SMS Framework Design, Implementation, Audit & Advisory for Airlines and Commercial Air Transport Operators under UK CAA, EASA Part-OPS and ICAO Annex 19

An airline Safety Management System is not a document. It is not a set of procedures filed in an exposition, reviewed annually by the Safety Manager and largely invisible to the operational staff it is supposed to protect. It is a living organisational framework — the system through which a carrier proactively identifies hazards, evaluates and controls risk, monitors safety performance and builds the reporting culture that surfaces the conditions in which accidents develop before those accidents occur.

The regulatory requirement is clear. Under ORO.GEN.200, every Air Operator Certificate holder must establish, implement and maintain a management system that includes, as a minimum, a proportionate Safety Management System. The obligation exists because ICAO Doc 9859, the Safety Management Manual, and decades of accident investigation evidence tell the same story: the factors that cause accidents in commercial aviation are systemic, organisational and often visible — if the organisation has a system capable of seeing them. Without a functioning SMS, those factors remain invisible until they combine into an event.

For airlines, implementing an SMS that is genuinely operational — not a compliance exercise, not a template populated with the airline’s name, not a system that satisfies the authority on oversight visit and then sits unused — is a specialist undertaking. It requires deep knowledge of the regulatory framework, the operational environment of commercial air transport, and the organisational conditions that determine whether an SMS actually changes safety outcomes. AACS provides that knowledge.

Aerospace and Aviation Consulting Services (AACS) designs, implements, audits and advises on Safety Management Systems for airlines and commercial air transport operators under UK CAA, EASA and international ICAO frameworks. We build SMS frameworks that work — operationally grounded in the airline environment, calibrated to the carrier’s specific fleet, route network, crew structure and regulatory obligations, and structured to surface real risk rather than generate compliance paperwork.

Why Airline SMS Is a Specialist Discipline

The Scale and Complexity of the Airline Operating Environment

A commercial airline operates at a level of operational complexity that is without parallel in most industries. Aircraft are operated simultaneously across multiple bases, routes and time zones. Flight crew are rostered across variable duty patterns with fatigue implications that are both individually significant and statistically distributed across the workforce. Maintenance is managed across the airline’s own facilities, contracted Part 145 organisations and line station arrangements, each with their own quality systems and oversight structures. Cabin crew, ground handling, dispatch, fuelling, catering and ramp operations all interface with the flight operation in ways that create safety-relevant dependencies.

An SMS that is capable of surfacing risk in this environment must be genuinely integrated — not a safety management module bolted to the side of the airline’s operational structure, but a system embedded in it. The hazard identification process must be capable of identifying risks at the interface between departments. The occurrence reporting system must be trusted and used by personnel across all functional areas. The safety performance monitoring framework must be capable of detecting trends across the full scope of the operation. AACS designs SMS frameworks that operate at this level of integration.

The Regulatory Framework Is Demanding — and Frequently Misunderstood

The Part-OPS / ORO framework for airline SMS is extensive, and the AMC and GM material that underpins it is more demanding than many operators recognise. ORO.GEN.200 establishes the foundational obligation. AMC1 ORO.GEN.200 sets out the four ICAO pillars — safety policy, safety risk management, safety assurance and safety promotion — and the minimum content requirements for each. AMC2 ORO.GEN.200 addresses proportionality. The associated GM material addresses just culture, safety reporting and the integration of compliance monitoring with the SMS.

For UK operators post-Brexit, the retained UK Part-OPS framework maintains these requirements while the UK CAA develops its own oversight approach. Operators with dual UK/EASA approval must satisfy both authorities. For operators expanding internationally, ICAO Annex 19 provides the international baseline that underpins national implementations across all ICAO member states. AACS has the regulatory knowledge to navigate these frameworks and design SMS systems that satisfy their requirements without creating unnecessary complexity.

The Gap Between Documented and Practised Safety Management

The most common SMS failure mode in commercial aviation is not the absence of documentation. It is the gap between the safety management system as described in the Operations Manual and the safety management system as it actually functions — or fails to function — in the operational environment. The occurrence reporting system that theoretically captures all safety-relevant events but in practice receives reports only when something is very obviously serious. The hazard identification process that produces risk assessments at certification and is not meaningfully repeated thereafter. The safety review board that meets, produces minutes and generates no discernible action.

These failure modes are not unusual. They are common. And they are consequential: the SMS gaps that are not identified proactively tend to be identified retrospectively — in accident investigation reports that describe, with the clarity of hindsight, the systemic conditions that were visible and unaddressed. AACS builds SMS frameworks that close this gap — designed for operational function, not compliance appearance.

The Regulatory Framework

The SMS obligation for airline operators is embedded in a multi-layered regulatory framework. The table below summarises the key requirements and their practical implications for airline SMS design.

AACS Airline SMS Services

SMS Framework Design & Initial Implementation

For airlines undertaking AOC certification, expanding scope, or establishing a new SMS framework from the ground up, AACS designs and implements the complete SMS architecture. We build systems that are proportionate to the carrier’s operational scale and complexity, aligned with the regulatory framework applicable to the airline’s AOC jurisdiction, and structured to function as a genuine operational management tool from day one.

SMS framework design services include:

• Full SMS framework design aligned with ICAO Annex 19 and ORO.GEN.200 — UK CAA, EASA or dual-framework compliance
• Safety policy development — drafting a policy that reflects genuine organisational commitment, defines measurable safety objectives and establishes the Accountable Manager’s personal accountability
• Organisational structure and accountability framework — defining the safety management roles, responsibilities and reporting lines that the SMS requires across the airline’s functional areas
• Hazard identification and operational risk assessment process design — structured hazard identification for the airline’s route network, fleet type, operational profile and contracted services
• Safety Performance Indicator (SPI) development — designing a monitoring framework that surfaces meaningful safety trends across flight operations, cabin operations, ground handling and maintenance interfaces
• Occurrence reporting system design — reporting forms, categorisation framework, initial assessment process and feedback mechanism
• Just culture policy development — a policy framework that crew and operational staff will trust, with clear definitions of the boundary between acceptable error and unacceptable behaviour
• Safety investigation methodology — root cause analysis framework, causal factor analysis and systemic risk identification process for occurrence investigation
• Safety review board structure — governance documentation, terms of reference, membership framework and agenda structure
• SMS integration with compliance monitoring — ensuring the SMS and compliance monitoring system function as a unified safety assurance framework
• OM-A SMS documentation — accurately documenting the implemented SMS in the Operations Manual in the format the authority expects

SMS Audit & Gap Analysis

Airlines that have an existing SMS — established at AOC certification, inherited through organisational change, or maintained without significant review over time — frequently find that the system does not function as effectively as the documentation suggests. The occurrence reporting rate is lower than expected. SPIs are monitored but not acted upon. The safety review board produces minutes that do not drive meaningful corrective action. The authority has raised findings on SMS effectiveness.

AACS provides independent SMS audit and gap analysis services that identify precisely where the system is functioning and where it is not — and develop a structured improvement roadmap.

SMS audit and gap analysis services include:

• Comprehensive SMS gap analysis against ORO.GEN.200 and AMC requirements — identifying what is in place, what requires development and what is absent
• Occurrence reporting culture assessment — evaluating reporting rates, report quality, feedback quality and the just culture framework as experienced by operational staff
• SPI review — assessing whether the airline’s safety performance indicators are meaningful, monitored effectively and driving corrective action
• Safety investigation quality review — evaluating the depth, rigour and systemic focus of the airline’s occurrence investigation outputs
• Safety review board effectiveness assessment — examining governance, decision quality, action tracking and senior leadership engagement
• SMS documentation review — assessing OM-A SMS content for accuracy, completeness and alignment with the system as actually implemented
• Authority finding response support — providing structured corrective action plans for authority findings on SMS effectiveness
• Pre-oversight audit preparation — independent assessment of SMS readiness ahead of UK CAA or EASA oversight visits

Safety Performance Monitoring & SPI Development

Safety Performance Indicators are the primary mechanism through which an airline monitors whether its SMS is actually improving safety outcomes — not just generating compliance activity. An SPI framework that monitors the wrong metrics, that monitors the right metrics without analytical rigour, or that produces data which is presented at the safety review board and then not acted upon, provides no meaningful safety assurance.

AACS designs SPI frameworks that surface genuine safety intelligence for airline environments:

• SPI design across all operational areas — flight operations, cabin safety, ground handling interfaces, maintenance, dispatch and air traffic interface
• Leading and lagging indicator balance — ensuring the SPI framework includes forward-looking indicators that surface conditions before events occur, not just retrospective counts of events that have already happened
• Alert and action threshold setting — defining the SPI levels that trigger enhanced monitoring, investigation and corrective action
• SPI dashboard design — presenting safety performance data in a format that supports effective review board discussion and senior leadership decision-making
• Trend analysis methodology — identifying statistically significant trends in safety performance data that manual review would miss
• SPI integration with occurrence reporting — ensuring that occurrence data and SPI monitoring function as a unified safety intelligence system

Occurrence Reporting System Design & Culture Development

The occurrence reporting system is the primary data collection mechanism of the SMS. The quality of the safety intelligence an airline’s SMS can generate is directly dependent on the quality and quantity of reports its personnel submit. An occurrence reporting system that is distrusted, burdensome, or that does not deliver meaningful feedback to reporters will be under-used — and the hazards that would have been reported go undetected.

AACS designs occurrence reporting systems for airlines that address both the technical and cultural dimensions of effective safety reporting:

• Occurrence reporting system architecture — defining what must be reported, what should be reported, and how reports are received, classified and routed
• Just culture framework design — a policy and governance structure that protects reporters and defines the boundary between acceptable error and unacceptable behaviour in a way that crew genuinely understand and trust
• Mandatory occurrence reporting alignment — ensuring the occurrence reporting system captures the events required under EU Reg 376/2014 and national mandatory reporting requirements
• Anonymous reporting pathway design — where appropriate for the airline’s size and culture
• Report assessment and investigation triage process — determining which reports require full investigation, which require monitoring and which can be closed with feedback
• Feedback mechanism design — ensuring every reporter receives meaningful feedback on what their report identified and what the organisation did about it
• Safety reporting culture programme — training, communication and leadership engagement designed to build a genuine reporting culture across flight crew, cabin crew and ground operations

Just Culture Implementation

Just culture is the organisational condition that makes occurrence reporting possible. Without a genuinely understood and trusted just culture framework, operational staff will not report the events, near misses and unsafe conditions that are the raw material of the SMS. With a just culture framework that exists only as a policy statement in OM-A and is not visible in leadership behaviour or regulatory practice, the same outcome results.

AACS designs and implements just culture frameworks for airlines that are operationally credible — not aspirational policy documents:

• Just culture policy design — defining the organisational commitment, the boundary conditions and the decision-making process in a format that is legally robust and operationally credible
• Disciplinary interface framework — defining the relationship between the just culture policy and the airline’s disciplinary and HR processes
• Leadership just culture training — ensuring the Accountable Manager, Nominated Persons and department heads understand just culture and demonstrate it visibly in their management of reported events
• Crew just culture awareness — building understanding of the just culture framework across flight crew and cabin crew communities
• Just culture governance review — assessing whether the airline’s application of just culture principles in practice matches the policy commitment, and identifying gaps

Safety Investigation Methodology

Occurrence investigation in a commercial airline SMS must go beyond establishing what happened and who was involved. The purpose of investigation is to identify the systemic conditions — the organisational factors, latent conditions and safety defences that were absent — that allowed the event to develop. Without this systemic focus, investigation produces corrective actions targeted at the individual involved rather than the organisational conditions that created the vulnerability.

AACS designs safety investigation frameworks for airlines built on systemic analysis methodology:

• Safety investigation methodology design — structured root cause analysis, causal factor charting and systemic risk identification frameworks calibrated to the airline’s operational complexity
• Investigation team training — building internal investigation capability for occurrence categories that are within the airline’s investigative resource
• Investigation quality assurance — reviewing investigation outputs for systemic rigour and corrective action quality
• Serious incident investigation support — providing specialist investigation resource for high-consequence events that exceed the airline’s internal investigative capability
• Investigation output integration — ensuring investigation findings and corrective actions are tracked through the SMS improvement cycle to verified closure

SMS Integration with Compliance Monitoring

The SMS and compliance monitoring system are not separate regulatory obligations. They are complementary components of a single safety assurance framework. Compliance findings are safety data. Audit outputs identify systemic conditions. Non-conformances, when analysed as a safety data set, reveal organisational patterns that no individual audit will surface in isolation. Airlines that maintain separate SMS and compliance monitoring programmes — generating separate reports, reviewed by separate functions, with no structured integration — are operating two partial systems where one integrated framework should exist.

AACS designs integrated SMS and compliance monitoring architectures that treat regulatory compliance and proactive safety management as a unified assurance activity:

• Integration framework design — defining the data flows, review processes and governance connections between SMS and compliance monitoring
• Compliance finding risk classification — ensuring compliance audit findings are classified and managed as safety data within the SMS framework
• Integrated audit programme design — audit scheduling, scope definition and reporting that serves both regulatory compliance and safety performance objectives
• Integrated management review framework — ensuring that both SMS and compliance monitoring outputs are reviewed together at the level where systemic decisions are made

SMS Training for Airline Personnel

An SMS that the Accountable Manager and Safety Manager understand but which is invisible to flight crew, cabin crew and ground operations staff is not functioning as a safety management system. The safety culture that the SMS depends on — the reporting culture, the hazard awareness, the confidence that reports will be protected and acted upon — is built by people across the organisation who understand their role in the SMS and exercise it.

AACS designs and delivers SMS training programmes for airline personnel at all levels:

• Accountable Manager SMS training — the regulatory obligation, the governance framework, the AM’s personal accountability and the safety leadership behaviour that makes the SMS credible
• Nominated Person SMS training — the operational SMS responsibilities of NP Operations, NP Maintenance and other senior post-holders
• Safety Manager / Safety Officer training — investigation methodology, SPI analysis, safety review board management and authority engagement
• Flight crew SMS awareness — occurrence reporting, just culture, CRM connection and crew safety responsibilities
• Cabin crew SMS awareness — cabin safety occurrence reporting, safety communication and the cabin crew’s role in the airline’s safety intelligence system
• Ground operations SMS awareness — hazard reporting, safety-critical communication and ground handling interface risks
• Initial and recurrent SMS training programme design — documented training frameworks that meet OM-A requirements and can be delivered through the airline’s existing training infrastructure

SMS Maturity Assessment & Improvement Roadmap

An airline’s SMS does not achieve full maturity at certification. It develops over time — from a reactive system that responds to events that have already occurred, through a proactive system that identifies and manages risk before events develop, toward a generative system in which safety management is an organisational value that operates at every level without requiring regulatory compulsion. The trajectory from initial compliance to organisational safety maturity is the arc of effective SMS development.

AACS conducts SMS maturity assessments that locate the airline’s current position on this trajectory and develop a structured improvement roadmap:

• SMS maturity assessment against the ICAO safety management maturity model — identifying where the airline sits across each of the four SMS pillars
• Safety culture assessment — evaluating the reporting culture, leadership behaviour, just culture credibility and organisational safety attitudes that determine SMS effectiveness
• Improvement roadmap development — a prioritised, actionable plan for developing SMS maturity with realistic timescales and resource requirements
• Progress measurement framework — defining the indicators that will demonstrate SMS improvement over the roadmap period

The AACS Approach to Airline SMS

AACS advisors bring direct operational and regulatory experience in commercial air transport SMS design and implementation. We have worked with carriers across the full spectrum of commercial aviation — from regional operators and new-entrant airlines through to large-scale carriers with complex multi-base operations. We understand the regulatory expectations of the UK CAA and EASA, the practical challenges of implementing SMS in a commercial operating environment, and the organisational conditions that determine whether a safety management system actually changes safety outcomes.

Our advice is independent. We are not a software platform seeking SMS module licence revenue. We are not a training organisation seeking to attach consulting services to a course sale. We provide advisory that is shaped by the regulatory requirement and the operational reality — not by any commercial relationship that might influence our recommendations.

We are direct about what works and what does not. An airline that has an SMS that is not functioning will receive our honest assessment of why — not a diplomatic observation that avoids the difficult conversation. The purpose of engaging AACS is to get the SMS right, not to confirm that existing arrangements are adequate when they are not.

Why Airline SMS Programmes Fail

Effective SMS advisory requires an honest understanding of the failure modes — the patterns through which airline SMS programmes that are compliant on paper deliver inadequate safety performance in practice. AACS has identified the following failure modes consistently across the operators we have assessed:

Speak to an AACS Specialist

Whether you are designing an SMS for an airline AOC application, revising a system that is not delivering effective safety performance, preparing for UK CAA or EASA oversight, or seeking independent assessment of your current SMS maturity, AACS provides the specialist expertise to deliver what you need.

We will be direct about what your SMS needs to achieve, what the regulatory framework requires, and how we can help you build a safety management system that genuinely works — for your airline, your operational profile and your regulatory environment.