December 01, 2020


Considerations presented by SofemaOnline (SOL) 

As part of the development of an EASA compliant Part CAMO Organisation the Safety Management System will benefit from the development and continuous monitoring of a Risk Register.

A risk register is a crucial part of your approach to managing these risks. It’s a tool to help you identify, assess, and record your risks and the actions you’re taking to eliminate or minimize them.

To support the development of an effective risk register the following 50 generic risks have been documented as a starting point to support the development of your risk register.

In addition, you can use the generic ICAO 5 x 5 Risk Matrix or use the following as a tool to assess exposure by calculating the Event Risk Classification.

Step 1

CAMO Risk Register

Step 2

CAMO Risk Register

For each of the following items perform a risk assessment and ask the questions which help you determine the level of exposure that currently exists in your organisation by asking for each item the following 6 questions.

  • Is this an issue in our organisation?
  • If it is not considered an issue how can I demonstrate – where is the evidence?
  • How can I measure the effectiveness of the current process?
  • How effective is the documentation/training?
  • If there are changes in this element how effective would the system accommodate the changes?

Risks to be analyzed include the following

1/ Limited or lack of management commitment – Management does not demonstrate support for the activity

2/ Lack of or incomplete description of roles, accountabilities, and responsibilities

3/ Limited or lack of resource availability or planning, including staffing in the following areas

  • Maintenance Planning
  • Reliability
  • Engineering
  • Technical Records
  • Quality Assurance
  • Safety Management
  • Other

4/ Lack of or ineffective policies

5/ Incorrect or incomplete procedures including instructions

6/ Lack of or Poor Management, Culture, and or Manpower relationships

7/ Lack of or Ineffective Organizational Structure

8/ Poor organizational safety culture

9/ Lack of or ineffective safety management processes (including risk management, safety assurance, auditing, training, and resource allocation)

10/ Lack or ineffective audit procedures

Next Steps

To access the full document with details of all 50 generic risks applicable to an EASA Part CAMO Organisation (Free of Charge) please visit the Sofema Aviation Services (SAS) Library SMS area

SofemaOnline currently offers 15 online training courses to support the development of your EASA Part CAMO Organisation – for details please see or email


Airworthiness, Aviation Safety Management, Aviation SMS, CAMO, EASA Part CAMO Organisation, Human Factors, Maintenance Planning, Quality Assurance, Reliability, Risk Analysis, Technical Records