Our objective is the safety and success of all HEMS/HAA flight operations. In addition to the tragedy for those involved in a mishap, the catastrophic loss of an aircraft or team significantly damages the reputation and standing of all programmes engaged in HAA operations. For this reason, we have agreed to join with other industry stakeholders and advocate for a best practice concerning the incorporation of trained and briefed medical flight team members for confirmation checks immediately prior to lift-off in an EMS helicopter.
At present, most EMS helicopters in the US are flown by a single pilot. These pilots routinely start the engine(s) and prepare for take-off using a cockpit ‘flow’ or ‘wipeout’, that is to say they ‘do’ start their aircraft from memory, and one or more times during the preparations sequence they are responsible for picking up their checklist and, scanning it rapidly, they ‘verify’ that all required steps have been completed.
This enables a much more rapid departure than would be possible were the pilot to proceed down the checklist line by line. While some programmes do adhere to a line-by-line method of checklist accomplishment by a single pilot, having one person responsible for doing and verifying creates the opportunity for a ‘single point of failure’ with tragic consequences. “The DV method has a higher inherent risk of an item on the checklist being missed,” according to the US Federal Aviation Administration (FAA).
In HAA operations, safety is paramount, but a timely departure is important too, and do-verify (DV) has worked well for the vast majority of HAA flights over the years. Having said that, there have been instances in which a pilot, for various reasons, fails to properly configure the aircraft for departure. In response to these events, some operators have added a ‘confirmation checklist’ to be used immediately prior to lift-off. Typically included on this confirmation checklist would be items that, if overlooked, could cause the loss of the aircraft and/or the crew.
A customary method of posting the confirmation checklist is for it to be printed on a vinyl sticker which is then affixed to the instrument panel in plain view of the pilot. Unfortunately, the same human-factors which cause a pilot to overlook an item on the do-verify engine start and before take-off checklist procedures can cause a pilot to overlook the same items on the confirmation sticker. Such errors of omission have resulted in damage or destruction of several aircraft, serious injury to crew members and pilots, and, in at least one incident, a fatality.
The tenets of crew resource management dictate that we use ‘every resource available to us’ for the safe, orderly, and expeditious accomplishment of our assigned flight tasks. A medical team member, while not ‘flight crew’ per se, and while not regulated by the FAA (second crew member for NVG flight ops below 300 ft excepted), does, over time, become intimately familiar with flight operations. As well, these medical team members have a vested interest in safety, as their lives are on the line right next to the pilot’s.
In many US flight programmes, the decision has been made to have a medical team member act as an additional layer of safety by having that person read a before take-off checklist or confirmation checklist in the manner of ‘challenge and response’. This practice does not absolve the pilot of responsibility to ensure that all steps are accomplished. It simply incorporates a resource that is sitting there.
In FAA publication 8900-1 paragraph 3-3403, the FAA refers to this method as ‘Challenge-Do-Verify’. We use the term challenge and response for clarity and brevity. A flight-team member refers to a list and issues a challenge. A second person – normally the pilot – verifies that the step is complete by looking and touching, then responds appropriately. Involving two people reduces the chance for a single point of failure. “... (This) method keeps all ...involved ‘in the loop’ ... and provides positive confirmation that the action was accomplished,” writes the FAA.
At times, the medical team is busy caring for a patient – but the request by the pilot for the ‘checklist please’ is a clear alert that the aircraft is preparing to depart. This enhances everyone’s situational awareness, and in all but the most extreme patient-care situations (for example, CPR in progress), at least one team member can take the few seconds required for the challenges.
Examples of the items that might be included in a challenge and response confirmation checklist are (these are only examples, your results might differ):
Engine controls set to fly. At least three twin-engine Agustas have been extensively damaged for one engine at ground idle during take-off. There have been at least three instances of a twin-engine Dauphin taking off with one engine at ground idle.
Hydraulic switches set and checked. At least three Astars have been damaged or destroyed for hydraulic switch(es) set incorrectly. A news helicopter in the US was also destroyed for this error of omission and a person on the ground was killed.
Fuel transfer switches set ‘on’. (At least two BK-117 aircraft have been extensively damaged due to the transfer switches set to ‘off’. One pilot was paralysed. In Scotland, a police helicopter crashed through the roof of the Clutha Vaults pub after supply tanks became empty with transfer pumps off, killing several persons on the ground in addition to the crew onboard.
Internal and external light switches set, caution panel checked. In a BK-117, having the instrument light potentiometers/rheostats set to ‘on’ during periods of daylight renders the caution segments and master caution lights too dim to see. This error of omission strikes in conjunction with the fuel transfer switches being left off. When the low fuel lights and master caution lights come on, the pilot can’t see this during daylight conditions.
Drugs and mission equipment checked. This is an example of an optional item that may be included in a confirmation or before-take-off checklist. In more than one instance, an aircraft has departed without the required meds or equipment. This renders the aircraft and team not-mission-ready, and often requires a time-consuming delay, which is less than optimal for patient care. Obviously, the list of items on the confirmation checklist should be kept as short as possible. In this case, the medical team member calling out the challenge would either respond him or herself or would look to the second medical team member for a verbal response.
With the visual clarity of hindsight, it is apparent that the vast majority of HAA flight operations are conducted smoothly, safely, and to the benefit of the patients we fly. But our goal is zero aircraft destroyed and zero teams/pilots/patients injured or killed.
The cost of the recommendation we have laid out here is insignificant. The delay that this practice will entail – 10 or 20 seconds – is insignificant. The significance of not losing lives to an error of omission cannot be overemphasised.
Please consider incorporating this recommendation as a ‘best practice’ for HAA operations.