A practical guide
FAA Part 5 SMS, explained for small operators
14 CFR Part 5 is short — a few pages of regulation. What makes it hard is that it describes outcomes rather than steps, and leaves you to work out what evidence satisfies it. This guide works through that.
Start here: who it applies to
The FAA published its expanded SMS final rule on 26 April 2024. It brought three groups under 14 CFR Part 5 alongside the Part 121 air carriers already covered:
- All certificate holders operating under Part 135 — on-demand and commuter — regardless of size.
- Commercial air tour operators holding a letter of authorization under § 91.147.
- Certain Part 21 type and production certificate holders.
Two common misreadings are worth correcting up front, because they appear on a lot of vendor websites.
The shape of the obligation
Part 5 is organised into four pillars, conventionally broken into twelve elements: safety policy, safety risk management, safety assurance, and safety promotion. Advisory Circular 120-92D is the FAA's guidance on how to build and run one, and it is where the standard 5×5 risk matrix comes from.
The system has to be scaled to the size and complexity of your operation. A single-pilot charter operator and a forty-aircraft fleet are held to the same regulation but not to the same volume of documentation.
Work through it
-
The 2027 deadline
Part 135 and § 91.147 operators must implement an SMS and submit a Declaration of Compliance by 28 May 2027. Every date in the rule, and what happens if you miss one.
-
Declaration of Compliance
The Declaration of Compliance is an attestation that your SMS is implemented and operating. What evidence sits behind it, and how to be ready to produce it.
-
Implementation plan
Implementation plans were due 28 November 2024 and FAA review ran through 2025. What an approved plan obliges you to do next, and the gap most operators are sitting in.
-
The 5×5 risk matrix
How the standard FAA 5×5 risk matrix works: likelihood, severity, the three acceptance bands, and why initial and residual risk must both be recorded.
-
Four pillars, twelve elements
Safety policy, safety risk management, safety assurance and safety promotion — what each pillar requires under 14 CFR Part 5, element by element.
-
Accountable executive
Part 5 requires a named accountable executive with final authority over the SMS. Who it must be, what they are on the hook for, and what to document.
Where operators most often come unstuck
In our experience the failure is rarely the manual. Implementation plans get written and approved. What breaks down afterwards is the operating record: hazards that were discussed but never logged, risk decisions made in someone's head, controls applied without anyone going back to check whether they worked, and bulletins sent without any evidence that people read them.
The Declaration of Compliance asks you to attest that the system is implemented and functioning. Every one of those gaps is a place where you would struggle to show it.
If you want to find your own thin spots, the free Part 5 readiness assessment walks through seventeen questions across the four pillars and tells you where the evidence is missing. No email required.
See whether it fits your operation
Twenty minutes, no card. Tell us what certificate you hold and where your implementation plan stands, and we will show you the parts that apply to you.