Safety Management Systems Overview
What is a Safety Management System (SMS)?
A formal, top-down, organization-wide approach to managing safety risk and assuring the effectiveness of safety risk controls. It includes systematic procedures, practices, and policies for the management of safety risk.
Safety Policy
Establish leadership commitment and accountability
Risk Management
Identify hazards and assess/control risks
Safety Assurance
Monitor performance and effectiveness
Safety Promotion
Train personnel and communicate safety
- Proactive identification of safety hazards
- Systematic approach to risk management
- Improved safety culture and communication
- Enhanced regulatory compliance
- Continuous safety improvement processes
- Data-driven safety decision making
Who Must Comply with Part 5?
Part 121 Air Carriers
Required: All certificate holders conducting operations under Part 121
Effective: March 9, 2018
Type & Production Certificate Holders
Required: Holders of both Type Certificate and Production Certificate for the same product
Deadline: May 28, 2025
Part 135 Operations
Proposed: Future rulemaking expected to extend requirements
Commercial Air Tours
Proposed: LOA holders operating under § 91.147
⚠️ Important Compliance Dates
Organizations with existing SMS acceptable to FAA on/before May 28, 2024 must revise to meet Part 5 requirements by May 28, 2025.
Primary Applicability: This part applies to the following persons:
- A certificate holder with a certificate issued under part 119 conducting operations under part 121
- A person who holds both a type certificate and production certificate for the same product
Exceptions: Certain requirements do not apply to single-pilot operations where one person performs all functions. Specific exceptions include sections related to:
- Communication processes requiring multiple personnel
- Training programs for management structure
- Organizational accountability beyond individual responsibility
Subpart A - General Requirements (§§ 5.1 & 5.5)
This regulation applies to:
- Certificate holders conducting Part 121 operations
- Organizations holding both Type Certificate and Production Certificate for the same product
See Applicability tab for complete details and implementation timelines.
(a) SMS Components: An SMS under this part must be appropriate to the size, scope, and complexity of the organization and include all of the following components:
- Safety policy that meets the requirements of Subpart B
- Safety risk management that meets the requirements of Subpart C
- Safety assurance that meets the requirements of Subpart D
- Safety promotion that meets the requirements of Subpart E
(b) Continuing Requirements: Any person required to develop and implement an SMS under this part must maintain the SMS in accordance with this part.
Foundation for SMS Implementation
These general requirements establish the mandatory framework that all other subparts build upon. Section 5.5 defines the four pillars that form the complete SMS structure, ensuring systematic safety management across all organizational levels.
Key Definitions (§ 5.3)
A condition or an object that could foreseeably cause or contribute to an incident or aircraft accident.
The composite of predicted severity and likelihood of the potential effect of a hazard.
A means to reduce or eliminate the effects of hazards.
Processes within the SMS that function systematically to ensure the performance and effectiveness of safety risk controls.
The formal, top-down, organization-wide approach to managing safety risk and assuring the effectiveness of safety risk controls.
A measurable goal or desirable outcome related to safety.
A process within the SMS composed of describing the system, identifying the hazards, and analyzing, assessing, and controlling risk.
Subpart B - Safety Policy (§§ 5.21-5.27)
The safety policy must include the following elements:
- The organization's safety objectives
- Commitment to fulfill safety objectives
- Commitment to provide necessary resources for SMS implementation
- Safety reporting policy defining employee reporting requirements
- Policy defining unacceptable behavior and disciplinary actions
- Emergency response plan for transition from normal to emergency operations
- Code of ethics applicable to all employees clarifying safety as highest priority
Organizations must define accountability for safety including:
- Accountable executive responsibilities
- Designated management personnel roles
- Clear lines of safety accountability throughout the organization
The accountable executive must:
- Have ultimate responsibility for safety performance
- Be accountable for SMS implementation and maintenance
- Designate sufficient management personnel
- Ensure adequate resources for SMS operation
- Regularly review safety performance
SMS must coordinate emergency response planning to ensure safe transition from normal to emergency operations.
Subpart C - Safety Risk Management (§§ 5.51-5.57)
Safety risk management must be applied to:
- Implementation of new systems
- Revisions to existing systems
- Development of operational procedures
- Identification of hazards through safety assurance processes
Organizations must:
- Analyze systems to understand their function and purpose
- Identify hazards within the context of system analysis
- Develop processes for ongoing hazard identification
- Consider both individual system hazards and system interfaces
Required processes include:
- Analyze safety risk associated with identified hazards
- Define process for conducting risk assessment
- Develop safety risk controls as necessary
- Evaluate acceptability of risk with proposed controls
- Implement controls only after determining risk acceptability
If a person required to have an SMS under this part identifies a hazard in the operating environment, the person must provide notice of the hazard to any interfacing person that, to the best of the person's knowledge, could address the hazard or mitigate the risk.
Interfacing Persons: Those that contribute to the safety of the certificate or Letter of Authorization holder's aviation-related products and services.
Added by Amendment 5-2, effective April 26, 2024
⚠️ 2024 Update - Information Sharing
This new requirement drives industry collaboration to identify and address potential safety issues through mandatory hazard notification between interfacing organizations.
Risk Management Process Flow
System Description → Hazard Identification → Risk Analysis → Risk Assessment → Risk Control Development → Implementation → Hazard Notification (if applicable)
Subpart D - Safety Assurance (§§ 5.71-5.75)
Organizations must develop processes and systems to acquire data including:
- Monitoring of operational environment to detect changes
- Auditing of operational processes and systems
- Evaluations of SMS and operational processes
- Investigations of incidents and accidents
- Investigations of potential non-compliance reports
- Confidential employee reporting system
Conduct assessments of safety performance against safety objectives through:
- Reviews by the accountable executive
- Ensuring compliance with established safety risk controls
- Identifying ineffective controls or new hazards
- Evaluating the effectiveness of SMS implementation
Establish processes to correct safety performance deficiencies identified through assessments.
📊 Data Requirements
Organizations holding both type and production certificates must submit summaries of confidential employee reports to the Administrator every 6 months.
Subpart E - Safety Promotion (§§ 5.91-5.93)
Provide training to individuals identified in § 5.23 to ensure they attain and maintain competencies necessary to perform SMS-related duties.
Develop and maintain means for communicating safety information that:
- Ensures employees are aware of SMS policies, processes, and tools relevant to their responsibilities
- Conveys hazard information relevant to employee responsibilities
- Explains actions taken to address safety concerns
- Provides feedback on safety performance and improvement initiatives
Safety Culture Development
Safety promotion activities create and maintain a positive safety culture where safety is everyone's responsibility and safety reporting is encouraged without fear of reprisal.
Subpart F - Documentation & Recordkeeping (§§ 5.95-5.97)
Develop and maintain SMS documentation including:
- Safety policy and objectives
- SMS requirements and procedures
- Responsibilities and authorities for key safety personnel
- Methods and procedures for hazard identification and risk management
- Training requirements and records
- Documentation of SMS processes and activities
Maintain records demonstrating SMS implementation and performance:
- Safety performance monitoring and measurement records
- Hazard identification and risk assessment records
- Risk control implementation records
- Safety assurance records including audits and assessments
- Training records for safety personnel
- Safety communication and reporting records
📋 Record Retention
SMS records must be maintained in a manner that ensures their availability for FAA review and demonstrates continuous compliance with Part 5 requirements.
SMS Compliance Checker
Use this interactive checklist to assess your organization's SMS compliance with 14 CFR Part 5:
Compliance Progress: 0%