Airport SMS: safety evidence born in the operation

A Safety Management System is the obligation to record hazards, operational change, training and performance indicators with a traceable trail. Under ICAO Annex 19, the operator must show evidence in the course of the operation — not a reconstructed file before an audit. Auter keeps that evidence on the same foundation that records movement.

What Annex 19 requires from the operator

Start with hazards and operational change. To make the work reviewable, preserve the source event, its context and accountable role. The information becomes useful when the team can identify who observed the condition, when it was recorded and what happened next. A record does not replace professional assessment: it provides the operational context needed to make that assessment.

An operational record should distinguish the observed fact from a later interpretation. For hazards and operational change, record what happened first, associate training and performance indicators and keep the sequence of decisions visible. If information is corrected, its history matters too. Without that sequence, a final document may look complete while leaving the source of its conclusions unclear.

In day-to-day work, records of hazards and operational change need definitions that fit the aerodrome. Capturing data during the operation avoids rebuilding context from memory, messages or separate spreadsheets. That connection matters when a shift changes, a responsible person changes or someone needs to examine an earlier occurrence without losing the original circumstances.

The same foundation can hold the source event, its context and accountable role alongside other operational records while keeping each activity identifiable. This is not an automatic regulatory approval or a substitute for human judgement. It is a reviewable trail through which the team can consult, assess and follow up, with people remaining responsible for the decisions and information they present.

For hazards and operational change, a completed form alone is not enough: it should reflect what actually happened. The team should also be able to consult training and performance indicators and verify the evidence. That distinction lets a manager separate an initial observation from an assessment and check whether a proposed action was completed.

Explore the Auter airport management foundation and how operational records connect.

SMS manual, safety assessment, reporting and SPI

Start with the manual, assessment and reporting. To make the work reviewable, preserve the document version, observed condition and assessment. The information becomes useful when the team can identify who observed the condition, when it was recorded and what happened next. A record does not replace professional assessment: it provides the operational context needed to make that assessment.

An operational record should distinguish the observed fact from a later interpretation. For manual, assessment and reporting, record what happened first, associate instruction and procedure and keep the sequence of decisions visible. If information is corrected, its history matters too. Without that sequence, a final document may look complete while leaving the source of its conclusions unclear.

In day-to-day work, records of the manual, assessment and reporting need definitions that fit the aerodrome. Capturing data during the operation avoids rebuilding context from memory, messages or separate spreadsheets. That connection matters when a shift changes, a responsible person changes or someone needs to examine an earlier occurrence without losing the original circumstances.

The same foundation can hold the document version, observed condition and assessment alongside other operational records while keeping each activity identifiable. This is not an automatic regulatory approval or a substitute for human judgement. It is a reviewable trail through which the team can consult, assess and follow up, with people remaining responsible for the decisions and information they present.

For manual, assessment and reporting, a completed form alone is not enough: it should reflect what actually happened. The team should also be able to consult instruction and procedure and verify the review of the measure. That distinction lets a manager separate an initial observation from an assessment and check whether a proposed action was completed.

Read about Aerodrome Emergency Plan: evidence, not a static file on the same operational foundation.

How evidence is born in the movement

Start with movement and safety event. To make the work reviewable, preserve movement captured at source and its associated occurrence. The information becomes useful when the team can identify who observed the condition, when it was recorded and what happened next. A record does not replace professional assessment: it provides the operational context needed to make that assessment.

An operational record should distinguish the observed fact from a later interpretation. For movement and safety event, record what happened first, identify the operations team and keep the sequence of decisions visible. If information is corrected, its history matters too. Without that sequence, a final document may look complete while leaving the source of its conclusions unclear.

In day-to-day work, records of movement and safety events need definitions that fit the aerodrome. Capturing data during the operation avoids rebuilding context from memory, messages or separate spreadsheets. That connection matters when a shift changes, a responsible person changes or someone needs to examine an earlier occurrence without losing the original circumstances.

The same foundation can hold movement captured at source and its associated occurrence alongside other operational records while keeping each activity identifiable. This is not an automatic regulatory approval or a substitute for human judgement. It is a reviewable trail through which the team can consult, assess and follow up, with people remaining responsible for the decisions and information they present.

For movement and safety event, a completed form alone is not enough: it should reflect what actually happened. The team should also be able to consult operations team and verify traceability through assessment. That distinction lets a manager separate an initial observation from an assessment and check whether a proposed action was completed.

Follow the source of records on the airport management platform.

Airport view and portfolio view

Start with the airport and its portfolio context. To make the work reviewable, preserve each aerodrome context and a common basis for comparison. The information becomes useful when the team can identify who observed the condition, when it was recorded and what happened next. A record does not replace professional assessment: it provides the operational context needed to make that assessment.

An operational record should distinguish the observed fact from a later interpretation. For airport and portfolio, record what happened first, identify local management and keep the sequence of decisions visible. If information is corrected, its history matters too. Without that sequence, a final document may look complete while leaving the source of its conclusions unclear.

In day-to-day work, records of each airport in the portfolio need definitions that fit the aerodrome. Capturing data during the operation avoids rebuilding context from memory, messages or separate spreadsheets. That connection matters when a shift changes, a responsible person changes or someone needs to examine an earlier occurrence without losing the original circumstances.

The same foundation can hold each aerodrome context and a common basis for comparison alongside other operational records while keeping each activity identifiable. This is not an automatic regulatory approval or a substitute for human judgement. It is a reviewable trail through which the team can consult, assess and follow up, with people remaining responsible for the decisions and information they present.

For airport and portfolio, a completed form alone is not enough: it should reflect what actually happened. The team should also be able to consult local management and group visibility and verify differences between operations. That distinction lets a manager separate an initial observation from an assessment and check whether a proposed action was completed.

Explore multi-airport management and review airport operations cases.

Frequently asked questions

What is an airport SMS?

An airport SMS is a Safety Management System applied to aerodrome operations. It brings hazard reporting, operational change, training and performance indicators into a traceable process. A useful record identifies the observation, who made it and what was done afterwards. A manual alone cannot show how the operator actually managed a condition during daily operations.

What evidence does Annex 19 expect from an aerodrome operator?

Annex 19 calls for a systematic approach to managing safety, supported by records that can be reviewed. For an aerodrome operator, that means linking reported hazards, assessments, actions and performance information to their operational context. The exact records depend on the activity and applicable requirements; a retrospective file without a clear source does not show the same trail.

What is a safety assessment before operational change?

A safety assessment examines a proposed operational change and its possible implications before the change is carried out. It records the current condition, identified hazards, considered measures and responsible people. The operator must determine the applicable process for the particular change; a shared platform can preserve the assessment trail but does not decide whether a change is acceptable.

Can voluntary hazard reporting live on the operational system?

Voluntary hazard reports can share an operational foundation with movement records if reporting has appropriate classification, access and follow-up. A link to an operational event provides context when relevant without turning every report into a closed occurrence. The responsible team still needs to evaluate the report and document the response according to its procedures.

Can an airport group compare SMS evidence across airports?

An airport group can compare SMS evidence using common definitions while keeping each aerodrome separate. Local hazards, assessments and decisions must remain attributable to the airport where they occurred. The portfolio view supports comparison of routines and outstanding work, but it should not merge different operational contexts or replace local safety judgement.

Operational obligations

Talk to our team