Building a CAMO Risk Register in an EASA Compliant Safety Management System

Considerations presented by SofemaOnline (SOL)

Building a CAMO Risk Register in an EASA Compliant Safety Management System


As part of the development of an EASA compliant Part CAMO Organisation the Safety Management System will benefit from the development and continuous monitoring of a Risk Register.

A risk register is a crucial part of your approach to managing these risks. It's a tool to help you identify, assess, and record your risks and the actions you're taking to eliminate or minimize them.

To support the development of an effective risk register the following 50 generic risks have been documented as a starting point to support the development of your risk register.

In addition, you can use the generic ICAO 5 x 5 Risk Matrix or use the following as a tool to assess exposure by calculating the Event Risk Classification.

Step 1











Step 2







For each of the following items perform a risk assessment and ask the questions which help you determine the level of exposure that currently exists in your organisation by asking for each item the following 6 questions:

· Is this an issue in our organisation?

· If it is not considered an issue how can I demonstrate – where is the evidence?

· How can I measure the effectiveness of the current process?

· How effective is documentation/training?

· If there are changes in this element how effective would the system accommodate the changes?

Risks to be analysed include the following

1/ Limited or lack of management commitment – Management do not demonstrate support for the activity

2/ Lack of or incomplete description of roles, accountabilities and responsibilities

3/ Limited or lack of resource availability or planning, including staffing in the following areas

· Maintenance Planning

· Reliability

· Engineering

· Technical Records

· Quality Assurance

· Safety Management

· Other

4/ Lack of or ineffective policies

5/ Incorrect or incomplete procedures including instructions

6/ Lack of or Poor Management, Culture and or Manpower relationships

7/ Lack of or Ineffective Organizational Structure

8/ Poor organizational safety culture

9/ Lack of or ineffective safety management processes (including risk management, safety assurance, auditing, training and resource allocation)

10/ Lack or ineffective audit procedures

Next Steps

To access the full document with details of all 50 generic risks applicable to an EASA Part CAMO Organisation (Free of Charge) please visit the Sofema Aviation Services (SAS) Library SMS area

Sofema Online currently offers 15 online training courses to support the development of your EASA Part CAMO Organisation – for details please see or email