As an aviation compliance or operations manager, could you prove at any time that your organisation was safe? A safety management system (SMS) is designed to make sure you can. This guide covers what an aviation SMS is, how its four components and 12 elements fit together, which regulators need one and how a mature SMS works day to day.
Key takeaways:
- An aviation SMS is a structured approach to identifying and controlling safety risk, defined by ICAO Annex 19 and required across most commercial aviation sectors worldwide
- It has four components (Safety Policy, Safety Risk Management, Safety Assurance and Safety Promotion) and 12 elements underneath them
- An SMS is legally required for airlines, aerodromes, MROs and ANSPs under the New Zealand CAA, CASA (Australia), the UK CAA, EASA (the EU), the FAA (the US) and the GCAA (the UAE)
- Compliance shows that controls existed at a point in time and assurance shows they’re working right now
What Defines an Aviation SMS?
An aviation SMS is a systematic, proactive, organisation-wide approach to managing safety risk, built on four components and 12 elements defined by the International Civil Aviation Organisation’s (ICAO) Annex 19. An SMS is different from older safety approaches in that it’s proactive rather than reactive. Instead of investigating incidents after they happen, you’re alerted to hazards before they turn into events.
The documentation (the SMS manual, the risk register and the audit reports) provides evidence of the system, whereas the system itself is the daily practice of reporting, assessing, controlling and reviewing. Accountability for safety sits with the relevant manager. The safety officer coordinates the system and the entire organisation runs it.
A Short History: Why Did Aviation Build the SMS Model?
SMS emerged as a way of systematically managing risk to prevent accidents. For most of aviation's history, when something went wrong, the response was to find the person who made the mistake and remove them from the operation. However, most accidents aren’t caused by a single error but a sequence of conditions that the organisation allowed to develop over time.
This insight, grounded in 1980s and 1990s research, led to the shift and ICAO formalised it. Annex 19 to the Convention on International Civil Aviation was first adopted in 2013 and consolidated the SMS framework, as well as establishing the four-component, 12-element structure that regulators now reference globally. The fourth edition of the Safety Management Manual (Doc 9859, 2018) is the canonical guidance document. The move from a reactive to a proactive approach is now embedded in every major regulatory framework, from the New Zealand CAA and CASA in Australia to the UK CAA, EASA in the EU, the FAA in the US and the GCAA in the UAE.
The Four Components of an Aviation SMS
Every compliant SMS rests on these pillars: Safety Policy, Safety Risk Management, Safety Assurance and Safety Promotion. The FAA describes them as four functional components that work in synergy, rather than separate programmes running in parallel:
- Safety Risk Management identifies and controls hazards
- Safety Assurance checks whether the controls are working and feeds new information back into SRM
- Safety Policy sets the mandate and accountabilities that make both possible
- Safety Promotion builds the culture that sustains all three.
The 12 Elements Underneath the Four Components
The four components break down into 12 elements that make the SMS a workable system. Regulators look for evidence that the elements are implemented and functioning.
Safety Policy (elements 1–5)
- Management commitment and safety policy
- Safety accountabilities and responsibilities
- Appointment of key safety personnel
- Coordination of emergency response planning
- SMS documentation
Safety Risk Management (elements 6–7)
- Hazard identification
- Safety risk assessment and mitigation
Safety Assurance (elements 8–10)
- Safety performance monitoring and measurement
- Management of change
- Continuous improvement of the SMS
Safety Promotion (elements 11–12)
- Training and education
- Safety communication
Understanding the elements is what turns the components from a framework into an operational checklist, and into the evidence trail an auditor will follow.
Who Needs an Aviation SMS?
An SMS is legally required across most commercial aviation sectors worldwide. The table below maps the requirement by regulator. ICAO sets the global standard through Annex 19, with national and regional regulators translating that into domestic law.
It’s important to understand the scope within each jurisdiction.
- Under CASA's CASR Part 5, the framework is "a single source of rules and standards for SMS across the industry”.
- The UK CAA's CAP 1059 provides tailored guidance for smaller operators who need a proportionate, scalable SMS
- The EASA management system framework "addresses the core elements of the ICAO SMS as defined in Appendix 2 to ICAO Annex 19”
- New Zealand's NZ CAA Part 100 applies to all certificate holders, with AC100-1 providing detailed implementation guidance scaled to the size and complexity of each organisation
- The UAE's GCAA CAR-SMS (currently Issue 06) mirrors the ICAO Annex 19 framework and applies to UAE air operators, licensed aerodromes, ANSPs and MROs, reflecting the UAE's role as a major international aviation hub.
How Does an Aviation SMS Work in Practice?
An SMS turns four components into a continuous loop of reporting, assessing, controlling and reviewing risk. Here’s what that looks like day to day:
Reporting
If someone on the ground (such as a ramp worker, a pilot, a maintenance technician) notices something that could cause harm, they can report it without fear of blame. Just culture is the principle that makes this possible. Errors made without wilful negligence are treated as learning opportunities, not disciplinary matters.
Assessing
The reported hazard enters the risk register to be assessed using a risk matrix (likelihood multiplied by severity). It’s assigned a risk rating that determines how urgently the hazard needs to be mitigated.
Controlling
A mitigation is designed and implemented. It might involve a procedure change, a training requirement, a physical barrier or some combination. The control is documented, with the person responsible named.
Reviewing
Safety Assurance checks whether the control is working. This happens through safety performance indicators, internal audits and management-of-change reviews when the operation evolves. If a control is not working, the hazard goes back into the risk assessment cycle. The SMS manual documents how all of this works in your organisation.
Role-based visibility turns the cycle from a paper exercise into a live operational picture. An operations manager on one site sees their site's hazard log and overdue corrective actions. An executive overseeing four airports sees an aggregated view. The data is the same and the lens is matched to the role. See how this works in OneReg for airports and airlines.
Common Challenges Faced by Operators
The gap between having an SMS and being able to demonstrate it in real time is one of the most common challenges compliance managers describe. Evidence sits in multiple places (a risk register in one spreadsheet, corrective actions in another, audit findings in a shared drive and training records in the HR system). Pulling it together for a surveillance visit takes days.
According to OneReg Chief Customer Officer, Carly Waddleton, most customers have a visibility issue rather than a compliance problem. “Most operations work really hard to be safe and compliant, but it’s difficult to prove that and see it in one place at any given moment, because all the information is fragmented,” she says.
Below are other common challenges that come up repeatedly and indicate a visibility problem rather than an issue with compliance.
- Outdated Manuals - Document version control is manual and someone is always working from an older version.
- Underused Reporting - Where the culture is weak, staff don’t report near-misses. The hazard log looks clean because hazards are invisible, not because they’re managed.
- Audit Prep Taking Days - If an auditor asks for evidence of a control, finding it can take hours of searching across systems.
- No Single View of Risk Posture - Leadership can’t see where the organisation sits on risk without asking someone to compile a report.
From an SMS on Paper to an SMS You Can See
A modern SMS should make your safety and compliance posture visible in real time, not only at audit. The shift is from an SMS that produces evidence when requested to one that shows you where you stand today. That means three things in practice.
One Connected Platform
When the risk register, corrective actions, audit findings, training records and regulatory requirements are all in one system, the SRM-assurance feedback loop works as designed. New hazards flow into the risk register, closed corrective actions feed into the assurance picture and changes to the operation trigger management-of-change reviews automatically. When those pieces live in separate systems, the connections break. Sam Merlo, Operations Compliance Coordinator at Hobart Airport, describes how shifting to OneReg fundamentally changed the organisation for the better. "Before OneReg, our compliance and safety reporting lived in multiple systems and spreadsheets,” he says. “It was time-consuming, fragmented and difficult to trace. What used to take days now takes minutes."
Continuous Audit Readiness
Rather than audit prep being a project measured in days, evidence is always current. The question changes from "can we prove we were compliant last time someone checked?" to "are we compliant now?"
Configurability
The best SMS platforms evolve with the organisation. Workflows are reconfigured without a vendor project and historical data stays intact through every change. OneReg is built on the principle that the SMS should be a live operational asset, not an archive. As CEO and Co-Founder Clinton Cardozo puts it, "Airports and airlines everywhere are dealing with more complex compliance environments. Our platform gives them a single source of truth, a faster path to compliance and a more resilient operational foundation." Organisations move beyond record-keeping toward proactive assurance, linking regulation to day-to-day operations, surfacing emerging risks and providing real-time visibility from operational teams through to executive leadership.
Taking the Next Step
At its best, an aviation safety management system is not a compliance exercise but the mechanism by which an organisation knows its safety position every day. The four components give you the structure, the 12 elements make it operational and the culture and the tools make it real. If you’re building or improving your SMS, or looking for a platform that makes assurance continuous rather than periodic, book a demo to see how OneReg works in practice.
Frequently Asked Questions
What is an aviation safety management system?
An aviation safety management system (SMS) is a structured, organisation-wide approach to managing safety risk. It identifies hazards, assesses and controls the risk they pose and continuously checks that those controls are working. Every compliant SMS is built on four components and 12 elements defined by ICAO Annex 19.
What are the four pillars of an SMS in aviation?
The four components (often called pillars) are Safety Policy, Safety Risk Management, Safety Assurance and Safety Promotion.
- Safety Policy sets the organisation's commitment and accountabilities.
- Safety Risk Management identifies hazards and reduces the risk they pose.
- Safety Assurance checks that risk controls are working and surfaces new hazards.
- Safety Promotion builds the culture and training that sustain the other three.
What are the 12 elements of an aviation SMS?
The 12 elements sit underneath the four components:
- Safety Policy covers management commitment, safety accountabilities, key safety personnel, emergency response coordination and SMS documentation
- Safety Risk Management covers hazard identification and risk assessment and mitigation
- Safety Assurance covers safety performance monitoring, management of change and continuous improvement
- Safety Promotion covers training and education and safety communication.
Who is required to have an aviation SMS?
An SMS is legally required across most commercial aviation sectors, including airlines, licensed aerodromes, MROs and ANSPs.
- In Australia, the requirement sits in CASR Part 5 under CASA
- In New Zealand, the NZ CAA requires it under Part 100
- In the UK, the UK CAA requires it under CAP 795 and CAP 1059
- EASA requires it under its management system framework
- In the US, the FAA requires it under 14 CFR Part 5
- In the UAE, the GCAA requires it under CAR-SMS (Issue 06).
Is an SMS the same as a safety manual?
No. The SMS manual documents how the SMS works in your organisation, so it’s evidence of the system, not the system itself. The system is the daily practice of hazard reporting, risk assessment, corrective action and safety assurance.
What is the difference between SMS compliance and safety assurance?
Compliance involves producing evidence that controls existed at a point in time, typically when an auditor asks. Assurance is knowing, at any point in time, that controls are working as intended. A mature SMS delivers both, but most operations running fragmented systems achieve compliance without assurance.
Does a small or regional operator need a full SMS?
Requirements are scaled to the size and complexity of the operation. The UK CAA's CAP 1059 provides guidance specifically for smaller operators on building a proportionate SMS. CASA's CASR Part 5 for Australia applies to all certificate holders, with the expectation that the SMS is commensurate with operational scale.
