FAA Orders Checks on 9,300 Boeing 737s
The U.S. Federal Aviation Administration has ordered checks on 9,300 Boeing 737 aircraft due to a potential issue with a switch. The directive highlights the role of robust systems engineering and configuration management in preventing potential fleet-wide hardware or software faults. The checks are intended to mitigate any risks associated with the possible switch problem.
- The specific directive pertains to cabin altitude pressure switches, with an Airworthiness Directive (AD) issued after an operator reported that *both* switches failed during tests on three separate 737 models, indicating a potential systemic issue rather than isolated hardware failures. - The failure rate of the pressure switches was discovered to be significantly higher than initial estimates, prompting the FAA to mandate inspections within 2,000 flight hours of the previous check, highlighting the role of post-deployment data collection in revising system reliability models. - This issue underscores the criticality of hardware/software integration testing as defined in standards like DO-178C; the software's response to erroneous or failed hardware inputs is as critical as its logic under normal operating conditions. - The 737's electrical system architecture is designed for redundancy, with multiple power sources (IDGs, APU) and distribution buses to prevent single points of failure. However, a latent flaw in a common component like a switch can compromise this redundancy, a risk that safety assessments must account for. - This is not an isolated event; a 2018 FAA bulletin had previously flagged an issue with fuel control switches on some 737s being installed with their locking features disengaged, a failure in configuration management that could lead to inadvertent switch movement. - The incident echoes the design flaw in the 737 MAX's Maneuvering Characteristics Augmentation System (MCAS), which relied on a single Angle of Attack (AoA) sensor, demonstrating a critical vulnerability to a single point of failure in a flight-critical system. - In a separate emergency AD for 737s returning from pandemic-related storage, the FAA mandated checks for corrosion in engine bleed air valves that could cause them to stick open, potentially leading to a dual-engine power loss—another example of a single underlying cause threatening redundant systems.
