ISO 9001
Quality Management
ISO 14001
Environmental Management
ISO 45001
Health & Safety Management
ISO 27001
Information Security Management
ISO 13485
Quality Management
ISO 22716
Quality Management
AS9100
Quality Management
ISO Audit
School Training
ISO 9001 works using the Plan-Do-Check-Act (PDCA) cycle with a process-based approach to ensure ongoing improvement. In the UK, the process involves identifying customer needs and setting quality goals, implementing controls and procedures, monitoring performance metrics against goals, and taking corrective and preventive actions. This system creates a continual improvement loop
in which you review performance, address nonconformities
, and enhance processes. It establishes a management framework to enhance quality performance over time.

Core Quality Management Principles:
Customer focus and customer satisfaction
Leadership commitment and management responsibility
Process approach and risk-based thinking
Evidence-based decision making and data analysis
Relationship management with suppliers and stakeholders
Continual improvement culture
QMS Scope
The scope defines the boundaries of your AS9100 aerospace QMS, specifying what products, processes, and sites are certified. It sets critical expectations for regulators (e.g., FAA, EASA), prime contractors (e.g., Airbus, Boeing), and certification body audits.
A precise scope must include:
Organisation: The specific legal entity or division covered.
Locations: All physical or operational sites included in the certification.
Activities: The core aerospace processes (e.g., design, manufacturing, assembly, testing, MRO).
Products/Services: The specific aerospace outputs (e.g., structural components, avionics, software, overhaul services).
Guidance:
Be accurate and truthful. The scope must reflect actual activities and your organisation’s role in the supply chain (e.g., design authority, build-to-print manufacturer). Exclusions are highly restricted; only design and development (clause 8.3) may be excluded if not performed and justified. Clarity is non-negotiable for auditability and supply chain credibility.
Understanding your organisation's context (4.1) is the foundation for your aviation QMS. Systematically analyse internal and external issues affecting your ability to achieve quality and safety objectives. Consider aviation regulations, technological changes, supply chain stability, and safety culture.
From this context, identify relevant interested parties (4.2) and determine their requirements. Key aerospace stakeholders include aviation authorities (FAA, EASA, CAA), prime customers, regulatory bodies, and suppliers. Their needs (e.g., airworthiness directives, technical standards, contractual flow-downs) become binding obligations. This ensures your QMS is aligned with the high-reliability aerospace environment.
In aerospace, leadership is accountable for safety, quality, and on-time delivery. Management must demonstrate proactive, visible commitment to the QMS and regulatory compliance.
5.1 Leadership and Commitment (General):
Leaders must take ultimate accountability for the QMS’s effectiveness and product safety. This includes promoting a culture of risk-based thinking, ensuring process ownership, and integrating quality objectives into business strategy. A key aerospace addition is the appointment of aMember of Senior Management with defined authority for QMS performance and reporting.
5.2 Customer Focus:
Top management must ensure customer (including regulatory) requirements are understood and met. This involves establishing processes for managing on-time delivery (OTD), understanding evolving airworthiness requirements, and ensuring customer communication channels are effective.
5.3 Quality Policy:
The Quality Policy must be a relevant commitment to safety, quality, and continuous improvement. It must be communicated, understood, and provide a framework for measurable objectives. In aerospace, it often explicitly references compliance with AS9100 and regulatory requirements.
5.4 Organisational Roles, Responsibilities, and Authorities:
Clarity is critical for aviation safety. Management must assign, communicate, and ensure the authority of personnel responsible for key processes, especially those impacting airworthiness. This includes clear lines of authority for the control of nonconforming product and for halting shipment.
Aerospace planning is inherently risk-based and must address both business and product safety risks.
6.1 Actions to Address Risks and Opportunities:
You must systematically identify and address risks and opportunities that could affect conformity of products/services and the QMS. Aerospace-specific risks include single-point failures in the supply chain, counterfeit parts, and human factors. Actions must be integrated into QMS processes.
6.2 Quality Objectives and Planning to Achieve Them:
Establish measurable objectives at relevant levels. Objectives must includeon-time delivery (OTD)andproduct quality performance. Define resources, responsibilities, timelines, and evaluation methods.
6.3 Planning of Changes:
All changes to the QMS must be conducted in a planned manner. In aerospace, this is critical for managing configuration and ensuring changes do not adversely affect product safety, performance, or regulatory compliance.
Clause 7 covers the resources needed for a safe, compliant aerospace QMS.
7.1 Resources (General):
Determine and provide
the necessary resources, with special attention to infrastructure (including IT systems for configuration management), work environment (including contamination control and FOD prevention), and organisational knowledge.
7.2 Competence:
Ensure personnel are competent. In aerospace, this includes specific requirements for awareness of human factors(e.g., fatigue, stress) and their impact on product safety and quality. Records of competence are mandatory.
7.3 Awareness:
Personnel must be aware of the quality policy, relevant objectives, their contribution to the QMS, and the implications of nonconformity—especially its potential impact on product safety and customer operations.
7.4 Communication:
Establish effective internal and external communication processes, including communication with customers and regulatory bodies regarding quality issues and changes.
7.5 Documented Information:
Control all documents and records. Aerospace adds stringent requirements for the control of records related to product realisation (e.g., inspection, testing, special processes) with extended retention periods, often tied to the product's lifecycle.
Operation (Clause 8)
This is where aerospace-specific requirements are most concentrated.
Plan and control operational processes under controlled conditions. This includes risk management or products and processes, configuration management, and the control of special processes(e.g., welding, heat treatment, NDT), which require validation and personnel qualification.
8.2 Requirements for Products and Services:
Includes reviewing customer requirements (including statutory/regulatory), managing amendments, and ensuring the organisation can meet them. A key aerospace requirement is the flow-down of applicable requirements to external providers.
8.3 Design and Development of Products and Services:
A rigorous, phased process is required. Key aerospace additions include: management of independent design reviews, design verification & validation that addresses intended use and environments, and control of design changes through a formal process linked to configuration management.
8.4 Control of Externally Provided Processes, Products, and Services:
Aerospace supply chain control is critical. Requirements include a documented supplier selection, evaluation, and re-evaluation process. You must ensure external providers are competent and their processes are controlled. This includes flow-down of requirements and, where specified, customer-directed sources or customer-approved providers.
8.5 Production and Service Provision:
Enforces strict control over production. Mandatory requirements include:
Control of Production: Using work instructions, controlled equipment, and monitoring.
Identification and Traceability: Unique identification of products and maintenance of traceability throughout production (batch, serial, or lot).
Property Belonging to Customers or External Providers: Care and control of customer-supplied materials, tooling, and intellectual property.
Preservation: Protecting product condition, including during internal processing and delivery.
Control of Changes: Formal review and control of personnel, machines, materials, methods, and environment (4M/5M changes).
Control of Nonconforming Outputs: A stringent process for identification, segregation, and disposition (e.g., use-as-is, rework, scrap). Authorisation of concession requires customer approval where contractually specified.
The system for verifying the QMS is effective and compliant.
9.1 Monitoring, Measurement, Analysis and Evaluation:
Determine what to monitor and measure. This must include product conformity, process performance, customer satisfaction, and the effectiveness
of the QMS. Methods include inspection, testing, and audits.
9.2 Internal Audit:
An AS9100 audit is a highly structured, evidence-based evaluation of an aerospace organisation's Quality Management System (QMS) against the stringent requirements of the AS9100 standard. Far more than a generic ISO 9001 review, it is a deep-dive audit focused on safety, risk management, and absolute regulatory compliance. Auditors scrutinise not just documented procedures, but their practical implementation and the organisation's cultural commitment to quality and prevention of defects.
The process is designed to verify that every aspect of production—from design and supply chain management to manufacturing and post-delivery support—operates under controlled, repeatable conditions. Special emphasis is placed on critical areas like configuration management, control of special processes, traceability, foreign object debris (FOD) prevention, and a robust corrective action system. The audit's ultimate goal is to provide confidence to regulators, prime contractors, and the flying public that the organisation can consistently deliver safe, reliable, and conforming products, thereby upholding the zero-failure ethos of the aviation, space, and defence industries. Auditors must be objective and impartial.
9.3 Management Review:
Top management must review the QMS at planned intervals. Aerospace-specific review inputs include: results of audits, customer feedback (including OTD and quality performance),process performance, status of corrective actions, changes in context, and adequacy of resources. Outputs must include decisions related to improvement opportunities and resource needs.
Improvement (Clause 10)
Drives proactive enhancement and reactive correction.
10.1 General:
Determine and select improvement opportunities. In aerospace, this is tightly linked to data analysis from clause 9.
10.2 Nonconformity and Corrective Action:
When a nonconformity occurs, you must react by controlling it, conducting a root cause analysis(using a defined methodology), and implementing actions to prevent recurrence. A key requirement is verifying the effectiveness of corrective actions taken. All nonconformities must be recorded.
10.3 Continual Improvement:
The proactive, ongoing effort to improve the suitability, adequacy, and effectiveness of the QMS. This is achieved through the use of quality policy, objectives, audit results, data analysis, corrective actions, and management review.
For more information, visit www.compassrose.one
Small aerospace suppliers:£6,000 - £18,000+.Medium manufacturers:£15,000 - £40,000+.
Costs are significantly higher than ISO 9001 due to stringent audit days, OASIS database
fees, and mandatory aerospace auditor competencies. Includes inflation adjustments and
potential on-site audit surcharges for remote locations.
The Online Aerospace Supplier Information System (OASIS) is the mandatory global registry for all AS9100-certified companies. Your certificate and audit details are published here. Prime contractors (Airbus, Boeing, etc.) use OASIS to verify and approve suppliers. your certification requires registration and annual maintenance.
AS9100 includes all ISO 9001 requirements plus80+ aerospace-specific additions. Key differences: Configuration Management, Counterfeit Part Prevention, Foreign Object Debris (FOD) Control, Product Safety & Risk Management, and strict control of special processes(e.g., welding, NDT) with personnel qualification.
Processes where the output cannot be fully verified by inspection/testing (e.g., welding, heat treatment, non-destructive testing, and composite curing). They require validation, qualified personnel, and continuous monitoring. A top focus area for auditors.
Clause 6.2 mandates On-Time Delivery (OTD)as a measurable quality objective. You must define, monitor, and improve OTD performance. This is a critical metric reviewed by customers and auditors, directly impacting your supplier scorecard.
You must have a documented process for supplier selection, evaluation, and performance monitoring(Clause 8.4). This includes flowing down applicable aerospace requirements to your supply chain, managing customer-directed sources, and controlling external providers.
You must have a procedure for identifying, controlling, and disposing of nonconforming product. For major concessions or deviations, you often need customer approval before use-as-is or rework. All nonconformities require root cause analysis and corrective action.
Clause 5.3 requires the appointment of a Member of Senior Management with defined authority to establish, implement, and maintain QMS processes, and to report on QMS performance to top management. This role carries significant responsibility.
No, it is not mandatory. However, certification to AS9100 is a non-negotiable contractual prerequisite to become an approved supplier for major aerospace primes (e.g., Airbus, Boeing, Rolls-Royce) and their Tier 1 partners. Effectively, it is mandatory for market access in the commercial, defence, and space supply chains.
You must conduct internal audits of the entire QMS, including all AS9100 additions, within a three-year audit cycle. Auditors must be competent and objective. Audits must verify effective implementation and identify opportunities for improvement, with a strong focus on process and product risk.
For more information, visitwww.compassrose.one
