Boeing 737 MAX Crashes – A Systemic Failure of Governance, Risk & Assurance

Deadly 737 Max Crashes Were ‘Horrific Culmination’ Of Failures By Boeing And FAA, House Report

Boeing 737 MAX Crashes – A Systemic Failure of Governance, Risk & Assurance

Case Overview

Between 2018 and 2019, two fatal crashes involving the Boeing 737 MAX aircraft—Lion Air Flight 610 and Ethiopian Airlines Flight 302—resulted in the deaths of 346 people.

A 2024 U.S. House investigation concluded that the crashes were the “horrific culmination” of systemic failures by Boeing and its regulator, the Federal Aviation Administration (FAA).

The investigation highlighted profound weaknesses in corporate governance, safety culture, risk management, regulatory oversight, and assurance mechanisms, rather than a single technical fault.

 

What Happened

  • Boeing introduced the MCAS (Maneuvering Characteristics Augmentation System) to compensate for design changes in the 737 MAX.
  • MCAS relied on a single angle-of-attack sensor, creating a critical single point of failure.
  • Pilots were not informed or trained on MCAS behavior.
  • Internal warnings from engineers were ignored or downplayed.
  • The FAA relied heavily on self-certification by Boeing, limiting independent scrutiny.
  • After the first crash, lessons were not acted upon decisively, leading to a second fatal accident.

 

Key Failures Identified

Governance & Leadership Failure

  • Safety was subordinated to cost, speed, and competitive pressure.
  • Board-level oversight of safety risks was weak and fragmented.
  • Escalation mechanisms for safety concerns failed

Risk Management Breakdown

  • Critical risks associated with MCAS were under-identified and under-assessed.
  • Over-reliance on assumptions rather than stress-tested scenarios.
  • Failure to treat safety risk as an enterprise-level strategic risk.

Assurance & Controls Failure

  • Inadequate independent testing and validation.
  • Weak internal challenge and ineffective “second line” assurance.
  • Limited regulatory challenge due to delegated authority arrangements.

Regulatory Oversight Failure

  • FAA lacked sufficient capacity and independence.
  • Excessive reliance on manufacturer self-reporting.
  • Delayed regulatory intervention despite warning signals.

 

Consequences

  • 346 fatalities and irreversible human loss.
  • Global grounding of the 737 MAX fleet for nearly two years.
  • Severe reputational damage to Boeing.
  • Billions of dollars in financial losses and compensation.
  • Loss of trust in aviation certification systems.
  • Fundamental reforms proposed for FAA oversight and aircraft certification.

 

Risk & Governance Lessons Learned

Area

Key Lesson

Tone from the Top

Safety culture must be demonstrably prioritized over commercial pressure

Risk Identification

Low-probability, high-impact risks must be treated as existential

Controls

Single-point failures are unacceptable in safety-critical systems

Assurance

Independent assurance must be genuinely independent

Regulation

Regulators must retain authority, expertise, and challenge capability

Learning

Early warning signals must trigger decisive action, not delay

 

Start Your Learning Journey with GLOMACS

Ready to take the next step in your professional development? Explore our wide range of accredited training courses or speak with our learning advisors to find the perfect fit for your goals.