IA9100 Clause-by-Clause Changes from AS9100D

Culture and ethics as QMS foundations

Clause 0.1 introduces a new focus on organizational culture and ethical behaviour as essential for an effective aerospace QMS. Culture shapes the attitudes, behaviours and values that determine whether the system achieves its intended outcomes.

Example: The Boeing 737 MAX crises have been widely linked to safety-culture and ethical failings, showing how weak culture can undermine QMS results.

Leadership promotes an ethical work environment

Top management ensures that the goals and objectives that build a quality culture are consistent with the organization’s policies, vision, mission, values and context, and promotes an ethical work environment.

Culture in the work environment

The NOTE on human and physical factors now lists culture as an example: quality, ethical behaviour, product and personnel safety, and quality of work life.

Example: Mandatory ethics training and anonymous reporting channels that help surface manufacturing issues before they become defects.

Measurement system analysis (MSA)

A new NOTE explains that the extent to which measurement introduces variation can be determined by measurement systems analysis, gauge R&R or attribute analysis. Lists of monitoring and measuring equipment are to be kept as documented information, which could be a register.

Example: In engine manufacturing, a gauge R&R study assesses caliper variation when measuring turbine blade thickness, revealing operator or tool inconsistencies before they cause defects.

A new requirement to safeguard the QMS

Clause 7.1.7 is new: the organization shall plan, implement and control information security to safeguard the QMS so that it achieves its intended results. Clause 8.1 also adds information security and data protection to its NOTE.

Example: An aircraft manufacturer encrypts design data and applies access controls to prevent breaches, protecting QMS integrity and avoiding production delays from data tampering.

FOD, MSA, control plans and APQP

Clause 8.1 adds notes on information security and data protection, brings MSA and control plans into statistical techniques, strengthens prevention, detection and mitigation of foreign object debris (FOD), and names APQP as one method for structured operational planning. Read the full clause 8.1 guide.

Example: A fighter-jet programme might use APQP for phased assembly planning, MSA to validate precision measurements, FOD controls such as tool tethering and clean zones, and encrypted systems for design data.

Product safety notes become requirements

The former NOTE items are now explicit requirements: identification of hazards (reactive and proactive), assessment and control of safety risks, the impact of changes on safety, assessment of safety process effectiveness, training, communication and awareness, and reporting of safety events.

Example: The 2013 Boeing 787 battery incidents prompted hazard identification, redesigned battery enclosures, supplier change management, effectiveness reviews, training, safety communications and regulator reporting.

Safety risk assessment is mandatory

Clause 8.1.3 elevates prior notes to requirements for hazard identification, risk assessment and risk management throughout the product life cycle, so that safety is managed proactively.

Example: An engine manufacturer assesses the risk of turbine blade failure causing an in-flight shutdown and mitigates it with improved materials and rigorous testing.

Remote inspection and audit now permitted

Clause 8.4.2 still requires controls on external providers based on risk, performance and product criticality; its updated NOTE now allows remote inspection and audit.

Example: During supply chain disruption, a firm remotely audits a fastener supplier through live video and secure file sharing to verify compliance.

Direct and sub-tier control

Clause 8.4.3 is restructured for clarity and adds a new requirement to determine the level of control over direct and sub-tier external providers, based on risk and criticality.

Example: An aircraft manufacturer requires its direct engine-part supplier to audit sub-tier material providers for safety-critical components, while accepting certifications for low-risk items.

Control of production and service provision

The NOTE in 8.5.1.d clarifies monitoring and measurement activities and aligns them with 8.5.1.1 on validating equipment, tools and software programs.

Example: A machine shop producing aerospace fasteners verifies set-ups, inspects in-process after machine changes and runs capability studies for consistent quality.

Production process verification is more than FAI

Clause 8.5.1.3 restructures production process verification to make clear it goes beyond first article inspection, including risk assessment, capacity planning and FAI planning elements consistent with AS9102.

Example: A turbine blade manufacturer verifies production through ongoing risk evaluation of welding processes, tool calibration and capacity checks, not just the initial FAI.

Performance indicators and risk in internal audit

Reviewing performance indicators moves from a NOTE to a requirement, and risks must be included when establishing the internal audit program, making auditing explicitly risk-based.

Example: A parts supplier plans audits by reviewing KPIs such as defect rates and risks such as material shortages, auditing high-risk suppliers first.

QMS maturity assessment

Organizations plan periodic QMS maturity assessments and set improvement goals and objectives.

Example: An engine manufacturer runs an annual maturity assessment using a model such as the IAQG AIMM, identifies weaknesses in supplier integration and sets targeted improvement objectives.