MEDA (Maintenance Error Decision Aid)

The Maintenance Error Decision Aid was developed by Boeing Commercial Airplanes in collaboration with Alaska Airlines, British Airways, and United Airlines between 1992 and 1995, with the first published MEDA results appearing in the Boeing AERO magazine in 1995. The development was a direct response to growing evidence that maintenance errors were a significant — and systematically underinvestigated — causal factor in aviation accidents and serious incidents. Boeing's foundational analysis found that maintenance errors contributed as causal or contributory factors in approximately 12–15% of major hull-loss accidents worldwide, with contributing-factor presence in incidents running considerably higher. The agency investigation of Aloha Airlines Flight 243 (1988, fuselage rupture from widespread metal fatigue — a maintenance-oversight event) and British Midland Flight 092 (Kegworth, 1989 — engine shut down after technicians applied incorrect maintenance procedures) reinforced the systemic nature of maintenance-error causation.

MEDA's conceptual foundation is James Reason's organizational accident model, published in Human Error (Cambridge University Press, 1990) and further developed in Managing the Risks of Organizational Accidents (Ashgate, 1997). Reason's Swiss cheese model describes accident causation as the alignment of multiple latent and active failure layers — organizational influences, unsafe supervision, preconditions, and unsafe acts — rather than a single technician error. MEDA operationalizes this model for the maintenance environment by organizing contributing factors into approximately 13 structured categories: information (written or verbal procedures, work cards, task cards, maintenance manuals); equipment and tools; aircraft design and configuration; job or task factors; technical knowledge and skills; individual factors (fatigue, physical condition, time constraints); environment and facilities; organizational factors; leadership and supervision; communication; human factors program maturity; and other. The investigation form is completed by the maintenance person who made the error, together with their supervisor, immediately following the error event — capturing the contributing-factor chain while it is still fresh and before normalization of deviance begins to filter the account.

The MEDA process has five steps: (1) event identification, in which the maintenance supervisor or quality assurance inspector determines that a maintenance error has occurred (incorrect installation, missed inspection, wrong-torque application, incorrect part fitted, shift-handover miscommunication, etc.); (2) decision to investigate using MEDA — not every error requires a full MEDA investigation, but errors with actual or potential safety significance are routed to the formal process; (3) MEDA investigation, in which the structured form is completed by the maintenance person and supervisor in an open, non-punitive interview; (4) contributing-factor analysis, which reviews the completed form to identify which contributing-factor categories were present and which corrective actions at the systemic level would reduce future error likelihood; and (5) feedback to the maintenance workforce on investigation findings and corrective actions. The feedback loop is not optional — it is the mechanism through which MEDA builds the just-culture environment required for honest future reporting.

Regulatory adoption of MEDA principles is now widespread. FAA Advisory Circular AC 120-72A (Maintenance Human Factors Training) cites MEDA as the established industry methodology for maintenance error investigation and recommends it as the basis for operator maintenance human factors programs. EASA Part-145 §145.A.65 (Safety Policy and Occurrence Reporting) requires that Part-145 approved maintenance organizations establish a safety policy that includes maintenance error investigation, and AMC 145.A.30(e) specifies that human factors training must cover error investigation techniques consistent with the MEDA approach. ICAO Doc 9824 (Human Factors Guidelines for Aircraft Maintenance Manual, 2003) integrates MEDA methodology throughout the maintenance error section. The Transport Canada Civil Aviation publication TP 13881E (Human Performance in Aviation Maintenance) references MEDA as the primary structured investigation tool for Canadian maintenance organizations.

MEDA is distinct from but complementary to HFACS-MX (Human Factors Analysis and Classification System — Maintenance), the parallel framework developed by researchers Scott Shappell and Douglas Wiegmann and used primarily by NTSB investigators, academic researchers, and audit programs for post-hoc classification of maintenance accidents in the aggregate. MEDA is the operator-side investigation tool used immediately after an error occurs; HFACS-MX is the research and audit tool applied retrospectively to classified incident/accident databases. A mature maintenance human-factors program uses MEDA for real-time investigation and HFACS-MX-aligned analysis for safety trend identification across the MEDA database over time. This data-over-time application is where the safety dividend of MEDA becomes measurable: British Airways reported a 50% reduction in maintenance errors in the two years following MEDA implementation in their initial program, and Alaska Airlines reported similar error-reduction results in their published post-implementation studies.

The critical enabling condition for MEDA is a just culture within the maintenance organization. If maintenance technicians believe that completing a MEDA form honestly will result in disciplinary action, counseling, or inclusion in their personnel file as a negative mark, they will complete the form in the most defensible way possible — identifying the minimum contributing factors, avoiding any description of supervision failures, and suppressing any mention of procedural ambiguity or inadequate tooling. The result is a MEDA database populated with useless forms and an unimproved error rate. FAA InFO 08006 and EASA Safety Information Bulletin SIB 2011-09 both address the relationship between just culture and maintenance safety reporting, and regulators auditing maintenance organization SMS programs specifically look for evidence that MEDA investigations are complete and candid rather than perfunctory.

For Part-145 organizations operating alongside an ATO or AOC, the interface between maintenance errors and flight operations safety is a specific audit focus. An incorrectly torqued fastener discovered during a pre-flight inspection is both a maintenance event (requiring a MEDA investigation under Part-145 QA) and a flight safety event (requiring an occurrence report under the operator's SMS). The organizational structure must define which safety management system owns the event, how it flows between systems, and how the corrective actions from the MEDA investigation are communicated to the operations safety department. Combined ATO/AOC/Part-145 operators with a single integrated SMS platform have a structural advantage in routing these cross-system events correctly.

Aviatize's safety management module supports the MEDA investigation workflow as a structured occurrence-report subtype. When a maintenance error is identified — via a squawk, a quality-assurance inspection finding, or a technician self-report — the platform routes the event to a MEDA-format investigation form that captures the 13 contributing-factor categories in structured data fields rather than free text. This makes cross-event analysis possible: after six months of MEDA investigations, the platform can surface that information-related factors (ambiguous work cards, unclear task card language) are the dominant contributing category for a specific aircraft type or a specific maintenance task, which drives a targeted corrective action at the documentation level rather than a generic training response.

The maintenance execution module links each completed MEDA investigation to the underlying work order, release to service, and parts record, maintaining the full audit trail that Part-145 QA audits require. For operators with an integrated ATO or AOC, the compliance and auditing module routes MEDA findings that have cross-system safety implications — any error with actual or potential effect on airworthiness at the point of release to service — to the SMS occurrence log and the accountable manager's safety review queue, ensuring that the corrective action loop closes in both the maintenance and operations environments.