Halloween is a good reminder that the scariest risks are the ones you can’t see or the ones hiding in your organisation. This article sets out a practical, evidence led approach to aviation safety and compliance that turns “almost ready” into audit ready.
The problem isn’t paperwork it’s invisibility
Audits feel frightening when three forces line up: unclear scope, invisible evidence, and actions that never quite close. Most organisations aren’t short of documents; they’re short of visibility. Safety Management Systems (SMS) become binders rather than habits, and interfaces between Part 145 and CAMO rely on goodwill instead of named ownership. That’s where “jump scare” findings come from.
The fix isn’t more forms. It’s right sized process, clear owners, and a single source of truth for evidence.
Where findings hide (and how to bring them into the light)
In our work across Part 145, M/CAMO and Part 147/66, three patterns repeat:
Inconsistent records.
Different versions live in different folders. You think you’re current until someone opens the wrong file. A simple evidence index (requirement → document ID → location → revision → last verified) pays for itself at the first audit.
SMS without cadence.
Risk registers exist but don’t move. Build rhythm: short, scheduled reviews with decisions noted and next dates set. Fifteen focused minutes beats a two hour marathon.
Unowned interfaces.
Hand offs between Part 145 and CAMO go “bump in the night” when responsibility is implied, not assigned. Name the owner, document the escalation path, and you’ve removed the mystery.
A practical path from “almost ready” to audit ready
Whether you’re preparing for an independent audit or adding a rating or facility, the route is the same. Think of it as a story with five chapters:
1) Gap analysis + Management of Change
Start by defining the scope, impacts, owners and dates then open a Management of Change (MoC). This keeps every adjustment controlled and traceable from day one and prevents late surprises.
2) Map facility requirements
Create a single view of capability: equipment, tooling, procedures and processes. Record where evidence lives and the current revision level. Clarity here speeds everything later especially interviews and site visits.
3) People, training & competence
Align roles, authorisations, and recency to the updated scope. The output is a competence matrix that shows who can do what and when. Competence documented equals confidence demonstrated.
4) Pre application / pre audit assessment
Before you submit anything, test your readiness. Verify records, log gaps, and close actions to green. You want the visit to confirm, not discover.
5) Front to back application & liaison
Assemble the pack, manage regulator liaison, and track responses to approval. Keep one owner and one evidence index to avoid loose ends and rework.
Our promise: We make almost ready, audit ready.
Making SMS visible in day to day work
A living SMS is easy to recognise:
- Risks have named owners and next review dates.
- Actions close with evidence signatures, photos, or document IDs.
- Trends are discussed, and decisions are recorded.
- Safety investigations include 30/60/90 day effectiveness checks so improvements don’t fade.
A useful question in your next review seasonally appropriate: “What changed since last time?” If the answer is “nothing,” either the control is excellent or no one’s looking. Both are signals.
Compliance monitoring without cobwebs
Monitoring should be routine, not theatrical. Publish a rolling plan (internal plus independent checks), agree scope and sampling in advance, and keep a simple findings log with owners and dates. Close the loop by verifying effectiveness and archiving cleanly. Small habit, big win: add a “last verified (date/initials)” column to your evidence index.
Part 145 ↔ CAMO: the corridor where ghosts appear
Hand offs are where risk travels. Keep the corridor lit: a responsibilities matrix with names (not just roles), a clear interfaces map, and a controlled forms index so no one uses a “mystery” version. When responsibilities are visible, surprises are rare and audits are calmer.
Conclusion: no jump scares, just steady control
Halloween metaphors aside, the most professional operations are the most predictable. When scope, ownership, and evidence are clear, audits confirm what your teams already know: the system works.
Planning a change or preparing for an audit?
We’ll map the steps, align owners, and see it through end to end.