aerospace QMS - The Standards Navigator

BSI AS9100 Training Review: Is It Worth It for Small Manufacturers in 2026?

AS9100 doesn’t require a specific training course — it requires competent auditors. This review breaks down what BSI’s AS9100 training actually covers, its pros and cons against other providers, realistic cost ranges, and a five-scenario framework for deciding whether formal training is the most efficient path for your shop.

AS9100 doesn’t require you to buy a training course — it requires competent people. Here’s how to figure out the most efficient path to get there

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

AS9100 Doesn’t Require a Training Course. It Requires Competent People.

Nearly every training provider will tell you their course is essential. Here’s what the standard itself actually requires: it doesn’t name BSI, ISOQAR, or anyone else. It requires that your internal auditors be competent — genuinely capable of planning, conducting, and reporting an effective audit against AS9100.

That leaves you with a real question, not a marketing one: is formal BSI AS9100 training the most efficient way for your shop to establish that competence, or is there a faster, cheaper path that gets you there just as well?

This isn’t a promotional writeup for BSI’s course catalog. It’s a decision framework for figuring out which path fits where your shop actually stands — and what that path costs.

From the Floor: I’ve sat in on the decision more than once — which employees get sent to formal standards training and which get handed the standard and told to figure it out. The pattern I’ve seen holds regardless of which standard is involved: the people who come back and actually change how audits get run aren’t the ones who sat through the most polished course. They’re the ones who used the class time to work through their own facility’s real nonconformances instead of generic case studies. That’s the filter I’d apply before signing off on any training spend — including this one.

If you haven’t run a gap assessment against AS9100 Rev D yet, that’s the decision that should come before a training decision — not after. Operations managers who evaluate training before understanding their QMS gaps may be solving the wrong problem first.

👉 Before you spend a dime on training, find out exactly where your QMS stands. Run the AS9100 Rev D Gap Assessment Checklist — a 74-item, 12-section clause-by-clause tool that shows you precisely which sections need work before you decide who needs training and in what format.

In This Guide:

What BSI’s AS9100 training actually covers, course by course
The honest pros and cons of BSI’s training — and how it compares to other providers
What it costs — and how BSI’s pricing model actually works
A decision framework: which competence-building path fits your shop
A cost comparison: formal training vs. experience-based routes vs. skipping it
What training actually establishes, and where it doesn’t help
FAQ: certificates, recertification, and whether training is technically required

👉 Start Here: Where to Look Into AS9100 Training

If your shop is evaluating formal AS9100 training, BSI Group is one of the established providers worth comparing against — its AS9100 training portfolio covers requirements training, internal auditor training, and lead auditor training. Review BSI’s AS9100 training course options.

If you haven’t bought a current copy of the standard yet, check whether the current course fee includes a copy of the applicable standard. If it doesn’t, budget separately for your copy before class starts. Purchase the current AS9100/SAE standard through ANSI Webstore.

What BSI’s AS9100 Training Actually Covers

BSI’s AS9100 training isn’t a single course — it’s a track, and small manufacturers tend to only need the first one or two levels of it.

The entry-level course covers the AS9100 Rev D requirements themselves: what each clause demands, how the aerospace-specific additions build on the ISO 9001 foundation, and how the standard maps to your existing documentation. This is the right starting point if your team understands ISO 9001 already but has never worked with the aerospace-specific clauses — configuration management, first article inspection, counterfeit parts controls, and the rest.

The internal auditor course goes a step further. It’s built around conducting audits against AS9100 and AS9101, and it typically runs as a multi-day, instructor-led format — in person or live online — with practical audit exercises rather than lecture alone. This is the course that matters most if you’re planning to run your own internal audit program instead of outsourcing every internal audit to a consultant.

Beyond that sits lead auditor training, which is usually more than a small shop needs unless someone is being developed to lead aerospace audits or pursue auditing professionally.

If you are new to AS9100 and still building your quality management system → start with the requirements-level course, not internal auditor training. You can’t audit effectively against clauses your team doesn’t understand yet.

BSI AS9100 training path showing requirements, internal auditor, and lead auditor training levels — BSI AS9100 training offers different levels of learning, from understanding AS9100 requirements to developing internal and lead auditor skills.

Pros and Cons of BSI AS9100 Training

What BSI Does Well

Established global training and certification organization with a broad aerospace training portfolio
Full AS9100 course catalog spanning requirements, internal auditor, and lead auditor levels
Both live online and in-person delivery formats available
Course completion certificates from an established training provider
In-house delivery available for training multiple employees at once

Potential Drawbacks

Pricing isn’t published upfront for most course types — expect to go through a quote request
May run higher than some smaller or regional training providers, depending on format and group size
Course value depends heavily on where your team already stands — a requirements-level course won’t add much for an already-experienced auditor, and an internal auditor course won’t help a team with no prior standard familiarity
Small shops adding AS9100 to an existing ISO 9001 program may only need the requirements-level course, not BSI’s full auditor track

How BSI Compares to Other AS9100 Training Providers

BSI isn’t the only organization offering AS9100 training. Smaller, regional, and boutique training providers also run AS9100 requirements and internal auditor courses, and sometimes at a lower per-seat cost than a multi-national provider like BSI. A provider with an established aerospace training portfolio may offer a familiarity advantage, but don’t assume the provider’s name substitutes for demonstrated auditor competence.

If you’re comparing multiple providers, weigh course content and instructor experience against price alone. An aerospace-specific internal auditor course taught by an instructor with real AS9100 audit experience is worth more than a generic quality-auditing course relabeled for aerospace. Ask any provider — BSI included — how their course specifically addresses the AS9100-unique clauses (configuration management, counterfeit parts, first article inspection) rather than treating AS9100 as ISO 9001 with an extra chapter.

What It Costs — and How BSI’s Pricing Model Works

This is the part that frustrates small manufacturers the most: BSI’s course pages typically direct buyers toward public-course enrollment for individual seats and a separate quote process for private or in-house training, so pricing can vary by course, delivery format, and group size rather than sitting on a single published price list.

That’s not unusual for the industry, and it also means published cost figures age fast. A rough, non-exhaustive comparison across a few established AS9100 training providers suggests 2-day internal auditor courses can run anywhere from roughly $1,000 to $1,600+ per seat depending on provider, country, and delivery format — treat this as an illustrative snapshot rather than a sourced market rate, and confirm current pricing directly with the provider before budgeting.

A practical consideration: shops training more than one or two people are generally better served requesting an in-house quote for the whole quality team rather than booking individual seats one at a time — it’s worth comparing against per-seat pricing, and it often means the session gets built around your actual facility’s documentation instead of a generic case study.

Two things push the real cost higher than the course fee alone:

Check whether the standard itself is included. Course fees don’t always cover it — if it isn’t, budget separately for your copy.
Travel and time away from the floor add up fast for in-person formats — live online delivery can be a practical choice for smaller shops trying to control the total cost.

If your facility hasn’t priced out the full certification path yet — training, gap assessment, documentation, audit fees — that’s worth doing before training in isolation. See the full breakdown of what AS9100 certification actually costs.

Formal Training vs. Alternatives: A Straight Comparison

Approach	What You Get	Best For	Typical Cost Range
BSI formal training (requirements or internal auditor course)	Structured instruction, practical audit exercises, recognized course certificate	Shops building an internal audit program from scratch or preparing for first-time AS9100 certification	Varies by provider, format, country, and group size — confirm current pricing directly before budgeting
Experience-based route (auditor learns on the job, under an existing certified internal auditor)	Practical familiarity, no course fee	Shops that already have at least one AS9100-experienced auditor on staff to mentor others	Time cost only — no direct training fee
Documentation kit + self-study (no formal course)	Templates and structure, but does not by itself establish internal-auditor competence	Shops still in the early documentation-build phase, not yet auditing	Cost of the documentation kit only

If you are preparing for your first AS9100 certification and have no one on staff with prior aerospace QMS audit experience → formal training is one of the strongest ways to build and demonstrate the required auditor competence. Self-study can contribute to that competence, but you’ll need a defensible way to show your internal auditor is capable of planning and conducting effective audits.

If you are already ISO 9001 certified and simply adding the AS9100-specific clauses → your existing internal auditors may only need requirements-level training rather than repeating a full internal auditor course.

The Real Question: What’s the Most Efficient Path to Auditor Competence?

Not every shop needs the same answer. Where you land depends on what competence you already have on staff — not on whether training is generically “a good idea.”

No aerospace experience and no internal audit experience on staff → Formal training is highly valuable here. This is the shop with the least existing competence to draw on, and a structured course is one of the more direct and defensible ways to build it.

Strong QMS experience and already-trained internal auditors, but new to aerospace → Requirements-level training is often the better starting point, not a full internal auditor course. Your team already knows how to audit — they need the aerospace-specific clause knowledge, not a repeat of general auditing fundamentals.

An experienced aerospace auditor already on staff → You may not need to send everyone through the same course. That person can mentor others through the aerospace-specific requirements, and only newer team members may need formal training.

Multiple employees need the same training → Compare public-seat pricing against in-house delivery before booking. In-house sessions built around your own facility’s documentation are often the more efficient option once you’re training more than one or two people.

No mature QMS yet → A gap assessment and requirements-level understanding should come before loading anyone into auditor training. Sending a team through internal auditor training before the documentation exists may mean teaching them to audit against requirements you haven’t fully built out yet.

⚠️ Common mistake: sending a single employee to lead auditor training as a first step, before the shop has even completed its documentation. That course assumes working familiarity with the standard already in place — it’s the wrong entry point for a shop still building its QMS.

The ROI Question: What Training Actually Establishes

BSI AS9100 training and auditor competence comparison showing training knowledge, audit methods, experience, and demonstrated ability — BSI AS9100 training can help build auditor competence, but completing a course does not replace demonstrated auditing ability.

Training helps establish auditor competence — it doesn’t replace the underlying requirement to actually demonstrate that competence. That distinction matters more than the sales pitch usually lets on: an internal auditor doesn’t need a specific course, they need to be genuinely capable of planning and conducting an effective audit, however they got there.

Where training earns its cost is in areas like configuration management, counterfeit parts controls, and first article inspection — areas where generic ISO 9001 knowledge may not transfer cleanly to aerospace-specific requirements. An internal auditor who’s never been walked through these clauses in a structured setting is more likely to miss a gap during their own internal audit, which means the external auditor finds it first.

That said, training doesn’t fix a documentation problem. If your procedures don’t exist yet, sending someone to auditor training won’t create them — it just teaches someone how to audit against requirements you haven’t built out. For many first-time shops, the practical sequence is gap assessment, initial QMS documentation development, targeted training, then internal audits. Requirements-level training can make sense earlier; internal auditor training becomes more valuable once there’s an actual system to audit.

👉 Not sure if your documentation is even ready for an internal auditor to work against? Run the AS9100 Rev D Gap Assessment Checklist first — it takes less than an hour and tells you exactly which of the 12 major sections still need work.

✅ Quick Checklist: Is Your Shop Ready to Book Training?

✅ Your AS9100-specific documentation is drafted, even if not finalized
✅ You’ve identified who will actually conduct internal audits going forward
✅ You know whether you need requirements-level training, internal auditor training, or both
✅ You’ve priced in-house/group rates against individual seat pricing for your team size
✅ You’ve budgeted separately for the standard itself, since course fees typically don’t include it
⚠️ If you can’t check the first two boxes, reconsider booking internal auditor training yet — the timing may be premature

BSI AS9100 training roadmap showing gap assessment, QMS development, targeted training, internal audit, and certification readiness — A practical AS9100 training sequence connects QMS development, targeted training, internal auditing, and certification readiness.

FAQ

Is AS9100 training legally required for certification?

No. AS9100 does not prescribe a specific training provider or course for internal auditors. The organization is responsible for ensuring its auditors are competent to perform effective audits, and IAQG does not specify a particular 9100-series training course as mandatory. Formal training is one common way small shops establish and document that competence, but it isn’t the only path if you already have qualified aerospace audit experience in-house.

How long does BSI’s AS9100 internal auditor course take?

Multi-day formats are standard across the industry for this course level, typically delivered across two to three consecutive days, whether in person or through live online instruction. Confirm current course length and format directly with BSI, since schedules and formats are updated periodically.

Does the training include a copy of the AS9100 standard?

Course inclusions vary by provider and delivery format. Confirm directly with BSI whether the applicable standard is included before enrolling — if not, budget separately for a current copy.

Can one person get trained and cover the whole shop’s internal audit needs?

For a very small operation, one competent internal auditor may be enough, provided the audit program can maintain appropriate objectivity and coverage — auditors generally shouldn’t audit their own work or processes they’re directly responsible for. Larger shops or those with multiple product lines often train two or more people so audits aren’t bottlenecked by one person’s schedule or independence limits.

Is virtual training as effective as in-person for AS9100?

For the requirements-level course, virtual formats work well. For internal auditor training, in-person formats offer more natural opportunities for hands-on practice exercises, though live online formats with interactive workshops are a reasonable substitute if travel cost or time away from the floor is the deciding factor.

Does BSI training count toward recertification of an existing auditor?

Course-to-course requirements vary by prior certification and course provider. If your auditor already holds a credential from a different accredited provider, confirm directly with BSI whether their program requires a re-sit or a full course before enrolling.

What’s the difference between BSI’s requirements course and internal auditor course?

The requirements course teaches what the standard demands, clause by clause. The internal auditor course teaches how to plan, conduct, and report an audit against those requirements — it assumes the requirements-level knowledge already exists.

Is ISOQAR an alternative for AS9100 training?

No — as of publication, ISOQAR does not offer AS9100-specific training courses. For AS9100 training specifically, BSI is the option covered in this review; confirm current course catalogs directly with any provider before enrolling, since offerings can change over time.

📥 Free Resources

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

Not Sure What to Do Next?

🔹 Still researching whether formal training makes sense for your shop? Start with the AS9100 Rev D Gap Assessment Checklist to see exactly where your QMS stands before you commit a training budget.

🔹 Ready to move forward with a specific course? Compare BSI’s current AS9100 training course options and request an in-house quote if you’re training more than one person.

🔹 Need the standard itself before class starts? Buy the current AS9100/SAE standard through ANSI Webstore.

🔹 Still deciding on a certification body altogether? See how the major players stack up in AS9100 Certification Bodies — Ranked & Reviewed.

Training is one line item in a much bigger certification budget, and it’s only worth spending on once the rest of your QMS groundwork is in place. Get the sequence right, and training becomes the thing that keeps an auditor from finding a gap your own team should have caught first. At The Standards Navigator, that’s the entire point — clear, practitioner-level guidance on what actually moves the needle toward certification, without the sales pitch.

Stay Ahead of Aerospace Audit Requirements

A common Stage 1 problem isn’t simply misunderstanding AS9100 — it’s discovering that training, documentation, or internal audit readiness isn’t as mature as the organization assumed.

Shops that treat certification as a sequence — documentation, then training, then internal audits — walk into Stage 1 with far fewer surprises than shops that bolt on training as an afterthought once a customer starts asking questions.

The Standards Navigator covers AS9100 certification, training decisions, and aerospace supplier compliance in plain, practitioner-level language — no fluff, no sales pitch.

👉 Get updates on AS9100 certification and aerospace supplier compliance
👉 Be first to access new gap assessment tools and aerospace QMS resources

Industrial Compliance. Clearly Explained.

AS9100 Internal Audit Process: A Step-by-Step Guide for 2026

AS9100 Clause 9.2 requires more than an ISO 9001 internal audit program — customer and regulatory requirements have to be built into your audit criteria, and results have to reach management. This guide breaks down the six-part audit workflow, what a real internal audit checklist should cover, how findings feed into management review and AS9101 reporting, and the objectivity gap that trips up small aerospace quality teams.

How aerospace suppliers plan, conduct, and close out a Clause 9.2-compliant internal audit program

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

Your Internal Audit Program Is What Helps Keep Your AS9100 Certification Credible

An AS9100 certificate doesn’t prove your QMS is working. Your AS9100 internal audit process helps prove that it is.

Most operations managers treat internal audits as a compliance formality — something to schedule before the registrar shows up, not something that actually finds problems. That approach works right up until a surveillance audit surfaces a nonconformance your own internal audit should have caught six months earlier. At that point, the registrar isn’t just questioning the finding. They’re questioning whether your internal audit program is real.

If you’re already certified and running audits on autopilot, or preparing for your first AS9100 certification and building this process from scratch, the standard is specific about what “real” looks like. Clause 9.2 lays out exactly what your internal audit program has to prove, and AS9100 Rev D adds requirements ISO 9001 doesn’t have.

From the Floor: I’ve sat in gap assessment meetings where the documented internal audit schedule looked airtight on paper — every process, every quarter, neatly assigned. Then you pull the actual audit records and half of them are checklist walk-throughs with no objective evidence attached, no findings, no closure dates. An auditor doesn’t need long to spot the difference between an internal audit program that’s running and one that’s just being logged.

👉 Before you build or rebuild your internal audit program, run the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause tool that shows you exactly where your current audit coverage has gaps before an external auditor finds them for you.

In This Guide

What Clause 9.2 actually requires, and where AS9100 goes beyond ISO 9001
The six-step internal audit process defined in Clause 9.2.2
How internal audit findings feed into management review and AS9101 reporting
A ready-to-use internal audit checklist structure
Common mistakes that turn a real audit program into a paperwork exercise
Where to buy the standard and where to get trained on running compliant audits

👉 Start Here (Top Resources)

AS9100D — ANSI Webstore — the current edition of the standard, including the exact Clause 9.2 language your audit program has to satisfy. Use coupon code CC2026 for 5% off through December 31, 2026.
ISO 19011:2018 — ANSI Webstore — the audit guidelines standard referenced directly by AS9100 internal audit resources; worth owning if you’re training internal auditors.
AS9100 Training — BSI Group — for teams that need to formally qualify internal auditors on AS9100-specific requirements, not just general ISO 9001 audit technique.

What Clause 9.2 Actually Requires

Clause 9.2.1 requires you to conduct internal audits at planned intervals to determine whether your quality management system conforms to three things: your own organization’s requirements, the AS9100 standard itself, and the QMS is effectively implemented and maintained. That’s the ISO 9001 baseline.

AS9100 Rev D builds directly on that clause text. Under the standard’s Annex L structure, the aerospace-specific language is written straight into Clause 9.2.1 itself: your organization’s requirements for internal audit purposes must explicitly include customer requirements and applicable statutory and regulatory requirements — not just your internal procedures. That’s not guidance layered on top of ISO 9001; it’s part of the clause language you’re audited against. Audit results also have to be reported to relevant management, not just filed.

Most common finding: Internal audit programs that check ISO 9001 conformance thoroughly but never verify against a specific customer’s flow-down requirements or purchase order quality clauses. That’s a Clause 9.2 gap I commonly see when aerospace suppliers transition from ISO 9001 to AS9100.

ISO 9001 Baseline (Clause 9.2)	Aerospace-Specific Clause 9.2 Language (Annex L Addition)
Conformance to the organization’s own QMS requirements	Must explicitly include customer, statutory, and regulatory requirements
Conformance to the standard	AS9100 Rev D requirements, including its aerospace-specific additions
Effective implementation and maintenance	Results must be reported to relevant management, feeding directly into management review

If you are preparing for your first AS9100 certification → build your audit criteria around customer and regulatory requirements from day one, not as an afterthought once ISO 9001 conformance is handled.

👉 Need to see the exact Clause 9.2 language for yourself before you build your audit program around it? Get the current AS9100D edition from the ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.

The AS9100 Internal Audit Process: A Six-Part Workflow Built From Clause 9.2.2

AS9100 audit program showing risk-based planning, audit frequency, previous findings, and an annual internal audit schedule in an aerospace manufacturing facility — A risk-based AS9100 audit program considers process importance, changes, previous findings, and risk when establishing the internal audit schedule.

Clause 9.2.2 lays out the requirements your audit program has to satisfy — the audit program itself, planning and conduct, auditor objectivity, reporting, corrective action, and retained documented information. Read together, that maps cleanly onto six practical steps, and an auditor will ask about all six.

1. Audit Program

Establish, implement, and maintain an audit program that identifies frequency, methods, responsibilities, planning requirements, and reporting. This has to account for the importance of the processes involved, changes affecting your organization, and the results of previous audits — not a static calendar you set once and never revisit.

2. Audit Criteria and Scope

Define what standard, procedure, or requirement each audit is measured against, and how far that audit reaches — which processes, which shifts, which locations if you run more than one facility.

3. Auditor Selection

Select auditors and conduct audits in a way that ensures objectivity and impartiality. Nobody audits their own work. On a small quality team this is often the hardest requirement to satisfy on paper — it usually means cross-training auditors across departments so a floor supervisor never audits the process they run.

4. Reporting Results

Audit results go to relevant management — not just the quality manager’s file. If a finding touches production scheduling, engineering, or purchasing, that function’s management needs visibility into it.

5. Corrective Action

Take appropriate correction and corrective action without undue delay when nonconformities are found. “Without undue delay” is intentionally vague in the standard, but in practice, your corrective action process should establish a documented target closure date appropriate to the severity of the finding — an open-ended promise to “look into it” won’t hold up as objective evidence of an effective process.

6. Retained Documentation

Keep documented information as evidence of the audit program’s implementation and the audit results. These are among the first records an external auditor is likely to examine: not your procedure, but your actual audit records — schedules, checklists, findings, objective evidence, and closure dates.

👉 If your audit records are more calendar than evidence, that’s the gap that surfaces during a surveillance audit — not a certification audit. Run the gap assessment checklist against your current program before your next registrar visit, not after.

AS9100 internal auditor reviewing work instructions, actual work, inspection records, and objective evidence on an aerospace manufacturing floor — An effective AS9100 internal audit follows the evidence from documented procedures to actual work, inspection records, and process effectiveness.

What Should an AS9100 Internal Audit Checklist Include?

A checklist built only around ISO 9001 clause conformance misses the aerospace-specific scope Clause 9.2.1 actually requires. Use this as the framework for what each internal audit needs to cover:

Audit Area	What the Auditor Should Verify
Process requirements	Applicable AS9100 clauses and internal procedure requirements
Customer requirements	Purchase order and contract flow-down requirements
Regulatory requirements	Applicable statutory and regulatory obligations
Objective evidence	Actual records and direct observations, not verbal confirmation
Process effectiveness	Whether the process is achieving its intended result, not just running
Findings	Nonconformities clearly supported by objective evidence
Corrective action	Root cause analysis, corrective action, and verification of effectiveness
Follow-up	Closure evidence and confirmation the fix actually worked

If your operation also carries program-specific deliverables under AS9145 (APQP and PPAP), extend your audit criteria to those documents too — see AS9145 Explained for what’s typically in scope. And if any of your special processes are already covered under NADCAP, coordinate your internal audit scope so you’re not duplicating external oversight — NADCAP vs AS9100 breaks down where the two programs overlap and where they don’t.

AS9100 corrective action workflow showing audit finding, containment, root cause analysis, corrective action, effectiveness verification, and closure — An AS9100 corrective action is not complete until the organization verifies that the action worked and documents the results.

How Internal Audit Results Feed Into Management Review

Internal audit findings aren’t the end of the process — Clause 9.3 requires them as an input into management review. Corrective actions from internal audits, along with trending data like recurring nonconformities, similar issues across multiple processes, and top process concerns, should show up as agenda items top management actually discusses. That requirement comes from your QMS’s management review clause, not from any external audit form.

Separately, when your registrar conducts your certification or surveillance audit, results get documented on AS9101 — the standardized audit report form referenced by SAE International and logged in the IAQG OASIS database. AS9101 doesn’t dictate what your internal management review has to look like. But an external auditor completing that form will ask to see your management review minutes, and if internal audit trends never make it into those minutes, that gap is easy to spot — not because AS9101 requires a specific format, but because the disconnect itself signals the management review process isn’t functioning as intended.

If you are already ISO 9001 certified and adding AS9100 → your internal audit process likely doesn’t need to change structurally. What changes is audit criteria — you now have to audit against customer and regulatory requirements your ISO 9001 program never had to touch, and management review needs a direct line from audit findings to those aerospace-specific requirements.

Objection: “We Don’t Have Staff to Audit Objectively”

This is the most common pushback on small aerospace shops — a 15-person quality team can’t realistically avoid people auditing processes adjacent to their own work.

It’s a real constraint, but it’s manageable without adding headcount. Cross-train two or three people across departments so each can audit outside their own process. A machinist trained as an internal auditor can objectively audit the receiving inspection process; the receiving inspector can objectively audit machining documentation. Registrars don’t require a dedicated audit department — they require evidence that whoever conducted the audit had no stake in the outcome. Document that logic in your audit program procedure, and it holds up.

Quick Internal Audit Readiness Checklist

✅ Audit program covers all applicable processes at a frequency justified by risk and past findings

✅ Audit criteria explicitly reference customer purchase order requirements, not just internal procedures

✅ Auditors are demonstrably independent of the process they’re auditing

✅ Findings include objective evidence — not just a pass/fail checkbox

✅ Corrective actions have documented target closure dates

✅ Audit results appear as a distinct agenda item in management review minutes

⚠️ If any of these are missing, that’s the gap a registrar finds before you do

Frequently Asked Questions

What does Clause 9.2 of AS9100 actually require?

Clause 9.2 requires organizations to run internal audits at planned intervals to confirm the QMS conforms to the organization’s own requirements — which under AS9100 must include customer, statutory, and regulatory requirements — conforms to the AS9100 standard itself, and is effectively implemented. Results must be reported to relevant management.

How often do AS9100 internal audits need to happen?

The standard doesn’t set a fixed interval. Frequency has to be justified by the importance of the process, the results of previous audits, and any changes affecting the organization. Higher-risk processes — special processes, product safety-critical operations — typically warrant more frequent audits than lower-risk administrative processes.

Can one person run the entire internal audit program on a small team?

Generally, yes, as long as objectivity is maintained. The requirement is independence from the process being audited, not a minimum team size. On very small teams this can require creative scheduling or occasionally bringing in an outside auditor for processes where no internal person can honestly claim independence.

Do internal audit findings have to be reported to the registrar?

No. Internal audit results are reported to your own relevant management, not to the certification body. The registrar reviews your internal audit records and evidence of corrective action during surveillance and recertification audits — they don’t need real-time reporting.

What’s the difference between an internal audit and the AS9101 certification audit?

Your internal audit program is something you run yourselves, on your own schedule, against your own and the standard’s requirements. AS9101 is the standardized form your registrar uses to document the results of your external certification and surveillance audits, which then get logged in the IAQG OASIS database. A strong internal audit program is largely what prepares you to pass the AS9101-documented external audit cleanly.

Can internal audits be conducted remotely?

The standard doesn’t prohibit it, and many quality teams do conduct document reviews and some process audits remotely. Physical, in-person audits are still strongly preferred for shop floor processes where objective evidence — traveler stamps, calibration tags, first article records — needs to be directly observed rather than described.

What happens if our internal audit program has gaps when the registrar shows up?

It depends on severity and pattern, and classification is ultimately the auditor’s call based on the evidence in front of them. An isolated missed audit interval on a low-risk process may be treated differently from a persistent systemic failure, depending on the evidence and the auditor’s assessment. A pattern of audits with no objective evidence, no findings ever recorded, or no connection to management review calls into question whether the QMS’s self-monitoring is functioning at all — which is the kind of gap that tends to draw closer scrutiny.

Is a documented procedure enough, or do we need to prove the audits actually happened?

A procedure alone isn’t enough. Registrars expect to see the records: audit schedules, completed checklists with objective evidence, documented findings, and closure evidence for corrective actions. The procedure describes what you’re supposed to do — the records prove you did it.

📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item, clause-by-clause checklist for aerospace suppliers assessing their QMS, including internal audit coverage, before certification.
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.
ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system.
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.

Not Sure What to Do Next?

🔹 Still researching what AS9100 internal audits require? Start with the What Is AS9100? pillar guide, then read AS9100 vs ISO 9001 to see exactly which requirements are new to you if you’re already ISO 9001 certified.

🔹 Ready to build or fix your internal audit program? Run the AS9100 Rev D Gap Assessment Checklist against your current audit records, then check the AS9100 Implementation Timeline to see where audit program maturity fits into your certification schedule.

🔹 Need to buy the standard or get auditors trained? Get the current edition from the ANSI Webstore with code CC2026 for 5% off, and see AS9100 Certification Bodies: Ranked & Reviewed for AS9100 auditor training through BSI Group.

A weak internal audit program is one of the most common reasons a QMS that looks compliant on paper fails to hold up in front of a registrar. Build the six-step process the standard actually asks for, put real objective evidence behind every audit, and your surveillance audits stop being a surprise. That’s what The Standards Navigator’s AS9100 coverage is built around — the requirements as they’re actually enforced, not just as they’re written.

Before You Go

Most aerospace suppliers don’t lose points on AS9100 audits because they misunderstand Clause 9.2 — they lose points because their internal audit program looks good on paper and falls apart under objective evidence review.

Shops that treat internal audits as a real management tool catch their own nonconformances before a registrar does. Shops that treat them as a scheduling formality find out the hard way, usually during a surveillance audit, that “completed” and “effective” aren’t the same thing.

The Standards Navigator covers the AS9100 requirements aerospace suppliers actually get audited against — not just the clause text, but how registrars interpret it in practice.

👉 Get updates on AS9100 implementation and internal audit best practices

👉 Be first to access new aerospace gap assessment tools and checklists

Industrial Compliance. Clearly Explained.

AS9100 Traceability Requirements: What Clause 8.5.2 Demands in 2026

Meeting AS9100 traceability requirements takes more than basic ISO 9001 identification — it requires documented traceability driven by customer, regulatory, and risk requirements. This guide breaks down the five components of Clause 8.5.2, acceptance authority media controls, configuration management, and the audit findings that repeat most often.

A practical breakdown of identification, traceability, and acceptance authority media requirements for AS9100-certified suppliers

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

When a Traceability Gap Grounds an Audit

Meeting AS9100 traceability requirements isn’t about paperwork for its own sake — it’s about being able to answer, on the spot, where a part came from. A missing serial number on a routing traveler doesn’t sound like much. Until an auditor asks you to trace a fastener lot back to its heat certification, and nobody in the building can produce it in under an hour.

That’s not a paperwork problem. That’s a finding — and depending on the part, it can be a stop-ship finding.

Aerospace traceability isn’t optional documentation. It’s the mechanism that lets a supplier prove, on demand, that every part on the shelf can be tied to a specific material lot, a specific operator, a specific inspection result, and a specific disposition. If you’re already ISO 9001 certified, you have identification and traceability controls. AS9100 asks for more — and the “more” is exactly where suppliers get flagged.

If you’re evaluating whether your current system meets AS9100 Rev D Clause 8.5.2, or you’re building traceability from scratch ahead of a Stage 1 audit, this breaks down what the clause actually requires, what auditors look for beyond the paperwork, and where most QMS builds fall short. AS9100 is published and maintained by SAE International, so the full clause text is worth reading directly rather than relying on secondhand summaries — including this one.

From the Floor: I ran operations at Baker Hughes Jacksonville on the valve and energy manufacturing side — 500 employees, and every valve body that left that facility had to trace back to a heat lot and a material cert. We weren’t AS9100 certified, but the discipline is identical: if a customer or regulator asked which heat of steel went into a specific valve six months after shipment, we had to answer it in minutes, not days. The suppliers who struggle with AS9100 traceability today are usually the ones who built that system as a spreadsheet instead of a process. It falls apart the first time volume increases or someone leaves.

Most operations managers underestimate how much this costs them until an auditor tests it live. Before your next audit, run this gap check on your identification and traceability controls →

Get the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause checklist built specifically for aerospace suppliers preparing for certification or surveillance audits.

In This Guide

What AS9100 Clause 8.5.2 requires, in plain language
The five components of identification and traceability under Rev D
Acceptance authority media (AAM) controls and why auditors probe them
Configuration management’s role in traceability
Supplier and sub-tier traceability flow-down
Common findings auditors cite in this area
How traceability connects to counterfeit parts prevention
FAQ: traceability depth, record retention, and consumables

👉 Start Here (Top Resources)

Get the AS9100 Rev D Standard from ANSI Webstore — the official SAE/AS9100 document, required reading before you build or revise traceability procedures. Use code CC2026 for 5% off through December 31, 2026.
9001Simplified ISO Documentation Kits — pre-built procedure templates for identification, traceability, and configuration management, so you’re not writing clause 8.5.2 procedures from a blank page.
BSI Group AS9100 Training — auditor-led training on Rev D requirements, useful if your internal auditor has never dug into traceability specifically.

AS9100 Traceability Requirements: What Clause 8.5.2 Actually Says

Infographic illustrating AS9100 traceability requirements with a complete aerospace traceability chain from raw material certification and heat lot identification to serialized finished components and customer delivery. — This infographic shows how AS9100 traceability requirements connect every stage of production, from raw material certification through final delivery, to maintain complete product traceability.

AS9100 Rev D Clause 8.5.2, Identification and Traceability, layers aerospace-specific requirements on top of the base ISO 9001:2015 clause. In plain terms: wherever it applies, the organization has to identify process outputs well enough to confirm they meet requirements, and it has to track the status of those outputs against inspection and testing milestones as production moves forward. Where stamps, electronic signatures, or passwords are used to indicate acceptance, those tools need documented controls governing who holds them and how they’re managed.

Where a customer or regulation makes traceability a requirement, the organization has to assign unique identification to process outputs and keep the records needed to maintain that traceability over time — not just at the point of manufacture, but for as long as the part or record needs to be reconstructable.

Put plainly: an auditor at a machine shop or a fabricator building to print doesn’t need to trace every part back to raw material by default. An AS9100-certified aerospace supplier more often does, because flight-safety and critical parts, customer contracts, and regulatory flow-downs frequently push the requirement that far — but the depth required is still driven by those specific requirements, not by the clause on its own. Two suppliers making different parts can have very different traceability depth and both be fully compliant.

If you are already ISO 9001 certified → the gap isn’t the concept of traceability. It’s the depth, and where that depth comes from. ISO 9001 asks you to identify outputs. AS9100 layers on the expectation that, wherever traceability is a customer, contractual, or regulatory requirement, you can document and reconstruct that chain from raw material through to the shipped part — for as long as your flow-down requirements demand it.

The Five Requirements of Identification and Traceability

AS9100 traceability requirements break down into five practical components auditors will test independently. Miss any one, and the finding lands on that specific element — not the clause as a whole.

Requirement	What It Means	Where Suppliers Miss It
Suitable identification	Serial numbers, part numbers, or lot codes marked on the physical product or its packaging	Marking method not durable through the process (ink wears off before final inspection)
Status identification	Clear indication of what monitoring/measurement stage a unit has passed	Tags or travelers not updated in real time on the shop floor
Acceptance authority media control	Stamps, e-signatures, or passwords tied to a specific individual, with controlled assignment and retirement	Shared stamps, or no process for retiring a stamp when an employee leaves
Configuration management	Tracking part revisions, process revisions, and design listing alignment	No link between engineering change orders and what was actually built
Unique traceability identification	A documented, retrievable link from finished part back to raw material and process history	Traceability data exists but is scattered across paper travelers, spreadsheets, and supplier certs with no single retrieval path

Worth watching: auditors often pull a random serialized part and ask the supplier to produce the full traceability chain — material cert, heat lot, operator stamps, inspection records — on the spot. AS9100 doesn’t set a retrieval-time requirement, and an auditor can be satisfied with records that take a while to assemble as long as they’re complete and clearly demonstrate conformity. But in practice, a system that requires calling three different people and digging through file cabinets is a signal — to you, and often to the auditor — that the records exist without a real retrieval process behind them. That’s worth fixing on its own merits, separate from whether it triggers a finding.

Infographic illustrating the five core AS9100 traceability requirements, including suitable identification, status identification, acceptance authority media, configuration management, and unique traceability identification. — This infographic summarizes the five core AS9100 traceability requirements that aerospace suppliers must implement to maintain complete product identification, traceability, and audit-ready documentation under Clause 8.5.2.

Acceptance Authority Media Controls

Acceptance authority media (AAM) — stamps, electronic signatures, or passwords used to designate who performed or accepted a task — get their own line of scrutiny in Rev D. The requirement isn’t just that AAM exists. It’s that AAM is controlled: assigned to one individual, distinguishable from every other person’s media, and retired or reassigned in a documented way.

A stamp room with no log of who holds which stamp number is a finding waiting to happen. So is a digital sign-off system where a departed employee’s login credentials are still active six months later.

If you are under customer pressure to certify quickly → don’t skip the AAM control procedure to save time. It’s a small section of the standard and one of the easiest to fully close out, but it’s also one of the first things an experienced auditor tests, because it’s a fast way to gauge whether the whole QMS is disciplined or improvised.

Configuration Management and Traceability

Traceability without configuration management tells you what part number shipped. It doesn’t tell you what revision of that part number, or what revision of the manufacturing process, actually produced it.

Clause 8.5.2 requires organizations to maintain configuration — knowing what part revisions, process revisions, and design listings were actually in effect for a given build — so that as-built configuration can be compared against as-designed configuration whenever it matters. This becomes critical during engineering change activity, when older units in the field may be built to a prior revision while new production has moved on.

Objection: “We don’t have the software budget for a full configuration management system.” You don’t need one on day one. A controlled engineering change log, cross-referenced to serial number ranges, satisfies the requirement for most small and mid-size suppliers. The finding isn’t the absence of software — it’s the absence of a documented, followed process.

Supplier and Sub-Tier Traceability

Your traceability system is only as strong as your weakest supplier’s documentation. AS9100 expects flow-down of traceability requirements to sub-tier suppliers, meaning your purchase orders, supplier quality agreements, and receiving inspection process all need to confirm that incoming material or components arrive with adequate traceability documentation attached — not assumed.

This is where heat lot traceability on raw material becomes non-negotiable. A supplier that can’t produce a mill certification tying a specific heat lot to a specific shipment isn’t meeting the flow-down requirement, and that gap becomes your finding at your next audit, not theirs.

If you are preparing for your first AS9100 certification → verify your approved supplier list actually requires traceability documentation as a purchase order condition, not as an informal expectation. Auditors will pull supplier files and check for it directly.

Common Audit Findings

AS9100 traceability requirements illustrated during an aerospace audit with serialized components, material certifications, inspection records, configuration documents, and supplier traceability records. — An AS9100 audit often begins with a single serialized part and a request to reconstruct its complete traceability history using documented records from raw material through final acceptance.

Across AS9100 surveillance and certification audits, the traceability-related findings that repeat most often:

✅ Serialization exists, but status identification (what stage of test/inspection a unit has passed) isn’t visible on the floor without asking someone
⚠️ Acceptance authority media isn’t retired when an employee leaves or changes roles
⚠️ Consumables and process materials (sealants, primers, fasteners) have no lot traceability, even though the standard’s guidance material expects a reasonable link where practical
✅ Configuration records exist but aren’t cross-referenced to serial number ranges, so as-built vs. as-designed comparison takes hours instead of minutes
⚠️ Supplier traceability documentation is collected but not verified at receiving inspection

Pattern to watch for: the disconnect between paper records and physical parts on the floor. In many audits, the documentation exists somewhere in the system — the weak point is retrieval and cross-referencing, not the absence of data. That’s not a violation of Clause 8.5.2 by itself, but it’s a strong predictor of where a genuine finding will surface once an auditor starts pulling threads.

Traceability and Counterfeit Parts Prevention

Traceability and counterfeit parts controls are two separate clauses in AS9100, but auditors increasingly test them together. The International Aerospace Quality Group (IAQG) oversees the AS9100 certification scheme and has published extensive guidance connecting traceability and counterfeit parts risk, since gaps in one area routinely surface problems in the other. A strong traceability system supports your counterfeit parts defenses, because it forces documented chain-of-custody from an authorized source through to your receiving dock — but traceability alone doesn’t satisfy AS9100’s counterfeit parts requirements on its own. Those require a broader system: approved supplier controls, verification methods for incoming parts, risk assessment on part criticality, obsolescence management, and a documented process for reporting suspect counterfeit parts. Traceability is one piece of that system, not a substitute for it.

If your traceability records show unexplained gaps — material that appears without a documented supplier link, or components sourced outside your approved supplier list without justification — that’s a signal worth escalating into your counterfeit parts risk process, not just a documentation cleanup item. We’ll cover the full counterfeit parts prevention requirements in depth in the next article in this series.

You can verify a supplier’s AS9100 certification status directly through the IAQG OASIS database, which is worth checking before adding any new supplier to your approved list — regardless of what documentation they present.

Quick Audit Checklist

✅ Every serialized part has a durable, legible identification marking through final inspection
✅ Status of monitoring/measurement is visible on the traveler or in the digital record without cross-referencing another system
✅ Acceptance authority media (stamps, e-signatures) is individually assigned, logged, and retired when no longer applicable
✅ Configuration records cross-reference serial number ranges to specific part and process revisions
✅ Purchase orders and supplier quality agreements require traceability documentation as a condition of acceptance
✅ Receiving inspection verifies traceability documentation is present before material is released to production
✅ As a best practice (not a clause requirement), a random part pulled without notice can have its traceability chain assembled quickly — slow retrieval isn’t itself a nonconformance, but it’s often where real gaps get found

FAQ

Does AS9100 require traceability for every single part and material?

Not universally. Clause 8.5.2 requires traceability where it’s applicable — meaning where the customer, regulatory requirement, or your own risk assessment determines it’s needed. Critical and flight-safety parts almost always require full traceability. Some consumables may not, unless a specific contract or regulation requires it.

What’s the difference between identification and traceability under AS9100?

Identification tells you what a part is and its current status. Traceability tells you where it came from — the material lot, the process history, the operator, and the supplier chain behind it. AS9100 requires both, but traceability is the more demanding requirement because it has to be reconstructable after the fact.

Do consumables like sealants and primers need lot traceability?

The standard itself doesn’t explicitly mandate lot-level traceability for every consumable unless your contract or a regulatory requirement specifies it. That said, auditor guidance material treats consumables tied to critical processes as worth tracking at minimum by date range, and most experienced suppliers do this as good practice regardless of the strict letter of the clause.

How long do we need to retain traceability records?

AS9100 requires retention of documented information necessary to maintain traceability, but specific retention periods are typically driven by your customer contracts and applicable regulatory requirements, which commonly extend well beyond the life of the product. Check your contract flow-down requirements directly rather than assuming a default period.

What triggers a nonconformance in this area during an audit?

One of the most common triggers isn’t missing data itself, but an inability to quickly and confidently reconstruct the required traceability chain. Auditors often discover actual conformity gaps while testing retrieval and cross-referencing — pulling a random serialized part and asking the team to produce the material, process, inspection, and acceptance history is how a real gap in the records gets surfaced, not something a slow filing system causes on its own.

Does traceability apply differently to Tier 1 vs. lower-tier suppliers?

The clause requirements are the same regardless of tier, but the depth of flow-down expectations often increases the closer a supplier sits to final assembly. Tier 1 suppliers are typically expected to demonstrate traceability flow-down through their entire sub-tier supply base, not just their own operations.

Can a digital traceability system replace paper travelers entirely?

Yes, and most growing suppliers move this direction. A digital system needs to meet the same requirements as paper — durable identification, controlled acceptance authority media, and retrievable records — but it typically improves audit performance because retrieval time drops from hours to seconds.

Is acceptance authority media required, or only if we choose to use stamps?

If you use stamps, electronic signatures, or passwords to indicate acceptance or task completion, then the control requirements apply. If you use none of these methods, the specific AAM control clause doesn’t apply — but you still need another suitable, controlled method of indicating conformity status.

📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause checklist for aerospace suppliers assessing their QMS before certification, including identification and traceability requirements.
ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system.
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.

Not Sure What to Do Next?

🔹 Still researching what AS9100 traceability actually requires? Read our What Is AS9100? pillar guide for the full framework before diving into individual clauses.

🔹 Ready to build or fix your traceability procedures now? The 9001Simplified documentation kits include identification, traceability, and configuration management procedure templates so you’re not starting from a blank page.

🔹 Need to buy the standard itself to confirm exact clause language? Get the AS9100 Rev D standard from ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.

Meeting AS9100 traceability requirements is the clause-level detail that quietly decides whether your audit goes smoothly or turns into a multi-day scramble. Get the chain documented, controlled, and retrievable now — before an auditor tests it for you.

The Standards Navigator breaks down AS9100 clause by clause so aerospace suppliers know exactly what “compliant” looks like in practice, not just in theory.

📬 Stay Ahead of Your Next Traceability Audit

Most traceability failures don’t show up until an auditor pulls a random part and asks your team to reconstruct its history on the spot.

Suppliers who treat traceability as a real-time system — serialized, cross-referenced, quickly retrievable — walk into audits with confidence. Suppliers who treat it as a paper trail assembled after the fact spend audit week scrambling through file cabinets and spreadsheets.

The Standards Navigator covers AS9100 requirements clause by clause, built from real shop floor and audit experience — not summarized from the standard alone.

👉 Get updates on AS9100 clause breakdowns and aerospace compliance
👉 Be first to access new gap assessment tools and documentation resources

Subscribe below to stay ahead.

The Standards Navigator — Industrial Compliance. Clearly Explained.

AS9100 Implementation Timeline: How Long Certification Actually Takes in 2026

This guide breaks down the AS9100 implementation timeline by starting point — no existing QMS, ISO 9001 certified, or adding a second site. It covers each certification phase in detail, from gap assessment through OASIS registration, and flags where projects most commonly slip.

A Phase-by-Phase Roadmap for Aerospace Suppliers Building or Upgrading a Certified QMS

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

Your Customer Gave You a Certification Deadline. Does Your Timeline Actually Support It?

A prime contractor names a date. Get AS9100 certified by then, or the contract goes to a supplier who already has it. Knowing your real AS9100 implementation timeline — not a generic industry average — is what decides whether you hit that date.

That deadline usually comes with a generic number attached — “certification takes 6 to 12 months” — pulled from a webpage, a consultant’s pitch deck, or a competitor who mentioned their own timeline once in passing. It becomes the plan. Nobody stress-tests it against the actual starting point of the organization that has to hit it.

That’s the gap that causes missed certification windows. Not the audit itself — the assumption that a generic timeline applies to your specific starting point, scope, and current QMS maturity.

This guide is your AS9100 certification roadmap: it breaks the timeline into its actual phases, shows how your starting point changes the math, and flags the points where projects most commonly slip.

From the Floor: I’ve sat in the kickoff meeting for a certification project where the plan called for an eight-month timeline, built around a template someone found online. Three weeks into the gap assessment, we found there wasn’t a documented configuration management process anywhere in the building — not a paperwork gap, a practice gap. That one finding alone pushed the schedule two months, because you can’t get audit-ready on a process that doesn’t exist yet. The timeline failures I’ve seen almost never come from the audit dates. They come from assuming the starting point is further along than it actually is.

Before you commit to a certification date with a customer, find out where your QMS actually stands today →

Download the AS9100 Rev D Gap Assessment Checklist

In This Guide

How your starting point changes the AS9100 timeline
A phase-by-phase breakdown with realistic durations
What each phase actually requires, aerospace-specific systems included
The most common reasons AS9100 timelines slip
Whether the upcoming IA9100 revision should change your start date
A readiness checklist before you commit to a deadline

👉 Start Here (Top Resources)

SAE AS9100D — ANSI Webstore — the official current edition, required before you can gap-assess against anything real. Use code CC2026 for 5% off through December 31, 2026.
AS9100 Training — BSI Group — foundation and internal auditor training built around aerospace-specific clauses, not a generic ISO 9001 course.
Save up to 50% on ANSI Standard Packages — bundling AS9100D with ISO 9001 is worth checking before buying each document separately.

How Long Does AS9100 Certification Take?

The short answer to the AS9100 implementation timeline question depends entirely on where you’re starting from:

Organizations with no existing QMS: realistically 12–24 months from kickoff to certificate
Organizations already ISO 9001 certified: realistically 6–12 months
Multi-site or complex-scope operations (special processes, multiple product lines): add 3–6 months to either baseline
The gap assessment phase determines almost everything downstream — most timeline overruns trace back to an optimistic or incomplete one
Aerospace-specific systems — product safety, counterfeit parts prevention, configuration management, key characteristics, FAI — are the phase most first-time implementers underestimate
Certificate issuance follows Stage 2 audit closure, not the audit itself — corrective action closure adds real time on top of the audit dates

AS9100 implementation timeline infographic showing the eight certification phases, estimated durations, and key milestones from gap assessment through certification for aerospace suppliers. — This AS9100 implementation timeline infographic outlines the complete certification roadmap, helping aerospace suppliers understand each phase from initial gap assessment to final certification.

The Three Starting Points That Determine Your Timeline

A single “AS9100 takes X months” answer doesn’t hold up, because the honest answer depends entirely on what you’re building from.

Building a QMS From Scratch

If you are starting with no formal quality management system today → plan for 12–24 months. Much of this duration is driven by the need to operate the system long enough to generate audit evidence, not simply write procedures. Every element has to be built: document control, management review, internal audit program, and all of AS9100’s aerospace-specific additions on top. This isn’t a documentation exercise you can compress by working weekends — several phases require the system to actually run for months before there’s enough evidence for an auditor to evaluate.

Extending an Existing ISO 9001 System

If you are already ISO 9001 certified → plan for 6–12 months. Your management review, internal audit program, document control, and corrective action processes carry forward largely intact. What’s new is the aerospace-specific layer: product safety, counterfeit parts prevention, configuration management, key characteristics, First Article Inspection, and human factors. For the full list of what’s genuinely new versus what’s already covered by your ISO 9001 system, see AS9100 vs ISO 9001.

Adding a Second Site to an Existing AS9100 Certification

If you already hold AS9100 certification and are extending scope to a new facility → this is typically the fastest path, often 4–8 months, since your corporate-level QMS structure, document control, and management review already exist. The work concentrates on site-specific procedures, local training, and generating enough site-level records for the certification body to evaluate.

Phase-by-Phase Timeline

Phase	No Existing QMS	Existing ISO 9001
Gap assessment and project planning	4–8 weeks	3–5 weeks
Documentation development (QMS core)	8–14 weeks	3–6 weeks
Aerospace-specific systems build	8–16 weeks	6–12 weeks
Team training	3–6 weeks (overlapping)	2–4 weeks (overlapping)
System operation and record generation	12–20 weeks minimum	8–12 weeks minimum
Internal audit and management review	3–4 weeks	2–3 weeks
Stage 1 audit and gap closure	3–6 weeks	2–4 weeks
Stage 2 audit	2–5 days on-site	2–5 days on-site
Corrective action closure and certificate issuance	4–12 weeks	4–8 weeks

These ranges assume a single-site, moderate-complexity operation. Special processes — welding, heat treatment, plating, NDT — extend the aerospace-specific build phase because each requires its own qualified-personnel records and process validation on top of the base requirements.

What Each Phase Actually Involves

Understanding the AS9100 implementation timeline phase by phase is what turns a generic estimate into a plan you can actually hold a customer to.

Gap Assessment

This phase sets the accuracy of everything that follows it. A gap assessment against AS9100 needs to evaluate the aerospace-specific clauses with the same rigor as the ISO 9001 core — product safety, counterfeit parts, configuration management, key characteristics, and FAI readiness are where generic gap assessments consistently under-scope the work.

Most common finding: Gap assessments performed by someone trained only in ISO 9001, who scores the aerospace-specific clauses as “in progress” without a clear picture of what a compliant version of each actually looks like.

Not sure how far you are from certification? Download the AS9100 Rev D Gap Assessment Checklist and identify timeline risks before they affect your customer’s deadline →

Get the AS9100 Rev D Gap Assessment Checklist

Building the Aerospace-Specific Systems

This is the phase most first-time AS9100 implementers underestimate, because it doesn’t map to anything in a standard ISO 9001 rollout. It covers building out:

Product safety risk identification and controls
Counterfeit parts prevention across procurement and receiving
Configuration management for design baselines and changes
Key characteristics identification and control planning
First Article Inspection procedures referencing AS9102
Human factors consideration in process and workstation design
Special process controls and qualified-personnel records, where applicable

Each of these gets its own dedicated treatment elsewhere on this site as we continue building out the aerospace cluster — this section is about scoping the time commitment, not the clause-by-clause detail.

AS9100 implementation timeline infographic highlighting the seven aerospace-specific systems organizations must build before achieving AS9100 certification. — The aerospace-specific systems phase is the most underestimated part of the AS9100 implementation timeline, requiring organizations to implement critical controls beyond a standard ISO 9001 quality management system.

Training Your Team

Internal auditors need training specific to AS9100’s aerospace-specific requirements, not just ISO 9001 fundamentals — an internal auditor who only understands ISO 9001 will miss the findings an external AS9100 auditor is specifically trained to catch. See ISO Training for AS9100, ISO 13485 & ISO 50001 for where to get aerospace-specific training, and BSI vs ISOQAR for how to choose between the two most common training and certification body options.

Operating the System and Generating Records

If you are tempted to compress this phase → don’t. Certification bodies expect to see the system operating long enough to generate a meaningful record set — internal audits with findings and closures, management review minutes, at least one completed FAI package, and supplier qualification records. A system that’s only existed on paper for three weeks doesn’t have enough history for an auditor to evaluate.

Aerospace certification auditors are not simply evaluating whether procedures exist. They are evaluating whether those procedures have been consistently followed across actual production, purchasing, receiving, inspection, and corrective action records. Evidence matters more than documentation — this is the core difference between an ISO 9001 audit and an AS9100 audit, and it’s the reason this phase can’t be compressed just because the paperwork is finished.

From the Floor: One supplier I worked with planned to schedule Stage 1 six weeks after completing their documentation. The procedures looked solid, but they hadn’t generated enough records to demonstrate the system was functioning. Internal audits hadn’t been completed, supplier evaluations were still pending, and management review had never occurred. The documentation was ready, but the system wasn’t. They delayed Stage 1 by nearly two months and ultimately avoided what would have become a much more painful Stage 2 audit.

Internal Audit and Management Review

Your internal audit program has to specifically cover the aerospace-specific clauses, not just the ISO 9001 core — auditors need to verify product safety controls, counterfeit parts procedures, and configuration management records with the same scrutiny as document control and corrective action.

Stage 1 and Stage 2 Audits

Stage 1 verifies your documentation is complete and ready for Stage 2 — expect this to run longer for AS9100 than for a standard ISO 9001 Stage 1, since the auditor is confirming aerospace-specific documentation exists before scheduling Stage 2. Stage 2 is the full on-site system audit, including shop floor walkthroughs, FAI package review, and operator interviews.

Closing Corrective Actions and OASIS Registration

If your Stage 2 audit identifies nonconformances → certification bodies typically require corrective action responses within a defined window, often in the 30–90 day range depending on the finding and the certification body’s specific procedures; major findings can require a return audit, which resets a meaningful chunk of the timeline. Certificate issuance follows corrective action closure, not the audit date itself. Once your certificate is issued by an ICOP-accredited certification body, OASIS registration follows automatically — this is the database prime contractors check to verify your certification status.

AS9100 implementation timeline infographic comparing required documentation with objective audit evidence needed to achieve AS9100 certification. — This comparison illustrates why successful organizations move beyond documentation to generate the objective evidence required throughout the AS9100 implementation timeline.

What Slows Down an AS9100 Timeline

Treating the gap assessment as a formality instead of the project’s foundation. A rushed or generic gap assessment produces an optimistic timeline that collapses the first time an auditor finds something the assessment missed.

Underestimating the aerospace-specific build phase. Organizations coming from ISO 9001 alone routinely assume the aerospace-specific additions are a light layer on top of what they already have. Product safety, counterfeit parts prevention, and configuration management are frequently built from nothing.

Not budgeting time for the system to actually run. Documentation can be written quickly. Evidence that the system is operating — internal audit history, management review records, a completed FAI package — cannot be generated overnight, no matter how much internal pressure exists to compress the calendar.

Underestimating special process requirements. Welding, heat treatment, plating, and NDT each carry their own qualified-personnel records and process validation requirements that extend the timeline beyond a standard machining or assembly scope.

Committing to a customer deadline before the gap assessment is complete. This is the single most common planning mistake. The deadline gets set first, based on a generic timeline; the actual gap assessment — which should inform the deadline — happens after the commitment is already made.

If you haven’t run a structured gap assessment yet, that’s the step to complete before setting any date with a customer →

Get the AS9100 Rev D Gap Assessment Checklist

Should You Wait for IA9100 Before Starting?

No. AS9100 Rev D remains the current, actively audited standard, and certification bodies are still issuing Rev D certificates. IA9100 — the upcoming revision — is expected to align with ISO 9001:2026, and once published will come with a formal transition window, historically 2–3 years. Because IA9100 incorporates ISO 9001 requirements directly, the transition is expected to be additive to an existing AS9100 system, not a rebuild. Our What Is AS9100 guide covers the full IA9100 timeline and what the transition is expected to involve.

If a customer requirement or contract deadline is driving your timeline today → there is no reason to delay pursuing AS9100 Rev D certification while waiting for a standard that hasn’t published yet.

Quick Timeline-Readiness Checklist

✅ Gap assessment completed against the current AS9100D edition, not a generic ISO 9001 checklist

✅ Aerospace-specific systems (product safety, counterfeit parts, configuration management, key characteristics, FAI) scoped individually, not bundled as “documentation”

✅ Internal auditors trained specifically on AS9100’s aerospace-specific clauses

✅ Special process qualifications (welding, heat treatment, plating, NDT) identified and budgeted for separately

✅ Realistic operating period built into the schedule before Stage 1 — not compressed to meet an external deadline

⚠️ If your certification deadline was set before your gap assessment was complete, revisit it now rather than after Stage 1 uncovers the gap

FAQ

How long does AS9100 certification typically take?

Organizations building a QMS from scratch typically need 12–24 months. Organizations already certified to ISO 9001 typically need 6–12 months, since document control, internal audit, and management review processes carry forward. Multi-site or special-process operations should add 3–6 months to either estimate.

What’s the fastest realistic timeline for AS9100 certification?

For an organization already ISO 9001 certified, with a focused scope and dedicated project resources, 6 months is achievable — but only if the gap assessment is thorough and the aerospace-specific systems build starts immediately rather than after documentation is finished.

Can we skip building an ISO 9001 system first and go straight to AS9100?

Yes. AS9100 includes all ISO 9001 requirements within it — there’s no requirement to certify to ISO 9001 first. Building directly to AS9100 from scratch simply means the ISO 9001 core and the aerospace-specific additions get built in parallel rather than sequentially, which is reflected in the longer 12–24 month timeline for organizations with no existing QMS.

What’s the single biggest risk to an AS9100 implementation timeline?

Underestimating the aerospace-specific systems build — product safety, counterfeit parts prevention, configuration management, key characteristics, and First Article Inspection. Organizations coming from ISO 9001 alone consistently plan for these as a light addition rather than the substantial build they typically require.

Does the Stage 2 audit date mark the end of the timeline?

No. Certificate issuance follows the closure of any corrective actions identified during Stage 2 — typically 4–12 weeks beyond the audit date itself, depending on finding severity. Major nonconformances can require a return audit, which extends the timeline further.

How much does special process qualification add to the timeline?

Welding, heat treatment, plating, and NDT each require their own qualified-personnel records and process validation on top of the base AS9100 requirements. Depending on how many special processes are in scope, this can add 4–10 weeks to the aerospace-specific systems build phase.

Should we hire a consultant to compress the timeline?

A consultant can help you avoid rework and scope the aerospace-specific systems accurately, which reduces the risk of timeline slippage — but no consultant can compress the system-operation phase, since certification bodies need to see evidence the QMS has actually been running, not just documented.

What happens if our certification deadline arrives before we’re ready?

Pursuing certification before the system has genuinely operated long enough typically results in Stage 2 findings that extend the timeline further than waiting would have. A missed customer deadline is a difficult conversation; a failed Stage 2 audit against a rushed system is usually a worse one.

📥 Free Resources

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

Not Sure What to Do Next?

🔹 You’re still scoping whether AS9100 is the right standard → Start with What Is AS9100 for the full requirements picture before you commit to a timeline.

🔹 You’re ready to find out where your QMS actually stands → Download the AS9100 Rev D Gap Assessment Checklist before you set any certification date with a customer.

🔹 You need to understand the full cost picture alongside the timeline → How Much Does AS9100 Certification Cost?

🔹 You need the official standard before you can gap-assess anything → SAE AS9100D — ANSI Webstore, or save on a bundle if you’re pairing it with ISO 9001.

🔹 You need training or a certification body recommendation → BSI Group AS9100 Training, or Best ISO Certification Bodies for a ranked comparison.

The Timeline Is Real. The Deadline Should Follow It, Not the Other Way Around.

A customer-driven deadline is real pressure, but it isn’t a substitute for an honest gap assessment. The organizations that hit their certification date are almost always the ones that scoped their actual starting point before committing to one — not the ones that worked backward from a generic number and hoped the gap assessment would agree with it.

At The Standards Navigator, we cover the full AS9100 certification path — from the standard itself to implementation sequencing, aerospace-specific requirements, and certification body selection — so your AS9100 implementation timeline is built on your actual starting point, not someone else’s.

👉 Get updates on AS9100 implementation guidance and aerospace compliance insights

👉 Be first to access new aerospace cluster guides and tools as they publish

Subscribe below to stay ahead.

The Standards Navigator — Industrial Compliance. Clearly Explained.

Buy AS9100 Rev D Standard: Where to Get the Official Document in 2026

AS9100 Rev D is the quality management standard for aviation, space, and defense — and it must be purchased from an authorized source. This guide covers where to buy it, current pricing, format options, what the document includes, and what the upcoming IA9100 transition means for buyers in 2026.

How to purchase AS9100 Rev D from authorized sources — pricing, formats, and what comes with the standard

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

If You’re Sourcing AS9100, You Need to Get This Right

AS9100 Rev D is the quality management standard for aviation, space, and defense. If you’re a supplier to Boeing, Lockheed Martin, Raytheon, or any prime contractor in the aerospace sector, there’s a good chance AS9100 certification is either already required or will be before your next contract renewal.

Getting the standard wrong at the start creates problems that compound. Counterfeit copies circulate online. Outdated revisions get used for implementation. Organizations spend months building a QMS to the wrong requirements and then face nonconformances during Stage 1 audit because the auditor is working from the current text and they’re not.

This guide covers exactly where to buy AS9100 Rev D, what you’re actually getting when you purchase it, the formats available, and what to know about the upcoming transition to IA9100.

In This Guide:

Where to buy AS9100 Rev D from authorized sources
Pricing and format options (PDF vs. print)
What the standard document includes
Related aerospace standards worth purchasing together
What the IA9100 transition means for buyers in 2026
How to verify your certification body is OASIS-listed

👉 Start Here — Top Resources for AS9100

👉 Buy AS9100 Rev D (PDF or Print): ANSI Webstore — Official SAE/AS9100 Standard — use code CC2026 for 5% off through December 31, 2026

👉 Save on Standard Bundles: ANSI Standard Packages — up to 50% off

👉 Build Your AS9100 QMS Documentation: 9001Simplified — Documentation Kits for Aerospace QMS

👉 AS9100 Training Courses: BSI Group — AS9100 Training and Certification

👉 ISO 9001 Training (Foundation for AS9100): ISOQAR — ISO/AS9100 Training Courses

Where to Buy AS9100 Rev D

AS9100 Rev D is published by SAE International on behalf of the International Aerospace Quality Group (IAQG). It is not freely available. To access the official, enforceable text of the standard, you must purchase it from an authorized source.

There are three legitimate options:

Source	Format Available	Best For
ANSI Webstore	PDF, print, multi-user, bundles	U.S. buyers; international orders; bundle purchases — multiple languages available
SAE International (sae.org)	PDF, print	Direct from publisher; SAE members may receive discounts
BSI Group	PDF, print	UK and European buyers; combined standard and training purchases

Comparison infographic showing authorized AS9100 Rev D purchase sources versus unauthorized sources, including pricing ranges, compliance benefits, and risks of unofficial copies. — Purchasing AS9100 Rev D from authorized sources helps ensure document accuracy, compliance, support, and access to the latest revision.

The ANSI Webstore is the recommended source for most buyers. It carries the full SAE AS9100 series in PDF and print formats, processes international orders, offers standards in multiple languages, and includes bundle packages that reduce per-standard cost when you need more than one document. Use code CC2026 at checkout for 5% off through December 31, 2026.

Avoid third-party resellers offering discounted PDFs, “free downloads,” or document-sharing platforms. Copies obtained outside authorized channels are almost always outdated, incomplete, or counterfeit — and your registrar will ask to see that you’re working from a current, controlled copy of the standard.

Pricing and Formats

AS9100 Rev D pricing through the ANSI Webstore runs approximately $200–$260 for a single-user PDF. Hardcopy print editions are similarly priced. Multi-user and enterprise licenses are available for organizations that need broader access.

Format	Price Range	Notes
Single-user PDF	$200–$260	Immediate download; searchable; single-user license only
Hardcopy (print)	$200–$260	Physical copy; useful for shop floor reference; single license
PDF Multi-User	$400–$500	Shared access across your implementation team
Enterprise License	$1,000–$1,800	Organization-wide access; contact ANSI for quote
Bundle (AS9100 + related standards)	Up to 50% off	Best value when purchasing multiple aerospace standards together

If you’re buying AS9100 alongside AS9102 (first article inspection), AS9101 (audit requirements), or ISO 9001, the ANSI standard bundle packages are worth evaluating — savings of up to 50% off list price apply when you bundle. That’s meaningful when you’re stacking multiple documents for a full implementation.

For a full breakdown of what AS9100 certification costs beyond the standard itself — including registrar fees, audit costs, and consultant expenses — see How Much Does ISO Certification Cost?

What the Standard Includes

AS9100 Rev D is the full quality management system requirements document for aviation, space, and defense. It is built on the ISO 9001:2015 framework — every clause from ISO 9001 is present — with aerospace-specific additions layered on top.

When you purchase AS9100 Rev D, you get:

The complete text of all 10 clauses, including all aerospace add-ons
Annex A — mapping of clause additions to ISO 9001 structure
Annex B — quality management principles (informative)
Bibliography of related standards

Key aerospace-specific requirements that go beyond ISO 9001 include:

Requirement Area	AS9100-Specific Addition
Product safety	Dedicated clause — must identify, document, and manage product safety risks
Counterfeit parts prevention	Explicit controls required for prevention, detection, and disposition of counterfeit EEE parts
Configuration management	Required for products throughout lifecycle — more rigorous than ISO 9001 traceability requirements
First article inspection	Referenced requirement — cross-references AS9102 for full FAI requirements
Human factors	Addressed explicitly — organizations must consider human factors in their processes
Operational risk management	Expanded beyond ISO 9001 risk-based thinking — more prescriptive requirements

The standard text itself does not include implementation guidance, checklists, or templates. Those are separate documents. If your team needs a ready-made documentation system, 9001Simplified’s aerospace documentation kits are built to the AS9100 clause structure and can significantly compress implementation time.

⚠️ Most teams don’t fail AS9100 audits because they misread the standard. They fail because they assumed their existing QMS covered it. If you haven’t run a clause-by-clause gap check against Rev D, do it before you schedule your Stage 1.

👉 Download the AS9100 Rev D Gap Assessment Checklist — free

AS9100 Rev D references several companion standards. If you’re implementing or certifying to AS9100, these are the documents your auditor will expect you to know — and in some cases, demonstrate compliance with.

Standard	What It Covers	Required?
AS9101F	Audit requirements for aviation, space, and defense	Used by your registrar during audits — worth understanding
AS9102B	First Article Inspection (FAI) requirements	Frequently customer-mandated; cross-referenced in AS9100
AS5553	Counterfeit parts avoidance, detection, mitigation	Directly referenced by Clause 8.1.4 of AS9100
ISO 9001:2015	Quality management system requirements (base standard)	AS9100 incorporates ISO 9001 in full — purchasing separately is optional
AS9110	QMS requirements for aviation maintenance organizations	MRO-specific — not needed unless you’re an aviation maintenance operation
AS9120	QMS requirements for aviation distributors	Distributors only — not a manufacturing standard

For most manufacturers, the priority purchases alongside AS9100 Rev D are AS9102 if your customers require FAI, and AS5553 if you handle electronic or electromechanical components. Both are available through ANSI standard bundle packages. The full SAE International aerospace standards catalog is available if you need to browse the complete series before deciding.

If you are also ISO 9001 certified — or working toward it as a foundation for AS9100 — see What Is AS9100? for a full breakdown of how the two standards relate clause by clause.

The IA9100 Transition — What Buyers Need to Know in 2026

This is the most important context for anyone buying AS9100 in 2026.

The IAQG is in the process of rebranding and revising AS9100 Rev D as IA9100 — where “IA” stands for International Aerospace. The name change reflects the IAQG’s goal of publishing a single, unified global document rather than separate regional versions. The target publication date is late 2026, aligned with the anticipated release of ISO 9001:2026.

What this means practically:

AS9100 Rev D remains the current, enforceable standard. Buy it now if you need to implement or certify to AS9100. It is the document your registrar will audit against.
The transition window after IA9100 publishes will likely be two to three years. Organizations with current AS9100 Rev D certificates will have time to transition — similar to how ISO 9001:2015 gave organizations three years to move from 2008.
Key changes expected in IA9100 include expanded product safety requirements, new information security clauses, stronger counterfeit parts controls, and alignment with the revised ISO 9001 high-level structure.
You are not behind by purchasing Rev D today. Every organization that certifies in 2026 will need to transition later — that’s standard practice in ISO and aerospace standards management.

Timeline infographic showing the expected transition from AS9100 Rev D certification to IA9100 publication and the anticipated 2-3 year aerospace industry transition period. — This timeline illustrates the expected path from AS9100 Rev D certification to the future IA9100 standard and transition window.

⚠️ Buyer’s Note: If you see a listing for “IA9100” or “AS9100 Rev E” as a published, purchasable standard in 2026, verify the source carefully. As of June 2026, IA9100 has not been published. AS9100 Rev D (2016) is the current edition.

For a deeper look at what AS9100 requires and how certification works, see What Is AS9100? — Complete Guide to the Aerospace Quality Standard.

How to Verify Your Certification Body Is OASIS-Listed

Not every ISO 9001 registrar is accredited to certify AS9100. This is a common mistake — organizations assume that because a CB holds ISO 9001 accreditation, they can issue an AS9100 certificate. They can’t unless they hold separate AS9100 accreditation.

The IAQG maintains the OASIS database — the authoritative registry of AS9100-certified organizations and accredited certification bodies. Before you sign with a registrar:

✅ Search the OASIS database to confirm your CB is listed and active for AS9100
✅ Verify ANAB accreditation for AS9100 in North America — this is the recognized accreditation body
✅ Ask specifically which aerospace sectors and scopes the CB is accredited for — aerospace scopes vary
✅ Confirm your organization’s OASIS listing after certification — your prime contractor customers will check it

An AS9100 certificate from an unaccredited CB is not recognized by prime contractors, DoD, or the commercial aerospace supply chain. This is not a technicality. It is a disqualifier for contract eligibility in most aerospace programs.

If you are evaluating which certification body to use → see Best ISO Certification Bodies — Ranked and Reviewed for 2026 for a full breakdown of accredited options.

If you are comparing AS9100 certification against your existing ISO 9001 scope → see ISO 9001 Certification Guide for how the two audit processes compare.er for contract eligibility.

Frequently Asked Questions

Where can I buy AS9100 Rev D officially?

AS9100 Rev D is published by SAE International and available through authorized resellers including the ANSI Webstore, SAE.org directly, and BSI Group. The ANSI Webstore is the recommended source for U.S. and international buyers — use code CC2026 for 5% off through December 31, 2026.

How much does AS9100 Rev D cost?

A single-user PDF runs approximately $200–$260 through most authorized resellers. Hardcopy editions are similarly priced. Multi-user PDFs run $400–$500, and enterprise licenses run $1,000–$1,800. Bundle pricing through ANSI reduces costs significantly when you’re purchasing multiple aerospace standards together.

Is AS9100 Rev D the same as ISO 9001?

No — but it contains all of ISO 9001:2015. AS9100 Rev D incorporates the full ISO 9001:2015 text and adds aerospace-specific requirements on top: product safety, counterfeit parts prevention, configuration management, first article inspection references, human factors, and expanded operational risk management. If you are certified to AS9100, you are also meeting ISO 9001 requirements — but not the reverse.

Should I wait for IA9100 before implementing AS9100?

No. AS9100 Rev D is the current, enforceable standard. IA9100 is expected in late 2026 with a transition window of approximately two to three years after publication. If your customers require AS9100 certification now, implement and certify to Rev D. You will transition to IA9100 when it’s published, as every currently-certified organization will need to do.

Can I share the AS9100 PDF with my whole team?

Not on a single-user license. Standard single-user PDF licenses do not permit multi-user access. If your implementation team needs simultaneous access, purchase a multi-user license. Using a single-user PDF across your organization is a license violation your registrar may flag during document control review — a finding you do not want going into Stage 1.

Do I need to buy AS9101 separately?

AS9101F (audit requirements) is used by your registrar, not your organization. You are not required to purchase it, but many quality managers find it useful for understanding what auditors will look for during Stage 1 and Stage 2 assessments. It’s available separately through ANSI.

What’s the difference between AS9100, AS9110, and AS9120?

AS9100 is for aerospace manufacturers. AS9110 is for aviation maintenance, repair, and overhaul organizations. AS9120 is for aviation distributors. Most companies in the aerospace manufacturing supply chain need AS9100. The standard you need is determined by your scope of work, not your customer’s preference.

Is a free version of AS9100 available anywhere?

No. There is no legally free version of AS9100 Rev D. Documents labeled “free AS9100 download” online are either counterfeit, illegally distributed, or are summaries rather than the full standard text. Your QMS must be built from the official, current document — auditors will ask to see your controlled copy.

📥 Free Resources for Aerospace QMS Implementation

📋 AS9100 Rev D Gap Assessment Checklist — clause-by-clause gap tool for pre-implementation assessment
📋 ISO 9001 Roadmap — foundational QMS roadmap (AS9100 uses the same clause structure)
📋 Manufacturing Compliance Checklist — operational compliance baseline for manufacturers
📋 Supplier Quality Checklist — supplier evaluation tool aligned to AS9100 Clause 8.4 controls

Not Sure What to Do Next?

🔹 If you’re ready to buy the standard: AS9100 Rev D — ANSI Webstore — use code CC2026 for 5% off

🔹 If you need multiple standards: ANSI Standard Packages — up to 50% off bundles

🔹 If you need training before you implement: BSI Group — AS9100 Training Courses

🔹 If you’re not sure whether AS9100 applies to you: What Is AS9100? — Complete Guide

🔹 If you need to find an accredited registrar: Best ISO Certification Bodies — Ranked for 2026

🔹 If you want to check your gap before you commit: AS9100 Rev D Gap Assessment Checklist — free download

The Standards Navigator covers AS9100, ISO 9001, ISO 13485, and the full range of standards affecting aerospace, manufacturing, and defense supply chains. If you found this useful, there’s more where it came from.

Stay Ahead of AS9100 and IA9100 Changes

The IA9100 transition is coming. When it publishes, certified organizations will have a limited window to update their QMS. Subscribers to The Standards Navigator get clause-level breakdowns, implementation guidance, and audit prep resources delivered directly — before the deadline pressure hits.

👉 Subscribe below and get the AS9100 Rev D Gap Assessment Checklist free. Know exactly where your QMS stands before your next audit.

What Is AS9100? The Complete Guide to Aerospace Quality Management (2026)

AS9100 Rev D is the quality management system standard for aviation, space, and defense. It builds on ISO 9001 and adds over 100 aerospace-specific requirements — product safety, counterfeit parts prevention, configuration management, first article inspection, and more. If your organization supplies to aerospace primes, this is not optional. This guide covers what AS9100 requires, how it differs from ISO 9001, what certification costs, and what the upcoming IA9100 revision means for your organization.

The aerospace quality management standard explained — what AS9100 Rev D requires, who needs it, how it differs from ISO 9001, the five core tools, certification costs, and what IA9100 means for your organization.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

AS9100 Is Not Optional in Aerospace. It Is the Price of Entry.

If your organization supplies to Boeing, Lockheed Martin, Raytheon, Airbus, or any Tier 1 aerospace prime — AS9100 certification is not a differentiator. It is a baseline requirement. Without it, you do not get on the approved supplier list. Full stop.

AS9100 Rev D is the quality management system standard for the aviation, space, and defense industries. It builds on ISO 9001:2015 and adds over 100 aerospace-specific requirements covering product safety, configuration management, counterfeit parts prevention, first article inspection, key characteristics, and human factors — areas where ISO 9001 alone is insufficient for the risk profile of aerospace manufacturing.

This guide covers what AS9100 actually requires, who publishes it, how it differs from ISO 9001, what the five core tools are, what certification costs, and what you need to know about the upcoming transition to IA9100.

In This Guide

What AS9100 is and who publishes it
AS9100 Rev D — the current edition and what it requires
How AS9100 differs from ISO 9001
The aerospace-specific requirements ISO 9001 doesn’t cover
The five core tools of AS9100
Who needs AS9100 certification
AS9100 certification process — Stage 1 and Stage 2
AS9100 certification costs
IA9100 — the upcoming revision and what it means
Where to buy the AS9100 standard
Training and certification resources

👉 Start Here (Top Resources)

👉 Purchase the official AS9100 Rev D standard from the authorized source → SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

👉 Get AS9100 certified with an accredited aerospace certification body → BSI Group AS9100 Certification

👉 Get AS9100 training for your team → BSI Group AS9100 Training

👉 Save up to 50% buying aerospace standards as a bundle → ANSI Standard Packages

What Is AS9100?

AS9100 is the international quality management system standard for the aviation, space, and defense industries. The current edition is AS9100 Rev D, formally designated SAE AS9100D:2016 — Quality Management Systems: Requirements for Aviation, Space, and Defense Organizations.

It is published by the International Aerospace Quality Group (IAQG) — a consortium of aerospace manufacturers from the Americas, Asia/Pacific, and Europe — and distributed in the United States through the Society of Automotive Engineers (SAE) and the ANSI Webstore.

AS9100 is used globally across three regional designations:

Region	Designation	Requirements
Americas	AS9100 Rev D	Identical requirements
Europe	EN9100:2018	Identical requirements
Asia/Pacific	JISQ9100:2016	Identical requirements

All three are functionally equivalent. A certificate issued under any of them is recognized across the global aerospace supply chain.

AS9100 is built on the foundation of ISO 9001:2015 — it includes all ISO 9001 requirements verbatim and adds over 100 aerospace-specific requirements on top. Organizations certified to AS9100 automatically satisfy ISO 9001 requirements. The reverse is not true.

For a full comparison of the two standards, see AS9100 vs ISO 9001.

AS9100 Rev D — The Current Edition

AS9100 Rev D was published in September 2016 and became the only version accepted for certification in September 2018 when the transition period from Rev C closed. It remains the current active standard.

Rev D introduced the most significant structural changes in the standard’s history — primarily because it aligned with the simultaneously released ISO 9001:2015, which introduced risk-based thinking as a foundational requirement and eliminated prescriptive documentation requirements in favor of a results-based approach.

What Rev D Changed From Rev C

Area	Rev C Approach	Rev D Approach
Risk management	Preventive action clause	Risk-based thinking embedded throughout
Documentation	Prescribed procedures and records	Documented information — flexible and scalable
Leadership	Management representative required	Top management direct accountability
Product safety	Implied through quality controls	Explicit dedicated clause
Counterfeit parts	General supplier controls	Dedicated counterfeit parts prevention requirement
Human factors	Not addressed	Explicit human factors clause
Configuration management	Basic requirement	Expanded requirements

Rev D also introduced specific requirements for key characteristics — the product and process features that most affect safety, fit, form, and function — and strengthened first article inspection (FAI) requirements under AS9102.

Most common finding in Rev D audits: Organizations that mapped their Rev C system to Rev D clause numbers without genuinely embedding risk-based thinking throughout their processes. The standard is not just restructured — it requires a different way of thinking about quality management.

AS9100 vs ISO 9001 — Key Differences

Comparison infographic showing the key differences between ISO 9001 and AS9100 Rev D, including aerospace-specific requirements such as product safety, counterfeit parts prevention, configuration management, and first article inspection. — AS9100 builds upon ISO 9001 by adding more than 100 aerospace-specific requirements focused on safety, risk, traceability, and product integrity.

AS9100 Rev D contains all of ISO 9001:2015 plus approximately 105 additional aerospace-specific requirements. The additions are not cosmetic — they address the specific risk profile of aviation, space, and defense manufacturing, where product failures can result in loss of life and billions in liability.

Requirement Area	ISO 9001:2015	AS9100 Rev D
Product safety	Not explicitly addressed	Dedicated clause — must identify and manage product safety risks
Counterfeit parts	Not addressed	Explicit requirement to prevent counterfeit part use
Configuration management	Not addressed	Required — must control product configuration throughout lifecycle
First article inspection	Not required	Required for new parts and significant changes (AS9102)
Key characteristics	Not addressed	Required — identify, control, and document key characteristics
Human factors	Not addressed	Required — consider human factors in design and production
Customer-designated special requirements	Basic supplier controls	Enhanced flow-down requirements to sub-tier suppliers
Project management	Not addressed	Required for programs above a defined complexity threshold
Risk management	Risk-based thinking	Risk-based thinking plus specific product and program risk requirements
Production process verification	Standard process control	First article inspection plus ongoing process monitoring

The practical implication: an organization with ISO 9001 certification has the QMS foundation but needs significant additional controls to meet AS9100 requirements. The gap is not insurmountable — but it is real, and underestimating it is the most common implementation mistake.

For organizations already certified to ISO 9001, see ISO 9001 Certification Guide for the foundational QMS requirements that carry directly into AS9100.

Aerospace-Specific Requirements

These are the clauses and requirements in AS9100 Rev D that have no direct equivalent in ISO 9001. They are where most nonconformances occur in organizations transitioning from ISO 9001 or building an aerospace QMS for the first time.

Product Safety (Clause 8.1.1)

AS9100 requires organizations to identify product safety risks, implement controls, and maintain documentation that traces safety-critical decisions throughout the product lifecycle. This is not a general quality objective — it is a formal, documented process.

Most common finding: Product safety risk assessments that exist as standalone documents rather than being integrated into design controls, supplier qualification, and production process planning.

Counterfeit Parts Prevention (Clause 8.1.4)

Organizations must implement controls to detect and prevent the use of counterfeit or suspect unapproved parts. This includes procurement controls, approved supplier lists, incoming inspection procedures, and training for personnel involved in purchasing and receiving.

The counterfeit parts problem is significant in aerospace — the FAA and DoD have documented thousands of counterfeit parts incidents. AS9100 treats this as a systemic risk requiring a systemic response, not just an inspection step.

Most common finding: Counterfeit parts procedures that address purchasing but not the full supply chain — particularly for legacy parts and spot-buy procurement.

Configuration Management (Clause 8.1.3)

Configuration management ensures that the product delivered matches the approved design — and that any changes to the design are controlled, approved, and documented throughout the product’s lifecycle. This is particularly critical in defense programs where product configurations may be legally specified in contracts.

Most common finding: Configuration management that covers the initial production baseline but lacks controls for engineering changes, customer-approved deviations, and product updates in the field.

Key Characteristics (Clause 8.1.2)

Key characteristics are the features of a product or process whose variation most significantly affects safety, fit, form, function, or service life. AS9100 requires organizations to identify key characteristics, establish controls for them, and communicate them to suppliers.

In practice this means manufacturing engineers and quality engineers working together to identify which dimensions, material properties, or process parameters are truly critical — and building specific inspection and control plans around them rather than treating all characteristics equally.

First Article Inspection (FAI)

AS9100 references AS9102 — the First Article Inspection standard — which requires a documented review of the first production article against engineering drawings and specifications before series production begins. FAI is required for new parts and for significant design or process changes.

FAI is one of the most rigorous requirements new AS9100 implementers underestimate. A complete FAI includes dimensional verification, material certifications, process documentation, and a formal review package that must be retained as a quality record.

Most common finding: FAI records that are incomplete, filed incorrectly, or not updated after engineering changes that should have triggered a partial or full re-FAI.

Human Factors (Clause 8.1.5)

AS9100 requires organizations to consider human factors in the design of work processes and environments — particularly in maintenance, assembly, and inspection operations where human error can have safety consequences.

This is not an ergonomics requirement. It is a quality control requirement — addressing how process design, workstation layout, lighting, task complexity, and shift patterns affect the likelihood of errors in safety-critical operations.

The Five Core Tools of AS9100

Infographic showing the Five Core Automotive Quality Tools framework, including APQP, FMEA, Control Plan, MSA, and PPAP, arranged in a continuous improvement cycle used in IATF 16949 and automotive quality management systems. — The Five Core Tools work together as an integrated framework that helps automotive manufacturers prevent defects, reduce risk, and achieve consistent product quality.

The aerospace supply chain — particularly in the defense sector — references five core quality tools that support AS9100 implementation. Organizations pursuing certification should have working knowledge of all five.

Step	Tool	Purpose	When Used
1	APQP (Advanced Product Quality Planning)	Structured product development process that defines what will be built and how — integrating quality planning from design through production	New product launches, design changes
2	FMEA (Failure Mode and Effects Analysis)	Systematic identification of potential failure modes and their effects on safety and quality — used to prioritize risk reduction before production begins	Design, process, and system risk analysis
3	Control Plan	Document that specifies control methods, reaction plans, and responsibilities for each step in the production process to prevent defects	Production process control
4	MSA (Measurement System Analysis)	Evaluation of measurement equipment and processes to ensure measurement systems are accurate and reliable before production data is trusted	Gauge R&R studies, calibration validation
5	PPAP (Production Part Approval Process)	Formal submission that validates all requirements are met and obtains customer approval before production launch	Customer approval before production

These tools originated in the automotive sector (they are also requirements of IATF 16949) and were adopted by aerospace because they provide structured methods for quality planning that align with AS9100’s risk-based approach. For a comparison of automotive and aerospace quality standards, see ISO 9001 vs IATF 16949.

Who Needs AS9100 Certification?

AS9100 certification is required or effectively required in the following situations:

Prime Contractors and Tier 1 Suppliers

Boeing, Lockheed Martin, Northrop Grumman, Raytheon, Airbus, and other aerospace primes require AS9100 certification from their direct suppliers. This requirement flows down through the supply chain — Tier 1 suppliers typically require AS9100 from their Tier 2 suppliers for safety-critical work.

OASIS Database Registration

The OASIS database (Online Aerospace Supplier Information System) is the global registry of AS9100, AS9110, and AS9120 certified organizations. Prime contractors use OASIS to verify supplier certification status. If you are not in OASIS, you cannot demonstrate certification to a prime.

Certification to AS9100 by an IAQG-recognized certification body results in automatic OASIS registration.

Defense Contractors

U.S. Department of Defense contracts frequently specify AS9100 or an equivalent quality management system. DFARS clauses and contract quality requirements often reference the IAQG 9100 series. Organizations pursuing defense work should verify specific contractual quality requirements — some programs require additional standards beyond AS9100.

MRO and Repair Stations

Maintenance, Repair, and Overhaul (MRO) organizations and FAA Part 145 repair stations often pursue AS9110 — the AS9100 variant for aviation maintenance organizations — rather than AS9100 itself. AS9110 addresses the specific quality requirements of maintenance operations.

Aviation Parts Distributors

Organizations that distribute aviation parts without performing manufacturing use AS9120 — the AS9100 variant for distributors. AS9120 focuses on traceability, documentation, and counterfeit parts prevention in the distribution chain.

For a full breakdown of which ISO and quality standards apply to different manufacturing operations, see ISO Standards Required for Manufacturing.

The AS9100 Certification Process

AS9100 certification follows the same two-stage audit structure as ISO 9001, with additional aerospace-specific audit requirements governed by AS9104/1 — the standard that defines how certification bodies must conduct AS9100 audits.

Stage 1 — Documentation Review

The certification body reviews your QMS documentation — the quality manual, procedures, work instructions, and records — against AS9100 requirements. Stage 1 identifies gaps that must be addressed before the Stage 2 audit.

Stage 1 for AS9100 is more rigorous than ISO 9001 Stage 1 because auditors must verify that aerospace-specific documentation is present — FAI procedures, key characteristics identification, counterfeit parts controls, product safety risk processes, and configuration management documentation.

Typical duration: 1–2 days on-site or remote.

Stage 2 — System Audit

The certification body conducts a full on-site audit of your QMS in operation. Auditors evaluate not just whether procedures exist but whether they are being followed, whether records are accurate, and whether the system is producing conforming products.

AS9100 Stage 2 audits routinely include shop floor walkthroughs, review of production records, FAI package review, supplier qualification records, and interviews with operators and inspectors — not just quality and management staff.

Typical duration: 2–5 days depending on organization size and scope.

Surveillance Audits

AS9100 certificates are valid for three years. Annual surveillance audits are required in years 1 and 2. The surveillance audit scope is determined by the certification body but must cover a rotating sample of the certified QMS — it is not a light-touch check-in.

Recertification

A full recertification audit is required in year 3. If your organization is preparing for recertification, treat it with the same rigor as the initial certification audit — auditors are looking at three years of records, trends, and management review history.

AS9100 Certification Costs

AS9100 certification is more expensive than ISO 9001 certification — the audit is longer, the audit requirements are more stringent, and IAQG-accredited auditors command a premium over general ISO 9001 auditors.

Typical Cost Ranges (2026)

Cost Category	Small Org (under 50 employees)	Mid-Size Org (50–250 employees)	Large Org (250+ employees)
Standard purchase (AS9100D)	~$200	~$200	~$200
Gap assessment	$3,000–$8,000	$8,000–$20,000	$20,000–$40,000
Implementation (internal)	$15,000–$40,000	$40,000–$100,000	$100,000–$250,000+
Consultant (if used)	$10,000–$25,000	$25,000–$60,000	$60,000–$150,000+
Stage 1 + Stage 2 audit	$8,000–$15,000	$15,000–$30,000	$30,000–$60,000+
Annual surveillance audits	$4,000–$8,000/yr	$8,000–$15,000/yr	$15,000–$30,000/yr

These are ranges, not quotes. The single biggest cost variable is internal labor — the hours your quality team, engineers, and production personnel spend on implementation. Organizations that underestimate internal labor consistently run over budget.

Factors That Drive Cost Up

Multiple sites — each site requires separate audit coverage
Complex scope — machining, welding, special processes, and NDT all require additional audit time
Low starting point — organizations with no formal QMS pay significantly more for implementation than those building on an existing ISO 9001 system
Special processes — welding, heat treatment, plating, NDT, and similar processes require specific procedure documentation and personnel qualification records that take significant time to build

The ROI Case

AS9100 certification pays for itself through contract access. A single aerospace contract that requires AS9100 certification — and that your organization could not pursue without it — typically exceeds the full cost of certification in revenue. The question is rarely whether AS9100 is worth the cost. The question is whether your organization is positioned to win the contracts that certification unlocks.

For a full cost breakdown with calculator, see ISO Certification Cost Calculator.

IA9100 — The Upcoming Revision

This is the most important current development in aerospace quality management that every AS9100-certified organization should be tracking.

Timeline infographic showing the anticipated transition from AS9100 Rev D to IA9100, including development activities beginning in 2022, a target publication date of 2026, a 2 to 3 year transition period, and expected industry adoption by 2028 to 2029. — This roadmap illustrates the expected evolution from AS9100 Rev D to IA9100 and highlights the key milestones aerospace organizations should monitor as the next generation aerospace quality standard develops.

The IAQG is developing the next revision of AS9100, which will be published under the new name IA9100. Beginning in 2022, IAQG adopted a new global naming convention — all new standards and revisions now use the “IA” prefix rather than the regional designations (AS9100 for Americas, EN9100 for Europe, JISQ9100 for Asia/Pacific). IA9100 will be a single unified global document, replacing all three regional versions simultaneously.

Why the Timing Matters

IA9100 is being developed in parallel with ISO 9001:2026, which is scheduled for publication in Q3 2026. This is intentional — AS9100 and its successor IA9100 incorporate ISO 9001 text verbatim, so IA9100 cannot be finalized until ISO 9001:2026 is published. ISO 9001:2026 is expected to introduce updates to risk-based thinking, change management, and sustainability considerations — all of which IA9100 must incorporate. The IAQG has indicated a 2026 release target for IA9100 to coincide with the ISO 9001:2026 publication.

For organizations already certified to AS9100 Rev D, the verbatim inclusion of ISO 9001 text in IA9100 means continuity — not a complete rewrite. The QMS foundation you build today carries forward. The changes will be additive, not a teardown.

Timeline

Milestone	Timing
IAQG new naming convention adopted	2022
IA9100 development begins	2022
ISO 9001:2026 target publication	Q3 2026
IA9100 target publication	2026 (aligned with ISO 9001:2026)
Transition window (historical precedent)	2–3 years after publication

What This Means for Your Organization

Organizations currently certified to AS9100 Rev D do not need to do anything differently today. Rev D remains the valid and active standard. Certification bodies are still issuing AS9100 Rev D certificates.

What you should do:

✅ Continue pursuing or maintaining AS9100 Rev D certification — there is no reason to wait for IA9100

✅ Begin monitoring IAQG communications for formal transition requirements

✅ Note that the transition window (estimated 2–3 years) gives certified organizations significant time to adapt

⚠️ Do not let IA9100 uncertainty delay certification decisions — the aerospace supply chain is not pausing AS9100 requirements while the revision is finalized

Where to Buy the AS9100 Standard

AS9100 Rev D is an SAE standard distributed through authorized channels. The ANSI Webstore is the authorized U.S. source for SAE standards and serves international buyers with standards available in multiple languages.

→ SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

→ Save up to 50% on ANSI Standard Packages — bundles covering AS9100 with ISO 9001 and related aerospace standards

The ANSI Webstore also offers a SAE AS9100D and ISO 9001 QMS Requirements Set — a bundle that includes AS9100D, ISO 9001:2015, and the ISO 9001 amendment, which is particularly useful for organizations building a combined AS9100/ISO 9001 system or transitioning from ISO 9001 to AS9100.

For a full guide on purchasing from authorized sources, see Where to Buy ISO Standards.

AS9100 Training and Certification Resources

Pursuing AS9100 certification requires trained personnel — internal auditors who understand the aerospace-specific requirements, quality managers who can build and maintain a compliant system, and leadership that understands what AS9100 commitments mean operationally.

Training Options

👉 BSI Group AS9100 Training — BSI Group is one of the most recognized certification bodies globally, offering AS9100 foundation, internal auditor, and lead auditor training. Their training is built around real audit experience and reflects what auditors actually look for.

👉 ISOQAR AS9100 Training — ISOQAR offers ISO-family training courses covering auditor qualifications and QMS implementation. Position alongside BSI as a second training option for your team.

Choosing an AS9100 Certification Body

Only certification bodies accredited under the IAQG’s ICOP (International Certification Organization for OASIS) scheme can issue AS9100 certificates that appear in the OASIS database. Verify any certification body’s ICOP accreditation status directly at ANAB before signing a contract — this is non-negotiable. A certificate from a non-ICOP certification body does not satisfy prime contractor requirements.

Major ICOP-accredited certification bodies include BSI Group, Bureau Veritas, DNV, Intertek, DEKRA, NQA, Perry Johnson Registrars, and SGS. For a ranked comparison of certification bodies, see Best ISO Certification Bodies.

AS9100 Implementation Checklist

Before your Stage 1 audit, verify these aerospace-specific elements are in place:

✅ Product safety risk assessment documented and integrated into operations

✅ Counterfeit parts prevention procedure — procurement, receiving, and storage controls

✅ Configuration management procedure covering design baseline, changes, and deviations

✅ Key characteristics identified on drawings and linked to control plans

✅ First Article Inspection (FAI) procedure referencing AS9102

✅ Human factors considered in work instruction and process design

✅ Special process controls — welding procedures, heat treatment specs, NDT procedures, qualified personnel records

✅ Supplier qualification records for all external providers supplying safety-critical items

✅ OASIS registration completed after certification

✅ Internal auditors trained to AS9100 Rev D requirements — not just ISO 9001

Download the Free AS9100 Rev D Gap Assessment Checklist

Knowing the requirements is one thing. Knowing where your organization actually stands against them is another.

The AS9100 Rev D Gap Assessment Checklist gives you a structured, clause-by-clause evaluation of your current QMS across 74 requirements and 12 sections — including the four AS9100-specific areas that generate the majority of first-time audit failures:

Product safety (Clause 8.1.1)
Counterfeit parts prevention (Clause 8.1.4)
Configuration management (Clause 8.1.3)
Key characteristics (Clause 8.1.2)

Mark each item YES, PARTIAL, or NO. The scoring guide tells you exactly where you stand and what to prioritize before you invest in certification.

It takes under 45 minutes and is completely free.

👉 Download the AS9100 Rev D Gap Assessment Checklist

AS9100 Rev D gap assessment checklist showing aerospace quality management requirements, audit readiness evaluation, and certification preparation for aerospace manufacturers and suppliers. — Use an AS9100 Rev D gap assessment checklist to identify quality management system weaknesses before your certification audit.

Frequently Asked Questions

What is AS9100 certification?

AS9100 certification is formal third-party verification that an organization’s quality management system meets the requirements of AS9100 Rev D — the aerospace industry quality standard. Certification is issued by IAQG-accredited certification bodies and results in registration in the OASIS database, which prime contractors use to verify supplier qualification.

What is the difference between AS9100 and ISO 9001?

AS9100 Rev D includes all ISO 9001:2015 requirements plus approximately 105 aerospace-specific additions covering product safety, counterfeit parts prevention, configuration management, key characteristics, first article inspection, and human factors. Organizations certified to AS9100 automatically satisfy ISO 9001 requirements. ISO 9001 certification alone does not satisfy AS9100 requirements.

What does AS9100 Rev D mean?

Rev D indicates the fourth major revision of the AS9100 standard. AS9100 was first published in 1999 (Rev A), revised in 2001 (Rev B), 2004 (Rev C), and 2016 (Rev D). Rev D is the current active edition and the only version accepted for certification. A new revision — to be rebranded as IA9100 — is expected in late 2026.

How long does AS9100 certification take?

Organizations with no existing QMS typically require 12–24 months to implement AS9100 and achieve certification. Organizations with an existing ISO 9001 system can often achieve AS9100 certification in 6–12 months, depending on the gap between their current QMS and AS9100’s aerospace-specific requirements. See How Long Does ISO Certification Take for a phase-by-phase timeline breakdown.

Do I need AS9100 if I already have ISO 9001?

ISO 9001 is the foundation of AS9100 — but it is not a substitute. If your aerospace customers or contracts require AS9100 certification, ISO 9001 alone does not satisfy that requirement. The aerospace-specific requirements in AS9100 (product safety, counterfeit parts, configuration management, FAI, key characteristics) are not addressed in ISO 9001.

What is OASIS and why does it matter?

OASIS (Online Aerospace Supplier Information System) is the global database of AS9100, AS9110, and AS9120 certified organizations maintained by the IAQG. Prime contractors use OASIS to verify that suppliers hold valid certification from an ICOP-accredited certification body. Only certification bodies operating under ICOP accreditation can register certifications in OASIS. A certificate from a non-ICOP body does not appear in OASIS and does not satisfy prime contractor supplier qualification requirements.

What is IA9100 and when will it replace AS9100?

IA9100 is the next revision of the AS9100 aerospace quality management standard, developed by the IAQG. Beginning in 2022, IAQG adopted a new global naming convention — all new standards and revisions now use the “IA” prefix. IA9100 is being developed in parallel with ISO 9001:2026 because IA9100 incorporates ISO 9001 text verbatim and cannot be finalized until ISO 9001:2026 is published. ISO 9001:2026 is expected to introduce updates to risk-based thinking, change management, and sustainability considerations — all of which IA9100 must incorporate. ISO 9001:2026 is scheduled for Q3 2026, and the IAQG has indicated a 2026 release target for IA9100 as well. Once published, organizations will have a formal IAQG-defined transition period — historically 2–3 years — to migrate from AS9100 Rev D. Because IA9100 incorporates ISO 9001 text verbatim, the transition will be additive rather than a complete system rewrite. Both the IAQG and NASA have explicitly stated that organizations should continue certifying to AS9100 Rev D now rather than waiting for IA9100.

How much does AS9100 certification cost?

AS9100 certification costs vary significantly by organization size and complexity. A small organization (under 50 employees) with a limited scope can expect total first-year costs of $30,000–$80,000 including implementation, training, and audit fees. Mid-size organizations typically spend $80,000–$200,000. Annual surveillance audits run $4,000–$15,000 depending on size. See How Much Does ISO Certification Cost for a full breakdown.

📥 Free Resources

👉 ISO 9001 Roadmap
👉 Manufacturing Compliance Checklist
👉 Supplier Quality Checklist
👉 ISO 13485 Gap Assessment Checklist
👉 AS9100 Rev D Gap Assessment Checklist — 74 items across 12 sections, including all AS9100-specific requirements

Not Sure What to Do Next?

🔹 You need the official AS9100 Rev D standard

→ SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

🔹 You want to save buying AS9100 with ISO 9001 and related standards

→ Save up to 50% on ANSI Standard Packages — AS9100D and ISO 9001 bundle available

🔹 You’re ready to pursue AS9100 certification

→ BSI Group AS9100 Certification

🔹 You need AS9100 training for your quality team

→ BSI Group AS9100 Training

→ ISOQAR ISO Training Courses

🔹 You want to understand how AS9100 compares to ISO 9001

→ ISO 9001 vs IATF 16949 — covers the ISO 9001 vs industry-specific standard comparison framework

→ ISO 9001 Certification Guide

🔹 You want to understand certification costs before committing

→ How Much Does ISO Certification Cost?

→ ISO Certification Cost Calculator

🔹 You need a certification body recommendation

→ Best ISO Certification Bodies

🔹 You want to understand implementation timelines

→ How Long Does ISO Certification Take?

→ ISO Implementation Timeline for Manufacturers

AS9100 Is the Standard. The Question Is When.

If your organization is in aerospace, defense, or aviation manufacturing — or wants to be — AS9100 certification is not a question of if. It is a question of when and how to get there efficiently.

The organizations that struggle with AS9100 are almost always the ones that treat it as a documentation project rather than a genuine quality system. The organizations that pass their first audit without major findings are the ones that understand the standard’s intent — that in aerospace, quality failures are not defects you rework or customer complaints you manage. They are incidents with consequences that cannot be reversed.

At The Standards Navigator, AS9100 and the broader aerospace compliance landscape are covered in depth — from the standard itself to implementation strategy, audit preparation, and certification body selection.

👉 Get updates on aerospace quality standards, implementation guidance, and compliance insights delivered directly.

👉 Be first to access new AS9100 guides, tools, and checklists as they publish.

Subscribe below to stay ahead.

AS9100 Doesn’t Require a Training Course. It Requires Competent People.

Table of Contents

👉 Start Here: Where to Look Into AS9100 Training

What BSI’s AS9100 Training Actually Covers

Pros and Cons of BSI AS9100 Training

How BSI Compares to Other AS9100 Training Providers

What It Costs — and How BSI’s Pricing Model Works

Formal Training vs. Alternatives: A Straight Comparison

The Real Question: What’s the Most Efficient Path to Auditor Competence?

The ROI Question: What Training Actually Establishes

✅ Quick Checklist: Is Your Shop Ready to Book Training?

FAQ

Is AS9100 training legally required for certification?

How long does BSI’s AS9100 internal auditor course take?

Does the training include a copy of the AS9100 standard?

Can one person get trained and cover the whole shop’s internal audit needs?

Is virtual training as effective as in-person for AS9100?

Does BSI training count toward recertification of an existing auditor?

What’s the difference between BSI’s requirements course and internal auditor course?

Is ISOQAR an alternative for AS9100 training?

📥 Free Resources

Not Sure What to Do Next?

Stay Ahead of Aerospace Audit Requirements

Subscribe

Your Internal Audit Program Is What Helps Keep Your AS9100 Certification Credible

In This Guide

Table of Contents

👉 Start Here (Top Resources)

What Clause 9.2 Actually Requires

The AS9100 Internal Audit Process: A Six-Part Workflow Built From Clause 9.2.2

1. Audit Program

2. Audit Criteria and Scope

3. Auditor Selection

4. Reporting Results

5. Corrective Action

6. Retained Documentation

What Should an AS9100 Internal Audit Checklist Include?

How Internal Audit Results Feed Into Management Review

Objection: “We Don’t Have Staff to Audit Objectively”

Quick Internal Audit Readiness Checklist

Frequently Asked Questions

What does Clause 9.2 of AS9100 actually require?

How often do AS9100 internal audits need to happen?

Can one person run the entire internal audit program on a small team?

Do internal audit findings have to be reported to the registrar?

What’s the difference between an internal audit and the AS9101 certification audit?

Can internal audits be conducted remotely?

What happens if our internal audit program has gaps when the registrar shows up?

Is a documented procedure enough, or do we need to prove the audits actually happened?

📥 Free Resources

Not Sure What to Do Next?

Before You Go

Subscribe

When a Traceability Gap Grounds an Audit

In This Guide

Table of Contents

👉 Start Here (Top Resources)

AS9100 Traceability Requirements: What Clause 8.5.2 Actually Says

The Five Requirements of Identification and Traceability

Acceptance Authority Media Controls

Configuration Management and Traceability

Supplier and Sub-Tier Traceability

Common Audit Findings

Traceability and Counterfeit Parts Prevention

Quick Audit Checklist

FAQ

Does AS9100 require traceability for every single part and material?

What’s the difference between identification and traceability under AS9100?

Do consumables like sealants and primers need lot traceability?

How long do we need to retain traceability records?

What triggers a nonconformance in this area during an audit?

Does traceability apply differently to Tier 1 vs. lower-tier suppliers?

Can a digital traceability system replace paper travelers entirely?

Is acceptance authority media required, or only if we choose to use stamps?

📥 Free Resources

Not Sure What to Do Next?

📬 Stay Ahead of Your Next Traceability Audit

Subscribe

Your Customer Gave You a Certification Deadline. Does Your Timeline Actually Support It?

In This Guide