AS9100 Certification Process: A Step-by-Step Guide for Aerospace Companies

What Makes the AS9100 Certification Process Different

AS9100 builds on ISO 9001, but adds significantly more operational rigor.

Key differences include:

• Risk management integrated into operational decision-making

• Product safety controls embedded in processes

• Configuration management across lifecycle stages

• Counterfeit part prevention requirements

• Supplier monitoring and control expectations

• Traceability and production control discipline

Organizations that approach AS9100 like a standard QMS project typically encounter delays, audit findings, or system instability.

Step 1: Define Scope and Organizational Context

Before documentation begins, the organization must define what the system actually covers.

This includes:

• Scope of certification (products, services, locations)

• Core processes across design, production, and support

• Interested parties including customers and regulators

• Internal and external issues impacting the QMS

• Risks and opportunities tied to operations

A poorly defined scope creates audit exposure later. This step anchors alignment to AS9100 Certification Requirements and sets the structure for everything that follows.

Step 2: Conduct a Gap Assessment

A formal gap assessment evaluates current practices against AS9100 requirements.

This step identifies:

• Missing or incomplete processes

• Weak implementation of existing controls

• Documentation gaps

• Inconsistent execution across teams

• Gaps in risk and configuration management

Skipping or rushing this step is one of the most common causes of extended timelines.

This phase often aligns with ISO Gap Assessment and ISO Readiness Assessment when organizations need a broader system-level view.

Step 3: Develop and Structure the QMS

The QMS must reflect how the organization actually operates while meeting aerospace expectations.

Core elements typically include:

• Quality policy and measurable objectives

• Process interaction and ownership

• Risk management methodology

• Configuration management controls

• Supplier evaluation and monitoring

• Production and inspection processes

• Nonconformity and corrective action processes

• Internal audit and management review

The goal is not documentation. It is a controlled system that can be executed consistently and audited effectively.

Organizations transitioning from ISO 9001 often benefit from understanding the operational differences outlined in ISO 9001 vs AS9100.

Step 4: Implement the System

Implementation is where most certification efforts succeed or fail.

This stage requires:

• Training personnel on process expectations

• Executing defined controls in real operations

• Generating records and objective evidence

• Monitoring KPIs and process performance

• Applying risk-based thinking in decisions

• Managing suppliers according to defined criteria

• Controlling nonconformities consistently

A system that exists only on paper will not survive a certification audit.

Most organizations require several months of operational evidence before audit readiness is realistic.

Step 5: Perform Internal Audits

Internal audits validate whether the system is functioning, not just documented.

Audits must cover:

• All AS9100 clauses

• All relevant operational processes

• Process effectiveness and outputs

• Risk controls in practice

Weak internal audits create false confidence and lead directly to major findings during certification.

This stage typically aligns with ISO Internal Audit Services and ISO Audit Preparation Services.

Step 6: Conduct Management Review

Management review demonstrates whether leadership is actively managing the system.

Inputs typically include:

• Internal audit results

• Customer feedback and complaints

• Process and product performance

• Supplier performance data

• Risk status and mitigation actions

• Opportunities for improvement

• Resource needs and constraints

This is not a formality. Certification auditors expect to see that leadership is using the system to make decisions.

Step 7: Stage 1 Audit (Readiness Review)

The certification body evaluates whether the organization is ready for certification.

They review:

• Scope definition

• Documented system structure

• Internal audit completion

• Management review completion

• Overall readiness

Stage 1 does not grant certification. It confirms that proceeding to Stage 2 is appropriate.

Understanding how auditors approach this phase can be supported by reviewing AS9100 Certification Bodies.

Step 8: Stage 2 Audit (Certification Audit)

The Stage 2 audit evaluates whether the system works in practice.

Auditors assess:

• Process execution and effectiveness

• Risk management integration

• Configuration control discipline

• Product traceability

• Supplier performance management

• Nonconformance handling

• Alignment between documented processes and actual operations

Certification is granted when the system demonstrates control, consistency, and compliance.

How Long the AS9100 Certification Process Takes

Typical timelines:

• Small organizations: 4–6 months

• Mid-size aerospace companies: 6–9 months

• Complex or multi-site organizations: 9–12+ months

Timeline is driven more by leadership engagement and operational maturity than company size.

Organizations preparing for this journey often benefit from understanding the broader pathway in How to Get AS9100 Certified.

Common Failures in the AS9100 Certification Process

Organizations tend to struggle when they:

• Treat AS9100 as documentation instead of operations

• Underestimate risk management depth

• Ignore configuration management rigor

• Delay internal audits until late stages

• Fail to control suppliers effectively

• Involve leadership too late in the process

Most certification issues are predictable. They originate in system design and implementation — not in the audit.

Strategic Value of AS9100 Certification

When implemented correctly, AS9100 supports:

• Access to aerospace and defense markets

• Improved product quality and consistency

• Stronger supplier control and traceability

• Reduced operational and compliance risk

• Increased customer confidence

• Scalable, repeatable operational processes

Certification is the validation. The system is the asset.

Why Wintersmith Advisory

We support organizations through the AS9100 certification process with a focus on system integrity and operational alignment.

That includes:

• Structured gap assessment and roadmap development

• QMS architecture aligned to aerospace requirements

• Risk and configuration management integration

• Process definition and KPI alignment

• Internal audit execution

• Management review facilitation

• Certification readiness preparation

Our role aligns with AS9100 Certification Consultant expectations — preparation, structure, and execution discipline.

We do not certify. We build systems that pass certification and continue to perform afterward.

If You’re Also Evaluating…

• AS9100 Certification Requirements

• How to Get AS9100 Certified

• AS9100 Certification Consultant

• AS9100 Implementation Services

• ISO 9001 Consultant

This is not just a certification pathway. It is a shift toward aerospace-level operational discipline.