14 CFR § 5.21

Any person required to have an SMS under this part must have a safety policy that includes at least the following:

The person's safety objectives.

The person's commitment to fulfill the safety objectives.

A clear statement about the provision of the necessary resources for the implementation of the SMS.

A safety reporting policy that defines requirements for employee reporting of safety hazards or issues.

A policy that defines unacceptable behavior and conditions for disciplinary action.

An emergency response plan that provides for the safe transition from normal to emergency operations in accordance with the requirements of § 5.27.

A code of ethics that is applicable to all employees, including management personnel and officers, which clarifies that safety is the organization's highest priority.

The safety policy must be signed by the accountable executive described in § 5.25.

The safety policy must be documented and communicated throughout the person's organization.

The safety policy must be regularly reviewed by the accountable executive to ensure it remains relevant and appropriate to the person.