Introduction
A machine shop can produce parts to drawing tolerance, pass its customer's incoming inspection and hold a valid ISO 9001 certificate, and still be unable to quote on a defense program.
Primes do not buy parts alone. They buy evidence that every process behind the part is controlled, traceable and repeatable, and that evidence is tied to a database the whole industry can see. AS9100D exists to supply it, and OASIS is where that evidence becomes visible to customers.
Tip: Review your latest audit report for open findings, recurring issues and gaps between certified scope and actual product deliveries.
Regulatory Authority Over Aerospace Suppliers
Aviation authorities such as the FAA and EASA regulate design and production approvals, and those approval holders flow quality expectations down to their suppliers.
Prime contractors write AS9100 certification into purchase terms and supplier quality manuals, making it a contractual condition rather than a recommendation.
Government defense customers apply their own contract clauses on top, including those governing counterfeit electronic parts, such as DFARS 252.246-7007 and 252.246-7008.
Defense quality oversight bodies may conduct their own reviews of suppliers on government contracts, independent of certification.
The standard is published by the International Aerospace Quality Group under SAE, and its regional equivalents, EN 9100 in Europe and JISQ 9100 in Asia-Pacific, carry the same requirements.
Export control and security obligations sit alongside quality requirements and are enforced separately by government.
AS9100D vs ISO 9001 Structural Rigor
Takeaway: ISO 9001 asks whether a system exists and works. AS9100D asks whether it can prove, part by part, that the product is what it claims to be.
Counterfeit Parts Prevention Under Clause 8.1.4
A planned process must address the prevention, detection, mitigation and disposition of counterfeit or suspect parts.
Purchasing from original manufacturers or authorized distributors is the first line of control, with documented justification for any other source.
Receiving inspection and verification activities should match the risk of the part, with escalated testing for higher-risk items such as electronics.
Training should cover awareness of counterfeit indicators for people in purchasing, receiving and inspection.
Suspect parts need quarantine, reporting and disposition rules, including notification of customers and relevant authorities where required.
Obsolescence management matters because shortages of out-of-production items are a primary entry route for counterfeits.
Controls must flow down to suppliers, since a counterfeit part introduced three tiers back still ends up in the end product.
Foreign Object Damage Prevention Criteria
A risk-based FOD prevention approach should cover production, storage, handling and test areas, tailored to the product and its hazards.
Many organizations structure their programs around AS9146, the industry standard for FOD prevention programs, though the requirement in AS9100D is for effective control rather than any particular document.
Tool control, including accountability for tools entering and leaving work areas, is a visible and frequently audited element.
Housekeeping and area cleanliness standards should be specific, with inspection routines and records.
Personnel awareness matters, including rules on pockets, jewelry, badges and personal items in critical areas.
Cleanliness checks before closing assemblies and verification that foreign objects have been removed should be documented.
Incidents and near-misses should feed corrective action, not be handled quietly on the floor.
First Article Inspection Under AS9102
AS9102 prescribes a standardized report with forms covering part number accountability, product accountability for materials and special processes, and characteristic accountability for every drawing requirement.
Revision C of AS9102, released in June 2023, updated the forms and clarified requirements, including the treatment of special processors, so organizations should confirm which revision their customers require.
A new FAI is triggered by defined events, such as a new part, a design change, a change in manufacturing process or location, or a lapse in production.
Every characteristic on the drawing needs to be ballooned and accounted for, and gaps in this ballooning are among the most common findings.
Measurement results must come from calibrated equipment and competent personnel, with the method traceable.
Documented nonconformances in an FAI report need disposition, not just identification.
FAI should be performed on production-representative parts, not a prototype produced differently from the eventual process.
Critical Processes Not Documented or Followed
Special processes such as heat treat, plating, welding, coating and non-destructive testing need documented parameters, qualified operators and validated equipment.
Customer approvals, such as prime contractor process approvals, must be maintained and respected, including limits on what the approval covers.
Work instructions on the floor must match the process specification, not a superseded or informally modified version.
Key characteristics should be identified and monitored with a method suitable for the characteristic, with records available to demonstrate control.
Changes to critical processes need controlled review and, where required, customer notification or approval before implementation.
Operators should be able to explain the critical elements of their process, since auditors interview people as well as reading documents.
Scope Does Not Match Defense Realities
The scope must reflect what the organization actually does, such as design, manufacture, assembly or test, and not merely the activities that are convenient to list.
Design responsibility needs to be stated accurately; claiming design activity without real design authority, or excluding it when it exists, both cause problems.
Maintenance and repair, and distribution, have their own standards, AS9110 and AS9120 respectively, and activities outside AS9100's scope should not be quietly included.
Exclusions of requirements need justification and must not affect the ability to deliver conforming product.
All sites performing work on aerospace products should be considered in scope, including those that perform only a limited step.
New programs, such as a move into defense work from commercial manufacturing, can quietly outgrow the existing scope without a deliberate review.
OASIS Database Rules and Grading Transparency
Certification bodies enter certificates and audit results into OASIS, and a certificate that is not properly recorded does not meet the industry scheme requirements.
Audits follow the AS9101 audit standard, and the certification scheme rules are set out in the IAQG's requirements for certification bodies.
Customers who are granted access can review certificate status and audit information, which means findings are visible beyond the audited organization.
Organizations manage their own OASIS records and can control who they authorize to view details, but should expect primes to ask for access as a condition of doing business.
Audit performance ratings and the history of nonconformities contribute to how a supplier appears to customers, so a pattern of repeated findings has commercial consequences.
Organizations should check their own OASIS entry regularly for accuracy of scope, sites and status.
Only certification bodies authorized under the IAQG scheme can issue AS9100 certificates that count within the industry system.
Design Authority Parameters Influencing Mandays
Employee numbers within scope, including shift patterns and people working under the organization's control.
Whether the organization has design responsibility, which adds audit time for design and development processes compared with build-to-print operations.
Number and complexity of processes, including in-house special processes.
Number of sites and the degree to which they perform similar activities.
Product complexity and the risk profile of the products supplied.
Maturity and effectiveness of the system, including the findings from earlier audits.
Attaining AS9100D for Defense Subcontracts
Build on an effective ISO 9001 system, since AS9100D includes all of it.
Gap analysis against AS9100D and the specific flow-downs in your prime contractors' quality requirements.
Implement configuration management, product safety, counterfeit prevention, FOD controls and key characteristic management.
Establish FAI capability to AS9102 and confirm which revision customers require.
Qualify special processes and confirm customer process approvals where needed.
Complete internal audits and management review before engaging a certification body.
Choose a certification body authorized under the IAQG scheme, then complete Stage 1 and Stage 2 audits and close findings on time.
Maintain certification through surveillance audits and recertification, and keep the OASIS record accurate.
The IAQG is developing a successor to AS9100D, branded IA9100, with publication targeted around the end of 2026 and a transition period expected after publication. AS9100D remains the active standard, but plan with the revision in mind.
How Pacific Certifications can help?
AS9100 certificates that count within the aerospace industry system are issued only by certification bodies authorized under the IAQG scheme and recorded in OASIS, so organizations should confirm a body's authorization before engaging it. For the foundation of an aerospace quality system, Pacific Certifications can provide:
Independent ISO 9001 certification audits, the base on which AS9100D is built
Stage 1 documentation and certification-readiness audits
Stage 2 implementation and effectiveness audits
Annual surveillance audits and triennial recertification audits
Pacific Certifications conducts impartial certification audits and does not design, implement or manage quality management systems for its certification clients.
Contact Us
To schedule your AS9100 certification, contact us at support@pacificcert.com or +91-8595603096.
For training programs on AS9100 certification requirements and preparation, contact us at trainings@pacificcert.com.
Read More at: ISO certifications for aerospace industry
