How to Get AS9100 Certification

Step 1: Understand the AS9100 Standard

AS9100 builds on ISO 9001 but introduces aerospace-specific requirements such as:

• Product safety

• Counterfeit part prevention

• Configuration management

• Risk-based operational control

• Enhanced supplier management

• First Article Inspection (FAI)

• Control of key characteristics

Organizations without a stable foundation should first align with ISO 9001 Quality Management System.

Misunderstanding the distinction between standards is a common cause of audit findings. A deeper comparison is outlined in ISO 9001 vs AS9100.

Step 2: Define Your Certification Scope

Before implementation, clearly define:

• Products and services included

• Physical locations

• Design responsibility

• Any justified exclusions

Scope determines audit boundaries and sampling. Poor scope definition leads directly to audit findings.

Understanding registrar expectations is critical. Many organizations review AS9100 Certification Body considerations at this stage.

Step 3: Conduct a Formal Gap Analysis

A structured gap assessment compares your current system against AS9100 requirements.

This identifies:

• Missing documented information

• Weak operational controls

• Gaps in risk management

• Supplier control deficiencies

• Configuration management weaknesses

• Missing product safety integration

This phase aligns with ISO Gap Assessment and should produce a prioritized roadmap.

Step 4: Develop and Implement the Aerospace QMS

You must implement a system that satisfies both ISO 9001 and aerospace-specific requirements.

Core elements include:

• Quality policy and objectives

• Risk management framework

• Contract review and operational planning

• Supplier approval and monitoring

• Production process control

• Nonconformance and corrective action

• Internal audit program

• Management review process

The system must reflect real operations.

Organizations often engage AS9100 Implementation Services to accelerate implementation and reduce rework.

Step 5: Deploy Risk-Based Thinking Across Operations

AS9100 significantly expands risk expectations.

You must demonstrate:

• Risk evaluation during contract review

• Production risk mitigation

• Supplier risk ranking

• Change management controls

• Product safety risk identification

Organizations lacking structured risk frameworks often align with ISO Risk Management Consulting to ensure consistency.

Auditors will sample live operations to verify risk integration.

Step 6: Conduct Internal Audits

Before certification, complete a full internal audit covering:

• All AS9100 clauses

• All in-scope processes

• Aerospace-specific additions

Internal audits must identify meaningful findings.

This phase typically aligns with ISO Internal Audit Services and ISO Audit Preparation Services.

Step 7: Hold Management Review

Top management must review system performance.

This includes:

• Audit results

• Process performance metrics

• Customer feedback

• Supplier performance

• Risks and opportunities

• Resource allocation

• Improvement initiatives

Leadership engagement is a decisive audit factor.

Step 8: Select an Accredited Certification Body

Certification must be performed by an IAQG-recognized registrar.

The audit process includes:

• Stage 1 (Readiness Review)

• Stage 2 (Certification Audit)

Nonconformities must be corrected before certification is granted.

How Long AS9100 Certification Takes

Typical timelines:

• Small aerospace manufacturers: 6–9 months

• Growing suppliers: 9–12 months

• Complex or multi-site organizations: 12+ months

Timeline depends on system maturity, operational complexity, and leadership involvement.

Organizations without an existing ISO 9001 system should plan conservatively.

Common Reasons AS9100 Certification Fails

Most failures are preparation failures.

Common issues include:

• Weak risk-based thinking

• Poor configuration management

• Ineffective supplier controls

• Lack of objective evidence

• Overcomplicated documentation

• Limited leadership engagement

Should You Use an AS9100 Consultant

Certification bodies audit. They do not build systems.

An experienced AS9100 Certification Consultant:

• Interprets aerospace requirements correctly

• Structures a realistic implementation roadmap

• Integrates ISO 9001 and AS9100 efficiently

• Prepares teams for audit interaction

• Reduces nonconformity risk

• Shortens certification timelines

For aerospace startups and scaling suppliers, structured support significantly reduces risk.

What Happens After Certification

AS9100 certification requires ongoing system maintenance:

• Annual surveillance audits

• Continued internal audit cycles

• Risk reassessment

• Supplier performance monitoring

• Continual improvement activities

Certification is sustained through operational discipline.

Why Wintersmith Advisory

We support aerospace organizations by building AQMS frameworks that function under real production conditions.

That includes:

• Structured gap assessments and implementation planning

• Aerospace-specific QMS architecture

• Risk and configuration management integration

• Supplier control system development

• Internal audit execution

• Management review facilitation

• Certification readiness preparation

Our work aligns with ISO Compliance Consulting — structured, practical, and audit-ready.

We do not certify. We build systems that pass certification and sustain performance.

If You’re Also Evaluating…

• What is AS9100 Certification

• AS9120 Certification

• Flowdown Requirements

• IATF 16949

• AS9100 Training

AS9100 certification is a strategic commitment to aerospace-level operational control.

The difference between a smooth certification and a painful one is almost always preparation discipline.