.
One possible cause of fires in airplanes is wiring problems that involve intermittent faults, such as wires with breached insulation touching each other, having water dripping on them, or short circuits. These are difficult to detect once the aircraft is on the ground. However, there are methods, such as spread-spectrum time-domain reflectometry, that can feasibly test live wires on aircraft during flight.
Bird strike is an aviation term for a collision between a bird and an aircraft. Fatal accidents have been caused by both engine failure following bird ingestion and bird strikes breaking cockpit windshields.
Jet engines have to be designed to withstand the ingestion of birds of a specified weight and number and to not lose more than a specified amount of thrust. The weight and numbers of birds that can be ingested without hazarding the safe flight of the aircraft are related to the engine intake area. The hazards of ingesting birds beyond the "designed-for" limit were shown on US Airways Flight 1549 when the aircraft struck Canada geese.
The outcome of an ingestion event and whether it causes an accident, be it on a small fast plane, such as military jet fighters, or a large transport, depends on the number and weight of birds and where they strike the fan blade span or the nose cone. Core damage usually results with impacts near the blade root or on the nose cone.
The highest risk of a bird strike occurs during takeoff and landing in the vicinity of airports, and during low-level flying by military aircraft, crop dusters and helicopters for example. Some airports use active countermeasures, ranging from a person with a shotgun through recorded sounds of predators to employing falconers. Poisonous grass can be planted that is not palatable to birds, nor to insects that attract insectivorous birds. Passive countermeasures involve sensible land-use management, avoiding conditions attracting flocks of birds to the area (e.g. landfills). Another tactic found effective is to let the grass at the airfield grow taller (approximately 12 inches (30 cm)) as some species of birds won't land if they cannot see one another.
Human factors, including pilot error, are another potential set of factors, and currently the factor most commonly found in aviation accidents. Much progress in applying human factors analysis to improving aviation safety was made around the time of World War II by such pioneers as Paul Fitts and Alphonse Chapanis. However, there has been progress in safety throughout the history of aviation, such as the development of the pilot's checklist in 1937. CRM, or Crew Resource Management, is a technique that makes use of the experience and knowledge of the complete flight crew to avoid dependence on just one crew member.
Pilot error and improper communication are often factors in the collision of aircraft. This can take place in the air (1978 Pacific Southwest Airlines Flight 182) (TCAS) or on the ground (1977 Tenerife disaster) (RAAS). The barriers to have an effective communication have internal and external factors. The ability of the flight crew to maintain situation awareness is a critical human factor in air safety. Human factors training is available to general aviation pilots and called single pilot resource management training.
Failure of the pilots to properly monitor the flight instruments caused the crash of Eastern Air Lines Flight 401 in 1972. Controlled flight into terrain (CFIT), and error during take-off and landing can have catastrophic consequences, for example causing the crash of Prinair Flight 191 on landing, also in 1972.
The International Civil Aviation Organization (ICAO) defines fatigue as "A physiological state of reduced mental or physical performance capability resulting from sleep loss or extended wakefulness, circadian phase, or workload." The phenomenon places great risk on the crew and passengers of an airplane because it significantly increases the chance of pilot error. Fatigue is particularly prevalent among pilots because of "unpredictable work hours, long duty periods, circadian disruption, and insufficient sleep". These factors can occur together to produce a combination of sleep deprivation, circadian rhythm effects, and 'time-on task' fatigue. Regulators attempt to mitigate fatigue by limiting the number of hours pilots are allowed to fly over varying periods of time. Experts in aviation fatigue[who?] often find that these methods fall short of their goals.
Rarely, flight crew members are arrested or subject to disciplinary action for being intoxicated on the job. In 1990, three Northwest Airlines crew members were sentenced to jail for flying while drunk. In 2001, Northwest fired a pilot who failed a breathalyzer test after a flight. In July 2002, both pilots of America West Airlines Flight 556 were arrested just before they were scheduled to fly because they had been drinking alcohol. The pilots were fired and the FAA revoked their pilot licenses. At least one fatal airliner accident involving drunk pilots occurred when Aero Flight 311 crashed at Koivulahti, Finland, killing all 25 on board in 1961, which underscores the role that poor human choices can play in air accidents.
Human factors incidents are not limited to errors by pilots. Failure to close a cargo door properly on Turkish Airlines Flight 981 in 1974 caused the loss of the aircraft – however, design of the cargo door latch was also a major factor in the accident. In the case of Japan Airlines Flight 123, improper repair of previous damage led to explosive decompression of the cabin, which in turn destroyed the vertical stabilizer and damaged all four hydraulic systems which powered all the flight controls.
Controlled flight into terrain (CFIT) is a class of accidents in which an aircraft is flown under control into terrain or man-made structures. CFIT accidents typically result from pilot error or of navigational system error. Failure to protect ILS critical areas can also cause CFIT accidents[dubious ]. In December 1995, American Airlines Flight 965 tracked off course while approaching Cali, Colombia and hit a mountainside despite a terrain awareness and warning system (TAWS) terrain warning in the cockpit and desperate pilot attempt to gain altitude after the warning. Crew position awareness and monitoring of navigational systems are essential to the prevention of CFIT accidents. As of February 2008[update], over 40,000 aircraft had enhanced TAWS installed, and they had flown over 800 million hours without a CFIT accident.
Another anti-CFIT tool is the Minimum Safe Altitude Warning (MSAW) system which monitors the altitudes transmitted by aircraft transponders and compares that with the system's defined minimum safe altitudes for a given area. When the system determines the aircraft is lower, or might soon be lower, than the minimum safe altitude, the air traffic controller receives an acoustic and visual warning and then alerts the pilot that the aircraft is too low.
The use of certain electronic equipment is partially or entirely prohibited as it might interfere with aircraft operation, such as causing compass deviations. Use of some types of personal electronic devices is prohibited when an aircraft is below 10,000', taking off, or landing. Use of a mobile phone is prohibited on most flights because in-flight usage creates problems with ground-based cells.
Various ground support equipment operate in close proximity to the fuselage and wings to service the aircraft and occasionally cause accidental damage in the form of scratches in the paint or small dents in the skin. However, because aircraft structures (including the outer skin) play such a critical role in the safe operation of a flight, all damage is inspected, measured, and possibly tested to ensure that any damage is within safe tolerances.
An example problem was the depressurization incident on Alaska Airlines Flight 536 in 2005. During ground services a baggage handler hit the side of the aircraft with a tug towing a train of baggage carts. This damaged the metal skin of the aircraft. This damage was not reported and the plane departed. Climbing through 26,000 feet (7,900 m) the damaged section of the skin gave way under the difference in pressure between the inside of the aircraft and the outside air. The cabin depressurized explosively necessitating a rapid descent to denser (breathable) air and an emergency landing. Post landing examination of the fuselage revealed a 12 in (30 cm) hole on the right side of the airplane.
Plumes of volcanic ash near active volcanoes can damage propellers, engines and cockpit windows.  In 1982, British Airways Flight 9 flew through an ash cloud and temporarily lost power from all four engines. The plane was badly damaged, with all the leading edges being scratched. The front windscreens had been so badly "sand" blasted by the ash that they could not be used to land the aircraft.
Prior to 2010 the general approach taken by airspace regulators was that if the ash concentration rose above zero, then the airspace was considered unsafe and was consequently closed. Volcanic Ash Advisory Centers enable liaison between meteorologists, volcanologists, and the aviation industry.
Types of runway safety incidents include:
Aircrew are normally trained to handle hijack situations. Since the September 11, 2001 attacks, stricter airport and airline security measures are in place to prevent terrorism, such as security checkpoints and locking the cockpit doors during flight.
In the United States, the Federal Flight Deck Officer program is run by the Federal Air Marshal Service, with the aim of training active and licensed airline pilots to carry weapons and defend their aircraft against criminal activity and terrorism. Upon completion of government training, selected pilots enter a covert law enforcement and counter-terrorism service. Their jurisdiction is normally limited to a flight deck or a cabin of a commercial airliner or a cargo aircraft they operate while on duty.
Although most air crews are screened for psychological fitness, some have taken suicidal actions. In the case of EgyptAir Flight 990, it appears that the first officer deliberately crashed into the Atlantic Ocean while the captain was away from his station in 1999 off Nantucket, Massachusetts.
In 1982, Japan Airlines Flight 350 crashed while on approach to the Tokyo Haneda Airport, killing 24 of the 174 on board. The official investigation found the mentally ill captain had attempted suicide by placing the inboard engines into reverse thrust, while the aircraft was close to the runway. The first officer did not have enough time to countermand before the aircraft stalled and crashed.
In 1997, SilkAir Flight 185 suddenly went into a high dive from its cruising altitude. The speed of the dive was so high that the aircraft began to break apart before it finally crashed near Palembang, Sumatra. After three years of investigation, the Indonesian authorities declared that the cause of the accident could not be determined. However, the US NTSB concluded that deliberate suicide by the captain was the only reasonable explanation.
In 2015, on March 24, Germanwings Flight 9525 (an Airbus A320-200) crashed 100 kilometres (62 mi) northwest of Nice, in the French Alps, after a constant descent that began one minute after the last routine contact with air traffic control and shortly after the aircraft had reached its assigned cruise altitude. All 144 passengers and six crew members were killed. The crash was intentionally caused by the co-pilot, Andreas Lubitz. Having been declared "unfit to work" without telling his employer, Lubitz reported for duty, and during the flight locked the pilot out of the cabin. In response to the incident and the circumstances of Lubitz's involvement, aviation authorities in Canada, New Zealand, Germany and Australia implemented new regulations that require two authorized personnel to be present in the cockpit at all times. Three days after the incident the European Aviation Safety Agency issued a temporary recommendation for airlines to ensure that at least two crew members, including at least one pilot, are in the cockpit at all times of the flight. Several airlines announced they had already adopted similar policies voluntarily.
Passenger planes have rarely been attacked in both peacetime and war. Examples:
Airport design and location can have a large impact on aviation safety, especially since some airports such as Chicago Midway International Airport were originally built for propeller planes and many airports are in congested areas where it is difficult to meet newer safety standards. For instance, the FAA issued rules in 1999 calling for a runway safety area, usually extending 500 feet (150 m) to each side and 1,000 feet (300 m) beyond the end of a runway. This is intended to cover ninety percent of the cases of an aircraft leaving the runway by providing a buffer space free of obstacles. Many older airports do not meet this standard. One method of substituting for the 1,000 feet (300 m) at the end of a runway for airports in congested areas is to install an engineered materials arrestor system (EMAS). These systems are usually made of a lightweight, crushable concrete that absorbs the energy of the aircraft to bring it to a rapid stop. As of 2008[update], they have stopped three aircraft at JFK Airport.
According to a 2000 report by the National Transportation Safety Board, emergency aircraft evacuations happen about once every 11 days in the U.S. While some situations are extremely dire, such as when the plane is on fire, in many cases the greatest challenge for passengers can be the use of the evacuation slide. In a Time article on the subject, Amanda Ripley reported that when a new supersized Airbus A380 underwent mandatory evacuation tests in 2006, 33 of the 873 evacuating volunteers got hurt. While the evacuation was considered a success, one volunteer suffered a broken leg, while the remaining 32 received slide burns. Such accidents are common. In her article, Ripley provided tips on how to make it down the airplane slide without injury.
Air safety investigators are trained and authorized to investigate aviation accidents and incidents: research, analyse, and report their conclusions. They may be specialized in aircraft structures, air traffic control, flight recorders or human factors. They can be employed by government organizations responsible for aviation safety, manufacturers or unions.
The safety improvement initiatives are aviation safety partnerships between regulators, manufacturers, operators, professional unions, research organisations, and international aviation organisations to further enhance safety. Some major safety initiatives worldwide are: