PROCEDURES
FCF 4/4 - Executing a Functional Check Flight
Ok, so now the right people have been selected and as much preparation as possible has been done. It is time to fly, but in this paper there is no intention of going through a test schedule check by check. This is well covered in Airbus Technical Flight Familiarization Course. The emphasis has deliberately been put on preparation. However, some of the good things to do and some good general practices that should be followed will be mentioned.
Let us start with the briefing. No matter what the level of advance preparation certain things will change just before the flight and they need to be covered at a pre-flight briefing.
Briefing
Some guidelines on the briefing are useful here.
Video: Continuing Checks after Failure?
The sections of the flight that are primarily a pure flying activity (like flight control checks or low speed handling) will be identified as will those which are essentially systems related (like a de-pressurization check) and it will be decided who is flying and who is monitoring. Always have one person flying. An observed tendency is that the whole crew gets “involved” in the detail of the check sequence. There is absolutely nothing wrong in having one crew member quietly listening but focused on the basic flying.
This pre-flight briefing will be later supported by mini “in flight briefings” that will be made before certain phases of the check flight to “remind” everyone what is coming next, what the limits are and what action needs to be taken by whom “in the event of” certain situations arising.
Video: In-flight Mini Brief
Video: Execution of the Flight Control Check during a Functional Check Flight
Getting airborne
The pre-flight preparation should consider any need for FMS programming regarding fuel transfer and also back up flight plans in case the maneuvers flown early in the plan erase waypoints. Also electrical checks can sometimes cause some interesting computer responses on modern aircraft.
As stated, it is expected that most airlines would use the standard checklists in the run up to getting airborne in their normal way. The difference is that a third crew member will probably be present in the jump seat. His or her role is to record data and to monitor the work of the pilots in a non-intrusive way but with a “right of intervention” should something occur that he doesn’t understand or that he thinks may be incorrect.
Irrespective of the good use of checklists, along with most of the test fraternity, always carrying out a quiet final configuration check just before take-off and also just before landing seems a useful safety habit to develop.
Take-off
In the manufacturers test world, some specialist Flight Test Engineers are included in the take-off brief, so as to allow them the right to call STOP, as a key word command. The circumstances under which they would exercise this right are discussed and carefully considered and if in doubt they say nothing. In the airline world such a protocol probably would not be appropriate (subject to the experience and training) and we would recommend staying as close to the local standard practice as possible. In general, the flight deck should be quiet and free of unnecessary “chat” and certainly so below FL100. Careless words can be mis-interpreted and sometimes create a dangerous response.
Switching
Switching and system selection needs to be thought about. Who switches and how? In general a two man principle on all switching actions should be used, with one person pointing at the switch and then after verification that it is indeed the right switch, the selection is made. Some may consider this as overkill but there have been cases where due to poor switching discipline, engines have been “accidentally” shut down and also hydraulic and electric systems lost when APUs have been inadvertently switched off during acceptance flights. Under stress bad things can happen and it is best to develop good practices right from the start.
Actually, in the manufacturer’s world, the principle is carried a bit deeper than this and it is normal to have two members of the three man check team always “in the loop”. Normally the flying pilot is allowed to concentrate on that task whilst the non-flying pilot and the “engineer” focus on system switching safety. It is also easy for one person to get “buried”, for example whilst carrying out radio checks (normally the non-flying pilot) but under those situations it is essential that the non-flying third member be in the loop with the person on the controls and aware of what is happening in a general flying sense. “Switching” confusion should be avoided by carrying out only one check at a time.
Video: Switching
Communication
Really good crew communication throughout the check flight is required. Key words are sometimes useful.
These can include commands such as STOP or GO AROUND but there are also some unwritten but absolutely clear rules for events such as one crew member not being comfortable with the test progression.
If any test / check crew member says “I am not happy” the active pilot recovers immediately and the crew reviews the situation. Likewise if someone declares themselves as being “out of it” through workload or whatever, again, a recovery is carried out and then a re-brief to ensure all crew members are mentally on the same test point with the same level of understanding of the plan. Even silences need to be “listened to” as they can tell you that another crew member may be concerned about something. After a while it is possible to develop a “nose” for when it is not going according to plan and that is the time to slow it down and think about what is happening and whether the plan still makes sense. The pacing has to be led by the slowest crew member but of course there are situations where ATC has no choice but to dictate the check pace such as when you are in the pattern or on the approach. Often the aircraft may be carrying a snag or two by this stage and the impact has to be continually re-assessed against the “remain to do” checks. This is where good check crews work together to continually formulate a new and safe plan of action.
As regards external communication, if there are significant radio problems, then the safe continuation of a check flight quickly becomes very challenging and it may well be wiser to concentrate on getting on the ground safely to get the radios fixed before continuing with other checks.
Workload
Workload also has to be continually assessed on an individual and group basis. One person may become overloaded for a short while but if two out of the three reach this state then the situation can become very critical very quickly. The whole crew must never be allowed to reach this state, so if the test crew is only a two person crew the increased threat is obvious. A third, check qualified, crew member for this type of work is therefore strongly recommended.
One of the problems with workload is that it can rise very quickly and in such a way that the individual concerned, although aware that he or she is working too hard, is unable to take the decisions that will reduce that potentially dangerous situation. The person involved may even be unable to “see” the problem, never mind the solution.
As the workload increases the crew has to prioritize the tasks. The first priority is always securing the safety of the aircraft. Easy to say, but often this requires some tough decisions to be made and sometimes ones that local management may not be too happy with. Someone, normally the Captain, has to make it clear that until the technical systems issues are resolved or their implications fully understood, no more check points will be carried out. Enter a hold or ask for a vector away from the airfield, to give thinking time, are useful workload reducing techniques. If the crew has a problem that they do not understand they should put the aircraft back on the ground while they think about it. There is no room for “pressing on” when a situation is not understood and may be potentially dangerous or worse, catastrophic.
Secondly, the objective is to secure good quality check or test data. There is no point in being there to gather poor data that the engineers cannot use. And finally the whole process should be carried out as expeditiously as possible. It is not a pleasure flight, although when done well, it’s extremely enjoyable. The objective is to re-clear the aircraft so that it can get back into the air quickly and re-start earning revenue with passengers on board.
Snag resolution
The whole purpose of a check flight is be able to give an aircraft a clean bill of health, so it is not surprising that if a snag is found there is a desire to find out as much as possible about that snag to help the mechanics.
Laudable as this may sound, it can lead quickly to some very unhealthy situations. Great care needs to be taken when “snag chasing”. The implications of one failure needs to be understood across all the systems affected, as do the implications of selecting certain associated systems into a degraded mode so as to “isolate” a snag. Remember too, that there may be another dormant but un-reported snag in the system already, which when coupled with the original snag and the crew switching may put the aircraft into a serious risk area. We tend to think, with modern aircraft, that everything is captured by the BITE system or is presented to us through the Flight Warning Computers but this is not so. This brings us back to the issue of integrity and if the crew do not know all the ramifications of complex and multiple switching actions then they simply should not do it. Put the aircraft on the ground, examine the situation very carefully, call the manufacturer if in doubt and only then proceed after having tried to fix the problem.
No anomalous indication on an aircraft appears for no reason. Some are small, some have little operational significance, some are intermittent (the worst kind) but there is always a reason. It is no good just hoping a snag has somehow just “gone away”. It may indeed not be easy to reproduce the symptoms or it may be limited to certain very precise flight or meteorological conditions but it will still be there and if left, these types of snag have a habit of returning at the worst possible moment. Sometimes the smallest of apparent issues can lead to failure scenarios with some very serious consequences. Watch out particularly for snags associated with “enabling” functions like weight on wheels switches and sensors. Their impact can be seen over several systems. Pressure controllers are another area where a snag can turn from fairly benign to very serious pretty quickly.
Note: In case the crew also needs to perform a Certificate of Airworthiness renewal which also includes checks, the crew must mentally separate these two demands and if possible clear the aircraft of snags first prior to completing the C of A renewal check points. If that is not possible (sometimes it is not) then crew awareness and good communication is essential.
Tricky test points
Some checks are certainly more difficult to fly than others or some may have a more immediate impact if they go wrong. The failure of a generator to come back on line does not have the same immediately damaging effect as allowing the speed to exceed Vmo by too much. So it is sensible to treat the “tricky test points” with the care they demand and not to rush them. Think about them on the ground carefully and decide how they should be flown and what the “break off” point is. These tricky tests can include speed limit checks, envelope boundary checks, depressurizations, initial handling checks, low speed checks and of course some engine checks.
It is also important not to become tempted to “take a look at” some of the certification test points. There are many “interesting” experiences in this category that could have developed into sad stories. Taking one example like Vmca definition, fuel starvation on some types of aircraft has occurred in the past on this test (which is done at very low altitude) causing the remaining engine to stop. The job of the checker is not to try to re-define the basic certification criteria of the aircraft. Those criteria have been flown and examined by experts under strict weather conditions and rigorously controlled conditions. The checkers job is to check “this” line aircraft against a pre-defined and approved Airworthiness standard or to clear a reported squawk or snag.
Different flight plans
With a modern aircraft check flight there are several “plans” being conducted at the same time. You have the desired planned check schedule. You have the approved Air Traffic Flight Plan which may involve some “on airways” flying and will often start with some sort of procedural departure. The FMS may have to be set up to a slightly different plan to ensure some functions work as they should like fuel transfer logics. There is also the Flight Warning Computer flight phase plan which may throw “stored” snags at you at pre-determined times and you also have an Air Traffic Control handover plan which drives the communication world and to some extent the workload. Finally, remember that you have no control over the most important “plan” and it’s called “the weather”.
The crews’ job is to safely carry out the check points whilst also conducting this “orchestra” of differing plans not all of which are in sequence and not all want to align conveniently. It’s not unusual to have a check point set up and ready, only to be asked to change frequency, squawk and then head straight towards a Cb.!! Or you may require an altitude or a block of altitudes only to run out of the ideal bit of airspace in which to do the next point.
Patience is required and it is this aspect that benefits most from pre-planning, a good weather examination and pre-consultation with the ATC guys. It may be that on some days it simply becomes impossible and the sensible conclusion is to keep it safe and call it a day. Such judgments are not easy as they often have a considerable cost implication.
Cabin systems
Increasingly the area of cabin testing, as said before, is becoming more and more important. Complex seat systems and entertainment systems prevail and it is worth getting to know basically how they work. With the new larger aircraft, there is much closer integration between cabin systems and the flight deck, so cabin systems are no longer “something back there”. They are “passenger important” check areas that have to be thought about quite hard.
This whole paper could have dealt with pressurization issues that have occurred during testing but in order to be brief it is worth thinking about emergency oxygen if a depressurization is planned. Plan which oxygen sets the crew will use. The typical therapeutic oxygen bottles may be “a bridge too far” for someone working in the back of the aircraft to get to. Try getting one out of its stowage and in use in 20 secs and remember that if you are in the cabin checking something you may have to walk some distance to get to the bottle. A better idea is to select and allow a few well-placed oxygen masks to drop in the event of a full de-pressurization, so that the cabin checker can immediately take a seat and then breathe oxygen with the nearest passenger system.
Think also about communication with the guys in the back and ensure the ability to inform them of what is going on and when to be strapped in. Likewise, there are many tasks they can help with like wing inspections and they will need to be able to communicate with the flight deck.
Conclusion
The key to a successful FCF is to prepare thoroughly on the ground and to ensure the best information and knowledge is available to the well selected and correctly trained crew. Once airborne, the most common weakness in the overall checking “system”, of aircraft and crew, will probably be the active pilot as he is the most likely to become over loaded in a workload sense. Therefore, well communicated and timely support from the rest of the check crew is essential in ensuring the success of the check mission. It is the role of the Captain to encourage such communication. It is the duty of all check flight crew members to be active in a communication sense. The challenge for the crew is to avoid critical crew workload levels by excellent preparation, by regular mini briefings and by being ready for the unexpected as they conduct each test. Solid flying skills help as they allow a greater concentration on the communication aspects of the whole operation.
Always remember: Select the crews well, train them properly, brief carefully including the ATC and airspace agencies, plan the flight carefully and then fly the plan “defensively” with “escape routes” in mind and being failure minded. Never assume “it” will work perfectly. Finally, communicate well and no matter what the pressures are, always default to the safest decision.
We wish you good, safe check flights and remember always that preparation is the key.
CONTRIBUTORS
Harry NELSON
Experimental Test Pilot
Simon PETERSON
Flight Test Engineer Instructor