Corrective Action, Reassessment & Return to Service
How failure evidence is converted into design, process, inspection or operational changes and subsequently verified.
From Root Cause to Corrective Action
Corrective action is the engineering response to the root-cause conclusion. Its purpose is to remove or control the causal mechanism — not merely to strengthen the failed location. A corrective action that addresses the failure mode without addressing the root cause may appear to fix the problem while simply moving the failure elsewhere or delaying recurrence. The corrective action must be traceable to the root cause: each element of the action should be linked to a specific causal factor identified in the investigation.
A CORRECTIVE ACTION THAT ONLY STRENGTHENS THE FAILED LOCATION MAY MOVE THE FAILURE ELSEWHERE IF THE LOAD PATH IS NOT UNDERSTOOD. The action must address the causal mechanism, not the symptom.
Types of Corrective Action
Corrective action can take many forms, depending on the root cause. The appropriate type depends on what causal mechanism the investigation identified.
| Action Type | When Appropriate | Example |
|---|---|---|
| Geometry change | Stress concentration or inadequate cross-section is the root cause | Increase fillet radius, add relief, modify load path |
| Material change | Material properties were inadequate for the environment or loading | Upgrade to higher toughness, better corrosion resistance |
| Preload change | Insufficient or excessive clamp load contributed | Revise torque specification, improve torque control process |
| Manufacturing change | Manufacturing defect or process variation was the root cause | Tighten tolerance, improve inspection, change process |
| Inspection | Crack growth is tolerable if detected before critical size | Add inspection at appropriate interval using capable method |
| Load restriction | Actual loads exceed design assumptions | Restrict operating envelope, add load monitoring |
| Operational change | Operating procedure or usage pattern contributed | Revise operating procedures, add training |
| Repair | Existing hardware requires restoration to airworthy condition | Blend, patch, reinforce or replace affected hardware |
| Replacement | Hardware cannot be economically repaired or design change is required | Replace with redesigned component |
| Increased monitoring | Failure mechanism is understood but not fully eliminated | Add instrumentation, periodic inspection or health monitoring |
Structural Reassessment
After a corrective action is defined, the modified structure must be reassessed — by analysis, test or both. The reassessment confirms that the corrective action addresses the root cause and that the modified structure is adequate for the design loads. The reassessment should use the same rigour as the original design analysis — and, where the failure revealed a weakness in the original analysis, it should use improved methods. The reassessment should also check that the corrective action has not introduced a new weakness — a local strengthening that moves the critical location elsewhere.
- Reanalyse the modified structure — using the corrected analysis methods
- Check that the failure mode is addressed — margin against the root-cause mechanism
- Check that new failure modes are not introduced — local strengthening may move the critical location
- Verify the load path — has the corrective action changed the load distribution?
- Assess the full structure — not only the failed location
Repair Substantiation
If the corrective action involves a repair — blending a crack, adding a reinforcement, replacing a section — the repair itself must be substantiated. The repair changes the geometry, the material condition and possibly the load path. The substantiation must demonstrate that the repaired structure is adequate for the remaining service life. The repair analysis should consider the as-repaired condition, including any residual stress from the repair process, any material change from the repair (heat affected zone, bondline) and any change in inspectability.
ANALYSIS CONSIDERATION: A repair changes the structure. The repaired condition must be analysed and substantiated — not assumed equivalent to the original. The repair may introduce residual stress, alter the load path or change the inspectability.
Fleet and Production Applicability
A failure in one component raises questions about the rest of the fleet or production batch. If the root cause is a design deficiency, all similar components may be affected. If the root cause is a manufacturing deviation, other components from the same batch may be affected. If the root cause is an operational exceedance, other components with similar usage may be affected. The corrective action must consider the population — not only the failed component. This may require fleet-wide inspection, batch-specific investigation or usage review across the affected population.
- Design deficiency — applicable to all components of the same design
- Manufacturing deviation — applicable to the same batch, supplier or process period
- Operational exceedance — applicable to components with similar usage history
- Material batch — applicable to components built from the same material lot
- Assembly process — applicable to joints assembled by the same process or personnel
Recurrence Prevention
The corrective action must prevent recurrence — not just address the current failure. This requires considering whether the root cause could produce similar failures in other locations, other components or other conditions. A design change that fixes one fastener hole may leave identical holes elsewhere vulnerable. A process change that fixes one batch may not prevent future batches from having the same problem if the process control is not improved. Recurrence prevention requires thinking beyond the specific failure to the general condition that allowed it.
- Identify all similar locations, components or conditions that could experience the same root cause
- Assess whether the corrective action applies to each — or whether additional actions are needed
- Verify that the corrective action addresses the causal mechanism, not just the specific instance
- Confirm that process or procedural changes are controlled and will be maintained
- Document the corrective action and its basis for future reference
Verification of Corrective Action
The corrective action must be verified — by analysis, test or both. Verification confirms that the action addresses the root cause and that the modified structure is adequate. Verification is not optional — an unverified corrective action is an assumption, not a solution. The verification should test the specific causal mechanism: if the root cause was fatigue from insufficient preload, the verification should demonstrate that the revised preload eliminates the fatigue risk. If the root cause was stress concentration, the verification should demonstrate that the revised geometry has adequate margin.
FORENSIC CHECK: Does the verification test the specific causal mechanism? A verification that demonstrates general adequacy but does not specifically test the root-cause mechanism is incomplete.
Return to Service
Return to service is the decision that the structure — modified, repaired or replaced — is safe to return to operation. This decision should be based on the verified corrective action, the structural reassessment and the consideration of fleet applicability. The decision should be documented, with the evidence chain from root cause to corrective action to verification clearly traceable. Return to service is not the end of the investigation — it is the engineering decision that the corrective action is adequate, supported by the full body of investigation evidence.
- Corrective action verified — analysis or test confirms adequacy
- Structural reassessment complete — modified structure analysed
- Fleet applicability assessed — other components considered
- Recurrence prevention addressed — general condition controlled
- Evidence chain documented — root cause to corrective action to verification
Key Takeaways
- Corrective action must address the root cause, not merely strengthen the failed location
- Action types include geometry, material, preload, manufacturing, inspection, operational and repair changes
- The modified structure must be reassessed — including checking for new failure modes
- Repair substantiation must consider the as-repaired condition, including residual stress and load path changes
- Fleet and production applicability must be assessed — the root cause may affect more than one component
- Recurrence prevention requires thinking beyond the specific failure to the general condition
- Verification is not optional — an unverified corrective action is an assumption
- Return to service is an engineering decision based on the full evidence chain