Specifications include, but are not limited to: 1) The vendor shall develop an SMS for aviation as defined by the FAA. Utilizing the four pillars below. The vendor must ensure that the SMS is applicable to NYPA and assess how the different groups operate to form one overarching safety management system. a. Safety Policy – Assist in defining safety methods, processes, and organizational structure needed to meet safety goals. i. Provide clear safety objectives and safety performance through SMS. ii. Define methods, process, and organizational structure needed to meet safety goals. iii. Include methods for transparency in management of safety. 1. Fully document policy and process 2. Employee reporting and resolution system 3. Accountability of management and employees iv. Build upon the processes and procedures that already exist. b. Safety Risk Management (SRM) – Determines the need for, and adequacy of, new or revised risk controls based on the assessment of acceptable risk. A formal process within the SMS composed of: o Describing the system: Establish and understanding of system design and performance factors human interface, environment, processes, and activities to the level necessary to identify hazards. o Identifying the hazards: Identify and document hazards and the effects of each hazard in sufficient detail to determine the associated safety risk. o Assessing the risk: Compare the safety risk of each identified hazard’s effect to established safety performance targets and/or rank hazards based on risk. The objective is to determine the acceptability of the safety risk of each hazard. o Analyzing the risk: Determine and analyze the severity and likelihood of potential effects associated with identified hazards. o Controlling the risk: Design and implement safety risk control(s) for hazards in order to reduce the safety risk to a level acceptable to the decision maker, when possible. o Track and Monitor: Track identified hazards and monitor implemented safety risk controls/mitigations to ensure that they achieve their intended safety performance targets. The SRM process may be embedded in the processes used to provide the product/service.