IOSA AUDIT PREPARATION · Aero Support Group FZCO · Updated 21 October 2026
What is IOSA?
IOSA stands for IATA Operational Safety Audit. It is the audit programme IATA uses to assess the operational management and control systems of airlines. Every IATA member airline must hold IOSA registration, and many non-members hold it too: 449 airlines were on the IOSA registry in May 2026.
IOSA is IATA’s internationally recognised evaluation of an airline’s operational management and control systems. The audit criteria are the IOSA Standards and Recommended Practices (ISARPs) in the ISM, organised in eight disciplines: Organisation and Management Systems (ORG), Flight Operations (FLT), Operational Control and Flight Dispatch (DSP), Aircraft Engineering and Maintenance (MNT), Cabin Operations (CAB), Ground Handling Operations (GRH), Cargo Operations (CGO) and Security Management (SEC).
Since 2024 IOSA has been a risk-based audit. The scope is tailored to each airline from its operational profile, safety data and audit history, and auditors assess the maturity of safety-critical systems as well as conformity. Audits in 2026 use ISM Edition 18 Rev 1; audits from 1 January 2027 use Edition 19.
Why airlines invest in structured IOSA preparation
IATA reports that its first 100-plus risk-based audits found on average twice as many non-conformities as conventional audits, while auditing fewer standards. Airlines that prepare the way they did for the old checklist audit tend to meet findings in exactly the areas the risk-based scope targets.
The cost of weak preparation is practical: a long list of findings to close, corrective actions that compete with day-to-day operations, delays to registration or renewal, and questions from code-share partners, lessors and regulators. The safety case is also clear. In IATA’s 2025 Safety Report, IOSA-registered carriers had an accident rate of 0.98 per million sectors against 2.55 for non-IOSA carriers.
Our IOSA audit preparation services
- Risk profile and gap analysis: an assessment against the applicable ISM edition across all eight disciplines, prioritised by where the risk-based scope is likely to go deep.
- Documentation development and review: OM-A, OM-B, OM-C and OM-D, the Safety Management Manual, the compliance monitoring and quality system, maintenance and ground handling documentation, and training programmes, written to describe what the airline actually does.
- Conformance report and evidence mapping: ISARP-by-ISARP documentation references and implementation evidence that an auditor can trace.
- SMS and compliance monitoring integration: hazard identification, risk assessment, SPIs, safety review boards and management review set up to produce decisions and records, including ORG 2.4.2 and ORG 3.4.1, now full Standards.
- Mock IOSA audits: internal audits run with the risk-based method and maturity criteria, with findings classified the way the real audit will classify them.
- Corrective action plans and findings closure: root cause analysis, CAPs and closure evidence for internal and IOSA findings.
- Awareness training: sessions for flight operations, dispatch, maintenance, cabin, ground handling, cargo, security, safety and quality teams, and senior management.
- Audit-day support: evidence management and liaison during the on-site audit.
IOSA RADAR: continuous IOSA readiness
IOSA RADAR is ASG’s subscription service for airlines that want to stay audit-ready between audits rather than prepare in a rush before each one. It includes:
- A 24/7 dedicated consultant assigned to your airline, with round-the-clock access to IOSA specialists.
- Monthly compliance review against the current IOSA standards: twelve expert touchpoints a year.
- Remote and on-site support wherever your operation needs it.
- Regulatory alerts on upcoming IOSA, ICAO and EASA changes, such as the move to ISM Edition 19.
- Standards monitoring of IOSA, ICAO, EASA and related requirements.
- An IOSA conformance report kept continuously up to date.
- Post-audit support to close findings quickly and prevent recurrence.
IOSA RADAR covers IOSA, ICAO, EASA and DGCA requirements together with SMS and QMS.
How an IOSA engagement runs
- Scoping: audit type and date, fleet and operation, previous findings and your risk profile.
- Gap analysis: discipline by discipline against the applicable ISM edition, with a prioritised action plan.
- Remediation: manuals, procedures, training and evidence brought up to the standard, with owners and dates.
- Mock audit: a risk-based internal audit that tests implementation and maturity.
- Audit support and CAP: support during the audit and through closure of any findings.
- Continuous readiness: IOSA RADAR keeps the conformance report and evidence current until the next renewal.
How long preparation takes depends on the gaps found. Initial registrations and airlines with repeat findings need more time than a well-run renewal, so we set the plan after the gap analysis.
IOSA and your other approvals
The systems IOSA examines are the same ones regulators look at. Strong SMS, compliance monitoring and evidence discipline support EASA TCO and UK CAA TCO applications, national AOC oversight and ICAO Annex 19 expectations. Airlines that outsource ground handling can align their GRH oversight with ISAGO standards used by their handlers.
Further reading: IOSA audit preparation under ISM Edition 18, what changes with ISM Edition 19, what risk-based IOSA means and what IATA’s 2025 data shows.
Conclusion
IOSA preparation works when it starts from your own risk profile and ends with evidence an auditor can trace. ASG’s team has supported airlines across six continents through initial registrations and renewals, and IOSA RADAR keeps that readiness in place between audits. Contact us to schedule an IOSA readiness assessment.
Frequently asked questions
No. ASG is an independent consultancy that prepares airlines for IOSA. The official audit is carried out by an IATA-accredited audit organisation. That independence means there is no conflict between the party preparing the airline and the party auditing it.
IOSA auditors work for IATA-accredited audit organisations. They must meet IATA’s auditor qualification requirements, complete IOSA auditor training and conduct supervised audits before auditing on their own. The requirements are set in the IATA Reference Manual for Audit Programs (IRM).
IOSA registration is valid for 24 months. To stay on the registry, an airline completes a renewal audit and closes its findings before the registration expires, so in practice an IOSA audit takes place every two years.
IOSA is the IATA Operational Safety Audit, IATA’s evaluation of an airline’s operational management and control systems against the ISARPs in the IOSA Standards Manual.
IOSA registration is a condition of IATA membership. Many non-IATA airlines also hold IOSA registration because code-share partners, lessors and some regulators recognise it.
Audits in 2026 use ISM Edition 18 Rev 1. Audits conducted on or after 1 January 2027 use Edition 19, in line with the IOSA Program Manual.
Since 2024 the audit scope is tailored to each airline from its operational profile, safety data and audit history, and auditors also assess the maturity of safety-critical systems.
A 24/7 dedicated consultant, monthly compliance reviews, remote and on-site support, regulatory alerts, standards monitoring, a continuously updated conformance report and post-audit support.
It depends on the gaps found in the initial analysis. Initial registrations and airlines with repeat findings usually need longer than a well-managed renewal, so ASG sets the timeline after the gap analysis.
Key takeaways
- IOSA assesses eight disciplines against the ISARPs in the IOSA Standards Manual
- The audit is risk-based: scope follows your risk profile and maturity is assessed
- ISM Edition 18 Rev 1 applies in 2026 and Edition 19 from 1 January 2027
- ASG covers gap analysis, documentation, evidence mapping, mock audits, CAPs and audit-day support
- IOSA RADAR provides a 24/7 dedicated consultant and keeps your conformance report current
Schedule an IOSA readiness assessment
Tell us your audit date and operation. We will set out the gaps, the plan and the support you need for a confident IOSA audit.