IS-BAO and Wyvern: Third-Party Safety Audits Decoded

Why Third-Party Audits Exist in Business Aviation

The FAA issues Part 135 certificates to charter operators who meet regulatory minimums for aircraft, crew, maintenance, and operations. Meeting these minimums does not guarantee operational excellence. It guarantees legal compliance. The difference between a certificate holder who barely passes FAA inspection and one who operates at the highest safety standards is enormous, but the certificate itself does not distinguish between them. Both carry the same Part 135 authorization.

Third-party safety audit organizations emerged to fill this gap. IS-BAO (International Standard for Business Aircraft Operations) and Wyvern are the two most recognized audit frameworks in business aviation. Each evaluates operators against standards that exceed FAA regulatory minimums, providing charter passengers and their advisors with a meaningful quality signal. Approximately 14% of U.S. Part 135 operators hold IS-BAO registration. Wyvern's Wingman program covers approximately 800 operators worldwide.

IS-BAO: The Three-Stage Framework

IS-BAO was developed by the International Business Aviation Council (IBAC) and is administered by IBAC's Safety Committee. The standard is structured in three progressive stages, each requiring a successful on-site audit by an accredited auditor. Operators advance through stages over a minimum of 3-5 years, demonstrating increasingly mature safety management practices at each level.

Stage 1: Foundation

Stage 1 confirms that the operator has implemented a Safety Management System (SMS) framework with a documented safety policy, appointed a safety officer, established hazard reporting procedures, and begun collecting safety data. The audit evaluates whether the infrastructure exists, not whether it is producing measurable results. Stage 1 is achievable within 12-18 months of beginning implementation. Approximately 60% of IS-BAO-registered operators are at Stage 1.

Stage 2: Implementation

Stage 2 requires evidence that the SMS is actively producing risk assessments, hazard reports, and corrective actions. The auditor reviews 12-24 months of safety data, evaluates the quality of risk assessments conducted for route changes, new aircraft types, and operational modifications. The operator must demonstrate that safety information flows from frontline employees to management and that management acts on identified hazards. Stage 2 typically requires 2-3 years of active SMS operation after Stage 1.

Stage 3: Continuous Improvement

Stage 3 is the highest level and the most meaningful for charter passengers. It confirms that the SMS is mature, data-driven, and integrated into every operational decision. The auditor evaluates trend analysis, safety KPI tracking, root cause investigation quality, and evidence of systemic improvement over time. Stage 3 operators can demonstrate, with data, that their safety programs are reducing risk and improving performance year over year. Fewer than 20% of IS-BAO operators have achieved Stage 3.

Wyvern Wingman: The 250-Point Audit

Wyvern Ltd. operates the Wingman standard, an independent audit program that evaluates operators across approximately 250 individual criteria covering operations, maintenance, pilot qualifications, training programs, insurance, and organizational structure. Unlike IS-BAO's progressive staging, Wyvern issues a binary pass/fail Wingman rating: an operator either meets the standard or does not.

Wyvern's audit scope includes items that IS-BAO does not specifically evaluate. Pilot background checks, training provider verification, insurance policy review (coverage amounts, exclusions), and aircraft maintenance tracking are all part of the Wingman evaluation. Wyvern also monitors operators continuously between annual audits through data feeds from the FAA, NTSB, and insurance carriers, and can revoke Wingman status mid-cycle if adverse events occur.

The practical difference between IS-BAO and Wyvern for charter passengers: IS-BAO tells you the operator has a safety management system and rates its maturity (Stage 1-3). Wyvern tells you the operator meets a comprehensive set of operational standards across all departments. An operator with both IS-BAO Stage 3 and Wyvern Wingman has been evaluated twice, by different organizations, against different criteria, and passed both. This is the strongest quality signal available in charter aviation.

ARGUS: The Third Rating System

ARGUS International operates a tiered rating system (Gold, Gold+, Platinum) that evaluates operators based on historical safety records, pilot experience levels, and operational practices. ARGUS ratings are widely used by charter brokers as a screening filter: many brokers will only quote operators rated ARGUS Gold or higher.

The ARGUS system differs from IS-BAO and Wyvern in that it places greater weight on historical data (accident/incident history, enforcement actions, insurance claims) and less weight on current organizational practices. An operator with a clean 10-year safety record may receive ARGUS Gold without the formal SMS infrastructure that IS-BAO Stage 2 requires. Conversely, a newer operator with excellent SMS practices but limited history may rate lower under ARGUS despite strong current operations.

• ARGUS Gold: Meets baseline safety, operational, and pilot experience standards
• ARGUS Gold+: Higher pilot experience requirements and more comprehensive operational review
• ARGUS Platinum: Highest tier with the most rigorous evaluation including on-site inspection

Cost of Certification and Who Pays

Third-party safety audits are not free. IS-BAO registration costs approximately $15,000-$30,000 for the initial audit (depending on fleet size and complexity) plus $8,000-$15,000 for annual renewal audits. Wyvern Wingman costs approximately $8,000-$15,000 annually. ARGUS ratings cost approximately $5,000-$10,000 annually. An operator seeking all three carries $30,000-$55,000 in annual audit costs.

These costs are absorbed by the operator and factored into hourly charter rates. A Wyvern Wingman/IS-BAO Stage 3 operator's hourly rate may be $200-$400 higher than a non-audited competitor. That premium covers audit costs, the safety officer position, SMS software, training programs, and the ongoing data collection infrastructure. For charter passengers, the premium represents a quantifiable investment in safety and organizational quality.

Why Some Operators Decline Certification

Approximately 86% of U.S. Part 135 operators do not hold IS-BAO registration. The reasons are primarily economic: small operators (1-3 aircraft) find the annual audit cost disproportionate to their revenue, and the competitive benefit is limited because many charter passengers do not ask about safety certifications. Some operators also view the audit process as bureaucratically burdensome. None of these reasons reflect on the inherent safety of uncertified operations; they reflect business decisions about resource allocation.

How to Use Safety Ratings When Booking Charter

Safety ratings provide useful signal but should not be the sole criterion for selecting a charter operator. An uncertified operator with experienced crews, well-maintained aircraft, and a clean safety record may be safer than a newly certified operator still building its SMS practices. The ratings are most valuable as a screening tool to narrow the field and as verification that an operator takes safety seriously enough to invest in external evaluation.

• IS-BAO Stage 3 + Wyvern Wingman is the strongest combination available. Ask specifically for this pairing when booking high-value or complex flights.
• IS-BAO Stage 1 alone confirms intent but not maturity. It is a positive signal, not a guarantee of operational excellence.
• ARGUS Gold is a minimum acceptable rating for most charter brokers. Below Gold, additional due diligence is warranted.
• No certification does not mean unsafe. Some excellent operators decline certification for economic reasons. Ask about their internal safety practices instead.
• Verify certifications directly. IS-BAO and Wyvern publish operator directories. Certification claims should be confirmed independently.