Skip to Main Content
FlightPushFLIGHTPUSH
NTSB Safety Recommendations

Learn

Dashboard My Courses Mastery Map Practice Flight Bag

Resources

CFR & AIM FAA Orders Handbooks & Guides Certification Standards Pilot/Controller Glossary Advisory Circulars Legal Interpretations
Safety Center
Articles Trust Center
Help Center FAQ Status
  1. Safety Center
  2. NTSB Safety Recommendations
  3. NTSB A-21-046
Loading
flightpush.co home

NTSB · Safety Recommendation

Safety Recommendation A-21-046

Recommendation

TO THE FEDERAL AVIATION ADMINISTRATION: Identify all currently certificated transport-category airplanes for which system safety assessments for landing gear systems did not consider human error that could lead to cross-wiring of antiskid brake system components, including the wheel speed transducers, and require manufacturers of transport-category airplanes without such assessments to perform the assessments and then implement mitigations to prevent cross-wiring of antiskid brake system components.

Safety Issue and Context

This report discusses the October 17, 2019, accident involving a Saab SA-2000 airplane, operated by Peninsula Aviation Services Inc. d.b.a. PenAir flight 3296, which overran the end of runway 13 at Unalaska Airport, Unalaska, Alaska. The airplane was substantially damaged during the runway overrun; as a result, of the 3 crewmembers and 39 passengers aboard, 1 passenger sustained fatal injuries, and 1 passenger sustained serious injuries. Eight passengers sustained minor injuries, most of which occurred during the evacuation.

Safety issues identified in this report include the potential for cross-wiring of airplane antiskid brake systems; insufficient Federal Aviation Administration (FAA) guidance to identify safety risks for air carriers experiencing significant organizational changes, including bankruptcy, acquisition, and merger; lack of FAA consideration of runway safety area dimensions during the process of authorizing an air carrier to operate its aircraft at a specific Title 14 Code of Federal Regulations Part 139 certificated airport, and the benefits of safety management systems for design, manufacturing, and maintenance organizations.

As a result of this investigation, the National Transportation Safety Board makes six new safety recommendations to the FAA, three new safety recommendations to the European Union Aviation Safety Agency, and one new recommendation to the Saab Group.

Response History

August 7, 2026 · Recipient Response · FAA

-From Bryan Bedford, Administrator: On February 26, 2025, the Board requested that the Federal Aviation Administration (FAA) provide the method that each applicant used to demonstrate compliance with Title 14, Code of Federal Regulations (14 CFR) 25.1309. Both the design approval holders (DAHs) and the methods of compliance (MOCs) are identified in the attachment provided.

Furthermore, we have completed our assessment of FAA-approved type designs for transport category airplanes relevant to the landing gear brake system components, including the antiskid system. We determined that the approved type designs are compliant with all relevant regulatory requirements. The DAHs'’ MOC included the use of design criteria, installation testing, and maintenance procedures, as well as a system safety assessment for certain designs. The MOCs identified have been found to satisfy the requirements of 14 CFR 25.1309 and associated guidance for system design and assessment. No additional showing of compliance has been determined to be necessary at this time.

The FAA issues airworthiness directives (AD) when an unsafe condition exists in a product and is likely to exist or develop in other products of the same type design. When an AD is issued to address an unsafe condition, 14 CFR 21.99 requires DAHs to submit design changes for approval to correct the unsafe condition. Our review of the approved type design for aircraft brake systems, including antiskid components, has not identified an unsafe condition, and we do not have a foundation to require the DAHs to submit design changes or conduct an additional review of FAA-approved data. Doing so would constitute a request for showing compliance, which would be outside of FAA’s current policy.

I believe the FAA has effectively addressed this safety recommendation and consider our actions complete.

February 26, 2025 · NTSB Correspondence · FAA
Read Recommendation

Recommendation Facts

Status
Open - Acceptable Response
Issued
November 18, 2021
Priority
CLASS II
Recipient
FAA
Adopted
November 2, 2021
Related Investigation
DCA20MA002
Related Report
AAR-21-05

You previously informed us that your Aircraft Certification Offices (ACOs) were conducting a review to determine if design approval holders (DAHs) had assessed aircraft brake systems for human error that could lead to cross-wiring of antiskid brake system components.

We note that you have completed your review, which included 52 design approvals, and that they all incorporate design details and maintenance procedures intended to prevent errors that could result in a system failure. We also note that only 15 included, in their SSAs, a specific assessment that considered human error as a contributing factor to cross-wiring of antiskid brake system components.

In addition, based on the volume of operations compared to the number of system faults that can be directly attributed to the cross-wiring of the antiskid brake system components, you do not believe rulemaking to require additional mitigations to prevent cross-wiring of antiskid brake system components is justified.

We believe the review you conducted is responsive to the first part of this recommendation; however, we are concerned that the SSAs associated with 37 of the design approvals that were reviewed have not assessed human error as a contributing factor to cross-wiring of antiskid brake system components. Although you indicated that all of the design approvals that you reviewed included design- and maintenance-related mitigations to prevent a system failure, you did not provide any information about the assessments that these applicants used to determine the appropriateness of those mitigations as they relate to this recommendation.

Therefore, we request that you provide the method that each of the 52 applicants used to demonstrate compliance with Title 14 Code of Federal Regulations 25.1309. Pending our review of this additional information, the Board has classified Safety Recommendation A-21-46 OPEN-- ACCEPTABLE RESPONSE.

October 5, 2023 · Recipient Response · FAA

-From Kathryn B. Thomson, Deputy Administrator: The Federal Aviation Administration (FAA) completed its review, to determine if the design approval holders (DAH) issued either a type certificate for transport-category airplanes or a supplemental type certificate for a design approval that would encompass the main landing gear system of a transport-category airplane. The FAA completed this review in coordination with the DAHs.

The FAA reviewed 52 design approvals that satisfy established criteria, including 10 products with an original Transport Canada Civil Aviation design approval, and 6 National Civil Aviation Agency – Brazil design approvals, each with subsequent validated FAA type design approvals. The FAA did not review products with an original design approval issued by the European Union Aviation Safety Agency (EASA) because Safety Recommendation A-21-52, which mirrors Safety Recommendation A-21-46, was assigned to EASA.

Our review identified 15 product design approvals supported by a system safety assessment (SSA) that included a specific assessment that considered human error as a contributing factor to cross-wiring of antiskid brake system components. This includes the Airbus Canada Limited Partnership BD-500 series; the Embraer S.A. fleet; Gulfstream Models GVI, II, Galaxy 200, 280; and Boeing 787-10 series aircraft. Boeing confirmed the 737-10 series aircraft SSA will consider human error that could lead to cross-wiring of antiskid brake system components in the development of the design approval data.

We determined that irrespective of the SSA process utilized, DAHs consistently applied design details intended to preclude maintenance errors. All DAHs indicated that they employ the use of specific design details and maintenance procedures as the primary method to preclude the introduction of errors that would result in a system failure, such as the cross wire of antiskid brake system components. These system design details include, but are not limited to, techniques such as specific wire harness lengths, independent routing, and component keyways of opposing dimensions to allow for only one installation configuration.

We assessed supporting maintenance procedures associated with these approved designs, such as periodic functional checks, to identify an introduced error as part of a qualitative analysis, including common cause analysis based on the zone location of a component.

For those fleets where the SSA considering human error documented no explicit qualitative analyses, we conducted formal tests to detect cross-wiring to support the assessment of an acceptable design for installation. Some of these designs did employ antiskid transducers and valves having the same keying for their respective parts due to the use of a common part number in multiple installations. The potential for installation error for these parts drove specific production and in-service tests via aircraft maintenance manual procedures that would detect crossed wires.

The test procedures are simple and assume operator quality assurance inspections as a secondary control to ensure proper testing. These methods are an acceptable means of compliance to 14 CFR § 25.1309, Equipment, Systems, and Installations, supported by a functional hazard assessment by the applicant for a design approval. We find these methods appropriate and consistent with the regulatory requirements and associated guidance for system design and assessment.

As part of our review, we conducted a detailed assessment of relevant databases for maintenance and operational reports. Out of 3,227 maintenance or operational faults associated with the main landing gear brake antiskid systems across all models of transport-category airplanes from 1973 through 2023, we identified three issues associated with faults resulting from cross-wiring of the main landing gear brake antiskid system, including the subject Saab SA-2000 aircraft, throughout the review.

We compared these findings to the volume of flight operations for transport-category airplanes, which are in excess of 20,000 flight cycles daily, to determine if historical service data supported the proposed regulatory action noted in Safety Recommendation A-21-46. However, consideration of the volume of operations compared to the number of system faults that can be directly attributed to the cross-wiring of the antiskid brake system components for the data reviewed does not support regulatory action.

This determination further reinforced our finding that the standard design and maintenance practices discussed do not show an apparent safety concern that would support rulemaking to require implementation of additional mitigations to prevent cross-wiring of antiskid brake system components.

I believe the FAA has effectively addressed Safety Recommendation A-21-46 and consider our actions complete.

April 19, 2023 · NTSB Correspondence · FAA

We note that you have asked your Aircraft Certification Offices to conduct a review to determine if design approval holders (DAHs) have issued either a type certificate for transport-category airplanes or a supplemental type certificate for a design approval that encompasses the main landing gear system of a transport-category airplane. You reported that the purpose of this review is to determine if aircraft brake systems have been assessed for human error that could lead to cross-wiring of antiskid brake system components.

We believe the review that you are conducting is the first step to addressing this recommendation. Pending our review of your findings and, for any manufacturers of transport-category airplanes without such assessments, a plan for ensuring that one is performed, and mitigations are implemented to prevent cross-wiring of antiskid brake system components, Safety Recommendation A-21-46 is classified OPEN-- ACCEPTABLE RESPONSE.

March 2, 2023 · NTSB Correspondence · FAA

The National Transportation Safety Board (NTSB) has reviewed the Federal Aviation Administration’s (FAA) notice of proposed rulemaking (NPRM) titled, “System Safety Assessments,” which was published at 87 Federal Register 75424 on December 8, 2022. We welcome the opportunity to provide comments on this NPRM, in which the FAA proposes to amend certain airworthiness regulations to standardize the criteria for conducting safety assessments for systems, including flight controls and powerplants, installed on transport-category airplanes.

According to the NPRM, the proposed action addresses a congressional mandate, safety recommendations from the NTSB, industry working groups safety analyses, and updates to regulations and provides insight to new regulations related to system safety. The NPRM also moves the United States closer to harmonizing Title 14 Code of Federal Regulations (CFR) 25.1309 with European Aviation Safety Agency Certification Specification-25. The intended effect of this proposed action is to improve aviation safety by making system safety certification requirements more comprehensive and consistent. The NTSB has long recognized the need for system safety assessments to improve safety in aircraft design.

The following comments discuss 10 safety recommendations issued to the FAA regarding issues addressed in the NPRM and accompanying draft advisory circulars (ACs).

System Safety Analyses for Landing Gear

Safety Recommendation A-21-46 asked the FAA to identify all currently certificated transport-category airplanes for which system safety assessments for landing gear systems did not consider human error that could lead to cross-wiring of antiskid brake system components, including the wheel speed transducers. It also asked that manufacturers of airplanes without such assessments perform the assessments and then implement mitigations to prevent cross-wiring of antiskid brake system components.

Footnote: Following the October 17, 2019, accident involving PenAir flight 3296, a Saab 2000, we issued Safety Recommendations A-21-46 and -47, which are classified, respectively, Open—Await Response and Open—Initial Response Received. For more information about our findings in this investigation, see NTSB. 2021. Runway Overrun During Landing, Peninsula Aviation Services Inc. d.b.a. PenAir Flight 3296, Saab 2000, N686PA, Unalaska, Alaska, October 17, 2019, AAR-21/05. Washington, DC: NTSB.

Safety Recommendation A-21-47 asked the FAA to require the submission and consideration of system safety assessments addressing the landing gear antiskid system for the certification of future transport-category airplane designs. The certification should ensure that the system safety assessments are consistent with the intent of AC 25.1309 and that the assessments evaluate and mitigate the potential for human error that can lead to a cross-wiring error.

We note that draft AC 25.1309-1B includes guidance that would apply to analyzing some failures in the brake system. However, the NPRM does not address requiring system safety assessments related to human error that could lead to cross wiring of antiskid brake system components, including the wheel speed transducers. As proposed, the NPRM would not satisfy Safety Recommendations A 21-46 and -47.

September 22, 2022 · Recipient Response · FAA

From Billy Nolen, Acting Administrator, Federal Aviation Administration: The Federal Aviation Administration (FAA) requested all of its Aircraft Certification Offices to conduct a review in coordination with the design approval holder (DAH) if they have issued either a type certificate for transport-category airplanes or a supplemental type certificate for a design approval that would encompass the main landing gear system of a transport-category airplane. The purpose of this coordinated review is to determine if the aircraft brake system was assessed for human error that could lead to cross-wiring of antiskid brake system components, including the wheel speed transducers.

Due to the scope of this review, we have not yet received a complete response from all of the DAHs that were contacted. We will continue to work with the DAHs to gather and assess the necessary information to comply with the intent of this safety recommendation.

Our review of the initial assessments provided by the responding DAHs indicates that design criteria and maintenance procedures are typically utilized as the preferred methods to preclude the introduction of errors that would result in a system failure. System design details include techniques, such as specific wire harness lengths and component keyways of opposing dimensions, to allow for only one installation configuration.

Supporting maintenance procedures associated with these approved designs, such as periodic functional checks to identify an introduced error, are assessed as part of a qualitative analysis approach, including common cause analysis based on the zone location of a component. The applicant for a design approval applies these methods as the accepted means for compliance with 14 CFR 25.1309, “Equipment, Systems, and Installations,” supported by a functional hazard assessment. We find these methods consistent with the system design and assessment requirements of § 25.1309 and associated guidance.

I will keep the Board informed of the FAA’s progress on this safety recommendation and anticipate providing an update by September 30, 2023.

September 1, 2022 · NTSB Correspondence · FAA

We note that you are reviewing these safety recommendations and determining an appropriate plan of action; however, you did not indicate if you intend to take the recommended actions or describe how you will make this determination. Therefore, we are unable to determine if your actions are responsive to these recommendations. Consequently, pending our receipt of this additional information, Safety Recommendations A-21-46 through -48 remain classified OPEN-- AWAIT RESPONSE.

January 25, 2022 · Recipient Response · FAA

-From Steve Dickson, Administrator: The Federal Aviation Administration (FAA) is currently reviewing these safety recommendations and determining an appropriate plan of action.

November 18, 2021 · NTSB Correspondence · FAA

The attached letter from the NTSB Chairman provides information about the NTSB’s November 2, 2021, report Runway Overrun During Landing, Peninsula Aviation Services Inc. d.b.a. PenAir Flight 3296, Saab 2000, N686PA, Unalaska, Alaska, October 17, 2019, NTSB/AAR 21/05. The details of this accident investigation and the resulting safety recommendations may be found in the attached report, which can also be accessed at http://www.ntsb.gov.

The NTSB is vitally interested in these recommendations because they are designed to prevent accidents and save lives. We would appreciate a response within 90 days of the date of this letter, detailing the actions you have taken or intend to take to implement these recommendations. When replying, please refer to the safety recommendations by number (for example, A-21-46 through -51). We encourage you to submit your response to ExecutiveSecretariat@ntsb.gov. If your reply exceeds 20 megabytes, including attachments, please e mail us at the same address for instructions on how to send larger documents. Please do not submit both an electronic copy and a hard copy of the same response.

This letter provides information about the National Transportation Safety Board’s (NTSB) November 2, 2021, report Runway Overrun During Landing, Peninsula Aviation Services Inc. d.b.a. PenAir Flight 3296, Saab 2000, N686PA, Unalaska, Alaska, October 17, 2019, NTSB/AAR-21/05. The details of this investigation and the resulting safety recommendations may be found in the attached report, which can also be accessed at http://www.ntsb.gov/.

As a result of this investigation, we identified the following safety issues:

• Potential for cross-wiring of airplane antiskid brake systems • Insufficient Federal Aviation Administration (FAA) guidance to identify safety risks for air carriers experiencing significant organizational changes, including bankruptcy, acquisition, and merger • Lack of FAA consideration of runway safety area dimensions during the process of authorizing an air carrier to operate its aircraft at a specific Title 14 Code of Federal Regulations Part 139-certificated airport • Safety management systems for organizations that design, manufacture, and maintain aircraft.

Accordingly, the NTSB makes the following safety recommendations to the FAA. Additional information regarding these recommendations can be found in the noted sections of the report.

• Identify all currently certificated transport-category airplanes for which system safety assessments for landing gear systems did not consider human error that could lead to cross-wiring of antiskid brake system components, including the wheel speed transducers, and require manufacturers of transport-category airplanes without such assessments to perform the assessments and then implement mitigations to prevent cross-wiring of antiskid brake system components. (A-21-46) (See section 2.3.4.1.)

• Require the submission and consideration of system safety assessments addressing the landing gear antiskid system for the certification of future transport-category airplane designs. The certification should ensure that the system safety assessments are consistent with the intent of Advisory Circular 25.1309, System Design and Analysis, and that the assessments evaluate and mitigate the potential for human error that can lead to a cross wiring error. (A 21-47) (See section 2.3.4.1.)

• Require organizations that design, manufacture, and maintain aircraft to establish a safety management system. (A-21-48) (See section 2.3.4.2.)

• Notify principal operations inspectors and frontline managers about the circumstances of this accident and emphasize the importance of existing Federal Aviation Administration guidance for detecting and mitigating the safety risks that can result when certificate holders experience significant organizational change, such as high personnel turnover, a reduction to route structures or flight schedules, bankruptcy, acquisition, and merger. (A-21-49) (See section 2.5.1.)

• Revise Order 8900.1, Flight Standards Information Management System, to include a formalized transition procedure to be used during a changeover of certificate management team personnel responsible for overseeing a certificate holder that is undergoing significant organizational change (for a reason described in volume 6, chapter 2, section 18 of the order) to ensure that incoming personnel are fully aware of potential safety risks. (A-21-50) (See section 2.5.1.)

• Include the runway design code for runways of intended use among the criteria assessed when authorizing a scheduled air carrier to operate its airplanes on a regular basis at an airport certificated under Title 14 Code of Federal Regulations Part 139. (A-21-51) (See section 2.5.2.)

The NTSB is vitally interested in these recommendations because they are designed to prevent accidents and save lives. We would appreciate a response within 90 days of the date of this letter, detailing the actions you have taken or intend to take to implement these recommendations. When replying, please refer to the safety recommendations by number (Safety Recommendations A-21-46 through -51). We encourage you to submit your response to ExecutiveSecretariat@ntsb.gov. If your reply, including attachments, exceeds 20 megabytes, please e-mail us at the same address for instructions. Please do not submit both an electronic copy and a hard copy of the same response.