Boeing 737 MAX
Boeing 737 MAX: How MCAS, Certification and Organisational Failures Contributed to Two Fatal Crashes
In October 2018 and March 2019, two Boeing 737 MAX aircraft crashed, killing 346 people. MCAS was a central factor in both crashes. Accident investigations identified MCAS design, erroneous angle-of-attack inputs, certification assumptions, training and other contributing factors. This investigation reveals how commercial pressure overrode engineering integrity and what project leaders must learn.
Watch: Boeing 737 MAX
Prefer the episode page? Watch this investigation as a documentary episode →
Contents
- Executive summary
- Watch the documentary
- Key facts
- Executive dashboard
- What happened
- Why it matters
- Timeline
- Root cause analysis
- Frameworks applied
- Executive lessons
- Executive recommendations
- Governance assessment
- Insider take
- Evidence
- Scope & limitations
- Everything from this investigation
- Sources
- Author & review
- FAQs
What Happened
On 29 October 2018, Lion Air Flight 610 plunged into the Java Sea 13 minutes after take-off, killing all 189 people on board. Less than five months later, on 10 March 2019, Ethiopian Airlines Flight 302 crashed six minutes after departure from Addis Ababa, killing 157 more. Both aircraft were brand-new Boeing 737 MAX 8s. Both went into the same fatal dive. The connecting factor was MCAS — the Maneuvering Characteristics Augmentation System. Boeing had installed it to counter the pitch-up tendency created by the MAX's larger, forward-mounted engines at high angles of attack, so the MAX would handle like earlier 737s. But MCAS relied on a single angle-of-attack sensor. When that sensor fed wrong data, MCAS repeatedly pushed the nose down into an unrecoverable dive. The most chilling part: pilots were not told about MCAS before the first crash — the system did not appear in the flight crew operations manual, according to the House Transportation Committee investigation. Congressional investigators found that Boeing sought to minimise additional pilot-training requirements and that MCAS was omitted from flight-crew manuals before the first crash. The FAA delegated certification oversight to Boeing employees. And congressional investigators concluded that the hard questions were never asked at the top of the company.
Why It Matters
The Boeing 737 MAX case redefined how regulators worldwide approach software safety in safety-critical systems. The FAA's delegation of oversight to Boeing employees — an arrangement that subsequent reviews found created oversight weaknesses — created a structural blind spot that no individual competence could overcome. EASA subsequently demanded its own flight testing precisely because trust in the OEM-regulator relationship had been fundamentally broken. Programme directors in transport, healthcare, and energy should apply the same scepticism to any vendor claiming their proprietary system needs no external validation. The Project Failure Pyramid™ traces how a $1M pilot retraining decision cascaded into direct costs publicly reported to exceed $20 billion.
-
proposal
2011-08
Boeing launches the 737 MAX programme as a re-engined derivative of the 737NG to compete with the Airbus A320neo.
-
design
2016-03
Boeing expands MCAS authority during flight testing so it can command larger, repeated stabilizer movements at low speed; the change is not fully briefed to FAA technical staff.
-
approval
2017-03
FAA grants the amended type certificate for the 737 MAX 8; MCAS is omitted from flight crew manuals and differences training.
-
opening
2017-05
The 737 MAX enters commercial passenger service with Malindo Air.
-
failure
2018-10-29
Lion Air flight JT610 crashes into the Java Sea 13 minutes after takeoff from Jakarta, killing all 189 people on board; erroneous AOA data triggers repeated MCAS nose-down trim.
-
warning
2018-11
FAA issues Emergency Airworthiness Directive 2018-23-51 and Boeing issues an operations manual bulletin warning of uncommanded stabilizer trim from erroneous AOA input.
-
failure
2019-03-10
Ethiopian Airlines flight ET302 crashes six minutes after takeoff from Addis Ababa, killing all 157 people on board, again after MCAS activation from erroneous AOA data.
-
delay
2019-03-13
FAA issues an Emergency Order of Prohibition grounding the 737 MAX; the worldwide fleet remains grounded for roughly 20 months.
-
inquiry
2019-09
NTSB issues safety recommendation report ASR-19-01 criticizing the assumptions about pilot response used in the 737 MAX system safety assessment.
-
inquiry
2019-10
JATR publishes findings on the flawed certification of the 737 MAX flight control system; KNKT publishes its final JT610 report citing MCAS design, certification, maintenance and crew factors.
-
delay
2020-01
Boeing discloses that the 737 MAX crisis is expected to cost about $18.6 billion (compensation, production and abnormal costs), later commonly cited as $18.7 billion and counting.
-
inquiry
2020-09
U.S. House Transportation & Infrastructure Committee publishes its final investigative report documenting technical design failures, lack of transparency, and FAA oversight breakdowns.
-
opening
2020-11
FAA rescinds the grounding order and issues an airworthiness directive allowing the 737 MAX to return to service with mandated design changes and training.
-
settlement
2021-01
Boeing enters a deferred prosecution agreement with the U.S. Department of Justice over the 737 MAX fraud conspiracy, agreeing to pay more than $2.5 billion.
-
failure
2024-01
A door plug blows out of Alaska Airlines Flight 1282, a 737 MAX 9, shortly after take-off; the FAA grounds 171 MAX 9 aircraft for inspections and audits Boeing's production quality.
-
inquiry
2024-05
The U.S. Department of Justice determines that Boeing breached the 2021 deferred prosecution agreement by failing to maintain an effective compliance and ethics programme.
-
settlement
2024-07
Boeing agrees to plead guilty to the conspiracy charge over the 737 MAX programme, under a deal requiring an additional fine and an independent compliance monitor.
-
settlement
2024-12
The federal judge overseeing the case rejects the plea agreement, leaving the charge unresolved.
-
settlement
2025-11
The DOJ instead reaches a non-prosecution agreement with Boeing, and the court dismisses the charge in November 2025.
Root cause through the Project Failure Pyramid™ lens
The visible indicators: delays, cost overruns, quality defects, team attrition
Operational breakdowns: poor risk management, scope creep, inadequate resources
The House Transportation Committee documented significant competitive and production pressures during the MAX programme, driven by the race to compete with the Airbus A320neo. Boeing employees raised safety concerns about the programme; the House committee found that production pressure took precedence, according to congressional investigators. A delayed project is expensive; a compromised project is fatal. When competitive pressure overrides your quality gates, you are not accelerating — you are accumulating catastrophic risk.
Foundational decisions: overconfidence, pressure to commit, culture that suppresses bad news
Lessons for Leaders
Never Hide Hardware Problems with Software Patches
Boeing introduced MCAS as part of the MAX flight-control architecture following aerodynamic changes associated with the aircraft's configuration. When physics and software collide, physics always wins. If your programme faces material handling-characteristic changes, address them at the source — never rely on a workaround that end-users do not know exists.
Competitor Panic Destroys Project Governance
The House Transportation Committee documented significant competitive and production pressures during the MAX programme, driven by the race to compete with the Airbus A320neo. Boeing employees raised safety concerns about the programme; the House committee found that production pressure took precedence, according to congressional investigators. A delayed project is expensive; a compromised project is fatal. When competitive pressure overrides your quality gates, you are not accelerating — you are accumulating catastrophic risk.
Compliance Teams Must Have Veto Power
Boeing employees raised safety concerns about the MAX programme, and the House committee found that production pressure took precedence, according to congressional investigators. When the compliance function reports to the people it is supposed to police, you do not have oversight — you have theatre.
Continue Investigating
The Weekly Brief — one investigation, one executive lesson and one project warning sign each week.
Subscribe freeExecutive Recommendations
Do not rely on software alone to address material handling-characteristic changes without transparent validation, training and independent assurance that end-users can see.
Give compliance and safety functions independent veto power over launch and certification decisions.
Prohibit regulator-oversight structures where the regulated entity certifies its own safety-critical changes.
Treat competitive pressure as a risk register item, not a reason to compress quality gates.
Mandate disclosure of any flight-critical system to operators and crews before entry into service.
Governance Assessment
“Executives often believe they can shortcut the planning process to beat the competition without consequences. Boeing assumed they could mask a physical hardware reality with a hidden software system just to avoid pilot training costs — a widely reported agreement with Southwest Airlines would have cost Boeing about $1 million per aircraft if simulator training became mandatory. But physics and human operators do not care about your stock price. When you prioritise your sales timeline over your engineering integrity, you are not saving time — you are just delaying a catastrophe that will cost you direct costs publicly reported to exceed $20 billion, tens of billions of dollars in market capitalisation at the crisis's depth, and 346 innocent lives.”Ramesh's Insider Take — opinion
Documentary Evidence
Aircraft Accident Investigation Report KNKT.18.10.35.04 (Lion Air JT610 final report)
KNKT (hosted by U.S. House Committee Repository) · 2019-10-25
Establishes that MCAS relied on a single AOA sensor, that Boeing's pilot-response assumptions during design and certification were flawed, and that the absence of MCAS from manuals and training contributed to the crash.
Investigation Report on Accident to the B737-MAX8 Reg. ET-AVJ, Report No. AI-01/19 (Ethiopian Airlines ET302 final report)
Ethiopian Aircraft Accident Investigation Bureau (hosted by French BEA) · 2022-12-23
Establishes repetitive uncommanded nose-down MCAS inputs from erroneous AOA data as the probable cause of the ET302 crash; NTSB and BEA publicly contested the report's exclusion of crew factors.
Final Committee Report: The Design, Development & Certification of the Boeing 737 MAX
U.S. House Committee on Transportation & Infrastructure · 2020-09
After an 18-month investigation, documents Boeing's production pressures, concealment of MCAS information from pilots and regulators, and FAA delegation and oversight failures that permitted two preventable crashes.
FAA Emergency Order of Prohibition, 13 March 2019
U.S. Federal Aviation Administration · 2019-03-13
Primary legal instrument grounding the 737 MAX fleet, recording the wreckage and satellite data that linked ET302 and JT610 and the safety rationale for the 20-month grounding.
Deferred Prosecution Agreement, United States v. The Boeing Company
U.S. Department of Justice · 2021-01-07
Establishes that Boeing, through two 737 MAX technical pilots, conspired to defraud the FAA's Aircraft Evaluation Group about MCAS, and quantifies the >$2.5 billion resolution including a criminal penalty and airline-customer compensation.
Scope & Limitations
This investigation is based on the public record available through November 2025: the KNKT and EAIB final accident reports, the U.S. House Transportation Committee investigation, NTSB and JATR safety reviews, FAA orders, and U.S. Department of Justice filings. Where the record is contested we say so: the weight given to crew factors in the ET302 crash differs between the EAIB final report and other official reviews and remains disputed. Cost figures are drawn from Boeing's own disclosures and public reporting and are approximate — different accounts total the crisis's direct costs differently. The interpretation of what this record means for project leaders, including the Insider Take and the executive lessons, is Project Insider Asia's editorial judgement, not the finding of any official body.
Everything from this investigation
One investigation. Many outputs. Everything derived from this case, connected in one place.
Read & download
- Executive summaryRead the executive summary
- PDF briefDownload the PDF brief
- TimelineExplore the timeline
- EvidenceReview the documentary evidence
- SourcesSee the source list
- Framework analysisRead the framework analysis
Watch & listen
- DocumentaryWatch the documentary
- Episode pageVisit the episode page
Share & follow
- NewsletterGet this investigation by email
Connected research
- CompaniesBoeing
- CountriesUnited States
- IndustriesAerospace & Space
- Related investigationsQueensland Health Payroll · Mars Climate Orbiter · Denver Airport Baggage System
- Final Committee Report: The Design, Development & Certification of the Boeing 737 MAX U.S. House of Representatives, Committee on Transportation & Infrastructure · 2020-09 · congressional-investigation-report
- Aircraft Accident Investigation Report KNKT.18.10.35.04: PT. Lion Mentari Airlines Boeing 737-8 (MAX); PK-LQP (Lion Air JT610 final report) Komite Nasional Keselamatan Transportasi (KNKT), Indonesia; official copy hosted by U.S. House Committee Repository (hearing support document) · 2019-10-25 · official-accident-investigation-report
- Investigation Report on Accident to the B737-MAX8 Reg. ET-AVJ Operated by Ethiopian Airlines, Report No. AI-01/19 (final report) Federal Democratic Republic of Ethiopia, Aircraft Accident Investigation Bureau (EAIB); hosted by French BEA · 2022-12-23 · official-accident-investigation-report
- Safety Recommendation Report ASR-19-01: Assumptions Used in the Safety Assessment Process and the Effects of Multiple Alerts and Indications on Pilot Performance U.S. National Transportation Safety Board (NTSB) · 2019-09-19 · official-safety-recommendation-report
- Emergency Order of Prohibition (grounding of Boeing 737-8 and 737-9 aircraft) U.S. Federal Aviation Administration (FAA) · 2019-03-13 · regulator-order
- Summary of the FAA's Review of the Boeing 737 MAX U.S. Federal Aviation Administration (FAA) · 2020-11 · regulator-review-report
- Boeing 737 MAX Flight Control System: Observations, Findings, and Recommendations (JATR report) Joint Authorities Technical Review (JATR), submitted to the FAA · 2019-10-11 · international-technical-review
- Deferred Prosecution Agreement, United States v. The Boeing Company (737 MAX fraud conspiracy, >$2.5 billion) U.S. Department of Justice · 2021-01-07 · deferred-prosecution-agreement
- Boeing Charged with 737 MAX Fraud Conspiracy and Agrees to Pay over $2.5 Billion (press release) U.S. Department of Justice, Office of Public Affairs · 2021-01-07 · official-press-release
Frequently Asked Questions
MCAS was a central factor in both crashes. Accident investigations identified MCAS design, erroneous angle-of-attack inputs, certification assumptions, training and other contributing factors.
Direct costs have been publicly reported to exceed $20 billion, including compensation to airlines, victim settlements, production halts, and regulatory fines. The crisis also erased tens of billions of dollars in market capitalisation at its depth. Boeing also faced a $2.5 billion deferred prosecution agreement with the US Department of Justice.
MCAS (Maneuvering Characteristics Augmentation System) was an automated flight control system designed to prevent stalls by pushing the aircraft nose down when it detected a high angle of attack. Pilots were not fully informed about the system or trained on how to disable it.
Multiple parties shared responsibility: Official investigations identified failures involving Boeing's design and management processes, FAA oversight, certification assumptions and communication about MCAS. Boeing's board was also criticised for inadequate governance. In 2021 Boeing entered a $2.5 billion deferred prosecution agreement with the US Department of Justice. CEO Dennis Muilenburg left the company in December 2019; he was never criminally charged but settled an SEC enforcement action in 2022. The only employee criminally charged, chief technical pilot Mark Forkner, was acquitted in 2022.
The key lessons are: (1) Never hide hardware problems with software patches, (2) Ensure compliance teams have independent veto power, (3) Never let competitive pressure override quality gates, (4) Always inform end-users of system changes, and (5) Build a culture where engineers can raise concerns without career risk.
The 737 MAX was grounded worldwide in March 2019 after the Ethiopian Airlines crash. The FAA recertified the aircraft in November 2020 after Boeing made significant software changes, enhanced pilot training requirements, and underwent intensive regulatory review.
In January 2024 a door plug blew out of an Alaska Airlines 737 MAX 9 in flight, grounding the variant again and restarting federal scrutiny of Boeing's production quality. In 2024 the US Department of Justice found Boeing had breached the 2021 deferred prosecution agreement; a proposed guilty-plea deal was rejected by a federal judge in late 2024. In 2025 the DOJ instead reached a non-prosecution agreement with Boeing, and in November 2025 the criminal charge was dismissed.
