Few corporate case studies capture the full scope of operational risk, governance failure, and safety culture breakdown as completely as the Boeing 737 MAX crisis. Two fatal crashes, the Lion Air flight in October 2018 and the Ethiopian Airlines flight in March 2019, together claimed 346 lives and led to a worldwide grounding of the aircraft that lasted roughly twenty months. What emerged in the years since is a case study not just in engineering failure, but in how commercial pressure, board oversight gaps, and a weakened safety culture can combine to produce catastrophic outcomes. For risk professionals, this case offers a rare, well documented window into how operational risk actually materialises inside a large, complex organisation.
Background: What Went Wrong
At the centre of both crashes was a flight control system called the Maneuvering Characteristics Augmentation System, or MCAS, introduced on the 737 MAX to compensate for changes in the aircraft’s aerodynamic behaviour caused by larger, repositioned engines. MCAS was designed to automatically push the aircraft’s nose down under certain flight conditions, but it relied on a single angle of attack sensor rather than a redundant, cross checked input. When that sensor malfunctioned in both accidents, MCAS repeatedly forced the aircraft into a dive that pilots, who had not been fully briefed on the system’s existence or behaviour, struggled to counteract.
Subsequent investigations, including a detailed report from the US House Committee on Transportation and Infrastructure, found that Boeing had made critical design and disclosure decisions under significant commercial pressure to bring the 737 MAX to market quickly and to minimise the need for costly pilot simulator retraining, since additional training requirements would have made the aircraft less commercially attractive relative to competing models.
The Safety Culture Breakdown
Internal communications later made public revealed employees, including test pilots, raising concerns about MCAS and aspects of the aircraft’s design well before the crashes occurred. Some of this internal messaging reflected a culture where schedule and cost pressures were allowed to weigh heavily against safety considerations, with employees at times expressing discomfort about decisions being made around them.
This points to a core operational risk lesson, a strong safety culture cannot exist only as a stated value on a company website or in a mission statement. It must be reflected in how frontline concerns are escalated, how dissent is received by management, and whether commercial timelines are allowed to override engineering judgment when the two come into conflict. Boeing’s own internal culture, at the time, appears to have allowed schedule pressure to dominate in ways that a genuinely embedded safety culture would have resisted.
Board Oversight and Governance Gaps
Beyond the engineering and cultural issues, the case also became a significant example of board oversight failure. Investigations and subsequent shareholder litigation raised serious questions about whether Boeing’s board had adequate visibility into safety risk at the operational level, and whether existing board structures gave sufficient attention to safety as a standalone governance priority rather than treating it as embedded, by default, within normal engineering and operations reporting.
In the aftermath, Boeing restructured elements of its board governance, including the creation of a dedicated Aerospace Safety Committee, changes to how safety related information reaches the board, and adjustments to executive accountability structures. This restructuring itself is instructive, it demonstrates that prior governance arrangements had not provided the board with the kind of independent, safety specific line of sight that a risk of this magnitude required.
Regulatory and Financial Consequences
The consequences extended well beyond the immediate human tragedy. The Federal Aviation Administration grounded the 737 MAX worldwide in March 2019, a grounding that lasted until November 2020 in the United States, with other regulators following varying timelines. Boeing faced billions of dollars in costs related to compensation, production disruption, and settlements, along with a deferred prosecution agreement with the US Department of Justice that was later the subject of further legal and public scrutiny after a separate incident involving a 737 MAX door panel in January 2024 raised fresh questions about the company’s quality and safety systems.
Key Operational Risk Lessons
Several lessons from this case apply directly to risk management practice well beyond aviation.
Single points of failure carry outsized consequences. MCAS relying on a single sensor input, without redundancy, is a textbook example of how a seemingly narrow technical design choice can become a catastrophic operational risk when it interacts with real world failure conditions.
Commercial pressure can silently erode risk controls. When schedule and cost considerations are allowed to consistently outweigh safety or control concerns, the erosion often happens gradually and is difficult to detect until a serious event forces it into view.
Frontline concerns need genuine escalation pathways. Employees flagged issues before the crashes, but the organisational structure did not ensure those concerns reached decision makers with the authority and urgency to act on them.
Board oversight of safety and operational risk needs to be explicit, not assumed. A board can believe it has adequate oversight while lacking the structures, reporting lines, and dedicated attention needed to actually exercise it, a gap that often only becomes visible after a failure occurs.
Reputational and financial damage from operational risk failures can be severe and long lasting. The costs Boeing has borne, financial, regulatory, and reputational, illustrate why operational risk cannot be treated as a lesser category compared to credit or market risk within an enterprise risk framework.
Conclusion
The Boeing 737 MAX case remains one of the clearest illustrations of how operational risk, safety culture, and board governance are deeply interconnected, and how failure in one area compounds failure in the others. For risk and governance professionals, it is a reminder that oversight structures must be built deliberately and tested regularly, not simply assumed to be working.
Build This Capability with RMAI
Cases like this highlight why structured risk education matters. RMAI’s Online Certificate Course in Operational Risk Management covers risk identification, control design, and case study based learning directly relevant to failures of this kind.
For professionals focused on board level oversight and governance structures, the Online Certificate Course on Governance, Risk and Compliance (GRC) builds the capability to design and evaluate genuine board oversight mechanisms.
And for those responsible for integrating operational and safety risk into a wider enterprise view, the Online Certificate Course in Enterprise Risk Management connects individual risk failures to organisation wide risk appetite and culture.
