-
- April 8, 2026
- Posted by: admin
- Category: Uncategorized
No Comments
ICAO Annex 19 Amendment 2 becomes applicable in November 2026. Understand the SMS, safety intelligence, and SSP changes your organisation must prepare for now.
-
ICAO Annex 19, 3rd Edition: What Aviation Organisations Must Do Before November 2026
- March 30, 2026
- Posted by: admin
- Category: Uncategorized
AVIATION REGULATORY COMPLIANCE · By ASG
30 March 2026 · By Ferhan Bugay, Executive Director – Aero Support Group
Key Regulatory Update — November 2026 Deadline
With the applicability date of ICAO Annex 19, 3rd Edition set for 26 November 2026, aviation organisations have less than eight months to close the gap between current practice and the new international safety management standard. Adopted by the ICAO Council on 23 June 2025, this edition extends SMS obligations to new organisation categories, strengthens State Safety Programme provisions, and introduces formal safety intelligence requirements for the first time.
ADOPTED BY ICAO COUNCIL (JUN)
0
EFFECTIVE DATE (NOV)
0
APPLICABILITY DEADLINE (NOV)
0
DOMAINS: SSP · SMS · SAFETY INTELLIGENCE
0
Understanding the Scope of ICAO Annex 19, 3rd Edition
Annex 19 — Safety Management has been the cornerstone of ICAO’s aviation safety governance architecture since it consolidated safety management provisions from multiple annexes into a single, cohesive framework. The 2nd Edition deepened the integration between State Safety Programmes and operator-level SMS. The 3rd Edition goes further, addressing three distinct domains that together shift the global safety management framework towards a more proactive, data-driven, and operationally inclusive architecture.
The first domain — enhanced SSP provisions — requires States to demonstrate that their national safety oversight frameworks are operationally functional, not simply documented in policy. Hazard identification, safety risk management, and safety performance monitoring must be embedded into the oversight lifecycle and actively influencing regulatory decision-making. The second domain extends formal SMS obligations to RPAS operators conducting international operations, their approved maintenance organisations, and certified heliports. The third domain — safety intelligence — is the most structurally ambitious, introducing for the first time formal ICAO SARPs provisions for structured safety intelligence development, supported by the new ICAO Safety Intelligence Manual (Doc 10159).
Why Safety Intelligence Marks a Genuine Shift in Regulatory Expectations
Safety intelligence is a concept that many mature aviation organisations have embraced informally for years — tracking trends, cross-referencing occurrence data, and using safety performance indicators (SPIs) to anticipate risk rather than simply react to events. What the 3rd Edition does is formalise this expectation within the ICAO SARPs framework, which means it will progressively influence how States assess SMS effectiveness and how oversight methodologies evolve across the industry.
ICAO Doc 10159 outlines a structured process: data collection from multiple sources (occurrence reports, safety audits, operational monitoring, predictive indicators), followed by processing and analysis to identify patterns and system-level risk factors, culminating in intelligence products that inform management decisions at the appropriate organisational level. The distinction between information and intelligence is the core of this shift — interpreted, contextualised insight that links safety data directly to operational and regulatory decisions.
For organisations already operating mature Safety Management Systems — with functioning hazard logs, Safety Review Boards, and robust SPI monitoring — this is an evolution rather than a revolution. For organisations whose SMS is primarily documentation-focused, however, the 3rd Edition represents a genuine compliance gap requiring structural intervention, not cosmetic document updates. Operators preparing for IOSA or ISAGO audits in 2026 and 2027 should factor 3rd Edition alignment into their readiness programmes now.
Key Publication: ICAO Annex 19, 3rd Edition — Safety Management (Applicable 26 November 2026)
ICAO Annex 19, 3rd Edition, adopted 23 June 2025 and applicable from 26 November 2026, is the current edition of the international Safety Management standard. It is supplemented by ICAO Doc 10159 — Safety Intelligence Manual (1st Edition) — which provides structured guidance on the collection, processing, analysis, and application of safety data. Both documents are available through the ICAO eLibrary and are essential references for all aviation organisations undertaking 3rd Edition compliance preparation.
Implications for Aviation Organisations: What Must Change
Airlines & Air Operators: Airlines must review their SMS frameworks against the enhanced SSP expectations of their flag States and of every State where they operate. Airlines preparing for or maintaining IOSA registration should factor 3rd Edition alignment into their current compliance programmes, as IATA’s ISARPs are expected to reflect the updated standard in coming cycles. As host States align their oversight systems, the regulatory interface — audit methodologies, evidence expectations, SMS effectiveness criteria — will evolve accordingly.
Approved Maintenance Organisations: MROs already subject to SMS obligations must assess whether their frameworks meet the strengthened expectations of the 3rd Edition, particularly around safety intelligence and proactive risk identification. Those providing services to internationally operating RPAS operators will, for the first time, come within formal SMS scope under the Annex 19 framework. Organisations operating under EASA Part-145 approvals should not wait for national transposition before beginning gap analysis.
Ground Handlers & Service Providers: Ground handling organisations with ISAGO registration or safety management obligations under contract with airlines will need to review whether their safety management frameworks reflect the enhanced standards expected by airlines aligning with the 3rd Edition. As ISAGO standards evolve, proactive SMS maturity assessment is essential for continued audit readiness.
Airports & Heliport Operators: The formal inclusion of certified heliports within the SMS scope is a direct new obligation under the 3rd Edition. For airports already maintaining SMS frameworks, this is an opportunity to review whether safety intelligence capabilities are genuinely embedded in operational decision-making or remain largely administrative.
Civil Aviation Authorities: CAAs face the most complex challenge: simultaneously updating their own SSPs and oversight tools to reflect 3rd Edition provisions while guiding and auditing the industry through the transition. The degree to which States actively use operator safety data to inform national risk profiles and oversight priorities will come under increasing scrutiny in ICAO USOAP assessments. States that have not yet initiated their 3rd Edition alignment programmes face compounding risk both in their USOAP scores and in the confidence their national industry has in regulatory leadership.
Action Plan for Aviation Organisations
IOSA, ISAGO, EASA, and UK CAA: How the 3rd Edition Connects to Other Frameworks
ICAO Annex 19, 3rd Edition does not exist in isolation — it sits at the centre of a web of interconnected audit, certification, and regulatory frameworks that aviation organisations must manage simultaneously. IATA’s IOSA and ISAGO programmes draw directly on ICAO safety management standards. Future editions of ISARPs and IGSARPs are expected to reflect 3rd Edition provisions — particularly the safety intelligence and proactive risk identification requirements. EASA’s regulatory framework, while operating within its own legal architecture, is closely informed by ICAO standards. Third country operators holding EASA TCO authorisation or UK CAA TCO approval are assessed against ICAO standards as the baseline, and SMS maturity will become an increasingly visible part of the oversight picture as the 3rd Edition becomes applicable.
ICAO Annex 19, 3rd Edition is the current edition of the international safety management standard, adopted by the ICAO Council on 23 June 2025. It became effective on 4 November 2025 and is applicable from 26 November 2026. It enhances State Safety Programme provisions, extends SMS requirements to RPAS operators and heliports, and introduces formal safety intelligence provisions for the first time.
The 3rd Edition formally extends SMS obligations to certified RPAS operators authorised to conduct international operations, approved maintenance organisations providing services to those RPAS operators, and certified heliports. These entities were not previously included within the Annex 19 SMS framework.
Safety intelligence is the structured collection, processing, analysis, and application of safety data to support aviation decision-making. ICAO Annex 19, 3rd Edition introduces formal provisions requiring its development, supported by ICAO Doc 10159 — the Safety Intelligence Manual. It shifts the safety management model from reactive reporting to proactive, evidence-based risk governance. Organisations must demonstrate not just that safety data is collected, but that it is analysed and converted into actionable intelligence that informs management decisions.
Yes. Operators holding EASA TCO authorisation or UK CAA TCO approval are assessed against ICAO standards as the baseline. As both EASA and the UK CAA progressively embed 3rd Edition expectations into their assessment criteria, the maturity and effectiveness of the operator’s SMS — including safety intelligence capabilities — will become increasingly visible during oversight activities.
IATA’s IOSA and ISAGO standards are closely aligned with ICAO’s safety management framework. Future editions of ISARPs and IGSARPs are expected to reflect the 3rd Edition provisions, particularly around safety intelligence. Organisations scheduling IOSA or ISAGO audits in 2026 and 2027 should factor 3rd Edition alignment into their preparation now to avoid compliance gaps emerging mid-audit cycle.
- Conduct a structured gap analysis against 3rd Edition provisions — assess operational effectiveness, not just documentation
- Review and update SMS documentation: Safety Management Manual, SPIs, and Safety Review Board terms of reference
- Develop a genuine safety intelligence capability — structured data analysis linked to management decisions (per ICAO Doc 10159)
- Engage proactively with your competent authority on 3rd Edition transposition and evidence expectations
- Review governance and accountability structures to ensure leadership engagement with safety management is evidenced
- Align IOSA, ISAGO, EASA, and national regulatory compliance programmes with 3rd Edition requirements before November 2026
Support Your ICAO Annex 19, 3rd Edition Preparation with ASG
Aero Support Group provides specialist aviation consulting support across the full spectrum of safety management and regulatory compliance — from gap analysis and SMS development to audit preparation, corrective action planning, and regulatory implementation. Contact ASG to discuss your 3rd Edition preparation programme.
ASG
Aero Support Group
Global Aviation Consulting
Aero Support Group is a global aviation consulting firm specialising in safety, quality, security, continuing airworthiness, and regulatory compliance support for airlines, MROs, ground handling organisations, training providers, and civil aviation authorities. With experience spanning 900+ projects in 100+ countries, the company delivers expert support across IOSA, ISAGO, EASA TCO, UK CAA TCO, EASA Part-145, FAA Part 145, Part-M, Part-CAMO, Part-147, SMS, QMS, IMS, ACC3, SeMS, and Part-IS. Aero Support Group also supports leading international organisations including IATA, ICAO, PRISM, ARGUS International, and RSM through specialised consulting and subject matter expertise.
References
- ICAO Safety Management — Annex 19, 3rd Edition (Adopted 23 Jun 2025; Applicable 26 Nov 2026)
- ICAO Doc 10159 — Safety Intelligence Manual, 1st Edition
- EASA European Plan for Aviation Safety (EPAS) 2026 — ICAO alignment provisions
- SKYbrary — ICAO Annex 19, Safety Management framework overview
- FAA — ICAO Annex 19 International Safety Management alignment
The Three Domains of ICAO Annex 19, 3rd Edition
Domain 01: Enhanced State Safety Programme (SSP) Provisions
The 3rd Edition places significantly enhanced requirements on how States design, resource, and demonstrate the effectiveness of their State Safety Programmes. The emphasis shifts from SSP existence to SSP operational functionality — States must demonstrate that safety data actively informs regulatory decision-making, that hazard identification and risk management are embedded into the oversight lifecycle, and that safety performance monitoring produces evidence-based outputs that drive regulatory priorities. For aviation organisations operating across multiple jurisdictions, this evolution means that regulatory oversight quality and evidence expectations will vary — and evolve — as each State’s SSP matures in line with the new standard. States undergoing ICAO USOAP assessments will be measured against these enhanced provisions from the November 2026 applicability date.
Domain 02: SMS Scope Extension — New Organisation Categories
The 3rd Edition formally extends the SMS obligation under Annex 19 to three new categories of organisation that were not previously within the framework: (1) certified RPAS (Remotely Piloted Aircraft System) operators conducting international operations; (2) approved maintenance organisations providing maintenance services to those RPAS operators; and (3) certified heliports. This extension reflects ICAO’s intent to apply consistent safety governance principles across the full operational spectrum as the industry evolves beyond traditional fixed-wing commercial aviation. For MROs providing services to internationally operating RPAS organisations, this creates a direct new SMS obligation under the ICAO SARPs framework — separate from, but complementary to, any existing SMS requirements under EASA Part-145 or national authority regulations.
Domain 03: Safety Intelligence — A Formal ICAO Requirement for the First Time
The introduction of formal safety intelligence provisions in Chapter 5 of Annex 19, 3rd Edition is the most structurally novel element of the update. Previous editions of Annex 19 established the infrastructure for safety data collection and reporting — occurrence reporting systems, safety databases, protected safety information. The 3rd Edition now requires that organisations and States go beyond data collection to develop structured safety intelligence: the conversion of safety data into contextualised, interpreted insight that supports proactive risk governance. ICAO Doc 10159 — the Safety Intelligence Manual, 1st Edition — provides the practical guidance framework. It describes data aggregation from multiple sources, analytical processes for identifying patterns and system-level risks, and governance mechanisms for connecting intelligence output to management decisions. For organisations whose safety management systems are mature, this formalises what best-practice operators have been doing informally. For organisations with documentation-focused SMS, it represents a genuine structural compliance gap that requires more than updated policy language to address.
LinkedIn Newsletter
Subscribe to Global Aviation Safety Radar
Weekly aviation safety and compliance intelligence covering ICAO, IATA, EASA, and UK CAA developments — translated into practical implications for airlines, MROs, airports, ground handlers, and aviation leaders.