How AS9100 Rev D builds on ISO 9001 — and what aerospace suppliers need to know before choosing a certification path
Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.
The Question Every Aerospace Supplier Asks Eventually
You are ISO 9001 certified — or you are thinking about getting there. Then a prime contractor drops a supplier questionnaire on your desk with one question that changes the conversation: Are you AS9100 certified?
Those four letters carry weight in aerospace. They signal that your quality management system has been evaluated against requirements that go well beyond general manufacturing. Traceability, configuration management, first article inspection, counterfeit parts prevention — these are not optional considerations in aerospace. They are audited requirements.
The difference between AS9100 and ISO 9001 is not just a longer checklist. It is a fundamentally different level of risk tolerance built into the standard itself. Understanding that distinction before you invest in certification is the difference between a smooth implementation and a year of unexpected rework.
This guide breaks down exactly where AS9100 expands on ISO 9001, who needs which standard, and how to navigate certification if you are coming from an ISO 9001 foundation.
⚠️ Not sure where your QMS stands against AS9100 requirements? Most aerospace suppliers don’t fail certification audits because they don’t understand the standard. They fail because they assumed their ISO 9001 foundation covered more than it did. Run a clause-by-clause gap check before you commit to an implementation timeline.
In This Guide
- What AS9100 is and how it relates to ISO 9001
- The four AS9100-specific requirement areas that have no ISO 9001 equivalent
- A clause-by-clause comparison table
- Who needs AS9100 vs. who can stay with ISO 9001
- How to use an existing ISO 9001 certification as a foundation
- Certification cost and timeline comparison
Table of Contents
👉 Start Here — Top Resources for This Topic
- Buy the AS9100 Rev D Standard — ANSI Webstore — Official SAE/AS9100 document. Use code CC2026 for 5% off.
- AS9100 Training — BSI Group — Aerospace-specific lead auditor and implementation courses.
- Buy ISO 9001:2015 — ANSI Webstore — Required reading if you are building your AS9100 foundation on ISO 9001.
What Is AS9100 Rev D?
AS9100 is the quality management system standard for the aerospace, aviation, and defense industries. It is published by SAE International and managed by the International Aerospace Quality Group (IAQG).
Rev D — the current revision — was released in 2016 and aligned AS9100 with the ISO 9001:2015 structure. Every requirement in ISO 9001:2015 is incorporated directly into AS9100 Rev D. The aerospace-specific additions sit on top of that foundation — often embedded within the same clause structure.
The standard uses the term Aerospace Quality Management System (AQMS) rather than QMS — a minor but document-important distinction if your QMS manual language needs to align with the standard.
2026 update: The IAQG is developing IA9100, a globally harmonized successor that will replace regional variants including AS9100 (Americas), EN 9100 (Europe), and JISQ 9100 (Asia-Pacific). Final publication is targeted for Q4 2026 with a 24–36 month transition window. Organizations certifying today should certify to AS9100 Rev D — IAQG guidance confirms this is the correct path now.
For the full scope of AS9100 before comparing it to ISO 9001, see What Is AS9100? — The Complete Guide.
How AS9100 Builds on ISO 9001
ISO 9001:2015 provides the quality management framework. AS9100 Rev D starts there and expands.
| Layer | Standard | What It Covers |
|---|---|---|
| Foundation | ISO 9001:2015 | Quality management system — any industry |
| Aerospace additions | AS9100 Rev D | 100+ aerospace-specific requirements on top |
| Combined | AS9100 Rev D full | Complete aerospace quality management system |
You cannot hold an AS9100 certification without meeting every ISO 9001 requirement. The reverse is not true — ISO 9001 certification does not satisfy AS9100 requirements.
In practical terms: if you are already ISO 9001 certified, your QMS covers roughly 70–75% of what AS9100 requires. The remaining 25–30% is where most implementation effort concentrates — and where most audit findings are issued.
The Four Key Differences Between AS9100 and ISO 9001
1. Product Safety and Risk Management
ISO 9001 requires risk-based thinking throughout the QMS. AS9100 goes further — it requires explicit, documented product safety considerations and assigns responsibility for communicating safety-critical requirements throughout the supply chain.
Where ISO 9001 says “consider risk,” AS9100 says “identify critical items, establish controls for key characteristics, and document how safety requirements flow to every affected process.”
In a fabrication or machining environment, this means identifying which dimensions, materials, or process parameters are safety-critical — and creating documented evidence that those specific requirements are controlled and verified at every step.
Most common finding: Organizations carrying over their ISO 9001 risk register without adding the AS9100-required safety-criticality designation to individual product characteristics.
2. Configuration Management
ISO 9001 has no equivalent requirement. AS9100 requires a formal configuration management process that controls the definition of a product throughout its lifecycle — including design documentation, approved deviations, and change control.
Your QMS must include a documented process for managing engineering changes, maintaining configuration baselines, and controlling which revision of a drawing, specification, or process document applies to any given production lot.
If you manufacture to customer-furnished drawings in aerospace, your configuration management process must trace which revision was active at time of manufacture — and any deviations from that revision must be formally approved.
3. First Article Inspection (FAI) Requirements
AS9100 requires that organizations establish, document, and implement a first article inspection process — verifying that the product realization process can produce conforming product before full production begins.
The governing document for FAI in aerospace is AS9102. AS9100 does not replicate all of AS9102’s requirements, but it does require that an FAI process exists and is maintained. If your prime contractor flows down AS9102 requirements, you need to address those specifics as well.
ISO 9001 has no first article inspection requirement. This is one of the clearest examples of the risk gap between the two standards.
If you are already ISO 9001 certified → review your current first article or pre-production verification process. It likely needs formal documentation, defined acceptance criteria, and records retention aligned with AS9100 before your Stage 1 audit.
4. Counterfeit Parts Prevention
AS9100 requires a documented process to detect and prevent the use of counterfeit or unapproved parts in aerospace products. This includes supplier controls, parts identification verification, and handling procedures for suspect material.
ISO 9001 addresses supplier controls but makes no mention of counterfeit parts. In aerospace, this is not a theoretical risk — counterfeit electronic components, fasteners, and raw materials have caused documented failures. AS9100 treats it as an auditable requirement.
Your QMS must include counterfeit part risk mitigation in the procurement process, suspect parts handling procedures, and evidence that your suppliers understand and comply with the requirement.
AS9100 vs ISO 9001: Clause-by-Clause Comparison
Both standards share the same high-level clause structure (Clauses 4–10). The table below shows where AS9100 adds requirements within that structure.
| Clause | ISO 9001:2015 Requirement | AS9100 Rev D Addition |
|---|---|---|
| 4 — Context | Determine internal/external issues | Add: identify applicable statutory/regulatory requirements for aerospace |
| 5 — Leadership | Top management QMS commitment | Add: communicate importance of meeting aerospace customer requirements |
| 6 — Planning | Risk and opportunity assessment | Add: product safety risk — identify safety-critical items explicitly |
| 7 — Support | Competence, awareness, communication | Add: employee awareness of contribution to product safety and conformity |
| 8.1 — Operations | Plan production/service provision | Add: configuration management, counterfeit parts prevention, FAI process |
| 8.4 — External providers | Supplier evaluation and monitoring | Add: AS9100 flow-down; approved supplier list management |
| 8.5 — Production control | Process controls and identification | Add: key characteristics, critical items, lot/serial traceability |
| 8.6 — Release | Verification of conformity | Add: documented authority for concessions/deviations; objective evidence retention |
| 9 — Performance | Internal audits, management review | Add: trend analysis of quality data; corrective action effectiveness review |
| 10 — Improvement | Nonconformance and corrective action | Add: escape point analysis; prevent recurrence at supply chain level |
Who Needs AS9100 vs. ISO 9001?
You need AS9100 if:
- ✅ You manufacture, overhaul, or maintain aerospace or defense components
- ✅ Your customer is a prime contractor (Boeing, Airbus, Lockheed Martin, Raytheon, L3Harris, etc.)
- ✅ Your purchase orders or supplier agreements specify AS9100 certification
- ✅ You are pursuing DCMA oversight or government contract qualification
- ✅ You are on — or want to be on — an Approved Supplier List (ASL) for an aerospace customer
ISO 9001 alone is sufficient if:
- ✅ You manufacture for non-aerospace industries only
- ✅ Your customer requires ISO 9001 but does not specify AS9100
- ✅ You are a commercial manufacturer considering AS9100 as a future growth target
The gray area — Tier 2 and Tier 3 suppliers:
Not every supplier in the aerospace supply chain is required to hold AS9100. Some Tier 2 and Tier 3 suppliers hold ISO 9001 — but the trend is toward AS9100 flow-down requirements going deeper into supply chains. If your prime contractor has added AS9100 to their supplier qualification requirements in the last two years, that is a signal.
Check the IAQG OASIS database to verify certification status of suppliers you are evaluating — and to understand what your prime contractor is likely to require.
If you are evaluating whether AS9100 applies to your organization → review the supplier flow-down requirements in your prime contractor agreement first. The answer is almost always in the purchase order or the Supplier Quality Requirements (SQR) document.
⚠️ Waiting until a customer audit to discover your AS9100 gaps is a costly mistake. Most findings at Stage 1 audits come from undocumented FAI processes, missing configuration management records, and supplier flow-down gaps — all addressable before the auditor walks in the door.
👉 Run the AS9100 Rev D Gap Assessment now — it takes under 45 minutes →
Can ISO 9001 Certification Serve as a Foundation?
Yes — and it is the most efficient path to AS9100.
If you are already ISO 9001 certified, your QMS infrastructure is in place. Document control, internal audit, CAPA, and management review all carry over. The transition work focuses on the AS9100-specific additions.
Realistic scope of the gap for an ISO 9001-certified organization:
| Area | ISO 9001 Status | AS9100 Gap Work Required |
|---|---|---|
| Document control | Compliant | Minimal — add configuration management layer |
| Risk management | Compliant | Moderate — add product safety and critical item designation |
| Supplier controls | Compliant | Significant — add AS9100 flow-down, approved supplier list, counterfeit prevention |
| Production controls | Compliant | Moderate — add key characteristics, lot/serial traceability |
| First article inspection | Not addressed | New process — build from scratch or formalize existing practice |
| Internal audit program | Compliant | Minimal — add aerospace-specific audit criteria |
Most ISO 9001-certified organizations completing AS9100 gap remediation report 6–12 months of active implementation before Stage 1 audit readiness. Organizations starting from scratch typically need 12–18 months.
If you are already ISO 9001 certified → focus your implementation effort on the four AS9100-specific requirements that have no ISO 9001 equivalent: product safety documentation, configuration management, first article inspection, and counterfeit parts prevention.
Certification Cost and Timeline Comparison
| Factor | ISO 9001 | AS9100 Rev D |
|---|---|---|
| Standard document cost | ~$175 (ANSI Webstore) — or buy AS9100 and ISO 9001 together and save | ~$140 (SAE/ANSI) |
| Implementation timeline (from scratch) | 9–12 months | 12–18 months |
| Implementation timeline (from ISO 9001) | N/A | 6–12 months |
| Stage 1 audit cost | $1,500–$3,000 | $2,000–$4,500 |
| Stage 2 audit cost | $3,000–$8,000 | $5,000–$12,000 |
| Annual surveillance audit | $2,000–$5,000 | $3,000–$6,500 |
| Consultant support (optional) | $5,000–$25,000 | $10,000–$40,000 |
| Certification body options | Wide choice | Must be IAQG-approved |
For a full breakdown by company size and scope, see How Much Does AS9100 Certification Cost?
One critical distinction: AS9100 auditors must be approved through the IAQG certification scheme. Not every ISO 9001 registrar is authorized to issue AS9100 certificates. BSI Group and ISOQAR are both IAQG-approved — BSI Group offers AS9100-specific audit preparation and lead auditor training if you want to build internal competency before your Stage 2 audit. Verify your certification body’s IAQG approval status before engaging.
How to Get Certified: Next Steps
If you are starting from an ISO 9001 foundation:
- Download the gap assessment checklist and work through it clause by clause
If your documentation infrastructure needs rebuilding around the AS9100-specific additions, 9001Simplified’s QMS documentation kits provide the ISO 9001 foundation layer that maps directly into AS9100 implementation — cutting initial document build time by 40–60% compared to starting from blank procedures.
- Identify your critical items — flag which product characteristics carry safety implications
- Build your configuration management process — a documented change control log is a starting point
- Formalize your FAI process — if you already do first article checks informally, document them to AS9102 framework
- Update your supplier controls — add AS9100 flow-down language to purchase orders and supplier questionnaires
- Select an IAQG-approved certification body — get quotes from at least two before committing
- Complete your internal audit against the full AS9100 requirements
- Schedule your Stage 1 audit — confirm documentation readiness before Stage 2 is booked
If you are starting without ISO 9001:
Consider building to AS9100 directly — you will need to meet every ISO 9001 requirement anyway. Starting with ISO 9001 as an intermediate milestone adds cost and time without a corresponding benefit unless your customer base genuinely splits between ISO 9001 and AS9100 requirements.
If under customer pressure to certify quickly → prioritize training and select your certification body before building documentation. Audit scheduling lead times at major certification bodies currently run 2–4 months.
📥 Free Resources
- AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification
- ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
- Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
- Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
📬 Stay Ahead of Your Next Audit
AS9100 auditors find the same gaps year after year — configuration management records, FAI documentation, and supplier flow-down evidence. We track what is actually being flagged in the field and send it directly to your inbox.
Subscribe and get the AS9100 Rev D Gap Assessment Checklist delivered immediately.
FAQ
Is AS9100 the same as ISO 9001?
No. AS9100 contains every requirement in ISO 9001:2015 but adds more than 100 aerospace-specific requirements covering product safety, configuration management, first article inspection, counterfeit parts prevention, and traceability. ISO 9001 is a general-industry standard; AS9100 is specific to aerospace, aviation, and defense.
Can I be certified to both AS9100 and ISO 9001?
AS9100 certification already incorporates all ISO 9001 requirements, so holding an AS9100 certificate demonstrates compliance with both. Many organizations hold a single AS9100 certificate. Some certification bodies will issue both certificates simultaneously if your customer base specifically requires the ISO 9001 certificate by name.
Does ISO 9001 certification help with AS9100 certification?
Yes, significantly. An existing ISO 9001 QMS provides the document control, internal audit, CAPA, and management review infrastructure that AS9100 builds on. Most ISO 9001-certified organizations can reach AS9100 audit readiness in 6–12 months rather than the 12–18 months typically required from scratch.
Who manages AS9100?
AS9100 is published by SAE International and managed by the International Aerospace Quality Group (IAQG), a consortium of aerospace manufacturers including Boeing, Airbus, and Lockheed Martin. Certification auditors must be approved through the IAQG scheme.
What is IA9100 and does it replace AS9100?
IA9100 is the globally harmonized successor to AS9100 currently being developed by the IAQG. It will replace regional variants including AS9100, EN 9100, and JISQ 9100. Final publication is targeted for Q4 2026 with a 24–36 month transition window. Organizations should certify to AS9100 Rev D now — IAQG guidance confirms this is the correct path.
Do all aerospace suppliers need AS9100?
Not all — but the requirement is flowing deeper into supply chains. Tier 1 suppliers to major primes almost universally require AS9100. Tier 2 and Tier 3 suppliers are increasingly seeing it added to supplier qualification requirements. Verify your specific requirements by reviewing your purchase orders, Supplier Quality Requirements documents, and any flow-down clauses from your prime contractor.
How long does AS9100 certification take?
From a standing start with no existing QMS: 12–18 months. From an existing ISO 9001 certification: 6–12 months. Timeline depends on scope, number of sites, and the extent of gap remediation required after your initial assessment.
What is the difference between AS9100 and NADCAP?
AS9100 is a quality management system standard covering the organization’s overall AQMS. NADCAP (National Aerospace and Defense Contractors Accreditation Program) is a process-specific accreditation program covering special processes — heat treatment, NDT, chemical processing, welding, and others. Many aerospace suppliers hold both. They are complementary, not competing certifications.
Not Sure What to Do Next?
🔹 Need the AS9100 Rev D standard document → Buy AS9100 Rev D — ANSI Webstore. Use code CC2026 for 5% off.
🔹 Need training before your audit → AS9100 Lead Auditor and Implementation Courses — BSI Group
🔹 Building your ISO 9001 foundation first → Buy ISO 9001:2015 — ANSI Webstore and review the ISO 9001 Certification Guide before committing to an AS9100 timeline.
The gap between ISO 9001 and AS9100 is real — but it is not insurmountable. Aerospace suppliers make this transition every day. The ones who do it efficiently run their gap assessment first, build their implementation plan around the actual findings, and select a certification body before they start writing procedures. The Standards Navigator covers every step of that process. Start with the gap assessment — everything else follows.
AS9100 vs ISO 9001: The Gap Is Closeable. Start with the Right Information.
The aerospace suppliers that struggle with AS9100 transition are almost always the ones working from assumptions — assuming their ISO 9001 foundation covers more than it does, assuming FAI is informal enough to pass, assuming their supplier flow-down language is sufficient.
The ones that pass their first AS9100 Stage 1 audit without major findings are the ones who ran the gap assessment before they called a consultant.
At The Standards Navigator, AS9100, ISO 9001, and the full aerospace compliance landscape are covered in plain-language, field-level detail — from the standard itself to implementation strategy, audit preparation, and certification body selection.
👉 Get updates on aerospace quality standards, implementation guidance, and compliance insights delivered directly.
👉 Be first to access new AS9100 guides, checklists, and tools as they publish.
Subscribe below to stay ahead.
The Standards Navigator — Industrial Compliance. Clearly Explained.
