- Sidney Dekker - International System Safety Society Sidney Dekker UNCLASSIFIED UNCLASSIFIED....

13
12/04/2013 1 “Accidents are associated with normal people doing normal work in normal organizations making incremental changes to the system over time- Sidney Dekker UNCLASSIFIED UNCLASSIFIED

Transcript of - Sidney Dekker - International System Safety Society Sidney Dekker UNCLASSIFIED UNCLASSIFIED....

12/04/2013

1

“Accidents are associated with normal people

doing normal work in normal organizations

making incremental changes to the system

over time”- Sidney Dekker

UNCLASSIFIED

UNCLASSIFIED

12/04/2013

2

Lessons Learnt from the

Capsizing of SS Eastland

Rodney Tan Kheng EngSenior EngrDSTA

UNCLASSIFIED

UNCLASSIFIED

Jul 1915

844 killed out of 2,752

4

12/04/2013

3

Initial design consideration (1): Speed

5UNCLASSIFIED

South Haven,

Michigan

Chicago,

Illinois

Overnight fresh fruits run from “farm” to “market” over

Lake Michigan

6UNCLASSIFIED

12/04/2013

4

Initial design consideration (2):

Shallow draft

7UNCLASSIFIED

South

HavenShallow waters off

South Haven, Michigan

8UNCLASSIFIED

12/04/2013

5

1. Ship underperformed: 19 mph vs 22 mph

2. New propulsion system installed

� Weight increased

� Draft increased

� Ship machinery rearranged to reduce draft

Speed Queen of the Lakes

1903: 1st year

9UNCLASSIFIED

1. Modifications:

� 1904: More passengers

-> additional life boats

� 1904: Reduced no. of overnight trips

-> Removed 49 cabins

� 1909: No more overnight trip

->Removed 39 cabins

� Early 1915: Upgrades

e.g. re-arranged ship compartments &

replaced rotten decking with concrete

1904 to 1915

10UNCLASSIFIED

12/04/2013

6

2. Safety Record:

� Listing occurred over the years (top-heavy)

-> Ship crew has SOP to correct listing

1904 to 1915

11

Ballast water in

Starboard Port

UNCLASSIFIED

1912

16 lifeboats for 1,200 out of

2,200 passengers

“Life-boats for all”12UNCLASSIFIED

12/04/2013

7

1915

� By Nov 15: licensed for 1,200 passengers

� In Jul 1915, still licensed to carry 2,500

passengers.

13UNCLASSIFIED

Jul 1915

UNCLASSIFIED 14

12/04/2013

8

Lessons

1. Inquiry attributed incident to

overcapacity, mishandling by crews

during incident & flawed construction.

2. Three lessons:

� Beware of changes in how system is

used.

15UNCLASSIFIED

“The first owners of the

vessel wanted a fast

ship for transportation

of fruits…”

16UNCLASSIFIED

12/04/2013

9

“I consider the boat safe

for all uses to which it

was put which were in

my knowledge”

17UNCLASSIFIED

Lessons

1. Inquiry attributed incident to

overcapacity, mishandling by crews

during incident & flawed construction.

2. Three lessons:

� Beware of changes in how system is

used. Beware of impact of evolving

use. Review safety assumptions. Re-

qualify if necessary.

18UNCLASSIFIED

12/04/2013

10

Lessons

2. Three lessons:

� Beware of changes in how system is

used. Beware of impact of evolving

use. Review safety assumptions. Re-

qualify if necessary.

� Conduct testing - not pseudo-testing.

19UNCLASSIFIED

“The boat slid into the

water on its side at

launch…tilted in the

opposite direction at

45° then righted itself

as straight as a church,

satisfactorily

demonstrating its

stability”

20UNCLASSIFIED

12/04/2013

11

“The Federal Inspectors

had the right to refuse a

permit to the boat but

they are generally not

trained men and did not

make stability tests (a

must) ”

21UNCLASSIFIED

Lessons

2. Three lessons (cont.):

� Conduct testing - not pseudo-testing.

• What assumptions are we making when

we “read across”?

• Have the assumptions been carefully

evaluated?

22UNCLASSIFIED

WARNING: Beware of “reading across”

12/04/2013

12

Lessons

2. Three lessons (cont.):

� Beware of modifications over time

that may erode the safety envelope.

23

Improve durability: 2” concrete decking: 14

tonnes

Improve safety: each life boat: 2 – 3 tonnes

UNCLASSIFIED

WARNING: Is the safety margin still

sufficient?

Distancing through differencing

24UNCLASSIFIED

“Those reviewing new evidence or incidents focus

on differences, real and imagined, between the

place, people, organization and circumstances

where an incident happens and their own context.

By focusing on the differences, people see no

lessons for their own operation and practices or

only narrow well bounded responses.”

12/04/2013

13

1. “System Safety and the Unintended

Consequence”, Clifford Watson.

2. Wikipedia entry on SS Eastland:

http://en.wikipedia.org/wiki/SS_Eastland

3. Eastland Memorial Society:

http://www.eastlandmemorial.org/index.shtml

4. New York Times archive

Sources:

25UNCLASSIFIED