1994 Mull of Kintyre Chinook crash: Difference between revisions
Citation bot (talk | contribs) Add: authors 1-4. Removed parameters. Some additions/deletions were parameter name changes. | Use this bot. Report bugs. | Suggested by Jay8g | #UCB_toolbar |
→FADEC problems: citation needed |
||
Line 112: | Line 112: | ||
Tests on the Chinooks performed by the MOD at [[MoD Boscombe Down|Boscombe Down]] in 1994 reported the FADEC software to be "unverifiable and ... therefore unsuitable for its purpose".<ref name='select2002'/> In June 1994, the MoD test pilots at Boscombe Down had refused to fly the Chinook HC.2 until the engines, engine control systems and [[FADEC]] software had undergone revision.<ref name="McMullon, D 1998"/> In October 2001, ''[[Computer Weekly]]'' reported that three fellows of the [[Royal Aeronautical Society]] had said that issues with either control or FADEC systems could have led to the crash.<ref>{{cite web |first = Tony |last = Collins |url = http://www.computerweekly.com/Articles/2001/10/25/183320/Top-Chinook-test-pilot-reveals-unease-over-engine-software.htm |title = Top Chinook test pilot reveals unease over engine software |publisher = Computer Weekly |date = 25 October 2001 |access-date = 11 September 2011}}</ref> |
Tests on the Chinooks performed by the MOD at [[MoD Boscombe Down|Boscombe Down]] in 1994 reported the FADEC software to be "unverifiable and ... therefore unsuitable for its purpose".<ref name='select2002'/> In June 1994, the MoD test pilots at Boscombe Down had refused to fly the Chinook HC.2 until the engines, engine control systems and [[FADEC]] software had undergone revision.<ref name="McMullon, D 1998"/> In October 2001, ''[[Computer Weekly]]'' reported that three fellows of the [[Royal Aeronautical Society]] had said that issues with either control or FADEC systems could have led to the crash.<ref>{{cite web |first = Tony |last = Collins |url = http://www.computerweekly.com/Articles/2001/10/25/183320/Top-Chinook-test-pilot-reveals-unease-over-engine-software.htm |title = Top Chinook test pilot reveals unease over engine software |publisher = Computer Weekly |date = 25 October 2001 |access-date = 11 September 2011}}</ref> |
||
The main submission to [[Alexander Philip, Lord Philip|Lord Philip]] (see above) revealed that the FADEC Safety Critical software did not have a Certificate of Design, and was therefore not cleared to be fitted to Chinook HC2. It further revealed that [[John Spellar]] MP had been wrong when claiming the software was not Safety Critical, providing the original policy document governing this definition to Lord Philip. |
The main submission to [[Alexander Philip, Lord Philip|Lord Philip]] (see above) revealed that the FADEC Safety Critical software did not have a Certificate of Design, and was therefore not cleared to be fitted to Chinook HC2. It further revealed that [[John Spellar]] MP had been wrong when claiming the software was not Safety Critical, providing the original policy document governing this definition to Lord Philip.{{fact}} |
||
===Other factors=== |
===Other factors=== |
Revision as of 20:56, 2 June 2024
![]() ZD576, the aircraft involved in the accident, in 1987 | |
Accident | |
---|---|
Date | 2 June 1994 |
Summary | Crashed in fog; cause is disputed.
• Pilot error leading to CFIT (RAF) • Mechanical failure (FADEC software error) (Independent inquiry) |
Site | Mull of Kintyre, Scotland 55°18′49″N 5°47′42″W / 55.31361°N 5.79500°W |
Aircraft | |
Aircraft type | Boeing Chinook |
Operator | Royal Air Force |
Call sign | F4J40 |
Registration | ZD576 |
Flight origin | RAF Aldergrove (near Belfast, Northern Ireland) |
Destination | Inverness, Scotland |
Passengers | 25 |
Crew | 4 |
Fatalities | 29 (all) |
Survivors | 0 |
On 2 June 1994, a Chinook helicopter of the Royal Air Force (RAF), serial number ZD576, crashed on the Mull of Kintyre, Scotland, in foggy conditions. The crash resulted in the deaths of all twenty-five passengers and four crew on board. Among the passengers were almost all the United Kingdom's senior Northern Ireland intelligence experts. The accident is the RAF's fourth-worst peacetime disaster.[1][2][3]
In 1995, an RAF board of inquiry ruled that it was impossible to establish the exact cause of the accident. This ruling was subsequently overturned by two senior reviewing officers, who stated that the pilots were guilty of gross negligence for flying too fast and too low in thick fog. This finding proved to be controversial, especially in light of irregularities and technical issues surrounding the then-new Chinook HC.2 variant which were uncovered, and in light of technical problems with the specific airframe involved in the weeks leading up to the crash. A Parliamentary inquiry conducted in 2001 found the previous verdict of gross negligence on the part of the crew to be 'unjustified'. In 2011, an independent review of the crash cleared the crew of negligence and accepted that the RAF had falsely declared compliance with regulations in relation to the aircraft's authority to fly.
Incident
Crash
Earlier on 2 June 1994, the helicopter and crew had carried out a trooping flight, as it was considered to be safer for British troops to fly around in certain parts of Northern Ireland at the time due to the threat posed by Provisional IRA attacks. This mission was safely accomplished and they returned to RAF Aldergrove (outside Belfast, Northern Ireland) at 15:20. They took off for Inverness at 17:42. Weather en route was forecast to be clear except in the Mull of Kintyre area. The crew made contact with military air traffic control (ATC) in Scotland at 17:55.[4]
Around 18:00, Chinook ZD576 flew into a hillside in dense fog. The pilots were Flight Lieutenants Jonathan Tapper, 28, and Richard Cook, 30, both United Kingdom Special Forces pilots. There were two other crew. The helicopter was carrying 25 British intelligence experts from MI5, the Royal Ulster Constabulary and the British Army, from Aldergrove to attend a conference at Fort George (near Inverness) in Scotland. At the time of the accident, Air Chief Marshal Sir William Wratten called it "the largest peacetime tragedy the RAF had suffered".[5]
The initial point of impact was 810 feet [250 m] above mean sea level and about 500 metres east of the lighthouse, but the bulk of the aircraft remained airborne for a further 187 metres horizontally north and 90 feet [27 m] vertically before coming to rest in pieces. Fire broke out immediately. All those on board sustained injuries from which they must have died almost instantaneously. The points of impact were shrouded in local cloud with visibility reduced to a few metres, which prevented those witnesses who had heard the aircraft from seeing it.[6]
In the immediate aftermath of the accident, one commentator stated that the loss of so many top level Northern Ireland intelligence officers in one stroke was a huge blow to the John Major government, "temporarily confounding" its campaign against the IRA.[7] That the crash killed so many British intelligence experts, without any witnesses in the foggy conditions, led to considerable speculation and conspiracy theories being devised regarding the potential of a cover-up. Among these were accusations that wake turbulence from a top-secret hypersonic US aircraft had been responsible for the crash, while another postulated that it was a deliberate assassination of the intelligence operatives on board in connection with the then on-going Northern Ireland peace process.[8][9][10]
Initial inquiry
In 1995, an RAF board of inquiry that investigated the incident determined that there was no conclusive evidence to determine the cause of the crash. An immediate suspicion that the helicopter could have been shot down by the Provisional IRA, with their known Strela 2 surface-to-air missile capability, had been quickly ruled out by investigators. A review of the evidence, carried out by two Air Chief Marshals of the Royal Air Force, found the two pilots to have been guilty of gross negligence by flying too fast and too low in thick fog.[11] Both the incident and the first inquiry have been subject to controversy and dispute, primarily as to whether the crash had been caused by pilot error or by a mechanical failure. The 2011 Parliamentary report found the reviewing officers to have failed to correctly adhere to the standard of proof of "absolutely no doubt" in deciding the question of negligence.[12]
Subsequent inquiries
The first inquiry and its conclusion proved to be highly controversial. A subsequent fatal accident inquiry (1996), House of Commons Defence Select Committee report (2000) and Commons Public Accounts Committee report have all either left open the question of blame or challenged the original conclusion. The campaign for a new inquiry was supported by the families of the pilots, and senior politicians, including former prime minister John Major and former defence secretary Malcolm Rifkind.[5][13] The new inquiry took place in the House of Lords from September to November 2001. The findings were published on 31 January 2002, and found that the verdicts of gross negligence on the two pilots were unjustified.[14]
In December 2007, Defence Secretary Des Browne agreed to conduct a fresh report into the crash.[15][16] On 8 December 2008, Secretary of State for Defence John Hutton announced that "no new evidence" had been presented and the verdicts of gross negligence against the flight crew would stand.[17] On 4 January 2010, doubts of the official explanation were raised again with the discovery that an internal MOD document, which had been written nine months prior to the incident, described the engine software as 'positively dangerous' as it could lead to failure of both engines.[18][19] The 2011 Review concluded that criticism that the original board had not paid enough attention to maintenance and technical issues was unjustified.[20]
On 13 July 2011, the Defence Secretary Liam Fox outlined to MPs the findings of an independent review into the 1994 crash, which found that the two pilots who were blamed for the crash had been cleared of gross negligence.[21] In doing so, the Government accepted Lord Philip's confirmation that the Controller Aircraft Release was "mandated" upon the RAF. Issued in November 1993, the Controller Aircraft stated that the entire navigation and communications systems used on the Chinook HC2 were not to be relied upon in any way by the aircrew, and therefore it had no legitimate clearance to fly. Knowledge of this had been withheld from the pilots; by withholding this when issuing their Release to Service (RTS) (the authority to fly), the RAF had made a false declaration of compliance with regulations. In December 2012, the Minister for the Armed Forces, Andrew Robathan, confirmed such a false declaration did not constitute "wrongdoing", despite it leading directly to deaths of servicemen.[citation needed]
ZD576's service history
![](http://upload.wikimedia.org/wikipedia/commons/thumb/e/e2/Chinook.hc2.za677.arp.jpg/220px-Chinook.hc2.za677.arp.jpg)
Boeing CH-47C Chinook, construction number B-868, RAF serial number ZD576 was originally delivered to the Royal Air Force as a Chinook HC.1 on 22 December 1984.[22]
It was re-delivered to No 7 Squadron as a Chinook HC.2 on 21 April 1994. On arrival at RAF Odiham, its No. 1 engine had to be replaced due to a FADEC incident.[clarification needed] Five days later, that same engine had to be replaced due to a second FADEC incident. On 10 May 1994, a post-flight fault inspection revealed a dislocated mounting bracket had caused the collective lever to have restricted and restrictive movement; this resulted in a "Serious Fault Signal"[23] being sent as a warning to other UK Chinook operating units. On 17 May 1994, emergency power warning lights flashed multiple times and the No.1 engine was again replaced. On 25 May 1994, a serious incident occurred which had indicated the imminent failure of the No.2 engine.[22][24]
On 31 May 1994, two days before the accident, two Chinook HC.1s were withdrawn from RAF Aldergrove and replaced by a single HC.2, ZD576.[25]
Possible causes
Pilot error
Aviation safety author Andrew Brookes wrote that the true cause will never be known, but that pilot error induced by fatigue is likely to have played a part; the crew had been on flight duty for 9 hours and 15 minutes, including 6 hours flying time, before they took off on the crash flight. Had they made it to Fort George, they would have needed special permission from a senior officer to fly back to Aldergrove.[26]
"There is no evidence of any significant change of course and none of the decision, if any, that the crew made. When the crew released the computer from its fix on the Mull, the pilots knew how close to the Mull they were and, given the deteriorating weather and the strict visibility requirements under visual flight rules they should by that time already have chosen an alternative course. As they had not done so, they could, and, under the rules, should have either turned away from the Mull immediately or slowed down and climbed to a safe altitude."
Baroness Symons, speaking on behalf of the Government in the House of Lords in 2000.[27]
In his book, Steuart Campbell suggested that two errors by the pilots; failure to climb to a safe altitude upon entering cloud, and a navigational error made in the poor visibility (mistaking a fog signal station for a lighthouse), together caused the crash.[28] The Board of Inquiry had identified that several factors may have sufficiently distracted the crew from turning away from the Mull, and upon entering cloud, failed to carry out the correct procedure for an emergency climb in a timely manner.[29]
RAF Visual Flight Rules (VFR) require the crew to have a minimum visibility of 5.5 kilometres above 140 knots (260 km/h), or minimum visibility of one kilometre travelling below 140 knots;[30] if VFR conditions are lost an emergency climb must be immediately flown.[31] Nine out of ten witnesses interviewed in the inquiry reported visibility at ground level in the fog as being as low as ten to one hundred metres at the time of the crash; in-flight visibility may have been more or less than this. The tenth witness, a yachtsman who was offshore, reported it as being one mile (1.6 km), though he is regarded as a less reliable witness as he changed his testimony.[32]
If witness accounts of visibility are correct, the pilots should have transferred to Instrument Flight Rules,[33] which would require the pilots to slow the aircraft and climb to a safe altitude at the best climbing speed.[34] In the area around the Mull of Kintyre, the safe altitude would be 2,400 feet (730 m) above sea level, 1,000 feet (300 m) above the highest point of the terrain.[35] The height of the crash site of ZD576 was 810 feet (250 m), 1,600 feet (490 m) below the minimum safe level.[6] The Board of Inquiry into the accident recommended formal procedures for transition from Visual Flight Rules to Instrument Flight Rules in mid-flight be developed, and the RAF has since integrated such practices into standard pilot training.[36]
Regarding negligence on the part of the pilots, the 2011 Report said "the possibility that there had been gross negligence could not be ruled out, but there were many grounds for doubt and the pilots were entitled to the benefit of it... [T]he Reviewing Officers had failed to take account of the high calibre of two Special Forces pilots who had no reputation for recklessness."[37]
FADEC problems
"The chances are that if software caused any of these accidents, we would never know. This is because when software fails, or it contains coding or design flaws... only the manufacturer will understand its system well enough to identify any flaws... Step forward the vulnerable equipment operators: the pilots... who cannot prove their innocence. That is why the loss of Chinook ZD576 is so much more than a helicopter crash. To accept the verdict against the pilots is to accept that it is reasonable to blame the operators if the cause of a disaster is not known."
Karl Schneider, Editor of Computer Weekly, 2002[38]
At the time of the crash, new FADEC (Full Authority Digital Engine Control) equipment was being integrated into all RAF Chinooks, as part of an upgrade from the Chinook HC.1 standard to the newer Chinook HC.2 variant. The Ministry of Defence was given a £3 million settlement from Textron, the manufacturers of the system, after a ground test of the FADEC systems on a Chinook in 1989 resulted in severe airframe damage. Contractors, including Textron, had agreed that FADEC had been the cause of the 1989 incident and that the system needed to be redesigned.[39]
The committee investigating the crash were satisfied that the destructive error in 1989 was not relevant to the 1994 crash.[32] Information provided from Boeing to the investigation led to the following conclusion regarding FADEC performance: "Data from the Digital Electronics Unit (DECU) of the second engine showed no evidence of torque or temperature exceedance and the matched power conditions of the engines post-impact indicate that there was no sustained emergency power demand. No other evidence indicated any FADEC or engine faults."[40] It was expected that in a FADEC engine runaway, engine power would become asynchronous and mismatched. The investigation found the engines at the crash to have matched settings, decreasing the likelihood of a FADEC malfunction being involved.[41]
EDS-SCICON was given the task of independently evaluating the software on the Chinook HC.2 in 1993. According to the House of Commons report: "After examining only 18 per cent of the code they found 486 anomalies and stopped the review... intermittent engine failure captions were being regularly experienced by aircrew of Chinook Mk 2s and there were instances of uncommanded run-up and run-down of the engines and undemanded flight control movements".[6]
Tests on the Chinooks performed by the MOD at Boscombe Down in 1994 reported the FADEC software to be "unverifiable and ... therefore unsuitable for its purpose".[6] In June 1994, the MoD test pilots at Boscombe Down had refused to fly the Chinook HC.2 until the engines, engine control systems and FADEC software had undergone revision.[24] In October 2001, Computer Weekly reported that three fellows of the Royal Aeronautical Society had said that issues with either control or FADEC systems could have led to the crash.[42]
The main submission to Lord Philip (see above) revealed that the FADEC Safety Critical software did not have a Certificate of Design, and was therefore not cleared to be fitted to Chinook HC2. It further revealed that John Spellar MP had been wrong when claiming the software was not Safety Critical, providing the original policy document governing this definition to Lord Philip.[citation needed]
Other factors
The onboard Tactical Air Navigation System, which retained only the last measured altitude, gave an altitude reading of 468 feet (143 m).[43] The investigation observed that it was possible for some of the avionics systems to interfere with the Chinook's VHF radio, potentially disrupting communications.[44]
Flight data recorders and cockpit voice recorders were not fitted to all RAF Chinooks at the time of the accident. The absence of these data greatly reduced the amount and quality of data available to subsequent investigations.[45] Information on speed and height were derived from the position of cockpit dials in the wreckage and the condition of the wreckage. During 1994, the RAF had begun to fit these recording devices across the Chinook HC.2 fleet before the accident; this process was completed in 2002.[46]
The aircraft had not been classified as airworthy. It was mandated upon the RAF that it was "not to be relied upon in any way".[47]
References
Citations
- ^ "31 Killed in R.A.F. Transport". The Times. London, England. 16 October 1945. p. 4; Issue 50274.
- ^ "41 Killed on Parachute Training Flight". The Times. No. 56367. London. 7 July 1965. col C, p. 10.
- ^ Peter Nichols (10 November 1971). "RAF Plane crashed in Italy, killing 52". The Times. No. 58321. London. p. 1.
- ^ Brookes 1996, p. 58
- ^ a b "'Clear Chinook two' ex-PM urges". BBC News. 13 May 2004. Retrieved 11 September 2011.
- ^ a b c d "Select Committee on Chinook ZD 576, Part 3: Factual Background." UK Parliament, 2002; retrieved: 3 November 2006.
- ^ "Q&A: Chinook crash inquiry". BBC News. 3 June 2004. Retrieved 3 November 2006.
- ^ O'Farrell, John (14 June 2000). "Dark rumours surround Chinook crash". The Guardian. Retrieved 15 August 2011.
dark rumours abound. The loss of ten senior RUC intelligence officers, nine army intelligence officers and six MI5 officers on the eve of the 1994 IRA cessation was, for some, propitious. ... Some loyalists believe that the intelligence officers were deliberately "taken out" for "knowing too much" about the people the government would have to deal with in a post-conflict Ulster.
- ^ Thomas, Andrew (10 July 2000). "Top Secret US plane 'caused Chinook crash'". The Register. Archived from the original on 13 September 2005. Retrieved 19 October 2005.
a third explanation for the crash has now come to light: that a top secret hypersonic US plane, codenamed Aurora and which is reportedly capable of flying at up to 20 times the speed of sound, created a massive jet wake into which the helicopter flew, causing the crew to lose control.
- ^ McDonald, Henry (3 June 2014). "Mull of Kintyre helicopter crash: Why only a formal apology and fresh investigation can begin to assuage this wrong". Belfast Telegraph.
Conspiracy theories from the right, preceding the wilder conspiracies of the 9/11 'Truthers', have tried to suggest that the crash was deliberate; that the Government somehow needed to weed out a number of hardline securocrats in the intelligence community who were opposed to doing a peace deal with the IRA
- ^ "Campaigners want Chinook review". BBC News. 9 October 2008. Retrieved 20 April 2010.
- ^ House of Commons 2011, p. 9.
- ^ Lydall, Ross (4 January 2010). "Sir Malcolm Rifkind: Wrong to blame crash on Chinook crew". London Evening Standard. Archived from the original on 12 December 2010. Retrieved 11 September 2011.
- ^ "Chinook ZD 576 – Report." UK Parliament, 2002; retrieved 3 November 2006.
- ^ Press Association (6 December 2007). "Chinook crash report to be examined". The Guardian. London. Archived from the original on 8 January 2008.
- ^ Lister, Sam (16 January 2008). "MoD to consider new Chinook claims". Belfast Telegraph. Archived from the original on 20 January 2008. Retrieved 17 January 2008.
- ^ "Gross negligence verdicts to stand". BBC News. 8 December 2008. Archived from the original on 10 December 2008. Retrieved 8 December 2008.
- ^ "Fresh doubts over Chinook crash". BBC News. 4 January 2010. Retrieved 20 April 2010.
- ^ Lewis, Page. "Please shut up about the Mull of Kintyre Chinook crash." The Register, 4 January 2010.
- ^ House of Commons 2011, p. 8.
- ^ "Apology as Mull of Kintyre Chinook crash pilots cleared". BBC News. 13 July 2011. Retrieved 13 April 2011.
- ^ a b "Chinook crash – timeline". The Daily Telegraph. London. 6 April 2009. Retrieved 11 September 2011.
- ^ "THE DEFENCE LOGISTICS SUPPORT CHAIN MANUAL JSP 886 VOLUME 3 SUPPLY CHAIN MANAGEMENT PART 315 FAULT REPORTING – SUPPLY PROCEDURES." gov.uk, 1 July 2008.
- ^ a b McMullon 1998, [page needed]
- ^ House of Commons 2011, p. 16.
- ^ Brookes 1996, p. 59
- ^ "Chinook Helicopter ZD576: Flight Plan". House of Lords. 12 July 2000. Archived from the original on 24 March 2006. Retrieved 9 February 2006.
- ^ Campbell 2004, p. 197.
- ^ House of Commons 2011, p. 24.
- ^ House of Commons 2011, p. 78.
- ^ House of Lords 2002, p. 4.
- ^ a b House of Lords 2002, p. 7.
- ^ House of Lords 2002, p. 10.
- ^ House of Commons 2011, pp. 78–79.
- ^ House of Commons 2011, p. 76.
- ^ House of Commons 2011, p. 72.
- ^ House of Commons 2011, p. 69.
- ^ "Clear and present danger: why CW refused to give up on Chinook". Computer Weekly. 7 February 2002. Retrieved 11 September 2011.
- ^ "Defence Minister misleads MPs over Chinook accident". Computer Weekly. 29 June 2000. Retrieved 11 September 2011.
- ^ House of Lords 2002, p. 23.
- ^ "Mull of Kintyre". House of Lords. 12 July 2000. Retrieved 11 September 2011.
- ^ Collins, Tony (25 October 2001). "Top Chinook test pilot reveals unease over engine software". Computer Weekly. Retrieved 11 September 2011.
- ^ House of Commons 2011, p. 22.
- ^ House of Commons 2011, p. 71.
- ^ House of Commons 2011, pp. 7–8.
- ^ House of Commons 2011, pp. 71, 84–85.
- ^ Hill, David. Their Greatest Disgrace – The Campaign to Clear the Chinook ZD576 Pilots. Nemesis Books, 2016. ISBN 1-52620-446-0.
Bibliography
- Brookes, Andrew (1996). Flights to Disaster. Ian Allan. ISBN 0-7110-2475-8.
- Campbell, Steuart (2004). Chinook Crash. Pen & Sword Aviation. ISBN 978-1-84415-074-8.
- Philip, Alexander; Forsyth, Michael; Liddell, Helen; Bruce, Malcolm (13 July 2011). The Mull of Kintyre Review (PDF). The Stationery Office. ISBN 978-0-1029-5237-7. Archived from the original (PDF) on 31 May 2016. Retrieved 13 July 2011.
- "Government's Response to the Chinook ZD 567 Report" (PDF). Ministry of Defense. House of Lords. 22 July 2002. Archived from the original (PDF) on 18 October 2012. Retrieved 27 October 2011.
- Hill, David (2016). Their Greatest Disgrace. Nemesis Books. ISBN 978-1-5262-0446-2.
- Holland, Jack; Susan Phoenix (1996). Phoenix: Policing the Shadows. Hodder & Stoughton. ISBN 978-0-3406-6634-0.
- McMullon, David (1999). Chinook!: The Special Forces Flight in War and Peace. Simon & Schuster. ISBN 978-0-671-01599-2.
External links
- BBC timeline of events
- Simon Rogerson's article, from IMIS Journal
- Computer Weekly publications
- House of Lords select committee publications
- The records of the House of Lords Committee to Review Chinook ZD576 Crash are held by the UK Parliamentary Archives
- 1994 disasters in the United Kingdom
- 1994 in Northern Ireland
- 1994 in Scotland
- Aviation accidents and incidents in Scotland
- Aviation accidents and incidents involving controlled flight into terrain
- Aviation accidents and incidents in 1994
- Accidents and incidents involving Royal Air Force aircraft
- Accidents and incidents involving the Boeing Chinook
- Aviation accidents and incidents involving fog
- Fatal accident inquiries
- June 1994 events in the United Kingdom
- Software bugs