(a) SMS components. An SMS under this part must be appropriate to the size, scope, and complexity of the person's organization and include, at a minimum, all of the following components:

(1) Safety policy that meets the requirements of subpart B of this part.

(2) Safety risk management that meets the requirements of subpart C of this part.

(3) Safety assurance that meets the requirements of subpart D of this part.

(4) Safety promotion that meets the requirements of subpart E of this part.

(b) Continuing requirements. Any person required to develop and implement an SMS under this part must maintain the SMS in accordance with this part.