Signing for a Duplicate Inspection That Was Never Performed
After replacing an elevator control cable on a Cessna 208, a licenced engineer completes the rigging check and then asks a colleague to perform the required duplicate inspection. The colleague is already late for another job and says, 'You've done it, just sign both boxes; I'll trust you.' The engineer signs the first box and, after a pause, signs the second box with the colleague's initials. The aircraft is due for a training flight in 45 minutes. The maintenance manual requires an independent check of cable tension, turnbuckle safetying, and full-range movement by a second qualified person. No second check is actually performed. The engineer later finds a turnbuckle lockwire that is not correctly twisted.
1. Explain why signing for the colleague is a serious human-factors failure, not just a paperwork error.
Read the worked answer
Duplicate inspection is a deliberate independent barrier: a second qualified person is meant to catch rigging errors, wrong cable routing, incorrect tension and unsafe turnbuckles. Signing both boxes removes that barrier entirely. The signature is not a comment on the first engineer's competence; it is evidence that an independent check occurred. Here, time pressure, a favour to a colleague and a normalised shortcut combined to defeat the barrier. The engineer may also have been influenced by authority or friendship, and by the expectation that their own work was correct. The later incorrect lockwire shows exactly the kind of defect the second check should have found. This is a violation that undermines the maintenance release, not a minor administration issue. It also creates a false record that may mislead future engineers and investigators.
2. What should the engineer do immediately after discovering the incorrect lockwire, and what should happen to the aircraft?
Read the worked answer
The engineer should stop the release process, quarantine the aircraft and formally report the false duplicate signature to the maintenance supervisor or quality manager. The full elevator control system should be re-inspected, including cable tension, turnbuckle safetying, routing, clearances and full-range movement. The lockwire must be corrected, and an independent qualified person must perform the duplicate inspection properly this time. The maintenance record should be corrected transparently, not altered to hide the original entry. The aircraft should not fly until the inspection is complete and the release is properly certified. A mandatory occurrence report should be considered because the aircraft may have been returned to service without a required independent check. The engineer should also reflect on the pressure that led to the shortcut and report it so the organisation can address the system cause.
3. What organisational defences make duplicate inspection resistant to this kind of pressure?
Read the worked answer
The organisation should make duplicate inspection a genuine two-person event: the second person must be present, competent and independent, with separate sign-off boxes and a requirement to record the time and method of the check. Work scheduling should give enough time for the second check rather than treating it as a formality before departure. Training should explain why the barrier exists, using examples where a second check caught a fatal rigging error. Supervision should be visible where duplicate inspection is required, and audits should compare signatures with staff rosters and task timings. A just culture should encourage reporting of pressure and near misses, while also holding deliberate false signatures accountable. The goal is to make shortcuts difficult and to ensure the second engineer has both the time and the authority to say no.