Nimrod XV230: when a safety case becomes paperwork
The Haddon-Cave Review found the safety case had become a documentation exercise rather than a genuine risk assessment.
- Programme
- RAF Nimrod XV230
- Year
- 2006
- Sector
- Aerospace & Defence
- Outcome
- Aircraft lost; all 14 crew killed
What happened
Nimrod XV230 was lost in 2006, and all 14 crew were killed.
What was found
The Nimrod Review, led by Charles Haddon-Cave QC, found that the safety case had become a documentation exercise rather than a genuine assessment of risk.
Engineering lesson
A safety case exists to challenge risk. When producing it becomes the goal, it can look complete while no longer testing whether the system is safe.
Assurance must challenge risk with real evidence, not produce paperwork.
The practice this points to
Require every safety claim to be supported by evidence that genuinely addresses the hazard, and review that evidence critically rather than for completeness.
Keep the safety case a living assessment that is challenged as the system and its use change.
Where Kelvora fits
Kelvora is a requirements and assurance platform that links safety claims directly to the evidence behind them, so reviewers can examine the evidence rather than the document. It is intended to support critical review by engineers, not to replace it.
Sources
- Charles Haddon-Cave QC, The Nimrod Review, October 2009.