(a) SMS components. An SMS under this part must be appropriate to the size, scope, and complexity of the person's organization and include, at a minimum, all of the following components:

1. (1) Safety policy that meets the requirements of subpart B of this part.
2. (2) Safety risk management that meets the requirements of subpart C of this part.
3. (3) Safety assurance that meets the requirements of subpart D of this part.
4. (4) Safety promotion that meets the requirements of subpart E of this part.