July 2015

advertisement
July 2015
This is a collation of some of the world’s railway formal inquiry reports. It includes a brief incident
synopsis, along with the main causes and recommendations from each investigation.
Readers may find some of the actions and recommendations useful to their own operations.
Co-ordinated by Greg Morse, Operational Feedback Specialist, RSSB
Contents: (Click to navigate)
US: Fatal shunting accident at Colorado Springs,
8 October 2014
UK: Near miss with track workers near Hest
Bank, 22 September 2014
Latvia: Fatal shunting accident at Skirotava, 7
September 2014
UK: Electrical arcing and fire and parting of the
overhead line at Walkergate, 11 August 2014
Walkergate
Some of the key issues raised and/or suggested by the stories in this edition:
Lookout sighting
Possible fatigue
Failure to implement recommendations
Shunting – clearance between wagons
Coupling issues
Distraction
Hump shunting
Operations during construction work
Distraction
Safety management system (shared risks)
Knowledge sharing
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
14 July
US: Fatal shunting accident at Colorado Springs, 8 October 2014
For the full report, click here: LINK
At 12:30 (local time) on 8 October 2014, a Burlington Northern Santa Fe (BNSF) guard died while a
freight train was shunting a private siding on the Pikes Peak Subdivision, near Colorado Springs.
On the day before the accident, the driver and guard had tried to shunt four wagons on private
sidings owned by Thompson and Sitz Construction, Inc. They were unable to do so because the
reception line was occupied by track maintenance equipment that could not be moved. After
consulting with their supervisor, the crew secured the wagons on an adjacent siding and were driven
to Denver, where they went off duty. Before departing, they walked the tracks, noted the positions
of the wagons and prepared a plan for how they were going to perform the shunt the next day.
At 08:00 the following morning, the driver, guard and a shunter went on duty and were driven back
to Colorado Springs.
On arrival, the driver prepared the two locomotives and the guard and shunter released the
handbrakes on the four wagons left on the siding the day before.
The guard coupled the four loaded wagons
and two locomotives to six empty flatbeds
that were on tracks 813 and 815. She then
saw all the vehicles off track 815 and
changed the points for track 813. The
wagons were then propelled to the end of
that track.
The guard uncoupled three of the wagons
and had the driver pull forward, leaving
them on track 813. According to the
shunter, the handbrakes were applied before the move was made and were never released.
The guard told the driver to stop when the wagons passed the connection to track 816. She then set
the points for track 816 in preparation for coupling the train to two empty flatbeds thereon. The
guard told the driver to propel back towards track 816. While positioned on the north side of the two
empty flatbeds, she tried several times to couple the train to the wagons on track 816, but was
unsuccessful. The driver told her that road traffic had backed up on a level crossing blocked by their
train and that he wanted to clear it. The guard agreed and the driver pulled the entire train out of the
siding.
After the road traffic had cleared, the train returned. The guard, now on the south side of the train,
but still north of track 813, continued trying to couple up to two flat railroad cars on track 816.
The shunter told the National Transportation Safety Board (NTSB) that the guard celebrated making
the coupling: ‘She let out a big hurrah and exclaimed “you know, we got it. We coupled the cars”.’
She then instructed the driver to pull the wagons out of track 816. Soon after starting the movement,
the driver heard a strange noise on the radio and stopped.
The guard was between track 816 and track 813 when the wagons were finally coupled. When the
train pulled out of track 816, she became caught between them. The shunter told the driver to stop
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
the movement. On finding the guard, he instructed the driver to back up gently, in order to try to
free his colleague. The shunter realised this was not working and stopped the movement altogether.
The driver radioed an emergency call to the signaller. Meanwhile, a nearby Thompson and Sitz
employee, who also witnessed the event, called the emergency services. By the time the ambulance
arrived, the guard had died.
The NTSB determined the probable cause of the accident to be the guard leaving wagons on track
813 with insufficient clearance to the adjacent track and then instructing the driver to move the
wagons before moving to a position of safety. The guard’s focus on successfully coupling the wagons
was a contributing factor.
Recommendations

None listed.
Back to top
16 July
UK: Near miss with track workers near Hest Bank, 22 September 2014
For the full report, click here: LINK
During the afternoon of Monday 22 September 2014, a group of nine track workers repairing a
section of the West Coast Main Line south of Hest Bank level crossing narrowly avoided being struck
by a southbound passenger train. Their site of work was located on a bend that restricted the
visibility of approaching trains. Warning of approaching trains was intended to be given by lookouts,
located remotely with good visibility of the track, using a radio-based lookout operated warning
system (LOWS). The system had been working normally prior to the incident, but the workgroup did
not receive a warning for the incident train.
The track workers saw the approaching train with just enough time to clear the track before it passed
them at 98 mph. They were shaken, but not physically injured. All work on the site was stopped for
the remainder of the shift.
The incident was caused because a lookout did not give a warning, either because he operated the
wrong switch on his radio transmitter by mistake, or because he forgot about the need to send a
warning during an intended delay period between seeing the train and operating the switches. This
delay was because he was positioned on a long section of straight track and could see approaching
trains for significantly longer than the time required for the workgroup to move to a position of
safety.
It is also probable that the lookout’s vigilance had degraded as he had been working continuously for
almost two hours.
A previous RAIB recommendation – relating to managing extended warning times due to extended
sighting distances (see Cheshunt Junction Recommendation 2) – had not been implemented due to
administrative errors. It is possible that the incident would have been avoided had this been dealt
with more effectively. Incorporating recent human factors research into the lookout’s role may too
have prevented the incident.
Although unrelated, the RAIB identified that a safety-critical element of the LOWS circuitry was not
subject to routine testing.
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
Action taken
Following this incident, Network Rail’s Lancashire & Cumbria delivery unit prohibited further use of
the LOWS equipment involved and trialled a new version which gives improved user-feedback and
has the vigilance switch replaced by a movement sensor.
Network Rail has also introduced ‘non-technical skills’ training for lookouts as an e-learning course in
July 2014, with a requirement for all lookouts to complete it by July 2015. The training includes
modules on ‘attention management’, which cover the ability to remain alert and focussed, the ability
to manage distractions, and the ability to keep an awareness of the overall situation. The training
includes scenario-based discussions. The training mentions the 30-minute vigilance degradation, but
other areas of the training recommend lookouts to ask for breaks every 1.5 hours and if they are
aware their vigilance is degrading. RAIB notes that this is inconsistent with the two-hour interval
suggested by Network Rail’s ergonomics team and included in COSS training. It is also inconsistent
with the 30-minute period over which significant vigilance degradation will occur, according to most
research.
RAIB has concluded, on the basis of existing research, that vigilance degradation is a ‘hard-wired’ part
of the human condition and is not a ‘skill’ that can be trained because:

All individuals are susceptible; and

Self-monitoring for vigilance degradation is unreliable16.
Although training is useful to raise awareness of these risks, it is unlikely to mitigate them
completely. This means that the vigilance problem is best addressed through design of the task or
equipment; issues addressed by the recommendations in this report.
Network Rail modified its recommendation handling process in October 2014 because it recognised
the previous process required improvement. This involved a revision to its Investigations Handbook
which now states:
‘Recommendations are made to improve our safety performance so should only be closed when
either:
a) the risk that the recommendation seeks to address has been eliminated; or
b) improved risk mitigation has been implemented.
When considering if the above have been achieved the wording of the recommendation and its intent
should be considered.’
All closure statements are now subject to an independent review by Network Rail’s Corporate
Investigation and Assurance Manager to check that they meet the criteria above.
Further actions may be found in the full report.
Recommendations

Network Rail should reassess the working time limits and duration of breaks applicable to
lookouts and provide staff with appropriately updated instructions and guidance based on
these findings. This reassessment should make use of current research into vigilance activities
akin to railway lookout duties.

Network Rail should reassess the safe system of work hierarchy, taking account of evidence
from LOWS related incidents and the risk associated with using unassisted (flag) lookouts. If
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
justified by the results of current tests of Semi-Automatic Track Warning Systems, where
workforce warnings are initiated using automatic train detection, Network Rail should include
such equipment within the hierarchy. If appropriate, Network Rail should specify any
circumstances in which this should be used in preference to LOWS.
Back to top
29 July
Latvia: Fatal shunting accident at Skirotava, 7 September 2014
For a summary in English, click here: LINK
At 06:17 (local time) on 7 September 2014, a
shunter was struck and killed by a runaway rake of
tank wagons in the hump marshalling yard at
Skirotava.
At the time of the incident, the yard was
undergoing reconstruction, meaning that its
automatic switches and crossings were being
operated manually. This gave the shunter the
additional responsibility of operating the point
levers.
The investigation concluded the immediate cause of the accident to be that the shunter did not
check that the wagons were moving and walked on to the line just in front of them before he was run
over. The report added that fatigue – as a result of his increased workload – may have caused his
‘temporary loss of concentration’. There is also a suggestion that personal circumstance may also
have distracted him.
Recommendation

The infrastructure manager should examine the possibility of reducing shunters’ working
environment risk factors, where there are changes in the workload and responsibilities of staff
members. It should also provide training opportunities regarding drowsiness and fatigue.
Back to top
30 July
UK: Electrical arcing and fire and parting of the overhead line at Walkergate, 11
August 2014
For the full report, click here: LINK
At around 18:56 on Monday 11 August 2014, a Tyne and Wear Metro train at Walkergate station
developed an electrical fault in equipment under the rear car, which tripped the power supply to the
overhead wire. About a minute later, the power was remotely restored by a power controller and a
fire started in the faulty equipment. The fault drew a high current from the overhead wire through
the car’s pantograph, causing localised overheating and, after about 18 seconds, the wire parted. The
loose ends of the live wire flailed around the train roof, showering sparks, and one end fell on the
platform. A second power controller happened to observe events on station CCTV and power to the
overhead line was disconnected. The parted wire had remained live for approximately 14 seconds.
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
At the time of the accident, the train doors were closed for departure and there were no passengers
on the platform. About 30 passengers got out of the train after the power was turned off. There were
no reported injuries, although passengers were evidently distressed.
A sustained high current was drawn because the electrical fault occurred in a part of the train’s
power circuit, which was not protected by on-train equipment, and which could only be detected by
the overhead power supply protection equipment. However, because of the way the power was
switched back on, the level of current drawn by the fault was not sufficient to activate that
protection immediately. The underlying cause of the accident was the ineffective management of
risks created at the interface between system components, comprising the power supply, power
control and the train.
RAIB observed that the arrangements between the infrastructure operator, Nexus, and the train
operator, DB Regio Tyne and Wear, did not effectively facilitate the sharing of relevant health
and safety information on risks created within the system. It also observed deficiencies in the
competence management of the power control function and in the regime for assuring the
continued integrity of some electrical protection equipment.
Recommendations

Nexus should review its safety management system to ensure that it provides an adequate
framework for the management of its shared risks. Nexus should also review the effectiveness
of current arrangements with DBTW with a view to reaching a more effective arrangement on
the exchange of relevant safety information to facilitate the management of shared risks.

Nexus together with DBTW should identify (or review) and assess jointly created risks that
occur at all interfaces between the infrastructure, power operations and trains. This should
include the use of suitable risk assessment methodologies appropriate for identifying potential
failure modes and their consequences, and a recognised technique for assessing the extent to
which additional mitigations are required to reduce the risk as low as reasonably practicable.
To this end, Nexus and DBTW should ensure that they have access to, and utilise, competent
advice on conducting assessments of system-wide risks.

Nexus and DBTW should together complete the on-going review of procedures and practices
followed by power controllers, with a view to providing a codified set of procedures, which
have been appropriately risk assessed. Such procedures should be briefed out to power
controllers and linked to the power controllers’ training and competence management
systems.
Back to top
Produced by RSSB
Author: Dr Greg Morse
Email address: Greg.Morse@rssb.co.uk
Download