Good Checklist Design

Definition

A checklist is not just a list — a badly made one is worse than none, because it either tries to spell out everything (turning into an ignored bureaucratic document) or omits the steps people actually forget. Boeing's chief 777 pilot Dan Boorman lays out the real design discipline: pick a clear "pause point," choose between a DO-CONFIRM checklist (people work from memory and experience, then stop and verify everything was done) or a READ-DO checklist (read a step, do it, like a recipe), keep it to five-to-nine items focused on the "killer items" — the steps most dangerous to skip and most often missed — and word it in plain, familiar language.

In the Book

Gawande shadows Boorman in a Boeing 777 flight simulator to see checklist design applied. Boorman insists first drafts always fall apart in the real world and must be tested and revised repeatedly — exactly what happens to Gawande's own WHO surgical checklist, which he brings for critique and Boorman finds too long and cluttered. In the simulator exercise, when a DOOR FWD CARGO warning light comes on, Gawande uses an actual seven-line READ-DO emergency checklist to correctly reduce cabin pressure and descend to a safe altitude — demonstrating a checklist doing exactly what an unaided pilot under stress could plausibly get wrong. The book also cites the 1989 United Airlines flight out of Honolulu, where an exploded cargo door tore into two engines mid-flight; despite chaos and no clear idea what had happened, the flight engineer and captain immediately reached for their emergency checklist book ("You want me to read a checklist?" / "Yeah, I got it out.") and worked through it methodically to land safely — evidence that well-designed checklists earn genuine trust under real catastrophe, not just in calm conditions.

Why It Matters

This turns "make a checklist" from a vague productivity slogan into an engineering discipline with falsifiable design choices: which structure fits the task (verify-after vs. do-in-sequence), where the natural pause point is, which few items are actually the ones people forget under pressure, and whether it has actually been field-tested rather than just drafted. It's the difference between a checklist that gets used in a crisis and one that gets ignored or abandoned the first time it's inconvenient.