Safety and Risk Management (SMS, IS-BAO, Emergency Response, Human Factors)
This domain tests safety management as a system, not a binder. Expect questions on SMS pillars, risk scoring, IS-BAO, emergency response, and human factors such as fatigue, complacency, and normalization of deviance.
Core rules
- SMS has four pillars: safety policy and objectives, safety risk management, safety assurance, and safety promotion. Risk management identifies hazards, assesses likelihood and severity, and mitigates to an acceptable level.
- A 5×5 matrix is common. Scores 1–4 are low, 5–9 medium, 10–16 high, 17–25 critical; thresholds vary by organization but must be defined in the manual.
- IS-BAO is a voluntary, audit-based code of practice with staged recognition (Stage 1 initial, Stage 2, Stage 3 for mature systems). It is not a regulation and does not replace the certificate holder's SMS.
- Just culture: honest errors are reported and learned from; reckless behavior and intentional violations are addressed individually. A blame-free culture is not the same as an accountability-free culture.
- Emergency response: the ERP assigns command, communications, family assistance, and media roles, and is validated through tabletop and full-scale exercises.
Worked example
A charter to a mountain airport in forecast turbulence scores likelihood 4 and severity 4 = 16, high. Mitigation-a later departure, an alternate with better weather, and a captain with mountain experience-lowers likelihood to 2, giving 8, medium. The risk is accepted only after the mitigation is recorded and the residual score approved at the correct level.
Traps
Scoring after mitigation only; treating SMS as paperwork; blaming the individual for a systemic error; confusing IS-BAO registration with regulatory approval; writing an ERP that has never been exercised or tested.