Safety Management Systems Overview

What is a Safety Management System (SMS)?

A formal, top-down, organization-wide approach to managing safety risk and assuring the effectiveness of safety risk controls. It includes systematic procedures, practices, and policies for the management of safety risk.

Safety Policy

Establish leadership commitment and accountability

Risk Management

Identify hazards and assess/control risks

Safety Assurance

Monitor performance and effectiveness

Safety Promotion

Train personnel and communicate safety

Key Benefits Why Implement SMS?
  • Proactive identification of safety hazards
  • Systematic approach to risk management
  • Improved safety culture and communication
  • Enhanced regulatory compliance
  • Continuous safety improvement processes
  • Data-driven safety decision making

Who Must Comply with Part 5?

Part 121 Air Carriers

Required: All certificate holders conducting operations under Part 121

Effective: March 9, 2018

Type & Production Certificate Holders

Required: Holders of both Type Certificate and Production Certificate for the same product

Deadline: May 28, 2025

Part 135 Operations

Proposed: Future rulemaking expected to extend requirements

Commercial Air Tours

Proposed: LOA holders operating under § 91.147

⚠️ Important Compliance Dates

Organizations with existing SMS acceptable to FAA on/before May 28, 2024 must revise to meet Part 5 requirements by May 28, 2025.

§ 5.1 Detailed Applicability Requirements

Primary Applicability: This part applies to the following persons:

  • A certificate holder with a certificate issued under part 119 conducting operations under part 121
  • A person who holds both a type certificate and production certificate for the same product

Exceptions: Certain requirements do not apply to single-pilot operations where one person performs all functions. Specific exceptions include sections related to:

  • Communication processes requiring multiple personnel
  • Training programs for management structure
  • Organizational accountability beyond individual responsibility

Subpart A - General Requirements (§§ 5.1 & 5.5)

§ 5.1 Applicability Summary

This regulation applies to:

  • Certificate holders conducting Part 121 operations
  • Organizations holding both Type Certificate and Production Certificate for the same product

See Applicability tab for complete details and implementation timelines.

§ 5.5 General Requirements for SMS

(a) SMS Components: An SMS under this part must be appropriate to the size, scope, and complexity of the organization and include all of the following components:

  • Safety policy that meets the requirements of Subpart B
  • Safety risk management that meets the requirements of Subpart C
  • Safety assurance that meets the requirements of Subpart D
  • Safety promotion that meets the requirements of Subpart E

(b) Continuing Requirements: Any person required to develop and implement an SMS under this part must maintain the SMS in accordance with this part.

Foundation for SMS Implementation

These general requirements establish the mandatory framework that all other subparts build upon. Section 5.5 defines the four pillars that form the complete SMS structure, ensuring systematic safety management across all organizational levels.

Key Definitions (§ 5.3)

Hazard

A condition or an object that could foreseeably cause or contribute to an incident or aircraft accident.

Risk

The composite of predicted severity and likelihood of the potential effect of a hazard.

Risk Control

A means to reduce or eliminate the effects of hazards.

Safety Assurance

Processes within the SMS that function systematically to ensure the performance and effectiveness of safety risk controls.

Safety Management System (SMS)

The formal, top-down, organization-wide approach to managing safety risk and assuring the effectiveness of safety risk controls.

Safety Objective

A measurable goal or desirable outcome related to safety.

Safety Risk Management

A process within the SMS composed of describing the system, identifying the hazards, and analyzing, assessing, and controlling risk.

Subpart B - Safety Policy (§§ 5.21-5.27)

§ 5.21 Safety Policy Requirements

The safety policy must include the following elements:

  • The organization's safety objectives
  • Commitment to fulfill safety objectives
  • Commitment to provide necessary resources for SMS implementation
  • Safety reporting policy defining employee reporting requirements
  • Policy defining unacceptable behavior and disciplinary actions
  • Emergency response plan for transition from normal to emergency operations
  • Code of ethics applicable to all employees clarifying safety as highest priority
§ 5.23 Safety Accountability and Authority

Organizations must define accountability for safety including:

  • Accountable executive responsibilities
  • Designated management personnel roles
  • Clear lines of safety accountability throughout the organization
§ 5.25 Required Safety Management Personnel

The accountable executive must:

  • Have ultimate responsibility for safety performance
  • Be accountable for SMS implementation and maintenance
  • Designate sufficient management personnel
  • Ensure adequate resources for SMS operation
  • Regularly review safety performance
§ 5.27 Emergency Response Planning

SMS must coordinate emergency response planning to ensure safe transition from normal to emergency operations.

Subpart C - Safety Risk Management (§§ 5.51-5.57)

§ 5.51 Risk Management Application

Safety risk management must be applied to:

  • Implementation of new systems
  • Revisions to existing systems
  • Development of operational procedures
  • Identification of hazards through safety assurance processes
§ 5.53 System Analysis and Hazard Identification

Organizations must:

  • Analyze systems to understand their function and purpose
  • Identify hazards within the context of system analysis
  • Develop processes for ongoing hazard identification
  • Consider both individual system hazards and system interfaces
§ 5.55 Safety Risk Assessment and Control

Required processes include:

  • Analyze safety risk associated with identified hazards
  • Define process for conducting risk assessment
  • Develop safety risk controls as necessary
  • Evaluate acceptability of risk with proposed controls
  • Implement controls only after determining risk acceptability
§ 5.57 Notification of Hazards to Interfacing Persons

If a person required to have an SMS under this part identifies a hazard in the operating environment, the person must provide notice of the hazard to any interfacing person that, to the best of the person's knowledge, could address the hazard or mitigate the risk.

Interfacing Persons: Those that contribute to the safety of the certificate or Letter of Authorization holder's aviation-related products and services.

Added by Amendment 5-2, effective April 26, 2024

⚠️ 2024 Update - Information Sharing

This new requirement drives industry collaboration to identify and address potential safety issues through mandatory hazard notification between interfacing organizations.

Risk Management Process Flow

System Description → Hazard Identification → Risk Analysis → Risk Assessment → Risk Control Development → Implementation → Hazard Notification (if applicable)

Subpart D - Safety Assurance (§§ 5.71-5.75)

§ 5.71 Safety Performance Monitoring

Organizations must develop processes and systems to acquire data including:

  • Monitoring of operational environment to detect changes
  • Auditing of operational processes and systems
  • Evaluations of SMS and operational processes
  • Investigations of incidents and accidents
  • Investigations of potential non-compliance reports
  • Confidential employee reporting system
§ 5.73 Safety Performance Assessment

Conduct assessments of safety performance against safety objectives through:

  • Reviews by the accountable executive
  • Ensuring compliance with established safety risk controls
  • Identifying ineffective controls or new hazards
  • Evaluating the effectiveness of SMS implementation
§ 5.75 Continuous Improvement

Establish processes to correct safety performance deficiencies identified through assessments.

📊 Data Requirements

Organizations holding both type and production certificates must submit summaries of confidential employee reports to the Administrator every 6 months.

Subpart E - Safety Promotion (§§ 5.91-5.93)

§ 5.91 Competencies and Training

Provide training to individuals identified in § 5.23 to ensure they attain and maintain competencies necessary to perform SMS-related duties.

§ 5.93 Safety Communication

Develop and maintain means for communicating safety information that:

  • Ensures employees are aware of SMS policies, processes, and tools relevant to their responsibilities
  • Conveys hazard information relevant to employee responsibilities
  • Explains actions taken to address safety concerns
  • Provides feedback on safety performance and improvement initiatives

Safety Culture Development

Safety promotion activities create and maintain a positive safety culture where safety is everyone's responsibility and safety reporting is encouraged without fear of reprisal.

Subpart F - Documentation & Recordkeeping (§§ 5.95-5.97)

§ 5.95 SMS Documentation Requirements

Develop and maintain SMS documentation including:

  • Safety policy and objectives
  • SMS requirements and procedures
  • Responsibilities and authorities for key safety personnel
  • Methods and procedures for hazard identification and risk management
  • Training requirements and records
  • Documentation of SMS processes and activities
§ 5.97 SMS Records

Maintain records demonstrating SMS implementation and performance:

  • Safety performance monitoring and measurement records
  • Hazard identification and risk assessment records
  • Risk control implementation records
  • Safety assurance records including audits and assessments
  • Training records for safety personnel
  • Safety communication and reporting records

📋 Record Retention

SMS records must be maintained in a manner that ensures their availability for FAA review and demonstrates continuous compliance with Part 5 requirements.

SMS Compliance Checker

Use this interactive checklist to assess your organization's SMS compliance with 14 CFR Part 5:

Compliance Progress: 0%

Safety Policy (Subpart B)

Safety Risk Management (Subpart C)

Safety Assurance (Subpart D)

Safety Promotion (Subpart E)

Documentation & Recordkeeping (Subpart F)

Management & Personnel