Most aviation operators understand that they need a Safety Management System. The greater challenge is making sure that the system genuinely influences the way the organisation operates.
Under EASA Part-ORO, the regulatory language is actually broader than SMS. ORO.GEN.200 requires an operator to establish, implement and maintain a management system covering responsibilities and accountability, safety policy, hazard identification and risk management, competent personnel, documentation and compliance monitoring.
The terminology matters because it reinforces an important principle.
Safety management should not operate as a separate administrative function sitting alongside the business. It needs to be integrated into how the organisation makes decisions, manages change, monitors performance and controls operational risk.
An SMS that exists mainly in a manual may satisfy the appearance of compliance. An effective management system needs to work in practice.
From documented system to operational system
Most organisations can produce the expected documentation.
There will be a safety policy. Responsibilities will be assigned. Hazard reporting procedures will exist. Risk assessments will have been created and safety meetings will be scheduled.
The real question is whether those processes are active.
- Are hazards being reported and reviewed?
- Are risk assessments updated when circumstances change?
- Are corrective and mitigating actions followed through?
- Does management use safety information when making operational decisions?
- Can the organisation demonstrate that its processes are improving outcomes rather than simply generating records?
These are the questions that separate SMS implementation from SMS documentation.
A regulator or auditor is not only interested in whether the correct sections appear in a manual. They need to see evidence that the management system has become part of the organisation.
Understanding the four components of SMS
Although EASA Part-ORO uses the broader term “management system”, aviation SMS is commonly understood around four interconnected components.
- Safety policy and objectives establish the organisation's commitment, responsibilities and accountability for safety.
- Safety risk management provides the process through which hazards are identified, risks assessed and appropriate controls introduced.
- Safety assurance examines whether those controls and the wider system are actually performing as intended.
- Safety promotion helps ensure personnel understand the system through training, communication and engagement.
These components should reinforce one another.
For example, occurrence reporting may identify a hazard. That hazard is assessed through the risk management process. Mitigating measures are introduced. Safety assurance then monitors whether those measures are effective, while communication and training help ensure the relevant personnel understand any resulting changes.
If one of those stages is weak, the entire process becomes less effective.
Hazard registers need to remain alive
A hazard register can tell an auditor a great deal about the maturity of a management system.
A register that was populated during initial SMS implementation and then rarely updated suggests that hazard identification may have become a periodic administrative task rather than an ongoing operational process.
Hazards should come from the operation itself.
Occurrence reports, internal audits, flight data, operational experience, personnel feedback, investigations and changes to the business can all provide useful safety intelligence.
The purpose is not to create the longest possible hazard register.
It is to ensure the organisation is identifying the risks that actually exist within its activities and making informed decisions about how those risks should be controlled.
Management of change is where SMS becomes particularly important
Aviation operations rarely remain static.
An operator may introduce a new aircraft type, open a new route, appoint a new ground handler, restructure a department, adopt a new technology or change an existing operational procedure.
Each change can introduce new hazards or alter existing ones.
A functioning aviation safety management system should therefore make management of change part of normal decision-making rather than something completed retrospectively for audit purposes.
Before a significant operational change is introduced, the organisation should understand what is changing, what new risks may arise, which existing controls may be affected and whether additional mitigation is required.
This is one of the clearest examples of why SMS should extend beyond the safety department.
Commercial, operational and organisational decisions can all have safety implications.
Safety performance requires more than counting reports
Safety reporting volumes can provide useful information, but numbers alone rarely tell the whole story.
A rise in reports does not automatically mean an operation has become less safe. It may indicate that personnel are more willing to report concerns.
Equally, very few reports do not necessarily indicate an absence of hazards. They may point to a reporting culture in which personnel are reluctant or unsure about raising issues.
Effective safety performance monitoring therefore needs context.
Operators should consider what their indicators are telling them, identify trends and examine whether the controls introduced in response to previous risks are producing the intended results.
This makes safety assurance an active process of learning rather than simply a reporting requirement.
Compliance monitoring and safety management need to connect
Compliance and safety risk management are different disciplines, but they should not operate in isolation.
Compliance monitoring asks whether the organisation is meeting applicable requirements and following its own approved procedures.
Safety management considers the hazards and risks created by the operation and whether they are being controlled effectively.
Information from one system can strengthen the other.
An internal audit finding may highlight a potential safety concern. A safety investigation may reveal that an established procedure is not being applied consistently. Repeated occurrences may indicate that a compliance review is required.
When the two functions communicate effectively, management gains a much clearer picture of how the organisation is performing.
SMS needs to reflect the operator
One of the strengths of the EASA management system framework is proportionality.
The system should correspond to the size of the operator and the nature and complexity of its activities.
That means an SMS should not simply be copied from another organisation.
A small specialist operator and a large airline may be working within the same broad regulatory framework, but the complexity of their operations, organisational structures, fleet, routes, contracted activities and risk exposure can be very different.
Their management systems should reflect that reality.
At AeroLex, we approach SMS implementation from this operational perspective. The objective is to develop a system that meets the regulatory requirements while remaining usable by the people who actually need to operate it.
A technically comprehensive system that nobody uses effectively is not a mature SMS.
Training and communication turn the system into culture
Personnel need to understand not only that the organisation has an SMS, but what their role within it actually involves.
For some employees, that may mean understanding how and when to submit a safety report. Managers may need deeper knowledge of risk acceptance and management of change. Safety and compliance personnel require more detailed competence in analysing data, investigating occurrences and monitoring system performance.
Communication is equally important.
Safety information needs to move through the organisation in both directions. Personnel should understand why procedures change, what lessons have been learned and how reported concerns have been addressed.
That feedback helps demonstrate that reporting has a purpose and contributes to a stronger safety culture.
Frequently Asked Questions
- Is SMS mandatory under EASA regulations?
Operators subject to the relevant EASA Air Operations requirements must establish, implement and maintain a management system in accordance with Part-ORO. While EASA uses the term “management system”, safety risk management is an integral part of those requirements and operators may continue to refer to their arrangements as an SMS.
- What are the four pillars of SMS?
The four commonly recognised components are safety policy and objectives, safety risk management, safety assurance and safety promotion. Together, they provide the structure through which an organisation establishes responsibilities, identifies and manages risk, monitors performance and develops safety awareness.
- Who owns the SMS within an organisation?
Safety management is an organisational responsibility rather than something owned exclusively by the safety department. The accountable manager carries direct safety accountability, while nominated personnel and operational teams have responsibilities appropriate to their respective roles.
- What documentation is required?
Management system documentation should reflect the operator's activities and include the relevant policies, responsibilities, key processes and procedures used to demonstrate compliance and manage safety. The exact structure may vary according to the size, complexity and regulatory environment of the operator.
- How can operators measure SMS effectiveness?
Effectiveness can be assessed through a combination of safety performance indicators, occurrence and hazard trends, internal audits, investigations, risk-control effectiveness, management-of-change activity and evidence of continuous improvement. The focus should be on whether the system is actively identifying and controlling risk, not simply whether the required documentation exists.
Build a system that works when nobody is preparing for an audit
A mature SMS is not the system that looks most impressive in a manual.
It is the one that continues to function during everyday operations.
Hazards are reported. Risks are assessed. Changes are considered before implementation. Actions are followed through. Safety information reaches the right people, and management can demonstrate how the organisation learns from what happens within its operation.
That is where SMS implementation moves beyond a compliance exercise and becomes part of how an aviation organisation manages itself.
AeroLex supports operators with SMS design, implementation, review, risk assessment, training and the improvement of existing management systems against EASA and wider international aviation requirements.
Looking to implement, review or strengthen your Safety Management System? Contact AeroLex at https://aerolex.com/contact/.
