Once upon a time, I went around the countryside auditing aerodrome safety management systems and dutifully asking SMS-related questions of all and sundry. It didn't matter who they were, I asked them what they knew about the aerodrome's SMS, how they managed risks, and what did they do to make sure everything was being well managed. I didn't ask everyone the exact same questions, like asking the guy mowing the grass how he ensured enough resources are available to manage safety, but I did bang the SMS gong at/to anyone who was around or would listen. I'm not so sure that was the right approach.