IATA Operational Safety Audit (IOSA) Standards Manual

The IATA Operational Safety Audit (IOSA) programme is an internationally recognised airline safety evaluation system designed to assess the operational management and control systems of airlines. Created in 2003 by IATA (International Air Transport Association, headquartered in Montreal, formed 1945, ~240 member airlines). IOSA Standards Manual (ISM) is the master IATA copyrighted document containing IOSA Standards and Recommended Practices (ISARPs) - the audit standards covering 8 operational disciplines. Audit organisations accredited by IATA (Audit Organisations, AOs) conduct IOSA audits per a standardised methodology. Airlines remain in the IOSA registry for 2 years following a successful audit; mandatory IATA membership requirement and increasingly required by ICAO Member State CAAs + insurers + code-share partners + lessors. IOSA framework uses internationally recognised quality au

• IOSA audit scope letter + audit organisation accreditation evidence + audit team
• IOSA Standards Manual (ISM) edition + ISARPs coverage matrix per 8 sections
• Audit findings + closure + remediation + IATA registry entry per 2-year cycle
• Risk-Based IOSA (RBI) transition assessment + maturity classification + continuous monitoring
• ICAO Annex 6 Part I + EASA + FAA + national CAA recognition of IOSA evidence

• IOSA audit cycle slipped (gap longer than 2 years - off registry)
• Audit organisation not IATA-accredited (informal audit not valid for registry)
• Risk-Based IOSA transition not assessed (sticking with prescriptive)
• ISARP coverage incomplete (some sections not audited)
• Findings closure unverified (open findings persist)

IOSA Section 1 (ORG) Organization and Management System addresses the foundational management framework underpinning all airline operations. Conceptual coverage per public IATA + Skybrary + Wikipedia overview (not copyrighted ISARP text): senior management commitment + accountability + safety policy + objectives; Safety Management System (SMS) per ICAO Annex 19 + ICAO Doc 9859 SMM (Safety Management Manual) covering safety policy + safety risk management (hazard identification + risk assessment + mitigation) + safety assurance (performance monitoring + change management + continuous improvement) + safety promotion (training + communication + culture); Quality Assurance Programme + ISO 19011 audit principles + Quality Manual; organisational structure + accountabilities + role definitions + Accountable Manager (Accountable Executive); document and records control + version management + ret

• Safety policy statement signed by Accountable Manager + objectives + communication evidence
• SMS implementation per ICAO Annex 19 / Doc 9859 + 4 components evidence
• Hazard ID + Risk Register + mitigation plan + safety risk indicator monitoring
• Quality Assurance Programme + audit calendar + findings closure + ISO 19011 alignment
• Just Culture policy + safety reporting numbers + confidentiality + protected reporter outcomes

• Accountable Manager nominal (not actively engaged in safety decisions)
• SMS only 1 of 4 ICAO Annex 19 components implemented (typically safety policy without risk management)
• Hazard ID reactive only (no proactive + predictive)
• Quality audit checklist-driven without SMS integration
• Just Culture absent (reporting punished, low report rate, hidden safety risks)

IOSA Section 2 (FLT) Flight Operations addresses flight operations management + flight crew qualification + training + operations manual + flight planning + monitoring. Conceptual coverage: flight operations organisation + Director of Flight Operations + Chief Pilot + Fleet Manager + reporting lines; flight crew licensing (ATPL/CPL + type rating + recurrent + line check) + currency + qualification per ICAO Annex 1 / EASA Part-FCL / FAA Part 61/121/135; flight crew training (initial + transition + recurrent + upgrade + LOFT + CRM Crew Resource Management + TEM Threat and Error Management); flight crew duty + rest + fatigue management (FRMS Fatigue Risk Management System per ICAO Doc 9966 + EASA + FAA Part 117); Flight Operations Manual (FOM) + Operations Manual Part A/B/C/D per EASA AMC1 ORO.MLR.100 / ICAO Doc 9389 / FAA InFO; standard operating procedures (SOPs) + abnormal + emergency pr

• Flight crew licensing + ratings + recurrent + currency tracking
• Training programme + CRM + TEM + initial + transition + recurrent + LOFT records
• Flight Operations Manual + Parts A/B/C/D + version control + dissemination + crew acknowledgment
• FRMS implementation per ICAO Doc 9966 + duty/rest scheduling + fatigue reporting + mitigation
• FDM/FOQA programme + event analysis + corrective action + trend monitoring

• Crew qualification stale (recurrent slipped due to roster pressure)
• CRM/TEM training perfunctory not actively assessed in line checks
• Flight Operations Manual stale (regulatory change not reflected)
• FRMS only nominal (duty/rest computed but fatigue reports not analysed)
• FDM data collected but not analysed or actioned

IOSA Section 3 (DSP) Operational Control / Flight Dispatch addresses joint responsibility between Pilot-in-Command and operator dispatch function for safe + efficient + lawful flight conduct. Conceptual coverage: operational control authority + Director of Operations + Chief Dispatcher + reporting lines; flight dispatcher qualification (FAA Part 65 / EASA / ICAO Annex 1) + initial training + recurrent + emergency procedures + facility-specific qualification; flight planning system + flight plan generation + fuel computation + weight/balance + payload + alternates + ETOPS/EDTO + dispatch release; pre-flight crew briefing + weather + NOTAM + airspace + restrictions + special procedures; flight watch + flight following + flight monitoring during operation + diversion + emergency support to crew; weather + dispatch met service + sigmet + airmet + volcanic ash + space weather; coordination wi

• Operational control delegation + Director of Operations + reporting line
• Dispatcher licensing + training + recurrent + facility-specific records
• Flight planning system + fuel computation + alternates + ETOPS dispatch release evidence
• Flight watch 24/7 staffing + monitoring + diversion + emergency support log
• OCS cybersecurity assessment + redundancy + failover + ATC coordination

• Operational control responsibility unclear (PIC-only without dispatch role)
• Dispatcher qualification slipped or facility-specific check missing
• Flight planning system without proper fuel rules (regulatory minimums only, no operational reserves)
• Flight watch staffing inadequate at night/weekend shift
• OCS vulnerable to cyber attack (no redundancy + outdated software)

IOSA Section 4 (MNT) Aircraft Engineering and Maintenance addresses continuing airworthiness + maintenance + records. Conceptual coverage: Continuing Airworthiness Management Organisation (CAMO) per EASA Part-CAMO + Annex Vc (or FAA Part 121/135 maintenance programme) + national CAA equivalent; CAMO organisational structure + Compliance Monitoring Manager + Safety Manager + Continuing Airworthiness Manager + accountable manager; maintenance organisation (Part 145 + FAA Part 145 + national CAA equivalent) + capability + facility + tooling + parts supply; maintenance programme per aircraft type (AMM Aircraft Maintenance Manual + CMM Component Maintenance Manual + MPD Maintenance Planning Document + SB Service Bulletin + AD Airworthiness Directive); reliability programme + monitoring + trend analysis + corrective action; maintenance records (per ICAO Annex 6 + EASA AMC + FAA AC) + traceabil

• CAMO certificate + Part-145 approval + capability list + facility/tooling evidence
• Maintenance programme per aircraft type + reliability monitoring + trend reports
• Maintenance records EML + electronic records + traceability + retention
• Airworthiness Review Certificate (ARC) + recommendation evidence + Continuing Airworthiness Manager sign-off
• Supply chain due diligence + parts traceability + bogus parts prevention + AOG sourcing

• CAMO + Part-145 separation unclear (combined responsibilities)
• Maintenance programme not type-specific (boilerplate)
• Records partly paper + partly EML without integration
• ARC issued without proper continuing airworthiness review
• Bogus parts entered supply chain (counterfeit + grey market)

IOSA Section 5 (CAB) Cabin Operations addresses cabin safety + cabin crew + emergency equipment + passenger safety. Conceptual coverage: cabin operations management + Director of Inflight + Chief Purser + reporting lines; cabin crew qualification per ICAO Annex 1 / EASA Part-CC / FAA Part 121.391 + 121.417 + initial training + recurrent + type-specific qualification + currency; cabin crew training (safety + emergency + CRM + first aid + AED + fire fighting + ditching + evacuation + abnormal); cabin safety procedures (briefing + arming/disarming doors + passenger seating + safety demonstration + securing cabin + turbulence response + smoke/fire response); emergency equipment (escape slide + life raft + life vest + emergency lighting + portable oxygen + first aid kit + emergency medical kit + AED + fire extinguisher + smoke hood + emergency beacon ELT/PLB + flashlight) + inspection + lifec

• Cabin crew licensing + ratings + recurrent + initial + emergency training records
• Safety procedures + briefing + door arming + passenger seating + securing cabin + turbulence
• Emergency equipment inspection + lifecycle + replacement + ramp check + inflight defect tracking
• Passenger safety briefing + safety card + safety demonstration evidence
• Unruly passenger reporting + crew training + restraint + diversion + criminal referral procedures

• Cabin crew recurrent slipped beyond 12-month currency
• Emergency equipment lifecycle expired in service (chemical light + oxygen cylinder + battery)
• Safety briefing perfunctory (not adapted to aircraft type)
• Unruly passenger procedures unclear (crew uncertain when to restrain or divert)
• CRM training cabin/flight deck siloed (no joint sim or briefing)

IOSA Section 6 (GRH) Ground Handling Operations addresses ground handling activities + oversight of ground handling agents + aircraft + passenger + ramp operations. Conceptual coverage: ground handling oversight + agreements with ground handling agents per IATA IGOM (Ground Operations Manual) + SGHA Standard Ground Handling Agreement + IATA AHM Airport Handling Manual + IATA DGR Dangerous Goods Regulations; ground handling training + GSE Ground Support Equipment + IATA ISAGO IATA Safety Audit for Ground Operations alignment; aircraft loading + weight and balance + load planning + load sheet + DGR / dangerous goods handling + DGR documentation + DGR training + DGR incidents; ramp operations + aircraft turnaround + push-back + pre-departure inspection + post-arrival inspection + ground damage prevention + ramp incidents + reporting; passenger handling + check-in + baggage + boarding + spec

• Ground handling agent agreement per SGHA + oversight programme + audit
• Load planning + load sheet + W&B verification + DGR documentation chain
• Ramp safety procedures + GSE inspection + FOD walk + ramp incident log
• DGR training records + DGR handling procedure + DGR incident reporting
• ISAGO audit alignment + IGOM compliance + IATA AHM reference

• Ground handling agent without IATA-aligned oversight (price-driven selection)
• Load sheet errors (DGR + weight + CG) not detected before departure
• Ramp incident reporting under-reported (focus on aircraft damage only)
• DGR training expired or generic (not adapted to actual cargo handled)
• ISAGO alignment paper-only (no continuous monitoring)

IOSA Section 7 (CGO) Cargo Operations addresses cargo acceptance + processing + handling + dangerous goods + cargo security. Conceptual coverage: cargo operations management + Director of Cargo + reporting lines; cargo management system + IT system (CargoSpot + CHAMP + IBS + similar) + booking + acceptance + processing + tracking + delivery; cargo acceptance procedures + documentation (AWB Air Waybill + commercial invoice + manifest + customs) + shipper validation + KYC (Know Your Shipper); cargo security + Regulated Agent + Known Consignor + Account Consignor + Authorised Economic Operator AEO per ICAO Annex 17 + EU 300/2008 + EU 185/2010 + EASA Part-COR + national authorities; cargo screening + X-ray + EDS Explosive Detection System + ETD Explosive Trace Detection + canine + manual; dangerous goods (DGR) acceptance + classification + packing + marking + labelling + documentation + segr

• Cargo acceptance procedure + KYC + shipper validation + AWB chain
• DGR acceptance + classification + packing + marking + segregation + IATA DGR edition
• Cargo screening EDS/ETD/canine/manual + screening percentage + audit + IATA cargo security
• Regulated Agent / Known Consignor / AEO certification + supply chain validation
• Special cargo procedures (live animal + diplomatic + radioactive + valuables) + IATA Live Animals Regulations

• KYC absent or only at high-volume shippers (low-volume bypass)
• DGR documentation incomplete or DGR training expired
• Cargo screening 100 percent stated but actual percentage lower
• Regulated Agent oversight only at certification (no continuous monitoring)
• Special cargo handled by general procedures (e.g. live animal without IATA Live Animals Regulations)

IOSA Section 8 (SEC) Security Management addresses aviation security management system + ICAO Annex 17 implementation + aircraft + crew + ground + cargo security. Conceptual coverage: aviation security management + Security Manager + Aviation Security Programme (AVSEC) per ICAO Annex 17 SARPs + national civil aviation security programme; security threat + risk assessment + intelligence + threat picture per national authority + IATA + ICAO; security training + initial + recurrent + general security awareness for all staff + role-specific (flight crew + cabin crew + ground handling + cargo + dispatch) + security personnel; aircraft security (pre-flight security check + cabin search + cargo and baggage screening + access control + secure parking + ground crew supervision + security seal); access control to restricted areas + airport security identification permit + background check + inside

• Aviation Security Programme (AVSEC) per ICAO Annex 17 + national programme acceptance
• Security training records + awareness + role-specific + IATA Aviation Security Manual compliance
• Aircraft pre-flight security check + cabin search + cargo screening + access control + secure parking
• Personnel security clearance + background check + criminal + insider threat program + ASIC permit
• Cyber security programme + IT + OT + aircraft connectivity + EFB + maintenance + IT-OT convergence + EASA Part-IS

• AVSEC programme stale (regulatory change not reflected)
• Security training generic (not role-specific or threat-relevant)
• Aircraft pre-flight check perfunctory (visual only, no thorough search)
• Personnel security clearance only at hire (no periodic re-investigation)
• Cyber security programme absent or only at corporate IT (not aircraft + EFB + maintenance)