EASA Audit Preparation

EASA AUDIT PREPARATION · Aero Support Group FZCO · Updated 23 October 2026

KEY TOPIC An EASA audit can come from two directions: the competent authority overseeing an approved organisation, which for organisations outside the EU is often EASA itself, or EASA standardisation inspections of national authorities. Either way, auditors sample evidence that the organisation's management system works in practice. ASG prepares organisations for initial approval audits, scheduled oversight audits and finding closure under Regulation (EU) 2018/1139 and its implementing rules.

COUNTRIES

0 +

ORGANISATIONS SUPPORTED

0 +

PROJECTS

0 +

EASA SPECIALISTS

0 +

What is an EASA audit?

An EASA audit is an assessment of an organisation’s compliance with the EU aviation safety rules made under Regulation (EU) 2018/1139. It may be an initial certification audit, a change approval audit or a scheduled oversight audit carried out by the competent authority.

EASA is the competent authority for organisations located outside the EU that hold EU approvals, such as third-country Part-145 and Part-147 organisations, and for third-country operators under Part-TCO (Regulation (EU) No 452/2014). For organisations inside the EU, the national authority is usually competent, and EASA checks those authorities through standardisation inspections.

How oversight is planned

Oversight cycle: the authority plans audits in a cycle of up to 24 months, which may be extended where the organisation has shown effective management of safety risks and compliance, as allowed in the Authority Requirements (for example ARO.GEN.305 and 145.B.305).
Scope: each cycle covers all requirements and all locations, sampled on a risk basis.
Unannounced inspections may be added at any time.

Findings and corrective action

Level 1: a significant non-compliance that lowers safety or seriously endangers flight safety. The authority takes immediate action and may limit, suspend or revoke the approval.
Level 2: any other non-compliance. The organisation receives a corrective action period, initially not more than three months in most domains.
Organisation’s obligations (for example 145.A.95, ORO.GEN.150): identify the root cause, define a corrective action plan acceptable to the authority and demonstrate implementation within the agreed period.
Observations are not findings but are expected to be considered.

Root cause is part of the requirement A corrective action plan that only fixes the instance is routinely rejected. Authorities expect a root cause that explains why the system allowed the non-compliance, and preventive actions that address it.

What auditors sample

The exposition or manual (MOE, CAME, OM, MTOE) against the actual way the organisation works.
Management system records: hazard log, risk assessments, safety review minutes, compliance monitoring audits and findings.
Staff qualifications, authorisations and training records.
Tools, equipment, data and facilities at each approved location.
Contracted and subcontracted activities and how they are controlled.
Changes since the last audit and whether they were notified or approved.

How ASG prepares you

Pre-audit gap assessment against the applicable Part and its AMC/GM.
Exposition review to make sure it describes what the organisation actually does.
Mock audit using the authority’s approach, with a written report and graded findings.
Briefing for the accountable manager and nominated persons on what auditors will ask.
Root cause analysis and corrective action plans for authority findings, with implementation evidence.
Follow-up support until findings are closed.

Conclusion

EASA audits sample the evidence that an organisation’s system works. Organisations whose expositions match their practice, whose records are complete and whose compliance monitoring finds problems before the authority does pass with few findings. ASG helps organisations reach that state before the audit and close findings properly afterwards.

Frequently asked questions

Who carries out EASA audits of organisations outside the EU?

EASA is the competent authority for third-country organisations holding EU approvals, such as Part-145 and Part-147, and for third-country operators under Part-TCO.

What is the difference between Level 1 and Level 2 findings?

A Level 1 finding is a significant non-compliance that lowers safety and leads to immediate action on the approval. A Level 2 finding is any other non-compliance, with a corrective action period set by the authority.

How long do I have to close a Level 2 finding?

The authority sets the period, initially not more than three months in most domains, and may extend it if a satisfactory corrective action plan is agreed.

How often will my organisation be audited?

Oversight is planned in cycles of up to 24 months, extendable for organisations that manage safety and compliance effectively.

Key takeaways

EASA is the competent authority for third-country approvals and TCOs
Oversight cycles run up to 24 months
Level 1 findings lead to immediate action on the approval
Corrective action plans must address root cause
Auditors sample practice against the exposition

Facing an EASA audit?

Tell us your approval, scope and audit date. ASG will assess readiness and run a mock audit before the authority arrives.

ASG

Aero Support Group

Global Aviation Consulting

Aero Support Group (ASG) is an aviation safety, quality and compliance consultancy with offices in Dubai and Istanbul and a branch office in London. It prepares airlines, MROs, ground handlers, airports and civil aviation authorities for IOSA and ISAGO audits, EASA and UK CAA Third Country Operator (TCO) authorisation, EASA and FAA Part-145 approval, and ICAO USOAP audits.

Its work also covers Part-CAMO, Part-M and Part-147, Part-IS information security, SMS, QMS and SeMS development, gap analyses, mock audits and corrective action plans, operations manuals and MOEs, emergency response and business continuity planning, DAQCP, IFQP, JIG and IDQP inspection preparation, ACC3, RA3 and KC3 cargo security validation, CEIV Pharma, and SAF and CORSIA compliance.

ASG has completed 1,000+ projects at 500+ airports in 100+ countries. Its consultants also serve as subject matter experts for IATA Consulting, ICAO, PRISM, ARGUS International and RSM.