USOAP CMA readiness: why evidence beats intent

Under ICAO's Universal Safety Oversight Audit Programme Continuous Monitoring Approach (USOAP CMA), a State's effective implementation is measured one Protocol Question (PQ) at a time. Each PQ asks a simple thing: is this element of the oversight system in place, and can you prove it?

The second half of that question is where many authorities lose marks. Regulations may be promulgated, inspectors may be trained and surveillance may be carried out, yet the PQ is still found unsatisfactory because the evidence is incomplete, scattered or inconsistent.

A PQ is not answered by what the authority does. It is answered by what the authority can show it does.

The evidence trail auditors look for

For most PQs in the operational areas, auditors follow a predictable chain:

A break anywhere in that chain weakens the answer. A surveillance plan with no completed inspection reports, or findings with no record of corrective action plan (CAP) acceptance and verification, will not satisfy the PQ.

Make the system produce the evidence

The most reliable way to be audit-ready is not to prepare for audits at all. It is to run daily oversight in a system that records every step as it happens. When an inspector raises a finding, the operator's CAP, the authority's acceptance and the verification of closure should all sit against that finding, with dates and names, without anyone assembling a file afterwards.

That is the principle behind SkyALITE ISSOMS. Licensing, certification, surveillance and enforcement are all tracked in one place, with the evidence trail built in. When a USOAP audit comes, the authority is already ready.