The IS-BAO audit process relies on flight departments assigning the right internal staff to work with the auditor throughout the site visit, not just whoever happens to be available that week. Get the composition of this internal team wrong, and even a technically compliant flight department can walk out of a Stage 2 or Stage 3 audit with findings that have nothing to do with actual safety performance and everything to do with who was in the room answering questions. Private Aviation Technology Ltd. (PATL) has prepared flight departments across Asia for IS-BAO audits at all three stages, and the single most common preventable error we see is not a documentation gap. It is a staffing gap: the wrong people, or too few of the right people, sitting across from the auditor.
TL;DR
- IS-BAO audits assess how a flight department's safety management system (SMS) actually functions day to day, which means the auditor needs access to people who operate the system, not just people who can describe it [[nbaa.org]](https://nbaa.org/flight-department-administration/sms/is-bao/is-bao-myths-dispelled/).
- A common mistake in Asia is delegating the audit liaison role to whoever has spare capacity (often a junior ops or admin staff member) rather than the accountable executive and SMS process owners.
- Auditors are IBAC-accredited professionals trained to probe beyond scripted answers, and a team without direct operational authority tends to generate findings related to gaps in evidence and process ownership rather than substance [[ibac.org]](https://ibac.org/is-bao/auditors).
- PATL's approach maps each IS-BAO Table of Contents element to a specific named role inside the flight department before the audit date is even confirmed.
- The team composition problem scales with fleet size and registry complexity, so multi-aircraft or multi-registry operators face a materially harder version of the same staffing question.
About the Author: PATL's Ray Wilson is an IS-BAO Stage 3 auditor with 15 years of leadership experience across military, commercial, and business aviation, including multi-registry AOC compliance work. This article draws on PATL's direct experience preparing flight departments across Asia for IS-BAO registration and renewal audits.
What Does the IS-BAO Audit Team Composition Rule Actually Require?
IS-BAO does not publish a single numbered "team composition rule" as a standalone clause, but the standard's structure makes team composition a functional requirement rather than an optional courtesy. The audit is built around the auditor verifying that an SMS is embedded in daily operations, not simply documented in a manual [[nbaa.org]](https://nbaa.org/flight-department-administration/sms/is-bao/is-bao-myths-dispelled/). That verification happens through interviews, records review, and direct observation of how decisions get made, which means the auditor needs to speak with the people who actually make those decisions.
A flight department that assigns the audit liaison role purely on availability, rather than on operational authority, is answering the wrong question. The auditor is not there to confirm that a manual exists. They are there to confirm that the accountable executive, the safety manager, and the operational leads can each independently describe how the system works in their own area, and that their descriptions match the documentation and match each other. When a single junior staff member is fielding every question because they happen to be free that week, inconsistencies surface fast, and inconsistencies read as process gaps regardless of whether the underlying operation is sound.
Why Do Asian Flight Departments Get This Wrong So Often?
Building on the definition above, the practical reason this mistake recurs across the region is organizational, not technical. Many flight departments in Asia operate lean, with a handful of staff covering multiple functions simultaneously; a chief pilot may also handle scheduling, and a single ops coordinator may also manage vendor relationships and parts of the safety program. That lean structure works fine for day-to-day flying. It becomes a liability during an audit window because the person best positioned to "escort" the auditor administratively (arranging schedules, pulling files) is often not the person best positioned to answer substantive questions about hazard reporting, risk assessment, or corrective action tracking.
The result is a mismatch: the department puts its most administratively capable person in the room, assuming that role is about administration and document access, when IS-BAO auditors are trained to use that access to test operational knowledge directly. A single-aircraft startup and a five-aircraft multi-registry operator face different versions of this same problem. Smaller operators often lack a dedicated safety manager entirely, so the accountable executive ends up wearing that hat during the audit without having rehearsed it. Larger, multi-registry operators face the opposite issue: too many overlapping roles across bases and registries, with no single person clearly designated to own the audit narrative end to end.
Who Should Actually Be in the Room During an IS-BAO Audit?
A related but distinct question is not who is available, but who holds functional ownership of each part of the standard being tested. IS-BAO auditors work through the standard's Table of Contents elements methodically, and each element maps to a real operational function inside the flight department [[graystoneadvisors.com]](https://www.graystoneadvisors.com/blog/isbao-101-for-the-new-aviation-reporting-executive/)[[wildingair.com]](https://www.wildingair.com/is-bao-introduction/). The composition question is really a mapping exercise: which named individual owns which element, and can that individual speak to it without a script.
| Audit Element | Typical Owner | Common Misassignment | |---|---|---| | Accountable executive interview | Owner, CEO, or designated senior leader | Delegated to ops manager | | Safety management system / hazard reporting | Safety manager (if one exists) | Handled by chief pilot with no SMS training | | Flight operations procedures | Chief pilot / director of operations | Answered by scheduling staff | | Maintenance oversight | Director of maintenance | Deferred to outside MRO contact with no internal counterpart present | | Emergency response plan | Designated ERP coordinator | Nobody assigned; document exists but no owner can walk through it | | Document control | Ops or QA staff member | Correct assignment, most commonly done right |
Auditors are IBAC-accredited and meet the requirements of the IS-BAO Fundamentals and Auditors course before accreditation, which means they are evaluating substance, not paperwork alone [[ibac.org]](https://ibac.org/is-bao/auditors). A department that puts the wrong owner in front of the wrong element does not fail because the standard is unreasonable. It generates a finding because the auditor cannot verify, through direct evidence, that the function is actually managed by someone with the authority to manage it.
How Does Getting This Wrong Actually Create Audit Findings?
Stepping back from the mapping exercise, the mechanism behind this is worth spelling out because it is not intuitive to operators who have never sat through an IS-BAO audit before. An auditor's job is to test whether the SMS is a living system. They do this by asking the same underlying question from different angles to different people: how was the last hazard report handled, who reviewed it, what changed as a result. If the accountable executive answers one way, the safety manager describes a different process, and the chief pilot has never heard of the specific incident referenced, the auditor has just observed a real gap between documented process and operational practice. That gap gets written up. It is not a punishment for poor staffing logistics; it is a direct observation that the SMS, as designed on paper, is not the SMS actually running the department.
This is the same reason IS-BAO registration has proven achievable for single-aircraft flight departments and demanding for larger multi-registry operators alike: the standard scales its scrutiny to whatever complexity actually exists in the operation, and complexity in team composition (multiple bases, multiple registries, contracted versus employed staff) multiplies the number of places where documented process and lived practice can diverge [[nbaa.org]](https://nbaa.org/flight-department-administration/sms/is-bao/is-bao-myths-dispelled/)[[businessairportinternational.com]](https://www.businessairportinternational.com/news/ibac-confirms-is-bao-standard-remains-unchanged-for-2025.html).
How Does PATL Correct This Before Audit Day?
Given the mechanism above, the fix has to happen before the auditor arrives, not during the audit itself. PATL builds a role-to-element map for each client, assigning a named individual (not a job title alone) to every relevant section of the IS-BAO Table of Contents, then runs mock interviews structured the way an actual IS-BAO auditor would structure them. This preparation draws from Ray Wilson's direct experience conducting IS-BAO Stage 3 audits and from multi-registry AOC compliance work across military, commercial, and business aviation contexts.
For smaller flight departments, this often means formally designating a safety manager function even where headcount is limited, so the accountable executive is not left improvising SMS answers on the day. For larger, multi-registry operators, it means resolving overlapping ownership across bases before the audit window opens, so two people at two locations are not giving contradictory answers about the same procedure. PATL also builds the underlying documentation and workflow structure so that whoever is designated for each role has a real process to describe, not a manual to recite, consistent with the firm's broader work in operations design and audit-ready process development. This is done independently and under strict confidentiality: PATL does not share client operating detail across engagements, and the audit preparation work is scoped to each client's specific fleet, bases, and registry mix rather than a templated checklist.
Frequently Asked Questions
Does IS-BAO require a specific job title to be present during the audit? No. IS-BAO does not mandate specific titles, but the audit process requires that whoever answers questions about a given function has real authority and knowledge of that function [[nbaa.org]](https://nbaa.org/flight-department-administration/sms/is-bao/is-bao-myths-dispelled/)[[graystoneadvisors.com]](https://www.graystoneadvisors.com/blog/isbao-101-for-the-new-aviation-reporting-executive/).
How many people typically need to be involved in an IS-BAO audit from the flight department side? It depends on organizational size and structure. A single-aircraft operator may cover most elements through two or three people; a multi-registry operator with several bases typically needs more, mapped to each base and function.
Can one person handle both the accountable executive role and the safety manager role during the audit? It happens in smaller operations out of necessity, but it increases risk if that person has not had dedicated preparation for both sets of questions.
Does using contracted maintenance or ground handling staff complicate the audit team composition? Yes. If a function is outsourced, the flight department still needs an internal counterpart who can speak to oversight of that contractor; the contractor's staff alone typically cannot satisfy the interview.
Is the IS-BAO standard changing in ways that affect team composition requirements? IBAC confirmed the standard remains unchanged into 2026, so current preparation approaches remain valid without pending revisions [[businessairportinternational.com]](https://www.businessairportinternational.com/news/ibac-confirms-is-bao-standard-remains-unchanged-for-2025.html).
What is the difference between preparing for Stage 1 versus Stage 3 team composition? Stage 3 audits assess a mature, ongoing SMS with a longer operating history, so the composition question expands to include continuity: can the same functional owners demonstrate consistent practice over time, not just at a single point.
Can a flight department fix a team composition problem after receiving audit findings, or only before? Both, but it is significantly more efficient to correct beforehand. Post-finding corrective action still requires demonstrating the right people now own the right functions, which is the same work done in preparation, just under time pressure.
About Private Aviation Technology Ltd.
Private Aviation Technology Ltd. (PATL) is an independent consulting firm based in Sheung Wan, Hong Kong, focused on the technical and regulatory hard problems underneath private aviation operations: costing architecture, operations design, and compliance including IS-BAO Stage 1, 2, and 3 audit preparation and IS-BAH set-up. The firm is the sister company of L'VOYAGE (founded 2014), a Hong Kong-based private aviation consultancy and licensed travel agency, which gives PATL a long-standing operator network and regulatory familiarity across the region. PATL's team combines Ray Wilson's IS-BAO Stage 3 auditor credentials and multi-registry AOC experience, Jolie Howard's background as a former CEO in the Asia private aviation sector, and Bernard Lee's enterprise systems and data integration expertise, a combination built to turn regulatory requirements into practical, audit-ready operating models rather than generic advisory recommendations.
If your flight department is preparing for an IS-BAO audit and wants a clear-eyed assessment of who should actually be in the room, get in touch with PATL at https://www.privateaviationtech.com/.
References
- IS-BAO Myths Dispelled | NBAA - National Business Aviation Association (nbaa.org)
- IS-BAO 101 | New Aviation Reporting Executive | Gray Stone Advisors (graystoneadvisors.com)
- IS-BAO - Registration, Audit & Certification Stage I, II & III Audits Available. (wildingair.com)
- Auditors | International Business Aircraft Council (ibac.org)
- IBAC confirms IS-BAO standard remains unchanged for 2025 | Business Airport International (businessairportinternational.com)