2-7
2.2.7.2 Implementation Strategies.
2.2.7.2.1 You must develop and maintain an organizational system description in accordance with § 5.17 [§ 5.11(a)]. Refer to paragraph 2.2.10 for information about the organizational system description.
2.2.7.2.2 You must submit an implementation plan in accordance with § 5.19 to the FAA for approval by November 28, 2024 [§ 5.11(b)]. Refer to paragraph
2.2.11 for information about the implementation plan. Submit your implementation plan to:
• Program Management Section (AIR-8X7)
• Email: 9-AVS-AIR-SMS@faa.gov
2.2.7.2.3 You must develop an SMS that meets part 5 [§ 5.11(c)]. Developing an SMS means that you have created or identified existing policies, processes, and procedures that meet the applicable requirements in part 5.
2.2.7.2.4 You must implement your SMS by May 28, 2027 [§ 5.11(d)].
Implementing an SMS means that your SMS is functioning across all areas described in your organizational system description and meets the requirements in part 5.
2.2.7.2.5 You must make available to the FAA, upon request, all necessary information and data that demonstrates that your SMS meets the requirements in part 5 [§ 5.11(e)]. Make available means that you allow the FAA access to review your SMS information and data but are not required to submit the information and data to the FAA.
Note: The FAA will request that you make SMS information and data available as we conduct oversight of your SMS. This data and information may include SMS policies, processes, procedures, documentation, and records.
2.2.7.2.6 You must maintain your SMS as long as you are both a holder of a production certificate for a product and a holder or licensee of a type certificate for the same product [§ 5.11(f)]. Maintaining an SMS means that your SMS processes and procedures, documentation (e.g., organizational system description, policies, procedures), and records (e.g., safety risk management, safety assurance, training) are accurate and kept current.
2.2.7.3 Scalability Examples. Not applicable.
2-8
2.2.8 Requirements For Type Certificate Holders Applying For A Production Certificate For The Same Product.
2.2.8.1 Discussion. Section 5.13 provides the steps required to develop, implement, and maintain an SMS if you hold or are a licensee of a type certificate for a product and are applying, or have an application pending, for a production certificate for the same product.
2.2.8.2 Implementation Strategies. Refer to paragraph 2.2.7.2.1 through
2.2.7.2.6 for the steps to develop, implement, and maintain your SMS.
Note: Your implementation plan must be submitted during the production certification process (paragraph 2.2.7.2.2) and your SMS implementation must be completed 36 months after submission of your implementation plan (paragraph 2.2.7.2.4).
2.2.8.3. Scalability Examples. Not applicable.
§ 5.13 Requirements for type certificate holders or licensees applying for a production certificate for the same product.
(a) This section applies to any holder or licensee of a type certificate for a product who either:
(1) Applies for a production certificate for that same product under part 21 of this chapter on or after May 28, 2024, or
(2) Has an application for a production certificate for that same product under part 21 of this chapter pending on May 28, 2024.
(b) Any person that meets paragraph (a) of this section must:
(1) Develop and maintain an organizational system description in accordance with § 5.17 of this subpart.
(2) Submit an implementation plan in accordance with § 5.19 of this subpart for FAA approval in a form and manner acceptable to the Administrator during the certification process.
(3) Develop an SMS that meets the requirements of this part.
(4) Implement the SMS in accordance with this part no later than 36 months after submission of the implementation plan.
(5) Make available to the Administrator, upon request, all necessary information and data that demonstrates that the person has an SMS that meets the requirements set forth in this part.
(6) Maintain the SMS as long as the person is both a holder of a production certificate and a holder or licensee of a type certificate for the same product.
2-9
2.2.9 Requirements For Type Certificate Holders That Allow Another Person To Use The Type Certificate To Obtain A Production Certificate For The Same Product.
§ 5.15 Requirements for type certificate holders that allow another person to use the type certificate to obtain a production certificate for the same product.
(a) This section applies to any person that holds a type certificate issued under part 21 of this chapter for a product, except for persons that hold only type certificates issued under § 21.29 of this chapter, that allows another person to use the type certificate to manufacture the same product under a production certificate.
(b) Any person that meets paragraph (a) of this section and has a licensing agreement in accordance with § 21.55 of this chapter on May 28, 2024, must:
(1) Develop and maintain an organizational system description in accordance with § 5.17 of this subpart.
(2) Submit an implementation plan in accordance with § 5.19 of this subpart for FAA approval in a form and manner acceptable to the Administrator no later than November 28, 2024.
(3) Develop an SMS that meets the requirements of this part.
(4) Implement the SMS in accordance with this part no later than May 28, 2027.
(5) Make available to the Administrator, upon request, all necessary information and data that demonstrates that the person has an SMS that meets the requirements set forth in this part.
(6) Maintain the SMS as long as the person continues to meet paragraph (a) of this section.
(c) Any person that meets paragraph (a) of this section and enters into a licensing agreement in accordance with § 21.55 of this chapter after May 28, 2024, must:
(1) Develop and maintain an organizational system description in accordance with § 5.17.
(2) Submit an implementation plan in accordance with § 5.19 of this subpart for FAA approval in a form and manner acceptable to the Administrator when providing written licensing agreements in accordance with § 21.55 of this chapter.
2-10
2.2.9.1 Discussion. Section 5.15 provides the steps required to develop, implement, and maintain an SMS if you hold a type certificate for a product and allow another person to use the type certificate to manufacture the same product under a production certificate. The term “production certificate” in § 5.15 includes a production certificate issued by the FAA under part 21 or a production certificate or equivalent authorization issued by a foreign civil aviation authority.
2.2.9.2 Implementation Strategies. Refer to paragraphs 2.2.7.2.1 through
2.2.7.2.6 for the steps to develop, implement, and maintain your SMS.
Notes:
1. If you have a licensing agreement per § 21.55 in place on May 28, 2024, your implementation plan must be submitted by November 28, 2024 (paragraph 2.2.7.2.2) and your SMS implementation must be completed by May 28, 2027 (paragraph 2.2.7.2.4).
2. If you enter into a licensing agreement per § 21.55 after May 28, 2024, your implementation plan must be submitted during the licensing agreement process (paragraph 2.2.7.2.2) and your SMS implementation must be completed 36 months after submission of your implementation plan (paragraph 2.2.7.2.4).
2.2.9.3 Scalability Examples. Not applicable.
§ 5.15 Requirements for type certificate holders that allow another person to use the type certificate to obtain a production certificate for the same product (continued).
(3) Develop an SMS that meets the requirements of this part.
(4) Implement the SMS in accordance with this part no later than 36 months after submission of the person’s implementation plan.
(5) Make available to the Administrator, upon request, all necessary information and data that demonstrates that the person has an SMS that meets the requirements set forth in this part.
(6) Maintain the SMS as long as the person continues to meet paragraph (a) of this section.
2-11
2.2.10 Organizational System Description.
2.2.10.1 Discussion. Section 5.17 provides requirements for the development of an organizational system description. The organizational system description summarizes the processes, procedures, activities, personnel, equipment, and facilities that impact the aviation safety of the products and services provided by the organization. This includes, but is not limited to activities, processes, and procedures for design and certification, production, and continued operational safety. An organizational system description defines the boundaries of where SMS is applied in an organization.
2.2.10.2 Implementation Strategies.
2.2.10.2.1 You must develop an organizational system description that includes a summary of information about the safety of the products and services provided [§§ 5.17(a) - (d)]. This summary must include your aviationrelated processes, procedures, and activities; the function and purpose of your aviation products or services; the operating environment; and the personnel, equipment, and facilities necessary for operation.
2.2.10.2.2 Your organizational system description must be maintained [§ 5.17].
Maintained means that the organizational system description is updated when changes occur that impact the summary of information described in §§ 5.17(a) - (d).
2.2.10.2.3 The organizational system description for a part 21 type and production certificate holder typically consists of a set of descriptions of subsystems each of which contributes to the safety of the products and services provided. Type and production certificate holders typically have three sub-systems in their organizational system description:
• Design and certification sub-system
• Production sub-system
• Continued operational safety sub-system § 5.17 Organizational system description.
An organizational system description developed and maintained under this part must include a summary of the following information about the safety of the aviation products or services provided by the person:
(a) The person’s aviation-related processes, procedures, and activities.
(b) The function and purpose of the aviation products or services.
(c) The operating environment.
(d) The personnel, equipment, and facilities necessary for operation.
2-12 Note 1: Activities, processes, or departments that do not impact aviation safety may be excluded from your organizational system description. For example, you may exclude processes that support other lines of business such as commercial bearings or automotive components from your organizational system description.
Note 2: Aviation-related processes, procedures, and activities related only to supplemental type certificates, technical standard order authorizations, and parts manufacturer approvals without any relation to those used for type certificate and production certificate activities may be excluded from your organizational system description.
Note 3: There is no requirement to develop new processes or procedures for the creation of the organizational system description.
2.2.10.2.4 Design and Certification Sub-System. This sub-system description summarizes the processes and activities used to design and obtain FAA certification of products. The objective of this sub-system is to produce a safe and compliant design for the product.
• Aviation-related processes, procedures, and activities: Include a summary of the key processes, procedures, and steps for: design, design reviews, requirements validation and verification, major / minor change classifications, minor change agreements, changed product rule requirements, ground and flight test, showing of compliance, and finding of compliance (include your organization designation authorization procedures, if applicable).
• Function and purpose of the aviation products or services provided:
Include a summary of the products or services you provide along with their function and purpose.
• Operating environment: Include the key internal and external factors that influence the ability of the design and certification subsystem to design and certify safe and compliant products. This can include customers, suppliers, outsourcing design activities, program schedule constraints, budgetary constraints, and staffing constraints.
• Personnel, equipment, and facilities necessary for operation: Include design departments, test departments, facilities used for test, and departments used for showing and finding of compliance (include your organization designation authorization unit, if applicable), design tools (software, and hardware). The “personnel necessary for operation” should include position titles such as “Head of Design” rather than the individual names of personnel.
2.2.10.2.5 Production Sub-System. This sub-system description summarizes the processes and activities used to produce products. The objective of this system is to produce a conforming product that is in a condition for safe operation.
2-13
• Aviation-related processes, procedures, and activities: Include a summary of the processes and procedures used for manufacturing, assembly, acceptance test, non-conforming material control and disposition, inspection, material review board, and quality of products.
• Function and purpose of the aviation products or services provided:
Include a summary of the products or services you provide along with their function and purpose.
• Operating environment: Include the key internal and external factors that influence the ability of the production subsystem to produce conforming and safe products. This can include supplier deliveries, conducting production activities in various locations, manufacturing schedules, budgetary constraints, and staffing constraints.
• Personnel, equipment, and facilities necessary for operation: Include the following departments: manufacturing, assembly, test, inspection.
The “personnel necessary for operation” should include position titles such as “Head of Manufacturing” rather than the individual names of personnel.
2.2.10.2.6 Continued Operational Safety Sub-System. This sub-system description summarizes the processes and activities used to maintain the continued operational safety of the product. The objective of this system is to assure the safe operation of the product in service.
• Aviation-related processes, procedures, and activities: Include the processes and procedures used for training and manuals, maintenance requirements, customer support, in-service monitoring, risk assessment, and corrective action.
• Function and purpose of the aviation products or services provided:
Include a summary of the products or services you provide along with their function and purpose.
• Operating environment: Include the key internal and external factors that influence the ability of the continued operational safety subsystem to assure the safe operation of the products, articles, and services provided. This can include customer feedback, risk assessment and corrective action schedules, budgetary constraints, and staffing constraints.
• Personnel, equipment, and facilities necessary for operation: Include field service departments, safety departments, and tools used for risk assessment and corrective action. The “personnel necessary for operation” should include position titles such as “Head of Safety” rather than the individual names of personnel.
2-14
2.2.10.3 Scalability Examples. The organizational system description requires a summary of information allowing flexibility to be scaled to the size and complexity of an organization.
2.2.11 Implementation Plan.
2.2.11.1 Discussion. Section 5.19 provides requirements for the SMS implementation plan.
2.2.11.2 Implementation Strategies.
2.2.11.2.1 The implementation plan must be based on your organizational system description, and also must provide the means of compliance that you will use to meet the applicable requirements of part 5 [§ 5.19(a)]. For each section and subsection, provide a specific reference to a new, planned, or existing policy, process, or procedure when required by part 5. For the part 5 sections that do not specifically require a process or procedure, provide a brief narrative description that describes how you will comply with the section. Your implementation plan should also provide schedule dates summarizing when each planned activity will be completed. Note that the schedule must allow sufficient time for you to implement your SMS by the applicable date in § 5.11(d), § 5.13(b)(4), § 5.15(b)(4), and § 5.15(c)(4).
2.2.11.2.2 Table 2-1 provides an example format, including planned and completed SMS development activities that you may use to present the list of the specific regulations and subparts, including all subparagraphs, the description of the means of compliance, and planned completion dates. A template is available to assist in the development of your implementation plan. The implementation plan template may be requested from the following email address:
Program Management Section (AIR-8X7) Email: 9-AVS-AIR-SMS@faa.gov § 5.19 Implementation plan.
(a) An implementation plan filed under this part must be based on the organizational system description as defined in § 5.17 and describe the means of compliance (including, but not limited to, new or existing policies, processes, or procedures) used to meet the requirements of this part.
(b) A person required to submit an implementation plan under this part must make available to the Administrator, upon request, all necessary information and data that demonstrates that the SMS has been or will be implemented in accordance with the implementation plan.
2-15
2.2.11.2.3 You must, upon FAA request, make available information and data that demonstrates your SMS has been or will be implemented in accordance with your implementation plan [§ 5.19(b)].
Note: The FAA will request that you make SMS information and data available as we conduct oversight of your SMS. This request will follow completion of your SMS implementation and consist of an SMS verification and an SMS evaluation. The SMS verification confirms that you have developed an organizational system description and the policies, processes, and procedures required by part 5. The SMS evaluation confirms that your SMS operates in compliance with part 5.
2.2.11.3 Scalability Examples. Not applicable.
2-16 Table 2-1. Implementation Plan Example Section Requirement Reference(s) Planned Completion Date Complete Para. Sub-Para.
Subpart B - Safety Policy § 5.21 Safety policy.
(a) Any person required to have an SMS under this part must have a safety policy that includes at least the following:
(1) The person’s safety objectives. Safety Policy, Page 1. X
(2) The person’s commitment to fulfill the safety objectives.
Safety Policy Page 4.
Introductory Message X
(3) A clear statement about the provision of the necessary resources for the implementation of the SMS.
Safety Policy Page 4.
Introductory Message X
(4) A safety reporting policy that defines requirements for employee reporting of safety hazards or issues.
Employee Safety Reporting Procedure Mar-2025
(5) A policy that defines unacceptable behavior and conditions for disciplinary action.
Employee Expectations Policy Feb-2025
(6) An emergency response plan that provides for the safe transition from normal to emergency operations in accordance with the requirements of § 5.27.
Not required for part 21 type and production certificate holders.
(7) A code of ethics that is applicable to all employees, including management personnel and officers, which clarifies that safety is the organization’s highest priority.
HR Manual Chapter 1, page 4 X
2-17
2.3 Subpart B: Safety Policy.
2.3.1 Safety Policy.
2.3.1.1 Discussion. Section 5.21 provides the requirements for the safety policy.
2.3.1.2 Implementation Strategies.
2.3.1.2.1 The safety policy must include safety objectives [§ 5.21(a)(1)]. When developing safety objectives, it is important to ensure they are measurable and not just inspirational statements such as “We will strive to be the best” or “We will maintain a zero-accident rate” etc. Safety objectives are measured using safety performance indicators and need to be tracked by the safety assurance component of your SMS to ensure your objectives are being met. A reference to the safety objectives may also be provided in the safety policy.
§ 5.21 Safety policy.
(a) Any person required to have an SMS under this part must have a safety policy that includes at least the following:
(1) The person’s safety objectives.
(2) The person’s commitment to fulfill the safety objectives.
(3) A clear statement about the provision of the necessary resources for the implementation of the SMS.
(4) A safety reporting policy that defines requirements for employee reporting of safety hazards or issues.
(5) A policy that defines unacceptable behavior and conditions for disciplinary action.
(6) An emergency response plan that provides for the safe transition from normal to emergency operations in accordance with the requirements of § 5.27.
(7) A code of ethics that is applicable to all employees, including management personnel and officers, which clarifies that safety is the organization’s highest priority.
(b) The safety policy must be signed by the accountable executive described in § 5.25.
(c) The safety policy must be documented and communicated throughout the person’s organization.
(d) The safety policy must be regularly reviewed by the accountable executive to ensure it remains relevant and appropriate to the person.
2-18 Examples of safety objectives include:
• Milestones for implementation of safety-related programs or initiatives.
• Time to complete investigations of employee hazard or incident reports.
• Tracking of potential aviation-related safety issues including root cause and corrective action completion.
2.3.1.2.2 The safety policy must include a commitment to fulfill the safety objectives [§ 5.21(a)(2)]. This can be achieved by providing a statement in the safety policy that the safety objectives will be monitored, measured, and tracked to ensure they are met.
2.3.1.2.3 The safety policy must include a clear statement about the provision of the necessary resources for the implementation of the SMS [§ 5.21(a)(3)].
This can be achieved by providing a statement in the safety policy committing to provide the resources necessary to implement the SMS.
2.3.1.2.4 The safety policy must include requirements for employee reporting of safety hazards or issues [§ 5.21(a)(4)]. This can be achieved by stating that the organization has established a confidential employee reporting system for all employees to report hazards, accidents, incidents, and safety issues without fear of reprisal. A reference to the reporting procedures may also be provided in the safety policy.
2.3.1.2.5 The safety policy must include a policy that defines unacceptable behavior and conditions for disciplinary action [§ 5.21(a)(5)]. This can be achieved by providing a statement in the safety policy regarding unacceptable behavior and disciplinary actions. A reference to the unacceptable behavior and disciplinary action policy may also be provided in the safety policy.
2.3.1.2.6 The safety policy is not required to provide requirements for emergency response plans [§ 5.21(a)(6)]. The FAA has determined that emergency response plans are not necessary for part 21 type and production certificate holders (refer to paragraph 2.3.4).