Training

After a fault was detected, the operators need to identify the source, namely, the particular component that failed.

  The problem is that sometimes the operators cannot identify the failed component based on the attributes of the alarm, because they were not trained to recognize components by associated alarm s, or because they did not experience the alarm often enough to remember the particular system behavior. This is especially important to enable safe behavior under stress.

  Operators should be trained to recognize the alarm situation and to identify the source of the alarm s.

Examples

The pilots at the AF 447 accidents were not trained to recognize the exceptional maneuver by the captain in charge.

The TMI team in the control room was not trained to resolve conflicting information obtained when the PORV was stuck open.

Fault simulation

  To enable training the operation in exceptional condition, the system should be equipped with mean to bypass the sensors, and to simulate their behavior in exceptional conditions.

Related topic


Updated on 05 Apr 2016.