Feature
Aviation safety
From Chicago to safety management systems: how international rules, investigations, flight recorders and human factors organise evidence-based prevention.
5 min read
Chicago: shared obligations
The development of international air transport required connections between different national systems. Signed on 7 December 1944, the Chicago Convention recognises state sovereignty over national airspace and organises cooperation in civil aviation. It is neither a single operating rulebook nor a general authorisation to serve every country. Commercial traffic rights remain subject to agreements. Its contribution to safety lies particularly in the common framework within which technical standards are developed, allowing aircraft and their crews to operate across national borders under mutually understood arrangements.
ICAO formally became a permanent organisation on 4 April 1947, following a provisional phase. As a specialised agency of the United Nations, it adopts standards and recommended practices assembled in the Convention's annexes. States retain their regulatory and oversight responsibilities; they must notify differences from international standards under the Convention's provisions. ICAO therefore does not itself issue every licence and certificate. This division of responsibilities separates the international agreement, the applicable rules and the daily oversight of operators, rather than placing them all within one global aviation authority.
Building and overseeing defences
Safety rests on several complementary functions: design certification, production, airworthiness, training, operations and maintenance. A certificate demonstrates compliance with specified requirements; it does not guarantee that no failure will occur. Inspections, operating limitations and defect monitoring therefore extend the initial demonstration throughout service. Investigations into the 1954 Comet accidents illustrate this continuity: research into failures of the pressurised cabin deepened understanding of structural fatigue and influenced design and testing methods. The lessons concerned both the aircraft itself and the means used to establish its structural strength.
In Europe, the 2002 basic regulation established EASA. The Agency operates within a system in which European Union institutions adopt legislation and national authorities retain many oversight tasks. It would therefore be inaccurate to attribute every rule or inspection to the Agency alone. Airworthiness directives can require corrective action when an unsafe condition is identified. Operators must connect these obligations with their procedures, personnel and equipment, without confusing documentary compliance with effective control of risks in service. Oversight examines the organisation as well as the individual aircraft and its records.
Keeping investigation purposes distinct
A safety investigation seeks to prevent further accidents and incidents, not to apportion blame or liability. This principle, expressed in ICAO Annex 13, distinguishes its purpose from that of judicial proceedings, even when both take place in parallel. In France, the BEA conducts investigations within its remit. The state of occurrence normally plays a central role, while other states participate according to their connection with the aircraft. International cooperation brings together knowledge of operations, design and manufacture, ensuring that evidence can be examined beyond the resources of any single organisation.
Investigators compare wreckage, witness accounts, weather information, maintenance records and communications. They reconstruct a sequence but also examine the conditions that made it possible: ambiguous procedures, training deficiencies, inadequate oversight or vulnerable design. A safety recommendation proposes preventive action; it does not by itself create a new binding rule. Its recipient must consider the response to make. Publication of a report makes the reasoning and its limitations accessible, allowing other organisations to learn from an event elsewhere. Establishing a sequence is therefore a means of prevention rather than the investigation's only objective.
Flight recorders: evidence to interpret
Flight recorders, commonly called black boxes, are generally protected by a highly visible orange enclosure. The FDR records flight parameters; the CVR preserves the cockpit sound environment. Their adoption in transport aviation accelerated during the 1960s, with requirements varying by aircraft and regulatory system. Recording media evolved from earlier technologies towards electronic memory. Protection against impact, fire and immersion is intended to preserve information under conditions in which other equipment may be destroyed. The two recording functions provide different kinds of evidence and should not be treated as interchangeable sources.
A recording nevertheless cannot explain an accident on its own. Available parameters depend on the installation; their timing and meaning must be checked. An alarm heard on the CVR must be compared with system conditions and crew actions. Underwater acoustic locator beacons help search teams find submerged recorders, but do not remotely transmit all their stored data. Recovery, reading and analysis remain separate operations requiring different equipment and expertise. Protection of sensitive recordings, particularly conversations, also reflects the need to preserve confidence in safety investigation rather than turning every recorded exchange into public evidence.
Understanding human performance
Human factors are not simply a list of individual errors. They examine relationships between people, machines, procedures and organisations. Fatigue, workload, information presentation or time pressure can affect decisions. An action understandable in its context may contribute to an unsafe outcome when combined with other conditions. This approach does not remove responsibility; it avoids ending the analysis with the expression human error. It also leads investigators and operators to examine workplace design, duty schedules, training and the resources actually available to the people expected to carry out the task safely.
NASA research on cockpit resources, including a 1979 workshop, contributed to the development of CRM. Training addresses communication, cooperation, leadership and decision-making, not flying skill alone. Encouraging someone to voice a doubt, checking an instruction or redistributing tasks can interrupt an unsafe sequence. These principles also concern controllers and maintenance technicians. During maintenance, shift handovers and the management of interruptions matter alongside individual experience: an interrupted task must be resumable without assuming that everything has been completed. Training thus addresses the practical coordination of people as well as the knowledge held by each individual.
Managing risks over time
A safety management system organises hazard identification, risk assessment and monitoring of the measures taken. A hazard is a condition capable of causing harm; risk considers factors including the potential severity and likelihood of its consequences. Annex 19, adopted in 2013 and applicable from 14 November that year, brought together provisions on safety management. It distinguishes state responsibilities from those of the service providers concerned. Such a system supplements technical and operational requirements rather than replacing them, and requires organisations to examine how their activities actually function instead of relying exclusively on prescribed procedures.
Operational feedback draws on occurrence reports, audits and trend analysis. Organisations must check whether a measure actually reduces exposure to a hazard without merely shifting the problem elsewhere. A just culture encourages reporting while distinguishing honest error from unacceptable behaviour; it is not blanket immunity. In the aviation of the globalisation era, information circulates between participants whose missions remain different. Safety depends on connecting these activities: understanding events, retaining knowledge, correcting defences and checking effectiveness, without treating a recent absence of accidents as sufficient proof that all relevant risks are controlled.
Sources
- OACI / ICAO — History of ICAO and the Chicago Convention
- BEA — Bureau d'Enquêtes et d'Analyses
- EASA — Regulations
- NASA — NASA History