SMS Framework Design, Implementation, Audit & Advisory for Aerodrome Operators under UK CAA CAP 168, ICAO Annex 14 and ICAO Annex 19

An airport Safety Management System is not a chapter in the Aerodrome Manual. It is not a hazard log reviewed quarterly by the safety team, a set of incident report forms filed in a folder, or a policy statement signed by the airport chief executive and then largely forgotten. It is the framework through which an aerodrome operator proactively identifies and controls the hazards that are present in one of the most complex human working environments in any industry — the airside area, where aircraft, vehicles, fuel, high-voltage equipment and large numbers of people from multiple organisations converge in a space governed by strict procedural disciplines and unforgiving physics.

The consequences of safety management failure at an airport are severe and visible. Runway incursions, ramp collisions, foreign object debris events, fuel spills, ground handling accidents and the hundreds of near misses that precede every serious event — these are the outputs of an environment in which the SMS is not functioning. They are not random. They are, in nearly every case, the product of hazards that were present and identifiable before the event, conditions that had been developing over time, and organisational factors that the safety management framework should have surfaced and addressed.

For aerodrome operators, implementing an SMS that is genuinely operational — not a compliance exercise constructed to satisfy the UK CAA at licence oversight, not a generic template populated with the aerodrome’s name, but a system that actually surfaces and controls the hazards of the specific operational environment — is a specialist undertaking. It requires deep knowledge of the regulatory framework, the operational reality of the airside environment, and the organisational conditions that determine whether a safety management system changes safety outcomes.

Aerospace and Aviation Consulting Services (AACS) designs, implements, audits and advises on Safety Management Systems for aerodrome operators under UK CAA, ICAO and international frameworks. We build SMS frameworks that work — calibrated to the specific aerodrome, its operational complexity, its multi-employer environment, and its regulatory obligations — and structured to surface real risk rather than generate compliance paperwork.

Why Airport SMS Is a Specialist Discipline

The Multi-Employer Environment

An airport is not a single organisation managing a single operational environment. It is a collection of independent organisations — the aerodrome operator, multiple airlines, ground handling companies, fuelling operators, catering contractors, maintenance organisations, construction contractors, retail and hospitality tenants, security providers and many others — all operating in the same physical space under different management structures, different safety cultures and different regulatory frameworks. Each has its own SMS obligations. Each has its own approach to hazard management. Each interfaces with the others in ways that create safety-relevant dependencies that no single organisation’s SMS, considered in isolation, can fully capture.

This is the defining challenge of airport SMS design. The aerodrome operator does not control the behaviour of the airline’s turnaround crew, the ground handler’s ramp agent, or the fuel tanker driver from the contracted fuelling company. But the aerodrome operator bears the licensing obligation to ensure that the airside environment is managed safely — and that means the SMS must be capable of surfacing risk that arises at the interfaces between organisations, not just within the aerodrome operator’s own operational boundaries.

AACS designs airport SMS frameworks that address the multi-employer environment directly — establishing the safety management governance through which the aerodrome operator sets standards for all airside organisations, monitors compliance with those standards, and integrates the safety data generated by multiple organisations into a coherent picture of airport safety performance.

The Airside Environment as a High-Risk Workplace

The movement area and apron of an aerodrome combine hazards that, taken individually, would each warrant serious safety management attention. Aircraft weighing hundreds of tonnes, moving under power or being towed, with engines that generate thrust, heat and ingestion risk at close proximity to personnel. Ground support equipment operated at speed in confined spaces. Fuelling operations involving large quantities of flammable liquid. High-voltage GPU connections. Jet blast and rotor downwash. FOD that can cause catastrophic engine failure. Noise levels that impair communication and mask warning signals. A physical environment — the apron, taxiways and runway — where the consequences of being in the wrong place at the wrong time are immediate and often fatal.

An SMS for this environment must be calibrated to its specific hazard profile. Generic safety management frameworks, designed for office environments or light industrial settings, are not adequate. The hazard identification processes, the risk assessment methodology, the SPI framework and the occurrence reporting system must all reflect the operational reality of the airside environment in a way that only deep aerodrome operational experience can produce.

The Regulatory Framework Is More Demanding Than Many Operators Recognise

The UK CAA’s requirements for aerodrome SMS, embedded in CAP 168 and aligned with ICAO Annex 14 and Annex 19, are more substantive than the licence compliance checklist approach that some aerodrome operators adopt. The requirement is not for a safety policy and a hazard log. It is for a functioning safety management system that identifies hazards proactively, assesses and controls risk, monitors safety performance through meaningful indicators, investigates occurrences with genuine systemic rigour, and promotes a safety culture that produces the reporting behaviour on which the SMS depends.

The UK CAA’s oversight of aerodrome SMS has become increasingly focused on effectiveness — whether the system is working in practice — rather than simply on documented compliance. Aerodrome operators who maintain an SMS that satisfies the documentation requirements but does not function operationally are increasingly finding that the authority’s oversight scrutiny identifies and challenges the gap.

The Regulatory Framework

Airport SMS obligations arise from a layered framework of aviation-specific and general safety legislation. The table below sets out the primary requirements and their implications for aerodrome SMS design.

AACS Airport SMS Services

SMS Framework Design & Initial Implementation

For aerodrome operators establishing an SMS for the first time, seeking initial licence certification, or rebuilding a system that is not functioning effectively, AACS designs and implements the complete SMS architecture. We build systems that are calibrated to the specific aerodrome — its physical layout, its operational complexity, its multi-employer environment, and its regulatory obligations — and structured to function as a genuine operational management tool from the first day of implementation.

SMS framework design services include:

• Full SMS framework design aligned with ICAO Annex 19, CAP 168 and CAP 642 — addressing all four SMS pillars across the aerodrome operator’s full operational scope
• Safety policy development — drafting a policy that reflects genuine organisational commitment, defines measurable safety objectives and establishes the Accountable Manager’s personal safety accountability
• Organisational structure and accountability framework — defining SMS roles, responsibilities and reporting lines across the aerodrome operator’s management structure and the multi-employer interface
• Hazard identification and aerodrome risk assessment — structured hazard identification for the movement area, apron, airside roads, fuel installations, maintenance areas and all operational interfaces
• Safety Performance Indicator development — designing a monitoring framework that surfaces meaningful safety trends across the aerodrome’s full operational scope
• Occurrence reporting system design — reporting channels, categorisation framework, assessment process and feedback mechanism for all airside personnel including tenants and contractors
• Just culture policy development — a framework that all airside personnel will trust, with clear definitions of the boundary between acceptable error and unacceptable behaviour
• Safety investigation methodology — root cause analysis and systemic risk identification process calibrated to the aerodrome environment
• Safety review board structure — governance documentation, terms of reference, membership framework and inter-agency coordination arrangements
• Tenant and contractor SMS interface framework — defining how the aerodrome operator sets, monitors and enforces safety management standards across all organisations operating airside
• Aerodrome Manual SMS section development — accurately documenting the implemented SMS in the format the UK CAA expects at licence oversight

SMS Audit & Gap Analysis

Aerodrome operators that have an existing SMS — established at licence certification, inherited through ownership or management change, or maintained without significant review — frequently find that the system is not functioning as the Aerodrome Manual describes. Occurrence reporting is lower than the operational risk level warrants. Safety Performance Indicators are compiled but not analysed for trend. The safety review board receives data without generating decisions. The authority has raised findings on SMS effectiveness at oversight.

AACS provides independent SMS audit and gap analysis services that identify precisely where the system is functioning and where it is not:

• Comprehensive SMS gap analysis against CAP 168, CAP 642 and ICAO Annex 19 requirements — identifying what is in place, what requires development and what is absent
• Occurrence reporting culture assessment — evaluating reporting rates across all airside organisations, report quality, feedback quality and the just culture framework as experienced by operational staff
• Safety Performance Indicator review — assessing whether SPIs are meaningful, monitored effectively, alert-threshold governed and driving corrective action
• Safety investigation quality review — evaluating the depth, systemic rigour and corrective action quality of the aerodrome’s occurrence investigation outputs
• Safety review board effectiveness assessment — examining governance, decision quality, action tracking and senior leadership engagement
• Aerodrome Manual SMS documentation review — assessing accuracy, completeness and alignment between documented and operational SMS
• Tenant and contractor SMS interface assessment — evaluating how effectively the aerodrome operator manages the safety management standards of airside organisations
• CAA oversight audit preparation — independent assessment of SMS readiness ahead of UK CAA licence oversight visits
• Authority finding corrective action planning — structured response to CAA findings on SMS adequacy or effectiveness

Hazard Identification & Aerodrome Risk Assessment

Hazard identification in the airport environment requires a structured approach that goes beyond listing the obvious hazards and assigning them a generic risk rating. The specific physical layout of the aerodrome, the intersection of operational activities across the apron and movement area, the multi-employer interfaces, the shift patterns and fatigue profiles of operational staff, the seasonal and weather-related variations in the operating environment, and the specific equipment types and procedures in use — all of these factors shape the hazard profile of a specific aerodrome in ways that generic risk assessment templates cannot capture.

AACS conducts aerodrome hazard identification and risk assessment that reflects the specific operational environment:

• Structured aerodrome HAZID — systematic hazard identification across the full aerodrome operational scope: movement area, apron, airside roads, fuel installations, cargo areas, maintenance zones and terminal interfaces
• Interface hazard analysis — specific focus on the hazards that arise at the interface between organisations: airline turnaround crews and ground handlers, ground handlers and fuellers, vehicles and pedestrians, airside operations and construction activity
• Barrier and control analysis — identifying and evaluating the defences that currently control identified hazards, and identifying where barriers are absent, degraded or ineffective
• Aerodrome-specific risk assessment — risk rating that reflects the operational context of this aerodrome, not a generic scoring matrix
• Risk treatment planning — designing proportionate controls for risks that are not adequately managed, with clear ownership and implementation timescales
• Residual risk documentation — recording the risk picture that the Aerodrome Manual and SMS must reflect after controls are implemented

Safety Performance Monitoring & SPI Design

Safety Performance Indicators are the mechanism through which the aerodrome operator monitors whether the SMS is producing the safety outcomes that the risk assessment process determined are required. An SPI framework that monitors easily available data rather than operationally meaningful safety signals, that is not governed by alert and action thresholds, or that generates reports reviewed at safety board meetings without producing decisions, is not performing its safety assurance function.

AACS designs SPI frameworks for aerodrome operators that surface genuine safety intelligence:

• SPI design across the full aerodrome operational scope — movement area, apron, ground handling, vehicle operations, FOD, runway incursion precursors, wildlife hazard, fire risk and multi-employer interface safety
• Leading and lagging indicator balance — ensuring the SPI framework includes forward-looking indicators that surface conditions before events occur, not only retrospective counts of events that have already happened
• Alert and action threshold setting — defining the SPI levels that trigger enhanced monitoring, investigation and corrective action
• Multi-organisation SPI framework — designing data collection and reporting arrangements that generate consolidated SPI data from across all airside organisations, not only the aerodrome operator’s own operations
• SPI dashboard design — presenting performance data in a format that supports effective safety review board discussion and senior leadership decision-making
• SPI integration with occurrence reporting — ensuring that occurrence data and SPI monitoring function as a unified safety intelligence system

Occurrence Reporting System Design

The occurrence reporting system is the primary data input of the airport SMS. The quality of the safety intelligence the SMS can generate depends directly on the quality and volume of reports submitted by personnel across all airside organisations. An occurrence reporting system that is distrusted — because it is seen to produce consequences for the reporter, because it delivers no feedback, or because it is known not to generate action — will be systematically under-used. The hazards that would otherwise have been reported go undetected.

In an airport’s multi-employer environment, the occurrence reporting challenge is amplified. The aerodrome operator must secure meaningful reporting from personnel employed by airlines, ground handlers, fuelling contractors and other organisations, each with their own management structures and organisational cultures. AACS designs occurrence reporting systems that work across this environment:

• Multi-organisation reporting architecture — designing reporting channels that are accessible to personnel across all airside organisations, not only the aerodrome operator’s own staff
• Just culture framework — a policy and governance structure that protects reporters from consequences across the multi-employer environment, with clear and trusted boundaries
• Mandatory and voluntary reporting alignment — ensuring the system captures events required under statutory mandatory reporting requirements while also providing effective channels for voluntary safety reporting
• Report assessment and investigation triage — determining which reports require full investigation, which require monitoring and which can be closed with feedback
• Feedback mechanism design — ensuring every reporter receives meaningful feedback on what their report identified and what the organisation did about it
• Anonymous reporting pathway — where appropriate for the aerodrome’s operational culture
• Reporting culture programme — the training, communication and leadership engagement that builds genuine reporting behaviour across all airside organisations

Just Culture Framework Design

Just culture in an airport environment has a particular complexity that is not present in single-organisation settings. The aerodrome operator’s just culture policy cannot bind the policies of the independent airlines, ground handlers and other organisations that operate on its apron. But the reporting culture of those organisations directly affects the safety data that the airport SMS receives. An occurrence that a ramp agent from a ground handling company does not report because they do not trust their own employer’s just culture framework is an occurrence that the aerodrome operator never learns about.

AACS designs just culture frameworks for aerodrome operators that address this multi-employer reality:

• Aerodrome operator just culture policy — the foundational policy that governs the operator’s own SMS and sets the standard it expects of all airside organisations
• Multi-employer just culture governance — framework for how the aerodrome operator establishes, communicates and monitors just culture standards across tenants and contractors
• Boundary definition — clear and operationally grounded definitions of the boundary between acceptable error and unacceptable behaviour, calibrated to the aerodrome operational environment
• Disciplinary interface framework — defining the relationship between just culture principles and the aerodrome operator’s and tenants’ disciplinary processes
• Leadership just culture training — ensuring that the Accountable Manager and management team demonstrate just culture visibly in their management of reported events

Safety Investigation Methodology

Occurrence investigation at an airport must be capable of identifying the systemic organisational factors — the latent conditions, the absent defences, the management pressures and the interface failures — that allowed the event to develop. Investigation that identifies only what happened and who was involved, and recommends retraining of the individual as its primary corrective action, does not reduce the probability of recurrence. It redistributes the failure mode.

In the multi-employer airport environment, systemic investigation must also be capable of identifying causal factors that cross organisational boundaries — the interface conditions between the airline’s turnaround coordinator and the ground handler’s ramp supervisor, or between the aerodrome operator’s airside operations controller and the fuel company’s tanker driver. AACS designs investigation methodologies that operate at this level of systemic complexity:

• Systemic investigation framework — root cause analysis, causal factor charting and systemic risk identification methodology calibrated to the aerodrome environment
• Multi-employer investigation protocols — defining how the aerodrome operator leads or coordinates investigations that involve personnel and operations from multiple organisations
• Investigation team training — building internal investigation capability for the aerodrome operator’s safety management team
• Investigation quality assurance — reviewing investigation outputs for systemic rigour and corrective action quality
• Corrective action tracking — ensuring investigation findings drive action through the SMS improvement cycle to verified closure

Tenant & Contractor SMS Interface Management

The aerodrome operator is not solely responsible for the safety of the airside environment, but it is ultimately accountable for it under the aerodrome licence. That accountability requires the aerodrome operator to have an effective framework for setting safety management standards across all airside organisations, monitoring compliance with those standards, and intervening when standards are not met. In practice, many aerodrome operators’ engagement with tenant and contractor safety management is limited to the airside access induction process and the periodic issue of safety notices. This is not adequate SMS governance of the multi-employer environment.

AACS designs tenant and contractor SMS interface frameworks that address this governance challenge:

• Airside safety standards framework — the documented standards that all airside organisations must meet as a condition of operating on the aerodrome, covering SMS obligations, training standards, occurrence reporting requirements and incident notification
• Tenant SMS assessment framework — structured periodic assessment of each airside organisation’s safety management performance against the aerodrome operator’s standards
• Contractor safety management requirements — pre-qualification, site-specific risk assessment, method statement review and ongoing monitoring standards for construction and maintenance contractors
• Safety data sharing protocol — the mechanism through which occurrence data and safety intelligence generated by airside organisations is shared with and integrated into the aerodrome operator’s SMS
• Intervention framework — the governance process through which the aerodrome operator escalates safety management concerns with tenants and contractors, up to and including restriction of airside access

SMS Integration with ISO Management Systems

Many aerodrome operators hold or are seeking ISO 9001, ISO 14001 and ISO 45001 certification alongside their aviation SMS obligations. Maintaining these as separate management systems — with separate documentation structures, separate audit programmes and separate management reviews — creates unnecessary duplication and administrative burden. AACS designs integrated management systems that combine the aerodrome operator’s aviation SMS with ISO management system obligations into a single coherent framework.

• Integration framework design — combining ICAO Annex 19 SMS requirements with ISO 9001 quality management, ISO 14001 environmental management and ISO 45001 OH&S management into a unified system
• Integrated policy framework — a single coherent policy suite that addresses safety, quality, environmental and OH&S obligations
• Unified internal audit programme — covering aviation SMS, compliance monitoring, quality, environmental and OH&S obligations through a single coordinated audit schedule
• Integrated management review — enabling a single, coherent picture of organisational performance across all dimensions to be presented to leadership at each review cycle
• ISO certification audit preparation — preparing the aerodrome operator for multi-standard assessment by certification bodies

SMS Training for Airport Personnel

An airport SMS that is designed and understood at the level of the Safety Manager but is invisible to the ramp agent, the vehicle driver, the maintenance engineer and the airside contractor is not functioning as a safety management system. The reporting culture, the hazard awareness and the safe behaviour that the SMS depends on are produced by people who understand their role in the system and are motivated to exercise it.

AACS designs and delivers SMS training for airport personnel at all levels and across all airside organisations:

• Accountable Manager SMS training — the regulatory obligation, the governance framework, the AM’s personal accountability and the safety leadership behaviour that makes the SMS credible across the aerodrome’s multi-employer environment
• Safety Manager and Safety Officer training — hazard identification methodology, SPI analysis, occurrence investigation, safety review board management and UK CAA engagement
• Operations management SMS training — the SMS responsibilities of aerodrome operations supervisors, duty managers and airside operations controllers
• Ground handling and ramp operations SMS awareness — occurrence reporting, just culture, hazard recognition and the ramp operator’s role in the aerodrome’s safety intelligence system
• Tenant organisation SMS awareness — structured safety management awareness for the management and operational staff of airlines, ground handlers and other airside tenants
• Safety promotion programme design — the communications, campaigns and safety culture activities that reinforce the SMS across the full airside community

SMS Maturity Assessment & Improvement Roadmap

An aerodrome operator’s SMS does not achieve full operational maturity at certification. It develops over time — from a reactive framework that responds to events that have already occurred, through a proactive system that identifies and controls risk before events develop, toward a generative culture in which safety management operates as an organisational value at every level and across all airside organisations. The gap between initial licence compliance and genuine safety management maturity is where most aerodrome operators’ SMS programmes currently sit.

AACS conducts SMS maturity assessments that identify where the aerodrome’s SMS stands on this trajectory and develop a structured improvement roadmap:

• SMS maturity assessment against the ICAO safety management maturity model — evaluating each SMS pillar across the aerodrome operator’s own operations and the multi-employer environment
• Safety culture assessment — evaluating reporting culture, leadership behaviour, just culture credibility and organisational safety attitudes across the aerodrome’s airside community
• Improvement roadmap development — a prioritised, actionable plan for developing SMS maturity with realistic timescales and resource requirements
• Progress measurement framework — the indicators that will demonstrate SMS improvement over the roadmap period

Why Airline SMS Programmes Fail — and How AACS Addresses Each Failure Mode

Honest assessment of the failure modes — the patterns through which airport SMS programmes that are compliant on paper deliver inadequate safety performance in practice — is central to effective SMS advisory. AACS has identified the following failure modes consistently across aerodrome operators:

The AACS Approach to Airport SMS

AACS advisors bring direct operational and regulatory experience in aerodrome SMS design, airside safety management and UK CAA regulatory engagement. We understand the specific hazards of the airport environment, the challenges of managing safety across a community of independent organisations, and the regulatory expectations that the UK CAA brings to aerodrome licence oversight. We have worked with aerodrome operators across the full size spectrum — from small regional airports and general aviation aerodromes through to major international terminals.

Our advice is independent. We are not a software platform seeking SMS module licence revenue. We are not affiliated with any aerodrome operator group, airline, ground handler or equipment supplier whose commercial interests might influence our recommendations. Our advisory is shaped by what is correct for the aerodrome and what the regulatory framework requires.

We are direct about what works and what does not. An aerodrome operator that has an SMS that is not functioning will receive our honest assessment of why — and a structured, practical plan for addressing it. The purpose of engaging AACS is to build a safety management system that genuinely protects the people who work in the airside environment and the aircraft that operate there.

Speak to an AACS Specialist

Whether you are designing an SMS for an initial aerodrome licence application, revising a system that is not delivering effective safety performance, preparing for UK CAA licence oversight, or seeking independent assessment of your current SMS maturity, AACS provides the specialist expertise to deliver what you need.

We will be direct about what your airport SMS needs to achieve, what the regulatory framework requires, and how we can help you build a safety management system that genuinely works — for your aerodrome, your operational complexity and your regulatory environment.