A Phase-by-Phase Roadmap for Aerospace Suppliers Building or Upgrading a Certified QMS
Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.
Your Customer Gave You a Certification Deadline. Does Your Timeline Actually Support It?
A prime contractor names a date. Get AS9100 certified by then, or the contract goes to a supplier who already has it. Knowing your real AS9100 implementation timeline — not a generic industry average — is what decides whether you hit that date.
That deadline usually comes with a generic number attached — “certification takes 6 to 12 months” — pulled from a webpage, a consultant’s pitch deck, or a competitor who mentioned their own timeline once in passing. It becomes the plan. Nobody stress-tests it against the actual starting point of the organization that has to hit it.
That’s the gap that causes missed certification windows. Not the audit itself — the assumption that a generic timeline applies to your specific starting point, scope, and current QMS maturity.
This guide is your AS9100 certification roadmap: it breaks the timeline into its actual phases, shows how your starting point changes the math, and flags the points where projects most commonly slip.
From the Floor: I’ve sat in the kickoff meeting for a certification project where the plan called for an eight-month timeline, built around a template someone found online. Three weeks into the gap assessment, we found there wasn’t a documented configuration management process anywhere in the building — not a paperwork gap, a practice gap. That one finding alone pushed the schedule two months, because you can’t get audit-ready on a process that doesn’t exist yet. The timeline failures I’ve seen almost never come from the audit dates. They come from assuming the starting point is further along than it actually is.
Before you commit to a certification date with a customer, find out where your QMS actually stands today →
In This Guide
- How your starting point changes the AS9100 timeline
- A phase-by-phase breakdown with realistic durations
- What each phase actually requires, aerospace-specific systems included
- The most common reasons AS9100 timelines slip
- Whether the upcoming IA9100 revision should change your start date
- A readiness checklist before you commit to a deadline
Table of Contents
👉 Start Here (Top Resources)
- SAE AS9100D — ANSI Webstore — the official current edition, required before you can gap-assess against anything real. Use code CC2026 for 5% off through December 31, 2026.
- AS9100 Training — BSI Group — foundation and internal auditor training built around aerospace-specific clauses, not a generic ISO 9001 course.
- Save up to 50% on ANSI Standard Packages — bundling AS9100D with ISO 9001 is worth checking before buying each document separately.
How Long Does AS9100 Certification Take?
The short answer to the AS9100 implementation timeline question depends entirely on where you’re starting from:
- Organizations with no existing QMS: realistically 12–24 months from kickoff to certificate
- Organizations already ISO 9001 certified: realistically 6–12 months
- Multi-site or complex-scope operations (special processes, multiple product lines): add 3–6 months to either baseline
- The gap assessment phase determines almost everything downstream — most timeline overruns trace back to an optimistic or incomplete one
- Aerospace-specific systems — product safety, counterfeit parts prevention, configuration management, key characteristics, FAI — are the phase most first-time implementers underestimate
- Certificate issuance follows Stage 2 audit closure, not the audit itself — corrective action closure adds real time on top of the audit dates

The Three Starting Points That Determine Your Timeline
A single “AS9100 takes X months” answer doesn’t hold up, because the honest answer depends entirely on what you’re building from.
Building a QMS From Scratch
If you are starting with no formal quality management system today → plan for 12–24 months. Much of this duration is driven by the need to operate the system long enough to generate audit evidence, not simply write procedures. Every element has to be built: document control, management review, internal audit program, and all of AS9100’s aerospace-specific additions on top. This isn’t a documentation exercise you can compress by working weekends — several phases require the system to actually run for months before there’s enough evidence for an auditor to evaluate.
Extending an Existing ISO 9001 System
If you are already ISO 9001 certified → plan for 6–12 months. Your management review, internal audit program, document control, and corrective action processes carry forward largely intact. What’s new is the aerospace-specific layer: product safety, counterfeit parts prevention, configuration management, key characteristics, First Article Inspection, and human factors. For the full list of what’s genuinely new versus what’s already covered by your ISO 9001 system, see AS9100 vs ISO 9001.
Adding a Second Site to an Existing AS9100 Certification
If you already hold AS9100 certification and are extending scope to a new facility → this is typically the fastest path, often 4–8 months, since your corporate-level QMS structure, document control, and management review already exist. The work concentrates on site-specific procedures, local training, and generating enough site-level records for the certification body to evaluate.
Phase-by-Phase Timeline
| Phase | No Existing QMS | Existing ISO 9001 |
|---|---|---|
| Gap assessment and project planning | 4–8 weeks | 3–5 weeks |
| Documentation development (QMS core) | 8–14 weeks | 3–6 weeks |
| Aerospace-specific systems build | 8–16 weeks | 6–12 weeks |
| Team training | 3–6 weeks (overlapping) | 2–4 weeks (overlapping) |
| System operation and record generation | 12–20 weeks minimum | 8–12 weeks minimum |
| Internal audit and management review | 3–4 weeks | 2–3 weeks |
| Stage 1 audit and gap closure | 3–6 weeks | 2–4 weeks |
| Stage 2 audit | 2–5 days on-site | 2–5 days on-site |
| Corrective action closure and certificate issuance | 4–12 weeks | 4–8 weeks |
These ranges assume a single-site, moderate-complexity operation. Special processes — welding, heat treatment, plating, NDT — extend the aerospace-specific build phase because each requires its own qualified-personnel records and process validation on top of the base requirements.
What Each Phase Actually Involves
Understanding the AS9100 implementation timeline phase by phase is what turns a generic estimate into a plan you can actually hold a customer to.
Gap Assessment
This phase sets the accuracy of everything that follows it. A gap assessment against AS9100 needs to evaluate the aerospace-specific clauses with the same rigor as the ISO 9001 core — product safety, counterfeit parts, configuration management, key characteristics, and FAI readiness are where generic gap assessments consistently under-scope the work.
Most common finding: Gap assessments performed by someone trained only in ISO 9001, who scores the aerospace-specific clauses as “in progress” without a clear picture of what a compliant version of each actually looks like.
Not sure how far you are from certification? Download the AS9100 Rev D Gap Assessment Checklist and identify timeline risks before they affect your customer’s deadline →
Building the Aerospace-Specific Systems
This is the phase most first-time AS9100 implementers underestimate, because it doesn’t map to anything in a standard ISO 9001 rollout. It covers building out:
- Product safety risk identification and controls
- Counterfeit parts prevention across procurement and receiving
- Configuration management for design baselines and changes
- Key characteristics identification and control planning
- First Article Inspection procedures referencing AS9102
- Human factors consideration in process and workstation design
- Special process controls and qualified-personnel records, where applicable
Each of these gets its own dedicated treatment elsewhere on this site as we continue building out the aerospace cluster — this section is about scoping the time commitment, not the clause-by-clause detail.

Training Your Team
Internal auditors need training specific to AS9100’s aerospace-specific requirements, not just ISO 9001 fundamentals — an internal auditor who only understands ISO 9001 will miss the findings an external AS9100 auditor is specifically trained to catch. See ISO Training for AS9100, ISO 13485 & ISO 50001 for where to get aerospace-specific training, and BSI vs ISOQAR for how to choose between the two most common training and certification body options.
Operating the System and Generating Records
If you are tempted to compress this phase → don’t. Certification bodies expect to see the system operating long enough to generate a meaningful record set — internal audits with findings and closures, management review minutes, at least one completed FAI package, and supplier qualification records. A system that’s only existed on paper for three weeks doesn’t have enough history for an auditor to evaluate.
Aerospace certification auditors are not simply evaluating whether procedures exist. They are evaluating whether those procedures have been consistently followed across actual production, purchasing, receiving, inspection, and corrective action records. Evidence matters more than documentation — this is the core difference between an ISO 9001 audit and an AS9100 audit, and it’s the reason this phase can’t be compressed just because the paperwork is finished.
From the Floor: One supplier I worked with planned to schedule Stage 1 six weeks after completing their documentation. The procedures looked solid, but they hadn’t generated enough records to demonstrate the system was functioning. Internal audits hadn’t been completed, supplier evaluations were still pending, and management review had never occurred. The documentation was ready, but the system wasn’t. They delayed Stage 1 by nearly two months and ultimately avoided what would have become a much more painful Stage 2 audit.
Internal Audit and Management Review
Your internal audit program has to specifically cover the aerospace-specific clauses, not just the ISO 9001 core — auditors need to verify product safety controls, counterfeit parts procedures, and configuration management records with the same scrutiny as document control and corrective action.
Stage 1 and Stage 2 Audits
Stage 1 verifies your documentation is complete and ready for Stage 2 — expect this to run longer for AS9100 than for a standard ISO 9001 Stage 1, since the auditor is confirming aerospace-specific documentation exists before scheduling Stage 2. Stage 2 is the full on-site system audit, including shop floor walkthroughs, FAI package review, and operator interviews.
Closing Corrective Actions and OASIS Registration
If your Stage 2 audit identifies nonconformances → certification bodies typically require corrective action responses within a defined window, often in the 30–90 day range depending on the finding and the certification body’s specific procedures; major findings can require a return audit, which resets a meaningful chunk of the timeline. Certificate issuance follows corrective action closure, not the audit date itself. Once your certificate is issued by an ICOP-accredited certification body, OASIS registration follows automatically — this is the database prime contractors check to verify your certification status.

What Slows Down an AS9100 Timeline
Treating the gap assessment as a formality instead of the project’s foundation. A rushed or generic gap assessment produces an optimistic timeline that collapses the first time an auditor finds something the assessment missed.
Underestimating the aerospace-specific build phase. Organizations coming from ISO 9001 alone routinely assume the aerospace-specific additions are a light layer on top of what they already have. Product safety, counterfeit parts prevention, and configuration management are frequently built from nothing.
Not budgeting time for the system to actually run. Documentation can be written quickly. Evidence that the system is operating — internal audit history, management review records, a completed FAI package — cannot be generated overnight, no matter how much internal pressure exists to compress the calendar.
Underestimating special process requirements. Welding, heat treatment, plating, and NDT each carry their own qualified-personnel records and process validation requirements that extend the timeline beyond a standard machining or assembly scope.
Committing to a customer deadline before the gap assessment is complete. This is the single most common planning mistake. The deadline gets set first, based on a generic timeline; the actual gap assessment — which should inform the deadline — happens after the commitment is already made.
If you haven’t run a structured gap assessment yet, that’s the step to complete before setting any date with a customer →
Get the AS9100 Rev D Gap Assessment Checklist
Should You Wait for IA9100 Before Starting?
No. AS9100 Rev D remains the current, actively audited standard, and certification bodies are still issuing Rev D certificates. IA9100 — the upcoming revision — is expected to align with ISO 9001:2026, and once published will come with a formal transition window, historically 2–3 years. Because IA9100 incorporates ISO 9001 requirements directly, the transition is expected to be additive to an existing AS9100 system, not a rebuild. Our What Is AS9100 guide covers the full IA9100 timeline and what the transition is expected to involve.
If a customer requirement or contract deadline is driving your timeline today → there is no reason to delay pursuing AS9100 Rev D certification while waiting for a standard that hasn’t published yet.
Quick Timeline-Readiness Checklist
✅ Gap assessment completed against the current AS9100D edition, not a generic ISO 9001 checklist
✅ Aerospace-specific systems (product safety, counterfeit parts, configuration management, key characteristics, FAI) scoped individually, not bundled as “documentation”
✅ Internal auditors trained specifically on AS9100’s aerospace-specific clauses
✅ Special process qualifications (welding, heat treatment, plating, NDT) identified and budgeted for separately
✅ Realistic operating period built into the schedule before Stage 1 — not compressed to meet an external deadline
⚠️ If your certification deadline was set before your gap assessment was complete, revisit it now rather than after Stage 1 uncovers the gap
FAQ
How long does AS9100 certification typically take?
Organizations building a QMS from scratch typically need 12–24 months. Organizations already certified to ISO 9001 typically need 6–12 months, since document control, internal audit, and management review processes carry forward. Multi-site or special-process operations should add 3–6 months to either estimate.
What’s the fastest realistic timeline for AS9100 certification?
For an organization already ISO 9001 certified, with a focused scope and dedicated project resources, 6 months is achievable — but only if the gap assessment is thorough and the aerospace-specific systems build starts immediately rather than after documentation is finished.
Can we skip building an ISO 9001 system first and go straight to AS9100?
Yes. AS9100 includes all ISO 9001 requirements within it — there’s no requirement to certify to ISO 9001 first. Building directly to AS9100 from scratch simply means the ISO 9001 core and the aerospace-specific additions get built in parallel rather than sequentially, which is reflected in the longer 12–24 month timeline for organizations with no existing QMS.
What’s the single biggest risk to an AS9100 implementation timeline?
Underestimating the aerospace-specific systems build — product safety, counterfeit parts prevention, configuration management, key characteristics, and First Article Inspection. Organizations coming from ISO 9001 alone consistently plan for these as a light addition rather than the substantial build they typically require.
Does the Stage 2 audit date mark the end of the timeline?
No. Certificate issuance follows the closure of any corrective actions identified during Stage 2 — typically 4–12 weeks beyond the audit date itself, depending on finding severity. Major nonconformances can require a return audit, which extends the timeline further.
How much does special process qualification add to the timeline?
Welding, heat treatment, plating, and NDT each require their own qualified-personnel records and process validation on top of the base AS9100 requirements. Depending on how many special processes are in scope, this can add 4–10 weeks to the aerospace-specific systems build phase.
Should we hire a consultant to compress the timeline?
A consultant can help you avoid rework and scope the aerospace-specific systems accurately, which reduces the risk of timeline slippage — but no consultant can compress the system-operation phase, since certification bodies need to see evidence the QMS has actually been running, not just documented.
What happens if our certification deadline arrives before we’re ready?
Pursuing certification before the system has genuinely operated long enough typically results in Stage 2 findings that extend the timeline further than waiting would have. A missed customer deadline is a difficult conversation; a failed Stage 2 audit against a rushed system is usually a worse one.
📥 Free Resources
- ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
- Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
- Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
- ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
- AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification
Not Sure What to Do Next?
🔹 You’re still scoping whether AS9100 is the right standard → Start with What Is AS9100 for the full requirements picture before you commit to a timeline.
🔹 You’re ready to find out where your QMS actually stands → Download the AS9100 Rev D Gap Assessment Checklist before you set any certification date with a customer.
🔹 You need to understand the full cost picture alongside the timeline → How Much Does AS9100 Certification Cost?
🔹 You need the official standard before you can gap-assess anything → SAE AS9100D — ANSI Webstore, or save on a bundle if you’re pairing it with ISO 9001.
🔹 You need training or a certification body recommendation → BSI Group AS9100 Training, or Best ISO Certification Bodies for a ranked comparison.
The Timeline Is Real. The Deadline Should Follow It, Not the Other Way Around.
A customer-driven deadline is real pressure, but it isn’t a substitute for an honest gap assessment. The organizations that hit their certification date are almost always the ones that scoped their actual starting point before committing to one — not the ones that worked backward from a generic number and hoped the gap assessment would agree with it.
At The Standards Navigator, we cover the full AS9100 certification path — from the standard itself to implementation sequencing, aerospace-specific requirements, and certification body selection — so your AS9100 implementation timeline is built on your actual starting point, not someone else’s.
👉 Get updates on AS9100 implementation guidance and aerospace compliance insights
👉 Be first to access new aerospace cluster guides and tools as they publish
Subscribe below to stay ahead.
The Standards Navigator — Industrial Compliance. Clearly Explained.
















