Commercial Drone Risk Assessment UK 2026

Why Risk Assessment Matters for Commercial Operators

Risk assessment is the foundation of safe commercial drone operations. Whether you are conducting a roof survey in a quiet village or filming an event in a busy urban centre, the hazards differ enormously — and your mitigation measures must reflect that difference.

Under the UK drone regulations, all operators bear responsibility for ensuring their flights are conducted safely. For Open Category operations, this means conducting a site-specific assessment before each flight. For Specific Category operations, your risk assessment forms part of your Operational Authorisation (OA) application and is reviewed by the CAA before approval is granted.

Beyond regulatory compliance, a thorough risk assessment protects your business. If an incident occurs and you can demonstrate that you identified the relevant hazards and applied appropriate mitigations, you are in a far stronger position — both with the CAA and with your insurance provider.

Understanding SORA for Specific Category Operations

The Specific Operations Risk Assessment (SORA) is the methodology adopted by the CAA for evaluating Specific Category applications. Originally developed by JARUS (Joint Authorities for Rulemaking on Unmanned Systems), SORA provides a structured, repeatable process for determining the level of risk your operation presents.

SORA works through a series of steps:

1. Define the Concept of Operations (ConOps) — describe exactly what you intend to do, where, with what aircraft, and under what conditions
2. Determine the intrinsic Ground Risk Class (GRC) — based on your aircraft's maximum dimension and kinetic energy, combined with the operational scenario (VLOS over controlled ground, VLOS over populated areas, BVLOS, etc.)
3. Apply ground risk mitigations — measures such as ground risk buffers, population density analysis, or technical containment can reduce your GRC
4. Determine the initial Air Risk Class (ARC) — based on the airspace you will operate in and the density of manned aircraft traffic
5. Apply strategic and tactical air risk mitigations — such as operating in segregated airspace, using electronic conspicuity, or applying detect-and-avoid procedures
6. Determine the SAIL (Specific Assurance and Integrity Level) — the combination of your final GRC and ARC yields a SAIL value (I to VI), which dictates the level of robustness required for your Operational Safety Objectives (OSOs)

Each SAIL level requires you to demonstrate compliance with a set of OSOs at a specified level of robustness (low, medium, or high). Higher SAIL levels demand more rigorous evidence and more formal safety management processes.

Open Category Risk Assessment

If you fly commercially under Open Category rules, SORA does not apply — but you are still expected to conduct a risk assessment proportionate to your operation. In practice, this means a site-specific assessment before each flight that considers:

• The location and its characteristics — proximity to people, buildings, roads, and other hazards
• Airspace restrictions — whether you are near an aerodrome, in a Flight Restriction Zone (FRZ), or close to other controlled or restricted airspace
• Weather conditions — wind speed, visibility, precipitation, and temperature
• The aircraft and its payload — weight, flight characteristics, and any special equipment that could affect safety
• Crew competency — whether the remote pilot holds the appropriate qualifications and has recent experience with the aircraft type
• Third-party risk — the presence of uninvolved persons and your strategy for managing that risk during the flight

Many operators use a standardised checklist or form for Open Category assessments. This is good practice because it ensures consistency across different jobs and pilots.

Building a Safety Case

For Specific Category operations, the CAA may ask you to present a safety case that goes beyond the SORA worksheet. A safety case is a structured argument, supported by evidence, that your operation is acceptably safe.

A strong safety case typically includes your ConOps document, the completed SORA assessment, supporting evidence for each mitigation you claim (such as manufacturer data, test results, or operational records), your operations manual, and your emergency response procedures.

The key is traceability — each claim you make about safety should be linked to specific evidence. If you claim that your aircraft has a reliable parachute recovery system, for example, you should be able to point to the manufacturer's test data and your own maintenance records for that system.

Practical Tips for Your First Risk Assessment

If you are new to commercial operations, start with a clear description of what you plan to do. Many operators make the mistake of trying to write a risk assessment that covers every possible scenario. Instead, focus on your actual planned operations and be specific about the locations, aircraft, and conditions you expect to encounter.

Visit the site before the day of the flight whenever possible. A desktop assessment using maps and aerial imagery is helpful, but there is no substitute for physically walking the area to identify hazards that may not be visible from above — overhead cables, aggressive livestock, or public footpaths that cross your intended flight area.

Document your findings in writing. Even for straightforward Open Category flights, a written record of your risk assessment demonstrates professionalism and provides evidence of due diligence. Keep these records for at least two years.