Understand SMS
A Safety Management System, explained without the jargon.
If you have been handed a stack of regulations and a blank Word document, start here.
What is an SMS?
A Safety Management System is the process your aviation company uses to:
- identify things that could cause a safety problem
- determine how serious the risk is
- reduce or eliminate that risk
- verify that the solution worked
- maintain records showing what was done
That is the whole idea. Everything else — the matrices, the terminology, the appendices — exists to make those five things repeatable and provable.
Why does an aviation company need one?
Because problems repeat until someone fixes the cause
Without a system, the same near miss happens three times and nobody connects them. An SMS makes the pattern visible.
Because people need a safe way to speak up
A just-culture reporting policy means an honest mistake can be reported without fear, so the company hears about it early.
Because decisions need to be traceable
When someone asks why you accepted a risk, you should be able to show the assessment, the controls and who signed it.
Because certification and oversight expect it
Operators and applicants are increasingly expected to show a functioning SMS, not just a written one.
The four main parts
Safety Policy
A written commitment from the top of the company, the safety objectives you are aiming at, a just-culture reporting policy, and who is responsible for what.
Safety Risk Management
How hazards get identified and reported, how risk is assessed, how controls are put in place, and who is allowed to accept which level of risk.
Safety Assurance
Checking that it is working: monitoring safety performance, watching trends, auditing, following up corrective actions and holding management reviews.
Safety Promotion
Training people so they know how the system works, and communicating safety information so lessons actually reach the crew.
How does hazard reporting work?
- 01Someone notices something — an event, a near miss, or a condition that could bite later — and submits a short report.
- 02A reviewer decides whether it is valid, how urgent it is, and whether anything must be done right now to protect people or aircraft.
- 03If it needs looking into, an investigation gathers the facts: photos, weather, records, statements.
- 04The credible consequences are listed. A single hazard can have several.
- 05Each consequence gets a risk assessment — how bad could it be, and how likely is it.
- 06Root cause analysis asks why until the answer is something the company can actually fix.
- 07Corrective actions are assigned with an owner and a due date.
- 08Someone else verifies the action was done, addressed the cause, and reduced the risk.
- 09The residual risk is recorded, the risk register is updated, and only then can the case close.
What is risk assessment?
Risk assessment combines two judgements: severity — the worst credible outcome if this happens — and likelihood — how probable that is.
Plotted on a 5 × 5 grid, the pair produces an index such as 3A, and a level: high (intolerable), moderate (tolerable) or low (acceptable). The level decides two things — how urgently you have to act, and who in the company is allowed to accept the risk.
You assess twice. Once before you do anything, and again after your controls are in place. The first assessment is never overwritten; both stay on the record.
High / Intolerable
Stop or cut back the operation. Fix it before continuing.
Moderate / Tolerable
Acceptable with controls. Work it down where practical.
Low / Acceptable
Acceptable as is. No further mitigation required.
What is Safety Assurance?
Safety Assurance is the part that checks the system is working. It asks: are our controls still effective? Are reports going up or down, and why? Are corrective actions being completed on time? Did training get done? It uses safety performance indicators, trend analysis, audits and scheduled management reviews — and it is the part most often skipped.
What does the company need to keep doing after the manual is written?
- Keep collecting hazard and occurrence reports
- Investigate them and assess the risk
- Assign corrective actions and verify they worked
- Keep the risk register current
- Complete flight risk assessments before flights
- Track training and keep records
- Hold management reviews on a set schedule
- Revise the manual when the way you operate changes
A manual on a shelf is not a Safety Management System. The manual describes what you do; the records prove you did it.