{"id":4691,"date":"2012-04-05T20:00:35","date_gmt":"2012-04-06T02:00:35","guid":{"rendered":"http:\/\/atcfreqs.com\/wpblog\/?p=4691"},"modified":"2012-04-05T20:00:35","modified_gmt":"2012-04-06T02:00:35","slug":"eram-is-it-good-enough-or-not","status":"publish","type":"post","link":"https:\/\/atcfreqs.com\/wp\/2012\/04\/05\/eram-is-it-good-enough-or-not\/","title":{"rendered":"ERAM: Is it Good Enough or Not?"},"content":{"rendered":"<p>The Federal Aviation Administration&#8217;s (FAA) En Route Automation Modernization (ERAM) development continues, slowly but surely.<\/p>\n<p>The entire ERAM program was a disaster that the FAA had been in denial about for years. \u00a0In 2009 they were proclaiming the program on time and on budget.<\/p>\n<p>When they started trying to use ERAM at Salt Lake Center (ZLC) they found it was unstable and bug ridden. \u00a0But they had no way to test it other than on live air traffic. \u00a0So they did.<\/p>\n<p>Because timelines were clearly more important to the FAA than safety, in spite of all the problems they went ahead with their plans to deploy ERAM at other facilities (including mine &#8211; Minneapolis Center or ZMP).<\/p>\n<p>However, in the spring of 2010, it finally came to light how bad ERAM really was, and for a few months the FAA took a break from live testing of the system to work on fixing its many problems. \u00a0Then a few months later they started running it again on live traffic at its two keysites, Salt Lake Center (ZLC) and Seattle Center (ZSE).<\/p>\n<p>But after continued testing and development, by spring of 2011, according to an\u00a0Independent Operational Assessment (IOA), the system <em>still<\/em> wasn&#8217;t ready for further deployment. \u00a0The controllers&#8217; union (NATCA) agreed with that assessment.<\/p>\n<p>What was the FAA&#8217;s response to that critical assessment? &#8211; declare\u00a0an In Service Decision (ISD) which meant it could be deployed at other facilities.<\/p>\n<p><a href=\"http:\/\/atcfreqs.com\/wpblog\/?p=3307\" target=\"_blank\" rel=\"noopener\">Some time ago<\/a> I believed NATCA was setting itself up to be a fall guy\/patsy for the failures of ERAM. \u00a0But when the FAA finally asked NATCA for real collaboration with the ERAM program the final nail was put in the coffin.<\/p>\n<p>The instant the FAA asked NATCA to collaborate on ERAM, NATCA was placed in a lose\/lose situation &#8211; they couldn&#8217;t claim to be a critical part of the National Airspace System (NAS) and yet\u00a0<em>not<\/em>\u00a0get involved with ERAM when the FAA conceded they needed help from its controller workforce.<\/p>\n<p>But apparently NATCA also saw the program as an opportunity to be used for political gain. \u00a0NATCA believed they could step in and save ERAM, and thereby show how incompetent the FAA was and how smart they were. \u00a0Unfortunately they didn&#8217;t consider how messed up the ERAM program was.<\/p>\n<p>When NATCA got the opportunity to become partners with the lemons that were ERAM, they decided to make lemonade.<\/p>\n<p>However, that immediately turned NATCA&#8217;s involvement with ERAM into a conflict of interest. \u00a0They suddenly needed ERAM to succeed as much as the FAA did. \u00a0<strong>It was no longer about safety, but politics.<\/strong><\/p>\n<p>Today neither the FAA nor NATCA is willing to openly admit how much development ERAM <em>still<\/em>\u00a0needs, as both have underlying political motives at heart; neither considers the controllers who have to work with it nor the overall safety of the air traffic system.<\/p>\n<p>Case in point, for some time both Salt Lake Center (ZLC) and Seattle Center (ZSE) have been running versions of ERAM neither the FAA nor NATCA is will to run full time at other facilities because of all the known bugs (<em>the known bug count is somewhere around 1000!<\/em>).<\/p>\n<p>But nonetheless, last month my facility ran the same version of ERAM on live air traffic two separate times for a total of 3 days. \u00a0But it was only on the weekend, and apparently people who fly on airplanes through ZMP&#8217;s airspace on the weekend don&#8217;t really count&#8230;<\/p>\n<p>Don&#8217;t get me wrong &#8211; ERAM has made a lot of progress since the FAA last tried running it on live air traffic back in 2009. \u00a0But any air traffic computer system that has over 1000 <em>known<\/em> bugs isn&#8217;t fit for use on live air traffic. \u00a0If there are that many known bugs, one can only speculate as to the number of latent (unknown) bugs still in the software.<\/p>\n<p>I\u2019ve been accused of being an ERAM \u201chater\u201d because of my views on it from the management side of the FAA, and more recently from the air traffic controllers&#8217; union (NATCA) side.<\/p>\n<p>As is typical of people wanting to avoid addressing facts, that\u2019s a gross oversimplification that ignores my complaints and concerns about ERAM.<\/p>\n<p>The truth is that I\u2019m not opposed to ERAM. \u00a0What I object to, and have always objected to, is the way the ERAM program has progressed from its very inception. \u00a0It\u2019s another one of the FAA\u2019s many repeated examples of how <em>not<\/em> to upgrade a system that\u2019s critical to how air traffic controllers do their jobs.<\/p>\n<p>ERAM is an overly ambitious program, the likes of which the FAA has historically proved unable to successfully manage. \u00a0As proof consider the disastrous <a href=\"http:\/\/www.oig.dot.gov\/sites\/dot\/files\/pdfdocs\/av1998113.pdf\" target=\"_blank\" rel=\"noopener\">Advanced Automation System (AAS)<\/a> including the Initial Sector Suite System (ISSS) in the 1980-90s and the<a href=\"http:\/\/www.oig.dot.gov\/sites\/dot\/files\/pdfdocs\/cc2001127.pdf\" target=\"_blank\" rel=\"noopener\"> problems with the Standard Terminal Automation Replacement System (STARS)<\/a> program of late 1990&#8217;s\/early 2000s.<\/p>\n<p>Obviously the FAA thinks more of its ability as an organization to successfully manage these major programs than they\u2019ve repeatedly demonstrated the ability (or lack thereof) in the past.<\/p>\n<p>As I accept that as a given, what I object to most is <a href=\"http:\/\/en.wikipedia.org\/wiki\/Software_release_life_cycle#Alpha\" target=\"_blank\" rel=\"noopener\">alpha<\/a> and <a href=\"http:\/\/en.wikipedia.org\/wiki\/Software_release_life_cycle#Beta\" target=\"_blank\" rel=\"noopener\">beta<\/a> testing software on controllers and the flying public.<\/p>\n<p>I take my job, and its inherent safety critical aspects very seriously.<\/p>\n<p>When the FAA first started running ERAM on live traffic by any standard it was alpha software. \u00a0It was unsafe and shouldn&#8217;t have been used on live air traffic, a fact that was eventually conceded, but not before it was used for many hours on the unsuspecting flying public.<\/p>\n<p>Since then it has been improved, but the last time my facility ran ERAM (last month) the version of the software we ran had over 1000 known bugs. \u00a0By any reasonable standard it still can only be considered beta software.<\/p>\n<p>ERAM was put into use well before it was ready, forcing air traffic controllers into the unfortunate position of working with and around its many shortcomings and problems. \u00a0Today that situation still exists.<\/p>\n<p>Since air traffic uses many analogies with pilots, because of its current state controllers have been forced to act as \u201ctest pilots\u201d with ERAM. \u00a0Test pilots volunteer for that duty, but controllers haven\u2019t been given a choice to \u201ctest fly\u201d ERAM.<\/p>\n<p>Most pilots wouldn&#8217;t be comfortable flying an aircraft they didn&#8217;t think was airworthy. \u00a0But pilots are given the final authority as to whether or not to fly their aircraft. \u00a0Controllers on the other hand don&#8217;t have that choice, and many have very little confidence in the &#8220;airworthiness&#8221; of ERAM.<\/p>\n<p>At the very least, no test pilot would put passengers in aircraft they were testing, but that\u2019s exactly what the FAA has been doing with ERAM.<\/p>\n<p>The software wasn\u2019t tested adequately before acceptance and there was no way to fully test the software other than on live air traffic. \u00a0The fact that testing could only be performed on live air traffic was itself a fundamental design flaw of ERAM.<\/p>\n<p>Additionally the design of ERAM clearly didn\u2019t consider the things controllers need to do their jobs more safely and efficiently. \u00a0As I don\u2019t know what tools the technicians use to keep that system running, I can only assume the same is true for the tools ERAM gives them.<\/p>\n<p>What I do know is that whatever analysis (if any) was put into the examination of how controllers work and what tools would help them do their jobs better is absent from ERAM\u2019s design.<\/p>\n<p>One of the long-running FAA managers\u2019 catchphrases for those criticising their system \u201cupgrades\u201d is that controllers are resistant to change.<\/p>\n<p>While that\u2019s true (controllers don&#8217;t want to re-learn how to do their jobs), it\u2019s also true that I would love (like most other controllers) to have tools to enable me to do my job better.<\/p>\n<p>Instead most often what we get are tools that make parts of our jobs more difficult. \u00a0Parts of ERAM actually make routine parts of controllers\u2019 jobs more tedious.<\/p>\n<p>Most notably, with ERAM, dropping a data tag on an aircraft that a controller is no longer required to monitor is a two step process instead of the current single step process.<\/p>\n<p>Because attention to detail is important in air traffic control, distractions of any form are undesirable for controllers working air traffic. \u00a0However, ERAM has many ways that it <em>creates<\/em> distractions for controllers.<\/p>\n<p>Bugs in ERAM are a distraction. \u00a0Wondering if and when ERAM will crash is a distraction.<\/p>\n<p>But a new \u201cfeature\u201d in ERAM also creates distractions for controllers.<\/p>\n<p>Air traffic control is highly compartmentalized. \u00a0Controllers are delegated a specific section of airspace they are responsible for keeping airplanes moving safely and efficiently in.<\/p>\n<p>There are numerous rules to make sure that the responsibility for keeping aircraft separated in a section of airspace falls on a single controller to avoid confusion. \u00a0Controllers cannot let aircraft enter another\u2019s airspace without permission, and can only give control instructions to aircraft in their airspace.<\/p>\n<p>However, for contingent safety reasons should they notice, controllers are also responsible for pointing out problems they see in adjacent sections of airspace. \u00a0But under the current HOST system though there are few ways for a controller to see or know for sure what is occurring in adjacent airspace.<\/p>\n<p>Thus, in general controllers work their own airspace, separate their own traffic and assume the controllers working adjacent airspace are doing the same; a prudent and reasonable expectation.<\/p>\n<p>But instead of adding tools to ERAM to help controllers <em>better work their own airspace<\/em>, ERAM added the \u201cfeature\u201d of AOI (Area of Interest), expanding the areas in which controllers would be alerted to problems outside their airspace, adding <em>more<\/em> responsibility for controllers to monitor their \u201cneighbor\u2019s\u201d airspace as well as their own. \u00a0The claim is that the AOI will help controllers work more efficiently near their sector boundaries, but because of the way the air traffic rules are written it also expands their responsibility <em>outside<\/em> their sector.<\/p>\n<p>Although to a casual observer it might make sense to have more eyes watching traffic, it starts to blur the lines of compartmentalized responsibility that is one of the cornerstones of air traffic control. \u00a0The end effect is that the ERAM AOI has the potential to distract controllers from monitoring traffic within <em>their own<\/em> sector.<\/p>\n<p>That\u2019s not to mention the various known bugs, little glitches and quirks of ERAM that will be around for some time to come. \u00a0The expectation clearly is that controllers will get used to them and work around them. \u00a0They&#8217;re distractions nonetheless, and those distractions are detrimental to safety.<\/p>\n<p>It was clear that the FAA has always driven more by timelines and budget than safety when it came to ERAM deployment, but now the controllers&#8217; union has political motives as well with regards to ERAM, so they&#8217;re\u00a0both willing to roll the dice and run ERAM on live traffic even though they know it\u2019s not ready.<\/p>\n<p>If ERAM is ready for use on live traffic, then why doesn&#8217;t the FAA and NATCA just use it at all the facilities 24\/7?<\/p>\n<p>The answer is obvious: because they know it&#8217;s <em>not<\/em> ready.<\/p>\n<p>But they&#8217;re running it at more and more facilities nonetheless.<\/p>\n<p>You can&#8217;t have your cake and eat it too.<\/p>\n<p>If both the FAA and NATCA are willing to run ERAM full time at some facilities and part-time at others, how can they argue it&#8217;s not safe to use? \u00a0Air traffic and the people on the aircraft flying at facilities with less traffic, and at busier facilities on the overnight shifts and on the weekends are no less important than those flying elsewhere and at other times.<\/p>\n<p>If it&#8217;s &#8220;safe enough&#8221; (i.e. &#8220;close enough for government work&#8221;) then\u00a0I say just turn it on and let the chips fall where they may. \u00a0Otherwise we still shouldn&#8217;t be running it on live traffic.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Federal Aviation Administration&#8217;s (FAA) En Route Automation Modernization (ERAM) development continues, slowly but surely. The entire ERAM program was a disaster that the FAA had been in denial about for years. \u00a0In 2009 they were proclaiming the program on time and on budget. When they started trying to use ERAM at Salt Lake Center (ZLC) they found it was unstable and bug ridden. \u00a0But they had no way to test it other than on live air traffic. \u00a0So they did. Because timelines were clearly more important to the FAA than safety, in spite of all the problems they went ahead with their plans to deploy ERAM at other facilities (including mine &#8211; Minneapolis Center or ZMP). However, in the[&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,6],"tags":[],"class_list":["post-4691","post","type-post","status-publish","format-standard","hentry","category-air-traffic-control","category-eram"],"_links":{"self":[{"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/posts\/4691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/comments?post=4691"}],"version-history":[{"count":0,"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/posts\/4691\/revisions"}],"wp:attachment":[{"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/media?parent=4691"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/categories?post=4691"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atcfreqs.com\/wp\/wp-json\/wp\/v2\/tags?post=4691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}