Skip to content
FRSign inBook a walkthrough
MOCManagement of ChangeSafety Management

Management of change, with approval that rises with the risk.

In 50 words

Management of change makes sure a new route, aircraft type, procedure or reorganisation is assessed for risk before it happens. In eAviora a change is scored on the ICAO 5 by 5 matrix, approved at the rank its risk requires, implemented through tracked actions, and reviewed after it lands before it can close.

At a glance

The module, on one sheet.

Suite
Safety Management | Safety Governance
ICAO Doc 98593.2
Element 3.2, management of change, under safety assurance.
Records
SMS-MOCChanges: operational, organizational, procedural or technical.
Stages
01Draft02Impact assessment03Risk assessment04Approval05Implementation06Post-change review07Closure
Seven stages, from Draft to Closure.
Approval
Safety managerDirectorAccountable manager
Tolerable: a safety manager. Tolerable, action required: a director. Intolerable: the accountable manager.
What it does

Four things, done on the record.

Add a 05:40 CYUL rotation to the winter schedule
Derived risk | Major by Remote | SMS-MOC-2026-0006 | Sample data | Northwind Air, a fictional airline
Approval rises with the risk
  1. AcceptableNo escalation
  2. TolerableA safety manager
  3. Tolerable, action requiredA directorThis change
  4. IntolerableThe accountable manager
The signer’s role must clear the rank
01Impact on the graphThe hazards and documents a change affects are linked to it, not listed in a field.
02Approval by rankThe risk is derived from severity and probability, and the signer’s role must clear the rank it requires.
03Four decisions, each with a reasonApprove, approve with conditions, return for rework or reject, signed with the reason for it.
04A review that countsPost-change review records whether the change worked and whether it had unintended consequences.
In the product

A change, awaiting approval.

On the record
Derived riskMajor by Remote
Approver rankDirector
Tolerable, action required | C. Wright can sign
The derived risk level, and the approver rank it requires.
On the record
SMS-HAZ-2026-0048Fatigue on early CYUL rotationsaffects hazard | intolerable
DOC-2026-0042Stabilised approach criteriatouches document | revision 4
DOC-2026-0057Fatigue risk management proceduretouches document | revision 2
The impacted hazards and documents, linked.
On the record
ACT-2026-0236Brief crews on the early report timeimplemented by | open
ACT-2026-0237Publish the winter roster rulesimplemented by | open
ConditionReview the roster after four weeks of flyingowner A. Laurent | open
The implementation actions, and the conditions still open on the approval.
Drawn from the record | sample data, Northwind Air, a fictional airline
The rule it holds

An approval that moves no longer counts.

If the assessed risk or the scope changes after approval, the change returns to approval to be signed again.

ApprovedSigned at the rank the risk requires
ThenThe risk or the scope changes
BackTo approval, signed again
Questions buyers ask

Short answers.

A buyerWho approves a change?

eAvioraThe rank its risk requires: a tolerable change needs a safety manager, a change rated “Tolerable, action required” needs a director, an intolerable one the accountable manager. An acceptable change needs no escalation.

A buyerCan a change close the day it lands?

eAvioraNo. Post-change review is a stage: it records whether the change was effective, any unintended consequences and the date of the review.

A buyerWhat if the plan changes after approval?

eAvioraDeclare the scope change. The approval no longer counts, and the change goes back to be signed again.

See Management of Change on your own records.

A walkthrough with the people who build eAviora.