AS9100D Certification for Aerospace and Defense Organizations
Suppliers, manufacturers, and service providers working in aviation, space, or defense will almost certainly face a customer request for AS9100 certification at some point and often rely on experienced consultants to navigate the process. This guide covers what the standard actually requires, where it goes beyond ISO 9001, and what a realistic implementation journey looks like for aerospace and defense organizations of any size.
MG Environmental Consulting works with manufacturers and suppliers across regulated industries, including those pursuing AS9100 certification for the first time or preparing for recertification after gaps in their quality management system.
The IAQG OASIS Certified Supplier Directory reported 27,599 certified sites worldwide holding AS9100, AS9110, or AS9120 certifications as of April 2024, a 10 percent increase over the prior year. The United States accounts for 41 percent of that total. What most people do not realize is that 96 percent of those certified companies have fewer than 500 employees, according to data presented at the Americas Aerospace Quality Group Spring 2024 meeting. AS9100 is not a standard that belongs only to primes and Tier 1 contractors.
What AS9100 Is and Why It’s Important
AS9100 is a quality management system standard developed and maintained by the International Aerospace Quality Group (IAQG), an industry body whose membership includes major aerospace organizations across the Americas, Europe, and Asia-Pacific. The current version, AS9100 Rev D, was published in 2016 and incorporates the full structure of ISO 9001:2015 while adding aerospace-specific requirements that reflect the safety criticality, regulatory complexity, and supply chain traceability demands of aviation, space, and defense manufacturing.
The standard addresses quality management across the full aerospace product lifecycle: design and development, production and assembly, installation, and servicing. There are two related standards in the same family: AS9110 for maintenance, repair, and overhaul (MRO) organizations, and AS9120 for distributors and stockists. Each is built on AS9100’s foundation but scoped to the specific risk profile of its market segment.
The IAQG created AS9100 in part because aerospace OEMs and prime contractors were each maintaining their own supplier quality requirements, which created an inefficient and inconsistent patchwork for suppliers serving multiple customers. A single recognized standard reduces duplication and gives buyers a reliable baseline for supplier evaluation.
How AS9100 Differs from ISO 9001
AS9100 incorporates every requirement in ISO 9001:2015. Achieving AS9100 certification automatically satisfies ISO 9001 requirements. The reverse is not true.
The gap between the two standards is where aerospace-specific risk lives. Organizations often underestimate how significant those additions are until they begin the documentation and implementation work.
Additional Requirements Specific to Aerospace
AS9100 Rev D (also known as AS9100D) adds requirements in several areas not addressed or only lightly touched in ISO 9001. These include product safety obligations, where organizations must demonstrate they have identified and documented safety-critical characteristics and implemented controls proportionate to their failure consequences. Configuration management and traceability requirements mean that design authority, approved baseline, and change history must be maintained and demonstrable throughout the product’s lifecycle. AS9100 also requires organizations to address operational risk management in a structured way, not just as a general principle of risk-based thinking.
Counterfeit parts prevention is one of the most operationally consequential additions ISO 9001 Clauses. Clause 8.1.4 of AS9100D requires that organizations establish documented processes for detecting, reporting, and preventing the use of suspected unapproved or counterfeit parts. This requirement extends to supplier flow-down, meaning you’re accountable for what your subcontractors do in this area as well.
Documentation and Traceability Obligations
Compared to ISO 9001, AS9100D places considerably greater emphasis on documented evidence. This isn’t bureaucracy for its own sake. Aerospace auditors and customers need to reconstruct the manufacturing history of a part, understand what specifications governed its production, and confirm that nonconformances were handled correctly. Where ISO 9001 allows flexibility based on organizational context, AS9100 demands structured record-keeping because the consequences of quality failures can be catastrophic.
"Manufacturers that treat certification as a destination tend to struggle after the audit. Those that treat it as a management discipline, one that produces real data about how their processes perform, keep improving year over year. That's where the business value actually lives."
— Puneet Gupta, ISO Consultant, MG Environmental Consulting
Who Needs AS9100 Certification?
Any organization that designs, manufactures, assembles, or services products for use in the aviation, space, or defense markets will typically be required by its customers to hold AS9100 certification. This includes aircraft component and subassembly manufacturers, structural parts fabricators, electronics and avionics suppliers, propulsion system subcontractors, and companies providing special process services such as heat treatment, welding, plating, or non-destructive testing to aerospace primes.
Prime contractors including Boeing, Airbus, Lockheed Martin, Raytheon, and others routinely require AS9100 certification as a condition of supplier qualification. Without it, your organization will typically not be listed in the OASIS (Online Aerospace Supplier Information System) database, which is the primary searchable registry used by aerospace buyers to identify qualified suppliers.
Key AS9100 Requirements on the Shop Floor and in the Design Office
AS9100 has ten clauses, with operational requirements concentrated in Clauses 8 through 10. The areas that generate the most findings in aerospace audits, and that require the most deliberate attention during implementation, are these:
Product Safety and Configuration Management
Clause 8.1.3 requires organizations to identify and document product safety requirements and the controls applied to ensure they are met throughout design and production. Configuration management, addressed in Clause 8.1.2, requires that changes to design, materials, processes, or production tooling are controlled and traceable. In practice this means maintaining design baselines, controlling first article inspection records, and ensuring that engineering changes don’t reach the shop floor without documented authorization.
Counterfeit Parts Prevention
This requirement functions as a supply chain integrity control. Organizations must define how they identify suspect parts, what their response protocol is when suspect material is found, and how they communicate requirements to suppliers. In our experience, many organizations have informal practices in place but lack the documented procedures and supplier flow-down language that auditors expect to see.
Risk Management and Special Requirements
Clause 8.1.1 of AS9100 requires a structured risk management process, distinct from the general risk-based thinking referenced in ISO 9001. Critical items, those characteristics whose failure could affect safety, compliance, form, fit, or function, must be identified and managed with controls appropriate to their severity. Special processes such as welding, brazing, non-destructive testing, and chemical processing require process qualification and validation records demonstrating that the process consistently produces conforming output.
The AS9100 Certification Process Step by Step
Most aerospace manufacturers and suppliers complete AS9100 certification in six to twelve months. Organizations with an existing ISO 9001 QMS may move faster, particularly if their documentation is current and their internal audit program is functioning. Organizations starting from scratch typically need the full range.
Gap Analysis and Scope Definition
Start by defining your certification scope: what products, services, sites, and processes will be covered. Then conduct a gap analysis comparing your current quality management practices against AS9100 Rev D requirements. The IAQG publishes a gap assessment workbook that structures this comparison clause by clause. The gap analysis output should be a clear list of what exists and what needs to be built, not a general impression that things look mostly okay.
QMS Documentation and Implementation
Based on the gap analysis findings, develop or update your quality manual, procedures, work instructions, and forms. In aerospace, several documented procedures are explicitly required by the standard and not optional: these include procedures for configuration management, counterfeit parts control, risk management, first article inspection, and corrective action, among others. Critically, your documentation should reflect how your organization actually operates. Work instructions that describe an idealized process no one follows will not survive an AS9100 audit.
Internal Audit and Management Review
Before engaging an external certification body, conduct a thorough internal audit of your QMS against AS9100 requirements. Internal auditors should be trained and independent from the areas they’re auditing. Findings from the internal audit should be formally documented, reviewed by management, and addressed through corrective actions before the external audit. The management review process, required under Clause 9.3, needs to include QMS performance data and result in documented outputs. A brief meeting with no data and no records will generate a finding from any experienced aerospace auditor.
Stage 1 and Stage 2 External Audits
External certification audits are conducted by certification bodies accredited by organizations such as ANAB (ANSI National Accreditation Board) under the IAQG-approved certification scheme. The Stage 1 audit reviews your documented QMS for conformance to AS9100 requirements. The Stage 2 audit is an on-site assessment verifying that your documented processes are actually implemented and producing objective evidence of effectiveness. Successful completion of both stages leads to certificate issuance, valid for three years, with annual surveillance audits in years one and two.
Select a certification body with demonstrated aerospace industry experience. The competence of individual auditors varies significantly, and aerospace-specific technical background matters in sectors like manufacturing and special processes.
Common Mistakes During AS9100 Implementation
Most implementation failures are organizational, not technical.
The most frequent problem we see is scoping the QMS too narrowly. Organizations sometimes exclude functions like purchasing, engineering, or sales because they feel those areas don’t directly touch the product. AS9100 doesn’t allow that. Supplier control, design authority, and contract review are all within scope, and auditors will verify them.
Creating documentation that reflects a desired state rather than actual operations is the second most common problem. If your operators don’t follow the work instructions, the instructions aren’t your QMS. Write what people do, then work from that baseline to improve.
Treating corrective action as a paper exercise rather than a root cause discipline is a persistent gap. AS9100 requires evidence that corrective actions are effective, not just that they were closed. Auditors will look for recurrence data.
"Companies that survive the first surveillance audit are almost always the ones that built the QMS for their operations, not for the certificate. When the system is designed around real workflows and real failure modes, it holds up. When it's designed around what the auditor wants to see on paper, it unravels fast."
— Puneet Gupta, ISO Consultant, MG Environmental Consulting
Maintaining Your AS9100D Certification After the Audit
AS9100D certificates are valid for three years. Annual surveillance audits are required in years one and two, with a full recertification audit in year three. Organizations that weave their quality management system into normal operating rhythms, closing corrective actions on time, running meaningful internal audits, and using quality data in management decisions, tend to find surveillance audits manageable. Those that treat the system as a document repository that exists only for external audits find the ongoing maintenance unexpectedly burdensome.
The IAQG is actively working on a revised version of the standard, potentially designated IA9100, which may introduce expanded product safety requirements, closer alignment with advanced product quality planning methodology, and a new clause addressing information security within the quality management system. Organizations should monitor IAQG communications as this transition approaches.
“I wanted to share my positive experience with MG Environmental Consulting. They provided exceptional support in helping us achieve our certification, making the entire process remarkably easy and efficient. Puneet, in particular, offered outstanding assistance throughout. I highly recommend MG Environmental Consulting for your business needs; you will not be disappointed.”
— Reggie Singh
What is the Statistics for ISO 9001 Standard?
Did you know that companies implementing ISO 9001 standard save costs ranging from 10% to 30%?
Statistics for ISO 9001 standard states that organizations that implement ISO 9001 often experience cost reductions related to waste and rework. According to the Quality Management Journal, companies report savings ranging from 10% to 30% on operational costs post-implementation.
How MG Environmental Consulting Supports Aerospace and Defense Organizations
MG Environmental Consulting provides AS9100 gap assessments, QMS documentation development, internal auditor training, and pre-audit support for aerospace and defense manufacturers and suppliers. We work with organizations across California and nationally, from job shops and machining centers to systems integrators with complex multi-site scopes.
To speak with a consultant about your AS9100D path, call (510) 332-1321.
