gap assessment

BSI AS9100 Training Review: Is It Worth It for Small Manufacturers in 2026?

AS9100 doesn’t require a specific training course — it requires competent auditors. This review breaks down what BSI’s AS9100 training actually covers, its pros and cons against other providers, realistic cost ranges, and a five-scenario framework for deciding whether formal training is the most efficient path for your shop.

AS9100 doesn’t require you to buy a training course — it requires competent people. Here’s how to figure out the most efficient path to get there

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

AS9100 Doesn’t Require a Training Course. It Requires Competent People.

Nearly every training provider will tell you their course is essential. Here’s what the standard itself actually requires: it doesn’t name BSI, ISOQAR, or anyone else. It requires that your internal auditors be competent — genuinely capable of planning, conducting, and reporting an effective audit against AS9100.

That leaves you with a real question, not a marketing one: is formal BSI AS9100 training the most efficient way for your shop to establish that competence, or is there a faster, cheaper path that gets you there just as well?

This isn’t a promotional writeup for BSI’s course catalog. It’s a decision framework for figuring out which path fits where your shop actually stands — and what that path costs.

From the Floor: I’ve sat in on the decision more than once — which employees get sent to formal standards training and which get handed the standard and told to figure it out. The pattern I’ve seen holds regardless of which standard is involved: the people who come back and actually change how audits get run aren’t the ones who sat through the most polished course. They’re the ones who used the class time to work through their own facility’s real nonconformances instead of generic case studies. That’s the filter I’d apply before signing off on any training spend — including this one.

If you haven’t run a gap assessment against AS9100 Rev D yet, that’s the decision that should come before a training decision — not after. Operations managers who evaluate training before understanding their QMS gaps may be solving the wrong problem first.

👉 Before you spend a dime on training, find out exactly where your QMS stands. Run the AS9100 Rev D Gap Assessment Checklist — a 74-item, 12-section clause-by-clause tool that shows you precisely which sections need work before you decide who needs training and in what format.

In This Guide:

What BSI’s AS9100 training actually covers, course by course
The honest pros and cons of BSI’s training — and how it compares to other providers
What it costs — and how BSI’s pricing model actually works
A decision framework: which competence-building path fits your shop
A cost comparison: formal training vs. experience-based routes vs. skipping it
What training actually establishes, and where it doesn’t help
FAQ: certificates, recertification, and whether training is technically required

👉 Start Here: Where to Look Into AS9100 Training

If your shop is evaluating formal AS9100 training, BSI Group is one of the established providers worth comparing against — its AS9100 training portfolio covers requirements training, internal auditor training, and lead auditor training. Review BSI’s AS9100 training course options.

If you haven’t bought a current copy of the standard yet, check whether the current course fee includes a copy of the applicable standard. If it doesn’t, budget separately for your copy before class starts. Purchase the current AS9100/SAE standard through ANSI Webstore.

What BSI’s AS9100 Training Actually Covers

BSI’s AS9100 training isn’t a single course — it’s a track, and small manufacturers tend to only need the first one or two levels of it.

The entry-level course covers the AS9100 Rev D requirements themselves: what each clause demands, how the aerospace-specific additions build on the ISO 9001 foundation, and how the standard maps to your existing documentation. This is the right starting point if your team understands ISO 9001 already but has never worked with the aerospace-specific clauses — configuration management, first article inspection, counterfeit parts controls, and the rest.

The internal auditor course goes a step further. It’s built around conducting audits against AS9100 and AS9101, and it typically runs as a multi-day, instructor-led format — in person or live online — with practical audit exercises rather than lecture alone. This is the course that matters most if you’re planning to run your own internal audit program instead of outsourcing every internal audit to a consultant.

Beyond that sits lead auditor training, which is usually more than a small shop needs unless someone is being developed to lead aerospace audits or pursue auditing professionally.

If you are new to AS9100 and still building your quality management system → start with the requirements-level course, not internal auditor training. You can’t audit effectively against clauses your team doesn’t understand yet.

BSI AS9100 training path showing requirements, internal auditor, and lead auditor training levels — BSI AS9100 training offers different levels of learning, from understanding AS9100 requirements to developing internal and lead auditor skills.

Pros and Cons of BSI AS9100 Training

What BSI Does Well

Established global training and certification organization with a broad aerospace training portfolio
Full AS9100 course catalog spanning requirements, internal auditor, and lead auditor levels
Both live online and in-person delivery formats available
Course completion certificates from an established training provider
In-house delivery available for training multiple employees at once

Potential Drawbacks

Pricing isn’t published upfront for most course types — expect to go through a quote request
May run higher than some smaller or regional training providers, depending on format and group size
Course value depends heavily on where your team already stands — a requirements-level course won’t add much for an already-experienced auditor, and an internal auditor course won’t help a team with no prior standard familiarity
Small shops adding AS9100 to an existing ISO 9001 program may only need the requirements-level course, not BSI’s full auditor track

How BSI Compares to Other AS9100 Training Providers

BSI isn’t the only organization offering AS9100 training. Smaller, regional, and boutique training providers also run AS9100 requirements and internal auditor courses, and sometimes at a lower per-seat cost than a multi-national provider like BSI. A provider with an established aerospace training portfolio may offer a familiarity advantage, but don’t assume the provider’s name substitutes for demonstrated auditor competence.

If you’re comparing multiple providers, weigh course content and instructor experience against price alone. An aerospace-specific internal auditor course taught by an instructor with real AS9100 audit experience is worth more than a generic quality-auditing course relabeled for aerospace. Ask any provider — BSI included — how their course specifically addresses the AS9100-unique clauses (configuration management, counterfeit parts, first article inspection) rather than treating AS9100 as ISO 9001 with an extra chapter.

What It Costs — and How BSI’s Pricing Model Works

This is the part that frustrates small manufacturers the most: BSI’s course pages typically direct buyers toward public-course enrollment for individual seats and a separate quote process for private or in-house training, so pricing can vary by course, delivery format, and group size rather than sitting on a single published price list.

That’s not unusual for the industry, and it also means published cost figures age fast. A rough, non-exhaustive comparison across a few established AS9100 training providers suggests 2-day internal auditor courses can run anywhere from roughly $1,000 to $1,600+ per seat depending on provider, country, and delivery format — treat this as an illustrative snapshot rather than a sourced market rate, and confirm current pricing directly with the provider before budgeting.

A practical consideration: shops training more than one or two people are generally better served requesting an in-house quote for the whole quality team rather than booking individual seats one at a time — it’s worth comparing against per-seat pricing, and it often means the session gets built around your actual facility’s documentation instead of a generic case study.

Two things push the real cost higher than the course fee alone:

Check whether the standard itself is included. Course fees don’t always cover it — if it isn’t, budget separately for your copy.
Travel and time away from the floor add up fast for in-person formats — live online delivery can be a practical choice for smaller shops trying to control the total cost.

If your facility hasn’t priced out the full certification path yet — training, gap assessment, documentation, audit fees — that’s worth doing before training in isolation. See the full breakdown of what AS9100 certification actually costs.

Formal Training vs. Alternatives: A Straight Comparison

Approach	What You Get	Best For	Typical Cost Range
BSI formal training (requirements or internal auditor course)	Structured instruction, practical audit exercises, recognized course certificate	Shops building an internal audit program from scratch or preparing for first-time AS9100 certification	Varies by provider, format, country, and group size — confirm current pricing directly before budgeting
Experience-based route (auditor learns on the job, under an existing certified internal auditor)	Practical familiarity, no course fee	Shops that already have at least one AS9100-experienced auditor on staff to mentor others	Time cost only — no direct training fee
Documentation kit + self-study (no formal course)	Templates and structure, but does not by itself establish internal-auditor competence	Shops still in the early documentation-build phase, not yet auditing	Cost of the documentation kit only

If you are preparing for your first AS9100 certification and have no one on staff with prior aerospace QMS audit experience → formal training is one of the strongest ways to build and demonstrate the required auditor competence. Self-study can contribute to that competence, but you’ll need a defensible way to show your internal auditor is capable of planning and conducting effective audits.

If you are already ISO 9001 certified and simply adding the AS9100-specific clauses → your existing internal auditors may only need requirements-level training rather than repeating a full internal auditor course.

The Real Question: What’s the Most Efficient Path to Auditor Competence?

Not every shop needs the same answer. Where you land depends on what competence you already have on staff — not on whether training is generically “a good idea.”

No aerospace experience and no internal audit experience on staff → Formal training is highly valuable here. This is the shop with the least existing competence to draw on, and a structured course is one of the more direct and defensible ways to build it.

Strong QMS experience and already-trained internal auditors, but new to aerospace → Requirements-level training is often the better starting point, not a full internal auditor course. Your team already knows how to audit — they need the aerospace-specific clause knowledge, not a repeat of general auditing fundamentals.

An experienced aerospace auditor already on staff → You may not need to send everyone through the same course. That person can mentor others through the aerospace-specific requirements, and only newer team members may need formal training.

Multiple employees need the same training → Compare public-seat pricing against in-house delivery before booking. In-house sessions built around your own facility’s documentation are often the more efficient option once you’re training more than one or two people.

No mature QMS yet → A gap assessment and requirements-level understanding should come before loading anyone into auditor training. Sending a team through internal auditor training before the documentation exists may mean teaching them to audit against requirements you haven’t fully built out yet.

⚠️ Common mistake: sending a single employee to lead auditor training as a first step, before the shop has even completed its documentation. That course assumes working familiarity with the standard already in place — it’s the wrong entry point for a shop still building its QMS.

The ROI Question: What Training Actually Establishes

BSI AS9100 training and auditor competence comparison showing training knowledge, audit methods, experience, and demonstrated ability — BSI AS9100 training can help build auditor competence, but completing a course does not replace demonstrated auditing ability.

Training helps establish auditor competence — it doesn’t replace the underlying requirement to actually demonstrate that competence. That distinction matters more than the sales pitch usually lets on: an internal auditor doesn’t need a specific course, they need to be genuinely capable of planning and conducting an effective audit, however they got there.

Where training earns its cost is in areas like configuration management, counterfeit parts controls, and first article inspection — areas where generic ISO 9001 knowledge may not transfer cleanly to aerospace-specific requirements. An internal auditor who’s never been walked through these clauses in a structured setting is more likely to miss a gap during their own internal audit, which means the external auditor finds it first.

That said, training doesn’t fix a documentation problem. If your procedures don’t exist yet, sending someone to auditor training won’t create them — it just teaches someone how to audit against requirements you haven’t built out. For many first-time shops, the practical sequence is gap assessment, initial QMS documentation development, targeted training, then internal audits. Requirements-level training can make sense earlier; internal auditor training becomes more valuable once there’s an actual system to audit.

👉 Not sure if your documentation is even ready for an internal auditor to work against? Run the AS9100 Rev D Gap Assessment Checklist first — it takes less than an hour and tells you exactly which of the 12 major sections still need work.

✅ Quick Checklist: Is Your Shop Ready to Book Training?

✅ Your AS9100-specific documentation is drafted, even if not finalized
✅ You’ve identified who will actually conduct internal audits going forward
✅ You know whether you need requirements-level training, internal auditor training, or both
✅ You’ve priced in-house/group rates against individual seat pricing for your team size
✅ You’ve budgeted separately for the standard itself, since course fees typically don’t include it
⚠️ If you can’t check the first two boxes, reconsider booking internal auditor training yet — the timing may be premature

BSI AS9100 training roadmap showing gap assessment, QMS development, targeted training, internal audit, and certification readiness — A practical AS9100 training sequence connects QMS development, targeted training, internal auditing, and certification readiness.

FAQ

Is AS9100 training legally required for certification?

No. AS9100 does not prescribe a specific training provider or course for internal auditors. The organization is responsible for ensuring its auditors are competent to perform effective audits, and IAQG does not specify a particular 9100-series training course as mandatory. Formal training is one common way small shops establish and document that competence, but it isn’t the only path if you already have qualified aerospace audit experience in-house.

How long does BSI’s AS9100 internal auditor course take?

Multi-day formats are standard across the industry for this course level, typically delivered across two to three consecutive days, whether in person or through live online instruction. Confirm current course length and format directly with BSI, since schedules and formats are updated periodically.

Does the training include a copy of the AS9100 standard?

Course inclusions vary by provider and delivery format. Confirm directly with BSI whether the applicable standard is included before enrolling — if not, budget separately for a current copy.

Can one person get trained and cover the whole shop’s internal audit needs?

For a very small operation, one competent internal auditor may be enough, provided the audit program can maintain appropriate objectivity and coverage — auditors generally shouldn’t audit their own work or processes they’re directly responsible for. Larger shops or those with multiple product lines often train two or more people so audits aren’t bottlenecked by one person’s schedule or independence limits.

Is virtual training as effective as in-person for AS9100?

For the requirements-level course, virtual formats work well. For internal auditor training, in-person formats offer more natural opportunities for hands-on practice exercises, though live online formats with interactive workshops are a reasonable substitute if travel cost or time away from the floor is the deciding factor.

Does BSI training count toward recertification of an existing auditor?

Course-to-course requirements vary by prior certification and course provider. If your auditor already holds a credential from a different accredited provider, confirm directly with BSI whether their program requires a re-sit or a full course before enrolling.

What’s the difference between BSI’s requirements course and internal auditor course?

The requirements course teaches what the standard demands, clause by clause. The internal auditor course teaches how to plan, conduct, and report an audit against those requirements — it assumes the requirements-level knowledge already exists.

Is ISOQAR an alternative for AS9100 training?

No — as of publication, ISOQAR does not offer AS9100-specific training courses. For AS9100 training specifically, BSI is the option covered in this review; confirm current course catalogs directly with any provider before enrolling, since offerings can change over time.

📥 Free Resources

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

Not Sure What to Do Next?

🔹 Still researching whether formal training makes sense for your shop? Start with the AS9100 Rev D Gap Assessment Checklist to see exactly where your QMS stands before you commit a training budget.

🔹 Ready to move forward with a specific course? Compare BSI’s current AS9100 training course options and request an in-house quote if you’re training more than one person.

🔹 Need the standard itself before class starts? Buy the current AS9100/SAE standard through ANSI Webstore.

🔹 Still deciding on a certification body altogether? See how the major players stack up in AS9100 Certification Bodies — Ranked & Reviewed.

Training is one line item in a much bigger certification budget, and it’s only worth spending on once the rest of your QMS groundwork is in place. Get the sequence right, and training becomes the thing that keeps an auditor from finding a gap your own team should have caught first. At The Standards Navigator, that’s the entire point — clear, practitioner-level guidance on what actually moves the needle toward certification, without the sales pitch.

Stay Ahead of Aerospace Audit Requirements

A common Stage 1 problem isn’t simply misunderstanding AS9100 — it’s discovering that training, documentation, or internal audit readiness isn’t as mature as the organization assumed.

Shops that treat certification as a sequence — documentation, then training, then internal audits — walk into Stage 1 with far fewer surprises than shops that bolt on training as an afterthought once a customer starts asking questions.

The Standards Navigator covers AS9100 certification, training decisions, and aerospace supplier compliance in plain, practitioner-level language — no fluff, no sales pitch.

👉 Get updates on AS9100 certification and aerospace supplier compliance
👉 Be first to access new gap assessment tools and aerospace QMS resources

Industrial Compliance. Clearly Explained.

ISO 45001 Implementation Timeline: How Long Certification Actually Takes in 2026

This guide breaks down the ISO 45001 implementation timeline by starting point — no existing safety system, existing ISO 9001/14001 certification, or adding to an integrated system. It covers each certification phase in detail, from gap assessment through Stage 2, and flags where projects most commonly slip.

A Phase-by-Phase Roadmap for Manufacturers Building or Upgrading a Certified Occupational Health and Safety Management System

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

A Customer, an Insurer, or a Citation Just Gave You a Deadline. Does Your Timeline Actually Support It?

A prime customer requires it. An insurance carrier offers a premium reduction for it. Or an OSHA citation makes it clear the current safety program isn’t holding up. Whatever the trigger, someone hands you a date, and you’re expected to have a certified ISO 45001 occupational health and safety management system by then.

That date usually comes with a generic number attached to it — “certification takes 6 to 12 months” — pulled from a webpage, a broker’s pitch, or a competitor who mentioned it once in a meeting. It becomes the plan. Nobody stress-tests it against where the organization’s safety program actually stands today.

That’s the gap that causes missed certification windows. Not the audit itself — the assumption that a generic timeline applies to your specific starting point, hazard profile, and current level of safety management maturity.

This guide is your ISO 45001 implementation timeline — and certification roadmap — broken into its actual phases, with realistic durations by starting point and the points where projects most commonly slip.

From the Floor: I’ve watched a safety program get rebuilt from the ground up after a citation forced the issue — not a binder of procedures, but an actual working program with training records, incident investigation, and hazard identification that could hold up to scrutiny. The plan called for six months. It took over a year, because you can’t manufacture eight months of safety committee minutes and near-miss reports after the fact. The ISO 45001 timelines that blow up are almost never about the audit dates. They’re about assuming the safety culture is further along than the records actually show.

Before you commit to a certification date with a customer or insurer, find out where your OH&S management system actually stands today →

Download the Manufacturing Compliance Checklist

In This Guide

How your starting point changes the ISO 45001 timeline
A phase-by-phase breakdown with realistic durations
What each phase actually requires, including worker participation and hazard identification
The most common reasons ISO 45001 timelines slip
Whether the upcoming ISO 45001:2027 revision should change your start date
A readiness checklist before you commit to a deadline

👉 Start Here (Top Resources)

ISO 45001:2018 — ANSI Webstore — the official current edition, required before you can gap-assess against anything real. Use code CC2026 for 5% off through December 31, 2026.
ISO 45001 Training — BSI Group — foundation and internal auditor training built around ISO 45001’s clause structure and hazard-management requirements.
ISO 45001 Certification — ISOQAR — a second training and certification body option worth comparing against BSI before you commit.
Save on ANSI Standards Bundles — if you’re pairing ISO 45001 with ISO 9001 or ISO 14001, bundling is worth checking before buying each document separately.

How Long Does ISO 45001 Certification Take?

The short answer depends entirely on your organization’s starting point. Here’s the quick-answer version before the detailed phase-by-phase certification schedule below.

Starting Point	Typical Certification Timeline
No formal OH&S management system	12–24 months
Already certified to ISO 9001 or ISO 14001	6–12 months
Adding ISO 45001 to an integrated ISO 9001/14001 system	4–8 months
High-hazard operations (any starting point)	Add 3–6 months

Organizations with no formal safety management system today: realistically 12–24 months from kickoff to certificate
Organizations already certified to ISO 9001 or ISO 14001: realistically 6–12 months, since the Harmonized Structure means the core management-system architecture already exists
Multi-site or high-hazard operations (confined space, hot work, heavy equipment, chemical exposure): add 3–6 months to either baseline
The gap assessment phase determines almost everything downstream — most timeline overruns trace back to an optimistic or incomplete one
Worker participation and consultation — a distinct emphasis in ISO 45001 that many first-time implementers underestimate — takes real time to build, not just document
Certificate issuance follows Stage 2 audit closure, not the audit itself — corrective action closure adds real time on top of the audit dates

For the standard’s full scope and structure, ISO’s own overview of ISO 45001 is worth reviewing before you scope a gap assessment against it.

The Three Starting Points That Determine Your Timeline

ISO 45001 implementation timeline roadmap comparing certification phases for organizations with and without existing ISO 9001 or ISO 14001 systems. — The ISO 45001 implementation timeline varies significantly depending on whether an organization is building its OH&S management system from scratch or extending an existing ISO management system.

A single “ISO 45001 takes X months” answer doesn’t hold up, because the honest project duration depends entirely on what you’re building from.

Building a Safety Management System From Scratch

If you are starting with no formal OH&S management system today → plan for 12–24 months. Much of this duration comes from operating the system long enough to generate audit evidence — incident reports, near-miss investigations, safety committee minutes, training records — not from writing procedures. Every element has to be built: hazard identification and risk assessment, legal and other requirements tracking, emergency preparedness, incident investigation, and worker participation and consultation.

Extending an Existing ISO 9001 or ISO 14001 System

If you are already certified to ISO 9001 or ISO 14001 → plan for 6–12 months. Because all three standards share the same Harmonized Structure, your document control, management review, internal audit program, and corrective action processes carry forward largely intact. What’s new is the OH&S-specific layer: hazard identification and risk assessment, worker participation and consultation, incident investigation, and emergency preparedness. For the full breakdown of what’s genuinely new versus what your existing system already covers, see ISO 9001 vs ISO 45001 and ISO 14001 vs ISO 45001.

Adding ISO 45001 to an Existing Integrated Management System

If you already run an integrated ISO 9001/ISO 14001 system and are adding ISO 45001 as the third pillar → this is typically the fastest path, often 4–8 months, since your corporate-level management review, document control, and internal audit structure already exist. The work concentrates on hazard identification, worker participation processes, and generating enough OH&S-specific records for the certification body to evaluate.

Phase-by-Phase Timeline

Phase	No Existing OH&S System	Existing ISO 9001/14001
Gap assessment and project planning	4–8 weeks	3–5 weeks
Documentation development (OH&S core)	8–14 weeks	3–6 weeks
Hazard identification, risk assessment, and controls	6–12 weeks	4–8 weeks
Worker participation and consultation build-out	4–8 weeks (overlapping)	3–5 weeks (overlapping)
Team training	3–6 weeks (overlapping)	2–4 weeks (overlapping)
System operation and record generation	12–20 weeks minimum	8–12 weeks minimum
Internal audit and management review	3–4 weeks	2–3 weeks
Stage 1 audit and gap closure	3–6 weeks	2–4 weeks
Stage 2 audit	2–5 days on-site	2–5 days on-site
Corrective action closure and certificate issuance	4–12 weeks	4–8 weeks

These ranges assume a single-site, moderate-hazard operation. High-hazard processes — confined space entry, hot work, powered industrial trucks, chemical handling — extend the hazard identification phase because each requires its own documented controls and, in many cases, permit systems and competency records.

Ready to begin scoping your own project timeline? Get the current edition before you start your gap assessment →

ISO 45001:2018 — ANSI Webstore

What Each Phase Actually Involves

Understanding the ISO 45001 implementation timeline phase by phase — the actual implementation schedule, not a generic estimate — is what turns a rough number into a plan you can actually hold a customer, insurer, or leadership team to.

This phase sets the accuracy of everything that follows it. A gap assessment against ISO 45001 needs to evaluate hazard identification, worker participation, and legal and other requirements tracking with the same rigor as document control and management review — these are the clauses generic gap assessments consistently under-scope.

Most common finding: Gap assessments performed by someone unfamiliar with ISO 45001’s worker participation and consultation requirements, who scores the clause as “in progress” based on a safety committee that meets but was never actually consulted on the hazard identification process itself.

Not sure how far you are from certification? Download the Manufacturing Compliance Checklist and identify timeline risks before they affect your deadline →

Get the Manufacturing Compliance Checklist

Building Hazard Identification, Risk Assessment, and Controls

This is the phase most first-time ISO 45001 implementers underestimate, because it isn’t a documentation exercise — it’s an operational one. It covers building out:

Hazard identification across all routine and non-routine work, including contractor and visitor activity
Risk assessment methodology, applied consistently across every work area
The hierarchy of controls, applied in practice, not just referenced in a procedure
Legal and other requirements tracking, including OSHA and industry-specific regulations
Emergency preparedness and response planning
Incident investigation procedures that trace root cause, not just document the event

ISO 45001 implementation infographic showing hazard identification, risk assessment, worker participation, emergency preparedness, and evidence. — The ISO 45001 implementation timeline depends on more than documentation, with real evidence built through hazard controls, worker participation, training, investigations, drills, and system operation.

The legal and other requirements register should be built directly from primary sources like OSHA rather than secondhand summaries — a gap assessment built on an outdated or misquoted citation creates false confidence that shows up as a Stage 2 finding.

Each of these gets its own dedicated treatment elsewhere on this site as we continue building out the ISO 45001 cluster — this section is about scoping the time commitment, not the clause-by-clause detail.

Worker Participation and Consultation

If you are treating worker participation as a documentation line item → stop. ISO 45001 places a distinct emphasis on consulting workers in hazard identification, risk assessment, and incident investigation — not just informing them of decisions already made. Auditors specifically interview workers to confirm this consultation actually happens, not just that a committee exists on paper.

Training Your Team

Internal auditors need training specific to ISO 45001’s OH&S-focused clauses, not just general management-system fundamentals — an internal auditor who only understands ISO 9001 or ISO 14001 will miss the findings an external ISO 45001 auditor is specifically trained to catch. See BSI vs ISOQAR for how to choose between the two most common training and certification body options.

Operating the System and Generating Records

If you are tempted to compress this phase → don’t. Certification bodies expect to see the system operating long enough to generate a meaningful record set — hazard identification updates, incident and near-miss investigations with closed corrective actions, safety committee minutes showing actual worker consultation, and at least one emergency drill. A system that’s only existed on paper for three weeks doesn’t have enough history for an auditor to evaluate.

From the Floor: One operation I worked with planned to schedule Stage 1 audit six weeks after finishing their documentation. The procedures looked complete, but the safety committee had met exactly once, no near-miss reports had been logged, and nobody could produce a completed incident investigation. The paperwork was ready. The system wasn’t. They pushed Stage 1 back nearly two months and avoided what would have become a rough Stage 2.

Internal Audit and Management Review

Your internal audit program has to specifically cover hazard identification, worker participation, and legal compliance evaluation, not just document control and corrective action — auditors need to verify these OH&S-specific elements with the same scrutiny as the management-system core.

Stage 1 and Stage 2 Audits

Stage 1 verifies your documentation is complete and ready for Stage 2 — expect the auditor to specifically confirm your legal and other requirements register and worker consultation records exist before scheduling Stage 2. Stage 2 is the full on-site system audit, including shop floor walkthroughs, worker interviews, and incident record review.

Signs You’re Ready for Stage 1:

✅ Hazard register complete

✅ Legal register complete

✅ Internal audit complete

✅ Management review completed

✅ Worker consultation documented

✅ Emergency drill completed

✅ Corrective actions closed

If you can’t check every box above, Stage 1 is premature — schedule it once the list is genuinely complete, not once the calendar says it’s time.

ISO 45001 Stage 1 readiness checklist showing audit preparation, worker consultation, internal audits, management review, and corrective actions. — This ISO 45001 implementation timeline milestone focuses on Stage 1 readiness, showing the evidence organizations should have in place before beginning the certification audit process.

Closing Corrective Actions and Certificate Issuance

Before you commit to a certification body, verify its accreditation status directly through ANAB — a certificate issued by an unaccredited body may not satisfy a customer or insurer requirement even if the audit itself was thorough.

What Slows Down an ISO 45001 Timeline

Treating the gap assessment as a formality instead of the project’s foundation. A rushed or generic gap assessment produces an optimistic timeline that collapses the first time an auditor finds a hazard that was never formally identified.

Underestimating worker participation and consultation. Organizations routinely assume an existing safety committee satisfies this requirement without checking whether workers are actually consulted on hazard identification and risk assessment, not just briefed after the fact.

Not budgeting time for the system to actually run. Documentation can be written quickly. Evidence that the system is operating — incident investigations, near-miss trending, closed corrective actions, a completed emergency drill — cannot be generated overnight, no matter how much internal pressure exists to compress the calendar.

Underestimating high-hazard process requirements. Confined space, hot work, powered industrial trucks, and chemical handling each carry their own permit systems, competency records, and control documentation that extend the timeline beyond a low-hazard office or light-assembly scope.

Committing to a customer or insurer deadline before the gap assessment is complete. This is the single most common planning mistake. The deadline gets set first, based on a generic timeline; the actual gap assessment — which should inform the deadline — happens after the commitment is already made.

If you haven’t run a structured gap assessment yet, that’s the step to complete before setting any date with a customer or insurer →

Get the Manufacturing Compliance Checklist

Should You Wait for ISO 45001:2027 Before Starting?

No. ISO 45001:2018 remains the current, actively audited standard, and certification bodies continue issuing certificates against it. The next revision, ISO 45001:2027, reached the Draft International Standard (DIS) stage in mid-2026 and is expected to publish sometime in 2027, with a transition period widely expected to follow the same three-year pattern set by ISO 9001:2026 and ISO 14001:2026 — though that transition timeline has not yet been formally confirmed by IAF. Proposed changes lean toward expanded emphasis on psychosocial risk, worker well-being, and evolving ways of working rather than a structural overhaul.

If a customer requirement, insurance deadline, or citation is driving your timeline today → there is no reason to delay pursuing ISO 45001:2018 certification while waiting for a standard that hasn’t published yet. Track the ISO 45001 Certification Guide for updates as the 2027 revision develops.

Quick Timeline-Readiness Checklist

✅ Gap assessment completed against the current ISO 45001:2018 edition, not a generic OSHA compliance checklist

✅ Hazard identification, risk assessment, and worker participation scoped individually, not bundled as “documentation”

✅ Internal auditors trained specifically on ISO 45001’s OH&S-focused clauses

✅ High-hazard process controls (confined space, hot work, powered industrial trucks, chemical handling) identified and budgeted for separately

✅ Realistic operating period built into the schedule before Stage 1 — not compressed to meet an external deadline

⚠️ If your certification deadline was set before your gap assessment was complete, revisit it now rather than after Stage 1 uncovers the gap

FAQ

How long does ISO 45001 certification typically take?

Organizations building a safety management system from scratch typically need 12–24 months. Organizations already certified to ISO 9001 or ISO 14001 typically need 6–12 months, since document control, internal audit, and management review carry forward through the Harmonized Structure. Multi-site or high-hazard operations should add 3–6 months to either estimate.

What’s the fastest realistic timeline for ISO 45001 certification?

For an organization already running an integrated ISO 9001/ISO 14001 system, with a focused scope and dedicated project resources, 4–6 months is achievable — but only if the gap assessment is thorough and hazard identification work starts immediately rather than after documentation is finished.

Can ISO 45001 be implemented in six months?

Only under specific conditions: an existing ISO 9001 or ISO 14001 system already in place, a single-site low-to-moderate hazard scope, and dedicated project resources rather than a part-time effort. Outside those conditions, six months is not a realistic implementation schedule — the system-operation phase alone typically needs 8–12 weeks minimum to generate enough evidence for Stage 1.

Can we get ISO 45001 certified without ISO 9001 or ISO 14001?

Yes. ISO 45001 is a standalone standard and doesn’t require certification to any other standard first. Building it from scratch simply means the full management-system architecture and the OH&S-specific requirements get built together rather than layered onto an existing system, which is reflected in the longer 12–24 month timeline for organizations with no existing system.

What’s the single biggest risk to an ISO 45001 implementation timeline?

Underestimating worker participation and consultation. Organizations frequently assume an existing safety committee satisfies this requirement without verifying that workers are genuinely consulted on hazard identification and risk assessment — auditors interview workers directly to check this, and a gap here is a common Stage 2 finding.

Does the Stage 2 audit date mark the end of the timeline?

No. Certificate issuance follows the closure of any corrective actions identified during Stage 2 — typically 4–12 weeks beyond the audit date itself, depending on finding severity. Major nonconformances can require a return audit, which extends the timeline further.

How much do high-hazard processes add to the timeline?

Confined space entry, hot work, powered industrial trucks, and chemical handling each require their own permit systems, competency records, and documented controls on top of the base ISO 45001 requirements. Depending on how many high-hazard processes are in scope, this can add 3–8 weeks to the hazard identification and controls phase.

Should we hire a consultant to compress the timeline?

A consultant can help you scope hazard identification and worker participation requirements accurately, which reduces the risk of timeline slippage — but no consultant can compress the system-operation phase, since certification bodies need to see evidence the system has actually been running, not just documented.

What happens if our certification deadline arrives before we’re ready?

Pursuing certification before the system has genuinely operated long enough typically results in Stage 2 findings that extend the timeline further than waiting would have. A missed customer or insurer deadline is a difficult conversation; a failed Stage 2 audit against a rushed system is usually a worse one.

📥 Free Resources

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts

Not Sure What to Do Next?

🔹 You’re still scoping whether ISO 45001 is the right standard for your operation → Start with the ISO 45001 Certification Guide for the full requirements picture before you commit to a timeline.

🔹 You’re ready to find out where your safety program actually stands → Download the Manufacturing Compliance Checklist before you set any certification date with a customer or insurer.

🔹 You need to understand the full cost picture alongside the timeline → How Much Does ISO 45001 Cost?

🔹 You need the official standard before you can gap-assess anything → ISO 45001:2018 — ANSI Webstore, or save on a bundle if you’re pairing it with ISO 9001 or ISO 14001.

🔹 You need training or a certification body recommendation → BSI vs ISOQAR for a ranked comparison, or see the Best ISO Certification Bodies guide.

The Timeline Is Real. The Deadline Should Follow It, Not the Other Way Around.

A customer, insurer, or citation-driven deadline is real pressure, but it isn’t a substitute for an honest gap assessment. The organizations that hit their certification date are almost always the ones that scoped their actual starting point before committing to one — not the ones that worked backward from a generic number and hoped the gap assessment would agree with it.

At The Standards Navigator, we cover the full ISO 45001 certification path — from the standard itself to implementation sequencing, worker participation requirements, and certification body selection — so your ISO 45001 implementation timeline is built on your actual starting point, not someone else’s.

Organizations that wait for a citation or a lost contract to start their ISO 45001 timeline are always working from behind. Organizations that scope their real starting point today are the ones that hit the date someone else set for them.

👉 Get updates on ISO 45001 implementation guidance and safety management insights

👉 Be first to access new ISO 45001 cluster guides and tools as they publish

Industrial Compliance. Clearly Explained.

AS9100 Implementation Timeline: How Long Certification Actually Takes in 2026

This guide breaks down the AS9100 implementation timeline by starting point — no existing QMS, ISO 9001 certified, or adding a second site. It covers each certification phase in detail, from gap assessment through OASIS registration, and flags where projects most commonly slip.

A Phase-by-Phase Roadmap for Aerospace Suppliers Building or Upgrading a Certified QMS

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

Your Customer Gave You a Certification Deadline. Does Your Timeline Actually Support It?

A prime contractor names a date. Get AS9100 certified by then, or the contract goes to a supplier who already has it. Knowing your real AS9100 implementation timeline — not a generic industry average — is what decides whether you hit that date.

That deadline usually comes with a generic number attached — “certification takes 6 to 12 months” — pulled from a webpage, a consultant’s pitch deck, or a competitor who mentioned their own timeline once in passing. It becomes the plan. Nobody stress-tests it against the actual starting point of the organization that has to hit it.

That’s the gap that causes missed certification windows. Not the audit itself — the assumption that a generic timeline applies to your specific starting point, scope, and current QMS maturity.

This guide is your AS9100 certification roadmap: it breaks the timeline into its actual phases, shows how your starting point changes the math, and flags the points where projects most commonly slip.

From the Floor: I’ve sat in the kickoff meeting for a certification project where the plan called for an eight-month timeline, built around a template someone found online. Three weeks into the gap assessment, we found there wasn’t a documented configuration management process anywhere in the building — not a paperwork gap, a practice gap. That one finding alone pushed the schedule two months, because you can’t get audit-ready on a process that doesn’t exist yet. The timeline failures I’ve seen almost never come from the audit dates. They come from assuming the starting point is further along than it actually is.

Before you commit to a certification date with a customer, find out where your QMS actually stands today →

Download the AS9100 Rev D Gap Assessment Checklist

In This Guide

How your starting point changes the AS9100 timeline
A phase-by-phase breakdown with realistic durations
What each phase actually requires, aerospace-specific systems included
The most common reasons AS9100 timelines slip
Whether the upcoming IA9100 revision should change your start date
A readiness checklist before you commit to a deadline

👉 Start Here (Top Resources)

SAE AS9100D — ANSI Webstore — the official current edition, required before you can gap-assess against anything real. Use code CC2026 for 5% off through December 31, 2026.
AS9100 Training — BSI Group — foundation and internal auditor training built around aerospace-specific clauses, not a generic ISO 9001 course.
Save up to 50% on ANSI Standard Packages — bundling AS9100D with ISO 9001 is worth checking before buying each document separately.

How Long Does AS9100 Certification Take?

The short answer to the AS9100 implementation timeline question depends entirely on where you’re starting from:

Organizations with no existing QMS: realistically 12–24 months from kickoff to certificate
Organizations already ISO 9001 certified: realistically 6–12 months
Multi-site or complex-scope operations (special processes, multiple product lines): add 3–6 months to either baseline
The gap assessment phase determines almost everything downstream — most timeline overruns trace back to an optimistic or incomplete one
Aerospace-specific systems — product safety, counterfeit parts prevention, configuration management, key characteristics, FAI — are the phase most first-time implementers underestimate
Certificate issuance follows Stage 2 audit closure, not the audit itself — corrective action closure adds real time on top of the audit dates

AS9100 implementation timeline infographic showing the eight certification phases, estimated durations, and key milestones from gap assessment through certification for aerospace suppliers. — This AS9100 implementation timeline infographic outlines the complete certification roadmap, helping aerospace suppliers understand each phase from initial gap assessment to final certification.

The Three Starting Points That Determine Your Timeline

A single “AS9100 takes X months” answer doesn’t hold up, because the honest answer depends entirely on what you’re building from.

Building a QMS From Scratch

If you are starting with no formal quality management system today → plan for 12–24 months. Much of this duration is driven by the need to operate the system long enough to generate audit evidence, not simply write procedures. Every element has to be built: document control, management review, internal audit program, and all of AS9100’s aerospace-specific additions on top. This isn’t a documentation exercise you can compress by working weekends — several phases require the system to actually run for months before there’s enough evidence for an auditor to evaluate.

Extending an Existing ISO 9001 System

If you are already ISO 9001 certified → plan for 6–12 months. Your management review, internal audit program, document control, and corrective action processes carry forward largely intact. What’s new is the aerospace-specific layer: product safety, counterfeit parts prevention, configuration management, key characteristics, First Article Inspection, and human factors. For the full list of what’s genuinely new versus what’s already covered by your ISO 9001 system, see AS9100 vs ISO 9001.

Adding a Second Site to an Existing AS9100 Certification

If you already hold AS9100 certification and are extending scope to a new facility → this is typically the fastest path, often 4–8 months, since your corporate-level QMS structure, document control, and management review already exist. The work concentrates on site-specific procedures, local training, and generating enough site-level records for the certification body to evaluate.

Phase-by-Phase Timeline

Phase	No Existing QMS	Existing ISO 9001
Gap assessment and project planning	4–8 weeks	3–5 weeks
Documentation development (QMS core)	8–14 weeks	3–6 weeks
Aerospace-specific systems build	8–16 weeks	6–12 weeks
Team training	3–6 weeks (overlapping)	2–4 weeks (overlapping)
System operation and record generation	12–20 weeks minimum	8–12 weeks minimum
Internal audit and management review	3–4 weeks	2–3 weeks
Stage 1 audit and gap closure	3–6 weeks	2–4 weeks
Stage 2 audit	2–5 days on-site	2–5 days on-site
Corrective action closure and certificate issuance	4–12 weeks	4–8 weeks

These ranges assume a single-site, moderate-complexity operation. Special processes — welding, heat treatment, plating, NDT — extend the aerospace-specific build phase because each requires its own qualified-personnel records and process validation on top of the base requirements.

What Each Phase Actually Involves

Understanding the AS9100 implementation timeline phase by phase is what turns a generic estimate into a plan you can actually hold a customer to.

Gap Assessment

This phase sets the accuracy of everything that follows it. A gap assessment against AS9100 needs to evaluate the aerospace-specific clauses with the same rigor as the ISO 9001 core — product safety, counterfeit parts, configuration management, key characteristics, and FAI readiness are where generic gap assessments consistently under-scope the work.

Most common finding: Gap assessments performed by someone trained only in ISO 9001, who scores the aerospace-specific clauses as “in progress” without a clear picture of what a compliant version of each actually looks like.

Not sure how far you are from certification? Download the AS9100 Rev D Gap Assessment Checklist and identify timeline risks before they affect your customer’s deadline →

Get the AS9100 Rev D Gap Assessment Checklist

Building the Aerospace-Specific Systems

This is the phase most first-time AS9100 implementers underestimate, because it doesn’t map to anything in a standard ISO 9001 rollout. It covers building out:

Product safety risk identification and controls
Counterfeit parts prevention across procurement and receiving
Configuration management for design baselines and changes
Key characteristics identification and control planning
First Article Inspection procedures referencing AS9102
Human factors consideration in process and workstation design
Special process controls and qualified-personnel records, where applicable

Each of these gets its own dedicated treatment elsewhere on this site as we continue building out the aerospace cluster — this section is about scoping the time commitment, not the clause-by-clause detail.

AS9100 implementation timeline infographic highlighting the seven aerospace-specific systems organizations must build before achieving AS9100 certification. — The aerospace-specific systems phase is the most underestimated part of the AS9100 implementation timeline, requiring organizations to implement critical controls beyond a standard ISO 9001 quality management system.