Controlling Pilot Error