SMS (Safety Management System) — Safety Management System

Overview

A Safety Management System (SMS) is a systematic, organization-wide approach to managing safety, including the organizational structures, accountabilities, policies and procedures needed to do so. ICAO mandates SMS through Annex 19 (Safety Management), first adopted in 2013, which consolidated safety-management provisions previously scattered across Annexes 1, 6, 8, 11, 13 and 14 into a single, dedicated annex. SMS represents a shift from a purely reactive, compliance-based approach to aviation safety toward one that proactively identifies hazards and manages risk before accidents occur.

The Four Pillars

ICAO's Safety Management Manual (Doc 9859) and Annex 19 structure SMS around four components:

1. Safety Policy and Objectives — management commitment, accountabilities, and a documented safety policy.

2. Safety Risk Management — hazard identification and risk assessment/mitigation processes.

3. Safety Assurance — safety performance monitoring, internal audit, and management of change.

4. Safety Promotion — training and communication that build a positive safety culture.

Who Must Implement SMS

Annex 19 requires ICAO member states to establish a State Safety Programme (SSP) and requires SMS implementation by air operators conducting international commercial air transport, approved maintenance organizations, air navigation service providers, and certified aerodrome operators. Amendment 1 (2016) extended the requirement to type-certificate holders and engine/propeller manufacturing organizations. National regulators transpose these obligations into their own rules — for example, EASA's SMS requirements embedded in Part-ORO and Part-145, and the FAA's SMS rule for Part 121 certificate holders.

SMS vs. SSP

SMS operates at the organizational (service-provider) level, while the State Safety Programme (SSP) is the parallel framework a civil aviation authority runs to oversee safety across its entire national aviation system. The two are linked: states aggregate safety data and oversight findings from operators' SMS programs to inform SSP-level risk decisions and resource allocation.

SMS and Industry Audits

Because SMS is now a baseline ICAO requirement, industry safety-audit programs build on it directly. IATA's IOSA (IATA Operational Safety Audit) checklist, for instance, evaluates whether an airline's SMS meets the required organizational, risk-management and assurance elements as part of its standard audit scope.

Standards

ICAO Annex 19 (Safety Management) and ICAO Doc 9859 (Safety Management Manual) are the core references.