Obtaining operational authorisation through the UK Civil Aviation Authority (CAA) using the Specific Operations Risk Assessment (SORA) methodology is a structured but inherently bespoke process. This note explains how the process works and how Salvus Consulting supports clients through it.
SORA is not a standard application or checklist exercise. It is a risk-based assessment designed to demonstrate to the regulator that a proposed operation can be conducted safely within a defined environment. As a result, every application is assessed individually and evolves through dialogue with the CAA.
Salvus Consulting supports clients by helping them understand regulatory expectations, structure a clear and defensible operational concept, identify risks and appropriate mitigations, prepare documentation aligned with current guidance, and respond effectively to CAA questions and feedback. Our role is to guide, advise and apply practical experience gained from previous successful SORA submissions.
All regulatory decisions are made solely by the CAA. The regulator may request additional information or clarification, require changes to operational or technical mitigations, apply conditions to an approval, interpret guidance differently between applications, or decline an application where requirements are not satisfied. These outcomes form a normal part of the regulatory process and should not be interpreted as failure of the application or the consultancy process.
Unlike certification processes with fixed criteria, SORA assessments involve professional judgement by the regulator. Requirements may vary depending on operational environment, risk profile, emerging policy, or evolving regulatory interpretation. For this reason, no consultancy can guarantee approval or specific timelines. Salvus Consulting provides experienced guidance designed to maximise clarity, robustness and regulatory alignment, but final decisions remain outside consultant control. The Salvus Consulting process adds value by steering clients towards solutions with a higher probability of a successful application.
Successful applications depend on active collaboration. The client remains responsible for defining the intended operation, providing accurate operational and technical information, implementing safety and mitigation measures, and demonstrating organisational competence to the regulator. Where challenges are identified, Salvus will explain available approaches and help develop solutions, but implementation and operational ownership remain with the client.
The most successful SORA projects are approached as a structured engagement with the regulator rather than a single submission event. Iteration, clarification and refinement are normal and expected stages. Our objective is to help clients progress through this process efficiently, with realistic expectations and a clear understanding of regulatory intent.