How to Get AS9100 Certification

Step 1: Understand the AS9100 Standard

AS9100 builds on ISO 9001 but adds aerospace-specific requirements such as:

• Product safety

• Counterfeit part prevention

• Configuration management

• Risk-based operational controls

• Enhanced supplier management

• First Article Inspection (FAI)

• Control of key characteristics

Organizations must understand both the ISO 9001 core framework and the additional aerospace requirements.

Misunderstanding this distinction is one of the most common causes of failed audits.

Step 2: Define Your Certification Scope

Before building your system, define:

• Products and services included

• Physical locations

• Design responsibility (if applicable)

• Exclusions (if justified)

Scope clarity is critical. Poorly defined scopes create audit findings and certification delays.

Step 3: Conduct a Formal Gap Analysis

A structured gap analysis compares your current system against AS9100 requirements.

This identifies:

• Missing documented information

• Weak operational controls

• Gaps in risk management

• Supplier control weaknesses

• Lack of product safety controls

• Incomplete configuration management

The result should be a prioritized implementation roadmap.

Step 4: Develop and Implement the Aerospace QMS

You must build and implement processes that meet AS9100 requirements.

Core system elements include:

• Documented Quality Manual (if used)

• Risk management framework

• Product realization controls

• Supplier approval and monitoring

• Production process control

• Nonconformance and corrective action

• Internal audit program

• Management review process

The system must operate in practice — not just exist in documentation.

Step 5: Deploy Risk-Based Thinking Across Operations

AS9100 places strong emphasis on operational risk control.

You must demonstrate:

• Risk assessment during contract review

• Production risk mitigation

• Supplier risk evaluation

• Change management controls

• Product safety risk identification

Auditors will test risk controls in real processes — not just on paper.

Step 6: Conduct Internal Audits

Before certification, your organization must complete a full internal audit covering:

• All AS9100 clauses

• All processes within scope

• Aerospace-specific requirements

Internal audits must identify real findings and corrective actions must be implemented before proceeding to certification.

Step 7: Hold Management Review

Top management must formally review:

• Audit results

• Process performance

• Customer satisfaction

• Supplier performance

• Risks and opportunities

• Resource needs

• Improvement initiatives

Leadership involvement is a major focus area in aerospace audits.

Step 8: Select an Accredited Certification Body

Certification must be conducted by a registrar accredited under the aerospace scheme (IAQG/ICOP).

The certification process includes:

• Stage 1 Audit (Readiness Review)

• Stage 2 Audit (Certification Audit)

Nonconformities must be corrected before certification is granted.

How Long Does It Take to Get AS9100 Certification?

Typical timelines:

• Small aerospace manufacturers: 6–9 months

• Growing aerospace suppliers: 9–12 months

• Complex or multi-site organizations: 12+ months

Timeline depends heavily on:

• Existing QMS maturity

• Design responsibility

• Operational complexity

• Leadership engagement

Organizations starting from scratch should plan conservatively.

Common Reasons AS9100 Certification Fails

• Weak risk-based thinking

• Poor configuration management

• Ineffective supplier controls

• Lack of objective evidence

• Overcomplicated documentation

• Leadership disengagement

Most audit failures are preparation failures.

Should You Use an AS9100 Consultant?

Certification bodies audit. They do not build your system.

An experienced aerospace consultant:

• Interprets aerospace-specific clauses correctly

• Builds a structured implementation roadmap

• Integrates ISO 9001 and AS9100 efficiently

• Prepares your team for audit interviews

• Reduces nonconformity risk

• Shortens overall certification timeline

For aerospace startups and scaling suppliers especially, structured guidance significantly reduces risk.

What Happens After Certification?

AS9100 certification requires:

• Annual surveillance audits

• Ongoing internal audits

• Continual improvement

• Risk reassessment

• Supplier performance monitoring

Certification is maintained through performance — not paperwork.

Final Thoughts

Getting AS9100 certification is a strategic milestone for aerospace organizations.

It signals:

• Operational control

• Risk discipline

• Supply chain reliability

• Customer confidence

When implemented correctly, AS9100 strengthens your organization far beyond audit readiness.

If your organization is preparing for certification, a structured and disciplined approach will determine whether the process is smooth — or painful.