Canadian Aviation Regulations — 604.203
604.203 (1) Subject to subsection (2), the private operator’s safety management system shall include the following components: (a) a statement of the overall objectives that are to be achieved by the safety management system; (b) a safety management plan that (i) specifies the duties that are assigned to the private operator’s personnel in respect of the safety management system, (ii) sets out performance goals for the safety management system and a means of measuring the attainment of those goals, (iii) sets out a policy for the internal reporting of aviation-safety-related hazards, incidents and accidents, including the conditions, if any, under which personnel will be protected from disciplinary action, (iv) describes the relationship between the components of the safety management system, and (v) sets out procedures for involving personnel in the establishment of the safety management system; (c) a safety oversight program that includes (i) procedures for managing aviation-safety-related incidents, including their investigation and analysis, (ii) procedures for identifying and managing aviation-safety-related hazards, including the monitoring and risk profiling of those hazards, (iii) a reporting and data collection system for collecting and communicating information relating to aviation-safety-related hazards and incidents that (A) uses a record-keeping system to monitor and analyze aviation safety trends, (B) includes a means of communicating with persons who report issues relating to the safety management system or aviation safety, (C) is capable of generating progress reports for the person responsible for the functional area at intervals that the person determines, and (D) is capable of generating other reports in urgent cases, (iv) procedures for investigating and analyzing aviation-safety-related hazards, incidents and accidents that (A) take into account human, environmental and supervisory factors and organizational elements, (B) make it possible to make findings as to root causes and contributing factors, and (C) make it possible to communicate the findings to the operations manager, (v) risk management analysis procedures that include (A) an analysis of aviation-safety-related hazards, (B) a risk assessment based on risk criteria, and (C) a risk control strategy, (vi) corrective action procedures (A) for determining what corrective actions are necessary, if any, and for carrying out those actions, (B) for keeping a record of any determination made under clause (A) and the reason for that determination, and (C) for monitoring and evaluating, in accordance with the quality assurance program referred to in section 604.206 , the effectiveness of any corrective action carried out under clause (A), (vii) procedures for disseminating to personnel, with the approval of the private operator, the following aviation-safety-related information: (A) information relating to an incident, (B) information relating to a hazard analysis, and (C) information relating to the results of a review or audit, and (viii) procedures for sharing, with any person with whom the private operator exchanges services, any information relating to aviation safety; (d) procedures for (i) ensuring that all procedures relating to the safety management system are recorded and disseminated to personnel, (ii) managing and keeping all records and documents resulting from the safety management system, (iii) ensuring that records and reports relating to the safety management system are retained for at least two years, and (iv) reviewing all documents relating to the safety management system and keeping those documents up to date; (e) emergency response procedures that (i) cover all of the activities carried out by the private operator, and (ii) ensure that the duties relating to those procedures are assigned to the appropriate personnel; (f) the quality assurance program referred to in section 604.206 ; and (g) the process for conducting a review of the saf