September 23, 2025

Steven Bentley

Sofema Aviation Services (SAS) Considers MSAT Challenges and Best Practices related to Organizations Holding Multiple EASA Certificates

An Integrated Management System is a single, cohesive framework that unites the requirements of different regulatory certificates—such as Part-CAMO, Part-145, Part-21 (Design & Production)—into a unified set of policies, processes, and controls.

Under EASA’s principle of “one Management System = one assessment”, an IMS aims to streamline oversight and avoid duplication, while ensuring compliance across all domains.

EASA MSAT highlights that integration must be deliberate, ensuring regulatory specificity is preserved while Optimizing shared functions such as compliance monitoring, risk management, safety promotion, and change management.

Key Challenges in Managing Multiple Certificates Under IMS

Regulatory Complexity and Domain Specificity

  • Each certificate has domain-specific requirements (e.g., CAMO.A.200(d) for CAMOs, 145.A.200(c) for AMOs, 21.A.239 for Design Organizations).
  • Risk: Over-integration may lead to loss of critical domain-specific detail.
  • Example: Design Organization requirements for independent verification (21.A.239(d)) differ significantly from maintenance oversight in Part-145.

Multiple Oversight Authorities

  • Some organizations are overseen by different Competent Authorities or separate teams within the same authority.
  • Risk: Conflicting interpretations and duplicated audit effort.
  • Example: National CAA audits Part-145 while EASA directly oversees Part-21 approvals.

Resource Allocation and Competence

  • Integrated systems require cross-domain competence in safety, compliance, and technical functions.
  • Risk: Staff may be competent in one domain but lack understanding of others, leading to weak audit coverage.

Interface Management

  • Interfaces between internal departments and subcontractors must be harmonized across all domains.
  • Risk: Gaps in communication between CAMO and Part-145 functions, especially when contracted parties operate their own MS.

Change Management Across Certificates

  • Changes may impact multiple domains simultaneously (e.g., new aircraft type introduction affects CAMO, AMO, and training organization).
  • Risk: If the change process is not integrated, risks may be missed or assessed in isolation.

Cultural and Organizational Resistance

  • Different departments may have developed siloed practices and resist standardization.
  • Risk: Lack of buy-in undermines implementation and creates inconsistencies.

Best Practices for Effective IMS in Multiple-Certificate Organizations

Apply the “One MS = One Assessment” Principle

  • Conduct a single, holistic assessment covering all domains.
  • Use EASA MSAT customized to reflect domain-specific elements.
  • Benefit: Reduces duplication, promotes consistency, and provides a unified maturity score

Preserve Domain-Specific Detail

  • Maintain domain annexes within core MS documentation (e.g., MOE, CAME, DOH, POE) to address specific rule sets.
  • Ensure AMC/GM references are mapped for each certificate.

Harmonise Core Functions

  • Integrate:
    • Compliance monitoring across all domains.
    • Risk management processes (use a common risk matrix).
    • Safety promotion programmes applicable to all staff.
  • Benefit: Economies of scale and a consistent safety/compliance culture.

 Strong Interface Management

  • Document clear arrangements between domains (e.g., CAMO ↔ AMO, DOA ↔ POA).
  • Use joint safety review boards and shared hazard logs to track cross-domain risks.

Cross-Domain Training and Competence Development

  • Train compliance and safety staff to understand all applicable certificates.
  • Develop multi-competence auditors capable of integrated audits.

Coordinated Oversight with Authorities

  • Proactively engage authorities to agree on integrated oversight plans.
  • Share audit results across authority teams to reduce redundancy.

Integrated Change Management

  • Use a single change control process that evaluates the safety, compliance, and operational impacts across all certificates.
  • Ensure cumulative and cross-domain impacts are assessed.

Continuous Improvement Through MSAT

  • Use MSAT for internal self-assessment before authority oversight.
  • Benchmark maturity levels and track improvement actions across domains.

Next Steps

Sofema Aviation Services (SAS) provides the following 2 day course available as Classroom or Webinar – Using The EASA Management System Assessment Tool (EASA MSAT) – 2 Days. Please see our online website, Sofema Online (SOL), or email [email protected].

Share this with your network:

Tags:

EASA, Part 145, Training, Part 21, SAS blogs, Safety Management Systems (SMS), best practices, Aviation Compliance, MSAT challenges, multiple EASA certificates, Integrated Management System (IMS)