Autor: admin

Supplier Development vs. Supplier Replacement: When Each Strategy Is Right

Supplier Development vs. Supplier Replacement: When Each Strategy Is Right

admin

The instinct when a supplier fails is to either fix them or replace them. Both responses can be wrong. What is consistently underinvested is the analysis that should precede either decision: a structured assessment of why the supplier is failing, what kind of failure it is, and what outcome is actually achievable given the constraints of the relationship, the requalification cost, and the production timeline.

I have seen organizations replace suppliers who had addressable process problems because the corrective action process was too slow and the production pressure was too high. I have seen organizations develop suppliers who had cultural and management problems that no amount of technical support would address. Both responses wasted time and money. Neither one was based on a clear-eyed assessment of the root cause and the realistic options for addressing it.

1. The Case for Supplier Development

Supplier development — investing in improving a supplier’s capability rather than replacing them — is the right strategy when four conditions are present simultaneously:

The root cause is technical, not cultural. Process capability gaps, equipment limitations, procedure deficiencies, and competency gaps in specific technical areas are developable. They require investment in training, equipment, process redesign, or procedure revision — but the organization has the capacity and the management commitment to make those investments. An organization that has a documented quality failure caused by an inadequate inspection procedure, a miscalibrated measurement system, or an undertrained operator in a specific role is a development candidate. An organization that has a documented quality failure caused by a management decision to ship parts they knew were borderline is not.

The supplier has demonstrated capability in the past. A supplier who produced conforming parts for two years before experiencing a quality failure is a different risk profile than a supplier who has never consistently produced conforming parts. The former has a baseline of demonstrated capability that development can restore. The latter requires building capability that does not yet exist — a different and more resource-intensive investment that warrants closer scrutiny before committing development resources.

The switching cost is real and quantified. QSTRAT’s December 2025 analysis of aerospace supplier qualification practices confirmed that suppliers are typically requalified every one to three years — involving updated risk assessments, quality system evaluations, on-site or remote audits, and validation of special processes. For safety-critical and quality-critical parts, requalification can take 12-18 months and require PPAP, First Article Inspection, and customer approval. That timeline creates a risk window that is sometimes worse than the quality risk you are trying to eliminate. The switching cost calculation must include: requalification duration, production risk during the transition, new supplier onboarding cost, and the probability that the new supplier performs better than the current one after development.

Management commitment to improvement is demonstrable — not stated. The distinction is between a supplier whose quality manager presents a corrective action plan in the review meeting and a supplier whose production manager has already made operational changes before the meeting. The first is a document. The second is evidence of organizational commitment. The supplier who calls you before the SCAR deadline to share preliminary corrective action results is a different risk profile than the one who submits documentation on the last day of the response window.

2. The Case for Supplier Replacement

Replacement is the right decision when the problem is structural rather than technical. The indicators are recognizable to anyone who has managed supplier quality over multiple years:

Repeated corrective actions that close on paper but do not sustain in production. A supplier who has received three SCARs for the same failure mode in two years, each with a technically correct corrective action response, is demonstrating that their QMS is decoupled from their operational reality. The corrective action process produces documents. It does not produce sustained process change. This is a management culture problem. It is not addressable through supplier development investment from the customer side — because the customer cannot change the internal management incentive structure that is producing the pattern.

Unwillingness to allow meaningful audit access. A supplier that consistently limits audit access to the quality manager’s presentation, resists requests for shop floor observation, or delays corrective action verification audits is signaling that there is something they do not want audited. That signal is reliable in my experience. A supplier that cannot be audited cannot be trusted. That is a replacement scenario regardless of current performance metrics.

Financial instability creating ongoing process pressure. A supplier operating under severe financial pressure will consistently make quality compromises — not necessarily intentionally, but structurally. Maintenance is deferred. Inspection is reduced. Personnel turnover increases as wages are cut or positions are not backfilled. These conditions produce quality failures regardless of the corrective action process in place. Supplier development investment from the customer does not address the underlying financial condition that is producing the quality risk.

3. The Decision Framework in Practice

The analysis that should precede the development versus replacement decision covers three questions:

What is the actual root cause of the failure — process, system, or culture? Process failures are developable. System failures require more significant investment but are developable with committed management. Culture failures — where the management decision-making consistently prioritizes output over quality — are not developable from the outside. The answer to this question drives everything else.

What is the realistic timeline to qualified alternative sourcing? If the answer is „12-18 months with significant requalification risk,“ that timeline needs to be factored into the decision explicitly. A development investment that closes a quality gap in 6 months may produce better outcomes than a replacement process that creates a 12-month risk window, even if replacement is the right long-term decision.

What does the supplier’s behavior during the corrective action process tell you about their management culture? The way a supplier responds to a quality failure — the speed of response, the depth of root cause analysis, the willingness to accept audit findings without pushback, the consistency between what management says in meetings and what production actually does — is more predictive of future quality performance than the content of the corrective action plan itself. This is the behavioral signal that most supplier quality programmes underweight relative to documentation quality.

3 Concrete Actions

1. Before deciding between development and replacement, conduct a structured root cause analysis at the organizational level. Map the failure explicitly to one of three categories: technical (process, equipment, procedure), systemic (QMS structure, measurement system, corrective action effectiveness), or cultural (management commitment, reporting culture, decision-making under pressure). The category determines the right response. Treating a cultural failure as a technical one produces a good corrective action document and a recurring quality problem.

2. For suppliers in active development: define measurable milestones with specific timelines and explicit exit criteria before the development investment begins. „If Ppk for characteristic X does not reach 1.33 within 90 days of process change implementation, supplier status will be escalated to replacement evaluation“ is a development plan with accountability. „We will work with the supplier to improve their process“ is an open-ended support commitment with no accountability structure. The exit criteria protect both parties.

3. For replacement decisions: initiate the alternative sourcing process before communicating the replacement decision to the current supplier. The timeline for qualifying an alternative source in aerospace is typically 12-18 months. Starting that process before communicating the replacement intent allows the transition to proceed without creating a service risk window, and it prevents the current supplier from using the threat of production disruption as leverage in the transition negotiation. Once you have identified and pre-qualified an alternative, the replacement communication becomes a controlled transition rather than an emergency response.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • QSTRAT — Best Practices for Supplier Qualification in Aerospace: Requalification Timelines and Scope (December 2025), qstrat.com
  • IAQG — IA9100 Key Change Summary: Sub-Tier Supplier Controls, iaqg.org
  • Quality Assurance Authority — Third-Party Audit Compliance for Quality Systems (February 23, 2026), qualityassuranceauthority.com
  • AIAG — Production Part Approval Process (PPAP) Reference Manual, 4th Edition
  • AIAG — Statistical Process Control (SPC) Reference Manual, 2nd Edition
  • EN 9100:2018 — Section 8.4: Control of Externally Provided Processes, Products and Services

#SupplierDevelopment #SupplierManagement #QualityManagement #AerospaceQuality #CorrectiveAction #PPAP #SKQC

Aviation Safety Culture vs. Quality Management System: They Are Not the Same Thing

Aviation Safety Culture vs. Quality Management System: They Are Not the Same Thing

admin

Safety Management Systems and Quality Management Systems are often discussed in the same sentence — sometimes as if they are two names for the same thing. They are not. The overlap is real. But so is the gap between them, and that gap has been a contributing factor in aviation incidents where the formal quality records showed compliance while the operational reality showed something different.

EASA addressed this distinction in its European Plan for Aviation Safety (EPAS) 2026. The EPAS 2026 document notes explicitly that „competence of personnel is an important enabler for resilience and is therefore assigned an elevated priority ranking within the EPAS strategic priorities.“ The addendum to EPAS Volume I introduced workforce competency as a systemic priority, with the direct statement: „Addressing the shortage of competent aviation personnel is a priority topic for the Member States, and it has been recommended to be addressed as a matter of priority by the MAB.“ The 2024 EASA report on SMS compliance noted that „compliant SMS programs reduce incident rates by 20%.“ Understanding why EASA is framing workforce competency as a safety management issue — not just a training administration issue — requires understanding what each system is actually designed to do.

1. What a Quality Management System Is Designed to Do

A QMS is a process control framework. It defines how work is planned, executed, measured, and improved. It establishes procedures, documentation requirements, nonconformance management processes, and audit processes that verify the system is being followed.

A QMS is retrospective and prescriptive. It describes what the process should be and captures evidence that it was followed. It is optimized for compliance verification — the ability to demonstrate, through documented evidence, that required procedures were executed correctly.

The strength of a QMS is that it creates a structured, verifiable record of process execution. The limitation is that it captures what people documented, which is not always what they did, and documents what procedures required, which is not always what was operationally realistic under the conditions that existed at the time. EN 9100 Section 7.2 addresses competency requirements — but the standard addresses whether a procedure for competency assessment exists, not whether the organizational conditions allow competency gaps to surface and be addressed proactively.

2. What a Safety Management System Is Designed to Do

An SMS is a risk identification and communication framework. EASA defines SMS as seeking „to proactively identify hazards and to mitigate the related safety risks before they result in aviation accidents and incidents.“ It is designed to surface hazards before they become incidents — and critically, it depends on a reporting culture where personnel feel safe to raise concerns without consequence.

ICAO Annex 19 SMS Standards and Recommended Practices have been incorporated into each EASA aviation domain, including Part 145 (Continuing Airworthiness) and Part 21 (Design and Production). The EASA Management System Assessment Tool (MSAT) was developed to guide organizations through implementation and promote a common approach to management system assessment across aviation domains.

The core functional requirement of an SMS is voluntary hazard reporting. This means maintenance technicians, quality inspectors, and production personnel must be willing to identify and report conditions that are unsafe or sub-optimal — even when doing so might reveal errors they made or reflect poorly on their team. That willingness is a behavioral condition, not a procedural one. You cannot create it through a reporting form or a training module. You create it through years of organizational behavior that consistently demonstrates that reporting is safe and that reports lead to meaningful action. A 2023 study referenced by SMS compliance literature found that integrated SMS platforms reduce errors by 15% when they successfully improve data utilization and reporting consistency.

3. Where Confusing the Two Creates Risk

Organizations that treat their QMS as their safety system miss the behavioral dimension entirely. A nonconformance report captures what went wrong after it went wrong. It does not capture the organizational pressure that led someone to make a decision they knew was marginal — to accept a borderline measurement, to skip a verification step under schedule pressure, to install a part they were not completely certain about rather than delay the aircraft and face the operational consequence.

Those decisions happen in the gap between the formal QMS and the actual operational conditions. They are invisible to the QMS because they do not generate a nonconformance record — the part that was installed worked, or the marginal measurement did not produce a field failure in that specific instance. The risk accumulates in the system without appearing in the quality records.

EASA EPAS Volume III identifies „Lack of effectiveness of safety management system (SI-2026)“ as a specific safety issue within its Safety Risk Portfolio. The EPAS framework is explicit: „In most scenarios, these problems are related to human factors, human performance, competence of personnel, socio-economic factors or to deficiencies in organisational processes and procedures.“ A QMS that captures the technical cause of a nonconformance but does not examine the human factors conditions that produced it — fatigue, time pressure, unclear work instructions, inadequate supervision — is producing incomplete root cause analysis by EASA’s own framework.

4. The IA9100 Bridge

IA9100’s human factors root cause analysis requirement — one of the six named areas in the IAQG Key Change Summary — explicitly bridges QMS and SMS thinking. Organizations will be required to assess human factors as part of nonconformance root cause analysis. QT9 Software’s October 2025 analysis of IA9100 confirmed: „Leadership will be tasked with demonstrating commitment to a culture of quality through behavior and resources, including incorporating human factors, such as fatigue, into root cause investigations and providing employee well-being programs that support quality outcomes.“

A corrective action process that asks „what organizational conditions led the operator to make the decision they made?“ is applying SMS methodology to QMS problem-solving. Building that practice before IA9100 requires it produces better corrective actions now and a more mature organizational understanding of the relationship between the two systems ahead of the transition audit.

3 Concrete Actions

1. Audit your SMS reporting data — not just your QMS nonconformance data — for signals about quality-critical process conditions. If your SMS reports contain references to time pressure, uncertainty about procedure interpretation, or workload concerns in quality-critical roles, those reports are telling you something your QMS data is not. The absence of SMS reports in a quality-critical area is itself a signal worth investigating — it may reflect that reporting culture has not reached that area, not that the area is risk-free.

2. Review how your organization responds to SMS reports that describe marginal decisions that did not produce a nonconformance. If the response is „no action required — no nonconformance occurred,“ the organizational message is that reporting near-misses has no operational consequence. That message will reduce future voluntary reporting. The correct response is investigation of the conditions that produced the marginal decision — time pressure, unclear procedure, competency uncertainty — and action on those conditions.

3. For organizations preparing for IA9100 transition: begin incorporating human factors questions into your existing RCA process now. The question „what organizational conditions led the operator to make the decision they made?“ does not require IA9100 to be published before it produces value. It will produce better corrective actions immediately, and it will mean your team is practiced in the methodology before the first IA9100 transition audit expects to see it in your D5 root cause documentation.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • EASA — European Plan for Aviation Safety (EPAS) 2026, 15th Edition (December 18, 2025), easa.europa.eu
  • EASA — European Plan for Aviation Safety (EPAS) Volume I Addendum: Workforce Competency Priority, easa.europa.eu
  • EASA — Safety Management System and Management System: The Integrated Approach, easa.europa.eu
  • EASA — EPAS Volume III Safety Risk Portfolios: SI-2026 Lack of Effectiveness of SMS, easa.europa.eu
  • ICAO — Safety Management Manual (SMM), Document 9859, 4th Edition
  • QT9 Software — IA9100 is Coming: Key Updates for Aerospace and Defense (October 23, 2025), qt9software.com
  • IAQG — IA9100 Key Change Summary, iaqg.org
  • EN 9100:2018 / AS9100 Rev D — Section 7.2: Competence
  • SMS Pro / Aviation Safety Blog — How SMS Pro Facilitates EASA Compliance (September 10, 2025), aviationsafetyblog.asms-pro.com

#AviationSafety #SafetyCulture #QualityManagement #SMS #EASA #EPAS2026 #AerospaceQuality #IA9100 #SKQC

Process Capability vs. Process Performance: Why Cpk Alone Is Not Enough

Process Capability vs. Process Performance: Why Cpk Alone Is Not Enough

admin

Cpk of 1.67 on a PPAP submission. The part goes into production. Six months later, the customer has a field return that traces back to the same characteristic the Cpk was supposed to validate. The PPAP was technically correct. The risk it was supposed to mitigate materialized anyway.

This sequence is more common than it should be — and it consistently traces back to a fundamental misunderstanding of what Cpk actually measures, and what it does not.

1. The Distinction That Most Supplier Quality Programmes Get Wrong

Cpk — Process Capability Index — measures what a process can achieve under controlled, short-term conditions. It is calculated from a sample taken during a specific window, typically under stable setup conditions with an experienced operator, using material from a single lot, on equipment that was recently calibrated and serviced. Cpk answers the question: what is this process capable of when everything is aligned correctly?

Ppk — Process Performance Index — measures what the process actually delivered over an extended period, including all sources of variation that were present during normal production: shift changes, tool wear across multiple setups, material lot variation between deliveries, environmental changes across weeks or months, operator variability across the full range of personnel who run the process. Ppk answers the question: what did this process actually produce when it was operating as it normally operates?

Datalyzer’s published analysis of process capability indices is precise on this point: „The difference between Cpk and Ppk indicates if the process is stable or in other words if there are special causes of variation which are influencing the average of the process even if control limits are not properly set. The requirement within most industries is that the Ppk value should exceed 1.67.“ The AIAG Capability reference manual confirms: „Ppk is preferable to Cpk since it captures all the process variation.“

Process capability thresholds in practice: the AIAG requires Cpk 1.33 for initial production and Cpk 1.67 for critical safety characteristics. Aerospace may require Cpk 2.0 for flight-critical dimensions. But these thresholds apply to the capability study — the short-term measurement. A supplier can submit a Cpk of 1.67 from a 30-piece initial capability study. If the same characteristic measured over six months of serial production shows a Ppk of 0.98, the PPAP was technically correct — and the risk management value of the capability data was near zero.

2. Where the Gap Between Cpk and Ppk Is Largest

The gap between initial capability (Cpk) and sustained performance (Ppk) is predictably largest in three situations:

Processes with significant material lot variation. Machining operations on aluminum alloys, composite layup processes using prepreg from multiple lots, and assembly operations using adhesives with variable viscosity across production batches all exhibit variation that is not captured in a single-lot initial capability study. The PPAP sample was drawn from one material lot under one setup. Production draws from dozens of lots across the production run. As 1factory’s quality academy notes, the goal of a capability study is to determine how often a process meets its desired outcomes — but that answer is only meaningful if the study conditions represent actual production conditions.

Processes that require frequent setup and adjustment. A machine set up correctly at the beginning of a shift and drifting across the shift produces an initial capability study that reflects the beginning-of-shift condition. The Cpk is the best-case estimate for that process. The Ppk — calculated across multiple shifts, multiple setups, and the full range of operator adjustment decisions — is the realistic estimate. AMREPinspect’s December 2025 analysis illustrated this with a specific example: Cpk of 1.67 under controlled conditions versus Ppk of 1.11 long-term, describing the divergence as „possible process drift or instability.“

Processes where operator competency is a significant source of variation. Any process where the outcome depends materially on operator skill — composite repair, manual welding, hand layup, precision assembly — has an inherent gap between what an experienced operator produces in a controlled capability study and what the full range of qualified operators produces in normal production. The PPAP was conducted by the most experienced technician available. Production is executed by the full operator pool, with varying experience levels and varying adherence to work instruction details.

3. What This Means for Supplier Qualification and PPAP Review

The AIAG PPAP Reference Manual specifies minimum sample sizes and study durations for initial process capability studies. AS9100 and EN 9100 reference similar principles. These requirements define the floor for what constitutes an acceptable initial capability submission — they do not define what constitutes adequate ongoing process performance assurance.

A mature supplier quality programme treats PPAP approval as the beginning of process performance monitoring, not the end of it. The iSixSigma practitioner community has documented this distinction extensively: „Cp and Cpk are for computing the index concerning the subgrouping of your data (different shifts, machines, operators), while Pp and Ppk are for the whole process (no subgrouping). It is more realistic to use Pp and Ppk than Cp or Cpk as the process variation cannot be tempered by inappropriate subgrouping.“ The kiuey.com analysis of process capability added the key practical insight: „If the process is stable enough, Cpk and Ppk will be uniform — but if unstable, Cpk will be greater than Ppk, implying shifts or drifts over time.“ That divergence is your signal.

The distinction between Cpk and Ppk should be explicitly addressed in supplier quality agreements for safety-critical and quality-critical characteristics. Suppliers should be required to report Ppk — not Cpk — for ongoing production, calculated from at least three production lots or 90 days of serial production. This is a straightforward addition to a supplier quality agreement that changes the information available for risk-based supplier management from „what can this process do?“ to „what is this process doing?“

4. The Audit Application

When reviewing supplier capability data during a second party audit, the question is not only what the Cpk value is — it is whether the study conditions that produced that number are representative of normal production. Useful audit questions: How many material lots were included in the capability study? How many operators ran the process during the study period? Was the equipment in its normal production condition or specifically serviced for the study? How does the Cpk from the capability study compare to the Ppk calculated from the last three months of production SPC data?

If the supplier does not have Ppk data from serial production for their quality-critical characteristics — because they do not have ongoing SPC — that is an audit finding. Not because SPC is required for its own sake, but because the absence of ongoing process performance data means the supplier is operating without objective evidence that the process that was qualified is still performing within the qualified parameters.

3 Concrete Actions

1. Review your PPAP approval criteria and add an explicit requirement that Ppk — not only Cpk — be reported for safety-critical and quality-critical characteristics once production has been running for at least 90 days. Set a minimum Ppk acceptance threshold consistent with your industry requirements (Ppk 1.33 as minimum, 1.67 for safety-critical characteristics per AIAG guidance) and make Ppk below threshold a trigger for supplier process review, not just corrective action request.

2. For characteristics where your supplier has submitted Cpk data but does not have ongoing SPC: include a review of actual production measurement data in your next supplier audit. Ask the supplier to pull the last 50-100 measurements for the characteristic in question from their production records and calculate the Ppk from that data in real time during the audit. The result will tell you more about actual process risk than the PPAP file.

3. When onboarding new suppliers in regulated industries: structure the production qualification in two stages. Stage one: initial capability study (Cpk) to confirm process can perform to specification. Stage two: 90-day production data review (Ppk) to confirm process is performing to specification under normal production conditions. Full qualification approval — and removal from elevated monitoring status — only after Stage two is complete with Ppk at or above your defined threshold.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • AIAG — Production Part Approval Process (PPAP) Reference Manual, 4th Edition. Automotive Industry Action Group.
  • AIAG — Statistical Process Control (SPC) Reference Manual, 2nd Edition. Automotive Industry Action Group.
  • Gunter, B.H. — Understanding Process Capability Indices (University of Waterloo reference), sas.uwaterloo.ca
  • SixSigma.us — A Practitioner’s Guide to Choosing Between Cpk vs Ppk (January 13, 2025), 6sigma.us
  • iSixSigma — Process Capability Cp, Cpk and Process Performance Pp, Ppk — What is the Difference? (October 2024), isixsigma.com
  • AMREPinspect — Ppk vs Cpk: Understand Process Capability with Clear Formulas and Examples (December 27, 2025), amrepinspect.com
  • Datalyzer — Process Capabilities Explained: Cp, Cpk, Pp and Ppk (August 20, 2025), datalyzer.com
  • 1factory — A Guide to Process Capability (Cp, Cpk) and Process Performance (Pp, Ppk), 1factory.com
  • Kiuey — Understanding Process Capability Analysis (Cp, Cpk, Pp and Ppk) (June 18, 2025), kiuey.com
  • TheStatSigma — Process Capability and Performance Analysis Tool: Industry Variation by Sector, thestatsigma.com

#ProcessCapability #SPC #PPAP #SupplierQuality #QualityManagement #IATF16949 #EN9100 #AIAG #SKQC

Supplier Qualification in the U.S. Market: What European OEMs Get Wrong

Supplier Qualification in the U.S. Market: What European OEMs Get Wrong

admin

The United States aviation ecosystem is not a single market. Stratview Research identified over 500 MRO players in the USA alone. Florida represents one of the most geographically diverse aviation concentrations in the country — running from Naval Air Station Jacksonville and the dense defense supplier network in the northeast, through Orlando’s Lockheed Martin facilities and defense manufacturing cluster, to Miami, which anchors one of the largest commercial MRO concentrations in the Western Hemisphere. The Sarasota-Bradenton area sits near the center of this geography, with access to both commercial airports (SRQ and TPA) and a growing base of FBOs, Part 145 repair stations, and specialized component manufacturers.

Fortune Business Insights valued the global aircraft component MRO market at USD 20.36 billion in 2025, projecting growth to USD 28.42 billion by 2034 at a CAGR of 3.30%. North America dominated with 30.70% market share in 2025. European OEMs entering the Florida and broader U.S. market consistently underestimate one specific challenge: their supplier qualification process was designed for a regulatory and business culture that does not fully translate across the Atlantic. This is not about language. It is about structural differences in how supplier relationships, documentation expectations, and audit authority are understood on each side.

1. The Certification Landscape Is Not What It Appears

European supplier qualification typically leans on EN/ISO certification status as a baseline qualification indicator. In the U.S. market, the same logic applies to AS9100 certification — but the interpretation of compliance, and the rigor of certification body audits, varies significantly more than in the European EAQG-governed certification environment.

The IAQG’s OASIS database, launched with OASIS Insights in April 2025, provides certificate validity information and now includes AI-generated benchmarking reports for certified suppliers. According to Quality Assurance Authority’s February 2026 analysis: „The supplier quality compliance function within the prime contractor monitors certificate validity through databases such as OASIS. However, the OASIS database provides certificate validity information — it does not provide information about actual process capability, recent audit findings in detail, or the specific processes included in the certification scope.“

European qualification teams who access OASIS to verify certificate status and proceed to approve the supplier without further investigation are using a verification tool as a qualification tool. They are not the same thing. OASIS Insights now provides a quantitative performance score and anonymized benchmarking — but it does not substitute for a process audit conducted against your specific product requirements.

2. Documentation Expectations Are Contractually Explicit — Not Culturally Assumed

U.S. aerospace and defense suppliers are accustomed to detailed purchase order quality requirements. Flow-down clauses, First Article Inspection requirements, Certificate of Conformity format specifications, material traceability requirements, and source inspection rights are typically embedded in contract documents or referenced quality clauses. These are conditions of doing business with a prime contractor or OEM in the U.S. market — they are negotiated at contract award and enforced through the supplier quality agreement.

European OEMs frequently approach U.S. supplier relationships with quality agreements that reference general standards — EN 9100, AS9100, ISO 9001 — and assume that certification implies compliance with specific customer requirements. It does not. A U.S. supplier certified to AS9100 has a quality system that meets the standard requirements. They do not have a quality system calibrated to your specific product requirements, your traceability expectations, or your corrective action process unless those requirements are explicitly documented in your contract.

The gap becomes visible at the first deviation. The European OEM issues a corrective action request in their standard format with their standard response timeline. The U.S. supplier responds with a format that meets their internal procedure, on a timeline that meets their certification body requirements. Neither party did anything wrong. The contract did not specify what was required. This scenario repeats with sufficient frequency in transatlantic supplier relationships that it deserves explicit contractual prevention, not reactive resolution.

3. On-Site Audit Authority and Cultural Expectation

The expectation in European aerospace — particularly in DACH manufacturing environments — that a customer can conduct an unannounced process audit is less culturally established in the U.S. market. First-time audits from European customers frequently encounter not obstruction, but a genuine lack of a prepared audit interface. The quality manager is travelling. The production records are not organized for external review. The key personnel needed for an audit are not available on short notice.

This is a preparation and relationship issue, not a willingness issue. U.S. suppliers who regularly work with U.S. prime contractors are accustomed to source inspection visits and supplier assessment audits that are scheduled in advance and conducted against a defined scope. An unannounced visit from a European customer they have never met, requesting access to process records and production areas, is an unusual request that triggers a natural defensive response — regardless of contractual audit rights.

Having a local quality representative who operates in the same time zone, understands both the European customer’s expectations and the U.S. supplier’s operational reality, removes this friction significantly. The representative can prepare the supplier for the audit format, facilitate access to the right people and records, and interpret findings in terms that both parties understand. Without that intermediary, the first audit produces friction that damages the supplier relationship regardless of what the findings show.

4. Sub-Tier Visibility Requires Contractual Flow-Down

U.S. aerospace supply chains often involve more tiers of distribution and brokering than European equivalents. Over 500 MRO players and a broad distributor network in the U.S. market mean that traceability to raw material source — manufacturer, lot number, heat treat record — requires explicit contractual flow-down from the prime to Tier-1 and from Tier-1 to Tier-2. It is not culturally assumed to exist unless the contract specifically requires it.

IA9100’s strengthening of sub-tier supplier controls — one of six named areas in the IAQG Key Change Summary — will formalize this expectation at the standard level. Until that standard publishes, the requirement needs to be contractual and explicitly audited. European OEMs qualifying U.S. suppliers who source from distributors need to verify through audit that the distributor qualification process extends to the original manufacturer, not just to the distributor’s internal documentation practices.

3 Concrete Actions

1. Before qualifying any U.S.-based supplier for safety-critical or quality-critical parts, conduct a first article process audit — not a document review — that specifically examines whether the supplier’s actual process matches their quality plan. Request walk-through of the production process for your specific part, with measurement records from the last production run. Certificate verification and OASIS Insights benchmarking are inputs to qualification, not substitutes for process audit.

2. Build your purchase order quality clauses specifically — not by reference to standards. Include explicit requirements for CoC format and content, material lot traceability depth, First Article Inspection report format, corrective action response timeline and content requirements, and source inspection rights with advance notice requirements. U.S. suppliers will comply with contractually explicit requirements. They cannot comply with requirements they do not know you have.

3. If you are a European OEM with U.S. suppliers in Florida or the broader southeastern U.S. market, consider establishing a local quality representative who operates in the same time zone, knows the regional supplier landscape, and can conduct process audits and source inspections without transatlantic travel. The cost of that representation is significantly lower than the cost of managing a quality escape that a timely process audit would have prevented.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Fortune Business Insights — Aircraft Component MRO Market Size, Share and Growth 2025-2034 (2026), fortunebusinessinsights.com
  • Stratview Research — Aircraft MRO Market: Over 500 MRO Players in the USA, stratviewresearch.com
  • Market Research Future — US Aircraft MRO Market Size and Share, Forecast 2034 (June 2025), marketresearchfuture.com
  • Quality Assurance Authority — Third-Party Audit Compliance for Quality Systems (February 23, 2026), qualityassuranceauthority.com
  • IAQG — OASIS Insights Launch (April 1, 2025), iaqg.org
  • Intact Systems — OASIS Insights Case Study: AI-Enabled Audit Benchmarking, intact-systems.com
  • IAQG — IA9100 Key Changes System View (Sub-tier supplier controls), iaqg.org
  • EASA — European Plan for Aviation Safety 2026 (EPAS 2026), easa.europa.eu

#SupplierQuality #USMarket #EuropeanOEM #QualityManagement #FloridaAviation #AerospaceQuality #SarasotaBusiness #MROQuality #SKQC

What LinkedIn Gets Wrong About Quality Management — And What Actually Works

What LinkedIn Gets Wrong About Quality Management — And What Actually Works

admin

LinkedIn quality management content follows a recognizable pattern: a statistic of uncertain origin, three bullet points that could apply to any industry in any decade, and a call to action authored by someone who has never been inside a supplier facility. After 26 years in aerospace, automotive, and composite manufacturing quality — including time on shop floors, in supplier audit rooms, and in front of customers holding nonconformance reports — I want to push back on three ideas that circulate constantly on this platform.

They sound right. They lead organizations in the wrong direction.

1. „Quality Culture Starts at the Top“

Leadership commitment matters. I am not arguing otherwise. But in practice, quality culture is built or destroyed at the first-line supervisor level, not in the boardroom.

I have been in facilities with genuinely committed executive teams — quality policies on the wall, quality as a stated strategic priority, QMS management review meetings with C-suite attendance — where the shop floor operated on a completely different set of priorities. The people making daily decisions about rework, inspection frequency, and documentation completeness were first-line supervisors whose performance was measured against output targets and on-time delivery, not against quality outcomes.

The supervisor who tells an operator to ship a borderline part because the customer needs it today is not acting against executive intent. They are responding to the actual incentive structure they operate within. That incentive structure is a management design decision, not a culture problem. You fix it by changing what the first-line supervisor is accountable for and how they are evaluated — not by adding another quality awareness session or updating the quality policy.

This is not a new observation. Deming’s 14 Points — articulated in the early 1980s, still largely unimplemented at most organizations — include „drive out fear“ and „break down barriers between departments“ precisely because he understood that culture lives in the daily decisions made at the operational level. The gap between knowing this and acting on it has persisted for 40 years.

Quality culture is a local phenomenon. It lives in the decisions made when no one from leadership is watching. If those decisions consistently prioritize schedule and output over quality, that is the culture — regardless of what the quality policy says.

2. „Root Cause Analysis Prevents Recurrence“

Root cause analysis documents recurrence prevention. It does not guarantee it.

The 8D report closes the loop on paper. D5 identifies the root cause. D6 defines the corrective action. D7 addresses recurrence prevention. D8 closes the issue. The customer receives the report, closes the SCAR, and the supplier moves on. What the 8D does not tell you: whether the corrective action was actually implemented, whether it was sustained under production pressure three months later, or whether it transferred to similar processes where the same failure mode exists.

I have audited suppliers who had correct 8D reports for failure modes that were still present in their production process at the time of the audit. The paperwork was good. The process had not changed. The corrective action had been implemented for the specific part family covered by the customer complaint and had not been extended to adjacent processes where the same risk existed.

The SixSigma.us practitioner guide noted from real consulting experience: effectiveness verification — not document closure — is the metric that matters. „One automotive parts supplier credits Ppk with quantifying their success in meeting a new customer’s stringent defect requirements through focused implementation of SPC methods.“ The key word is „quantifying“ — measurement data, not document closure, is what demonstrated that the corrective action worked.

Follow-up audits 90 days after 8D closure tell the real story. Most supplier quality programmes measure 8D closure rate. Fewer measure recurrence rate by root cause category. That second number is where the actual quality system performance is visible.

3. „Digital Transformation Solves Quality Problems“

I have seen digital quality systems generate real-time dashboards for processes that were fundamentally unstable. The data was clean and current. The process it described was not producing conforming parts at a consistent rate.

Technology surfaces information faster. It does not replace the judgment required to act on that information correctly. A digital nonconformance management system that produces real-time rejection rate data is valuable — if the people reviewing that data understand what it means for the process that generated it and are empowered to act on it. Without those two conditions, it produces faster reporting of problems that are not being solved.

Paradygm’s IA9100 clause analysis makes an interesting related observation: under IA9100, Clause 9.2 elevates reviewing performance indicators from a note to a mandatory requirement during internal audits. The point is not just that you collect data — it is that „objective evaluation of QMS effectiveness“ requires people who understand how to interpret that data in the context of their specific manufacturing environment. Digital tools generate the data. Qualified people with process knowledge evaluate it.

The quality problems I have seen in 26 years that were solved by a digital system: none. The quality problems solved by people who understood the process, had the authority to change it, and were held accountable for sustaining the improvement: most of them.

What Actually Works — and Why It Is Harder to Sell

The quality interventions that consistently produce sustained improvement share three characteristics: they address the process, not the symptom; they change the accountability structure, not just the procedure; and they are verified through physical observation and measurement, not document review.

Process FMEA conducted by people who actually work the process — not by quality engineers working from a specification document — identifies failure modes that documentation-based approaches miss. SPC reviewed daily by the operator and the first-line supervisor produces process control. Supplier audits that include conversation with shop floor operators — not just review of the quality manager’s presentation — reveal actual process stability.

None of these approaches are new. None of them are digital. They require sustained investment in people who understand manufacturing processes and have the authority to change them. That investment is less visible than a quality management platform implementation and harder to explain to a cost reduction programme. It is consistently more effective.

What quality advice have you seen repeated on this platform that does not match what you have experienced on the production floor? I am genuinely interested in what practitioners are seeing — not what the next framework recommends.

👉 www.skqc.org

Sources

  • Deming, W.E. — Out of the Crisis (1986), MIT Press. The 14 Points for Management remain the foundational reference for systemic quality thinking.
  • Paradygm — Latest Changes to the AS9100D Standard: IA9100 Clause 9.2 Analysis (2025/2026), paradygm.co
  • SixSigma.us — A Practitioner’s Guide to Choosing Between Cpk vs Ppk (January 13, 2025), 6sigma.us
  • iSixSigma — Process Capability Cp, Cpk and Process Performance Pp, Ppk — What is the Difference? (October 2024), isixsigma.com
  • AIAG — Production Part Approval Process (PPAP) Reference Manual, 4th Edition
  • AIAG — Statistical Process Control (SPC) Reference Manual, 2nd Edition

#QualityManagement #Manufacturing #SupplierQuality #ProcessImprovement #8D #RootCauseAnalysis #Deming #SKQC

Farnborough 2026: What the Airshow Floor Tells Us About Aerospace Quality Priorities

Farnborough 2026: What the Airshow Floor Tells Us About Aerospace Quality Priorities

admin

Farnborough International Airshow 2026 runs July 20-24 at Farnborough International Exhibition and Conference Centre in Hampshire, UK. It is the largest edition in the show’s 78-year history. Exhibitor space sold out with a waiting list of more than 50 organisations. Over 1,400 exhibitors from 41 countries will present, and FIA2024 attracted over 100,000 visitors from 114 countries — the 2026 edition is expected to exceed that. Twenty-six international pavilions are already confirmed, including India, Japan, Australia, Mexico, Brazil, and Switzerland.

The order book announcements and flying display will generate the media coverage. For supplier quality professionals, the more relevant signals come from what OEMs and primes are demanding from their supply base — signals that translate into supplier quality agreement requirements, audit scope changes, and qualification criteria in the 6-12 months following the show.

1. The Enterprise Gateway: Supply Chain Resilience as a Headline Theme

FIA2026 introduces The Enterprise Gateway — a three-day programme running July 21-23 alongside the Business Connections Exchange. According to the official Farnborough International announcement, the Gateway provides „practical workshops on procurement, regulation, exports, and funding; keynotes and mentoring from industry leaders and policymakers; live pitching sessions connecting SMEs with investors and primes; and insights aligned with the UK Government’s Plan for Change.“

The focus on SME supplier development is not accidental. It is a direct response to the supply chain failures of 2022-2024, when aerospace production rates at Boeing and Airbus were constrained not by OEM capacity but by supplier capability and raw material availability. The lesson absorbed by the prime contractors: production continuity depends on the quality and stability of their smallest suppliers, not just their largest ones.

For quality managers in the supply base, the FIA2026 supply chain emphasis translates to a specific expectation shift. The question has moved from „do you have an AS9100 certificate?“ to „can you demonstrate that your processes will remain stable through material constraints, workforce changes, and regulatory transitions?“ The Enterprise Gateway is explicitly designed to equip businesses with the tools, connections, and confidence to meet that expectation.

2. The Defence SME Zone: What It Signals About Qualification Pressure

The Defence SME Zone debuts at FIA2026 as a dedicated showcase for high-potential international organisations specialising in defence and security technologies. Designed exclusively for businesses with a turnover under £10 million, the zone — sponsored by FTSE 100 defence company Babcock International — provides SMEs the opportunity to engage directly with the global defence supply chain, connect with primes, investors, media, and government delegations.

Confirmed participants include Cognitive Design by CDS, Elite EMC, Emergent, Infortecorp Solutions, Inspectahire, and Needles And Pins Aerospace. The explicit focus on accelerating „next-generation defence suppliers“ reflects the rearmament reality: European allies and Canada increased defence spending by 20% in 2025 to a combined $574 billion, according to NATO Secretary General Rutte’s March 26, 2026 annual report. All 32 NATO member states met or exceeded the 2% GDP target for the first time. The NATO Summit in The Hague in June 2025 committed members to 5% of GDP by 2035.

The defence spending surge is creating demand for new suppliers in the defence supply base — including civil aerospace suppliers who have not previously operated under AQAP 2110 or DCMA oversight. The qualification requirements for those suppliers are significantly more demanding than civil AS9100 certification. The Defence SME Zone at FIA2026 is where those conversations begin.

3. Pioneers of Tomorrow: The Workforce Signal That Matters Most

FIA2026 concludes on July 24 with Pioneers of Tomorrow — a dedicated STEM day for young people featuring a Careers Fair and a digital Job Board advertising apprenticeships, graduate schemes, and entry-level roles. Organisations confirmed to participate include Babcock International Group, Parker Aerospace, and Belcan.

This is not a marketing exercise. EASA EPAS 2026 identified workforce competency as a systemic safety risk, adding a new section titled „Availability of Competent Aviation Personnel“ to Volume I: „Unless the aviation industry addresses this challenge, the level of aviation safety may degrade in the long term.“ The aerospace auditor shortage documented by Quality Magazine in 2025 — with many experienced auditors retiring and the pipeline of qualified replacements not keeping pace — is one visible manifestation of the broader workforce challenge.

For supplier quality managers, the workforce dimension is not abstract. It is the reason that EASA EPAS 2026’s workforce competency flag matters to their audit programme: the supply base is placing undertrained personnel in quality-critical roles because the qualified workforce is not available at the rate required by industry growth. That reality shows up in process audit findings before it shows up in nonconformance data.

What Farnborough Signals for Supplier Qualification in H2 2026

Farnborough alternates with the Paris Air Show — Paris in odd years, Farnborough in even years — and both function as the global stage where the direction of aerospace commercial relationships is set for the following 18-24 months. The qualification requirements appearing in new supplier agreements from mid-2026 onwards will reflect the priorities being discussed in the chalets and meeting rooms of FIA2026 this July.

Three specific signals worth tracking after the show closes July 24: which OEMs announce new supplier development programmes and what competency gaps they address; what digital documentation requirements appear in new supply agreements discussed at the Airshow Global Forum; and what the Pioneers of Tomorrow programme focus areas signal about where the skills gap is most acute in the quality engineering community.

3 Concrete Actions

1. If you are attending FIA2026 as a supplier: use the Enterprise Gateway programme (July 21-23) to engage with procurement and qualification conversations. The workshops on procurement, regulation, and funding are more directly relevant to building a sustainable supplier qualification position than the exhibition floor. Book early — the programme has limited capacity.

2. For quality managers not attending: review the FIA2026 press releases and programme announcements after the show closes July 24. The supply chain session outputs will contain specific signals about new supplier requirements, digital documentation expectations, and workforce development priorities. These signals typically translate into supplier quality agreement updates within 6-12 months of the show.

3. For organisations preparing for IA9100 transition and defence qualification: the convergence of IA9100 publication (expected late 2026) with the FIA2026 supply chain theme and the NATO rearmament-driven qualification pressure creates a compressing timeline for quality system modernisation. Use the post-Farnborough period — August through October 2026 — to complete your IA9100 gap assessment and your AQAP 2110 readiness review if defence qualification is on your agenda.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Farnborough International — FIA2026 Unveils New Features As Trade Tickets Launch (January 22, 2026), farnboroughairshow.com
  • Aero-Mag — Farnborough International Airshow 2026 Unveils New Features (January 22, 2026), aero-mag.com
  • ADS Advance — Farnborough International Airshow 2026 Unveils New Features (January 2026), adsadvance.co.uk
  • Aerospace Global News — Farnborough International Airshow 2026: Ticket Sales Open (February 6, 2026), aerospaceglobalnews.com
  • Defense Advancement — Farnborough International Airshow 2026: 20-24 July (January 2, 2026), defenseadvancement.com
  • NATO — Secretary General Mark Rutte Annual Report (March 26, 2026), nato.int
  • Atlantic Council — NATO Defence Spending Tracker (last updated April 9, 2026), atlanticcouncil.org
  • SIPRI — Trends in World Military Expenditure 2025 (April 27, 2026), sipri.org
  • EASA — European Plan for Aviation Safety 2026 (EPAS 2026), Volume I, easa.europa.eu
  • Quality Magazine — Aerospace Auditing: How Its Impact Makes It a Smart Career Move (May 2025), qualitymag.com

#Farnborough2026 #AerospaceQuality #SupplierDevelopment #FIA2026 #EnterpriseGateway #QualityManagement #SKQC

Second Party Audits vs. Third Party Certification: What Actually Protects Your Quality

Second Party Audits vs. Third Party Certification: What Actually Protects Your Quality

admin

A supplier with a valid EN 9100 certificate failed a customer source inspection last month. The certificate was current. The surveillance audit had been completed six weeks earlier with no major findings. The process was not what the certification record described.

This is not an unusual situation. I have encountered variations of it repeatedly across 26 years of supplier quality work in aerospace, automotive, and composite manufacturing. Certification audits and customer audits serve different functions — and the gap between what each one reveals is where quality escapes live.

1. What Third Party Certification Audits Actually Assess

Third party certification audits verify that a quality management system meets the requirements of the standard. They assess documentation, process descriptions, and the evidence that the system is being operated. A well-prepared organization can achieve and maintain certification with a QMS that is largely compliant on paper.

Certification auditors operate on a fixed schedule, with advance notice, against a defined scope. The scope is broad by design — it covers the entire quality management system. For a mid-size aerospace supplier, a surveillance audit may be one to two days. The auditor cannot examine every process in that time.

The IAQG launched OASIS Insights in April 2025 — described by Eric Jefferies, President of IAQG, as a tool that „will transform how organizations showcase the value of audits and identify areas for improvement.“ OASIS Insights version 3.0.0 made IAQG the first certification ecosystem globally to apply AI at scale to analyze audit findings data worldwide, according to Intact Systems. Starting April 1, 2025, certified suppliers automatically receive an OASIS Insights report following completion and publication of initial, recertification, or surveillance audits — providing anonymized benchmarking, a quantitative performance score, and an AI-generated summary of key risk areas.

This is a meaningful development. An organization now understands how its QMS performance compares to the industry as a whole and to other similar organizations. It does not change what a certification audit observes in a single two-day visit, against a broad scope, with advance notice. And it does not provide the customer-specific context that second party audits deliver.

Quality Assurance Authority noted in its February 2026 analysis: „The supplier quality compliance function within the prime contractor monitors certificate validity through databases such as OASIS. However, the OASIS database provides certificate validity information — it does not provide information about actual process capability, recent audit findings in detail, or the specific processes included in the certification scope.“

2. What Second Party Audits Reveal

Customer audits focus on whether the processes your supplier uses to produce your specific parts are stable and capable. The scope is narrower, the questions more specific, and the auditor has context that a certification body auditor cannot have: knowledge of your product requirements, your quality agreement terms, your previous nonconformances, and your upcoming program needs.

TÜV SÜD’s published guidance on audit types is explicit: „Second-party audits remain relevant even if the supplier is certified to ISO 9001, as they address specific contractual requirements beyond the general standard.“ The contractual requirements dimension is critical in aerospace. Customer-specific requirements — flow-down clauses, First Article Inspection requirements, material certification obligations, key characteristics controls — are not fully visible to a certification body auditor who does not have access to your purchase orders and quality agreements.

In my experience, second party audits on certified suppliers consistently surface findings in three areas that certification audits regularly miss:

Actual process parameters versus approved parameters. The process description in the quality plan describes what the process should be. The SPC chart, the setup sheet used by the operator yesterday, and the measurement data from the last 30 production runs describe what the process actually is. These are not always the same document. The certification auditor reviews the documented process. The customer auditor examines whether the documented process is what is actually happening.

Real traceability versus documented traceability. A quality system can have excellent traceability documentation while having a physical process that intermixes materials, skips recording steps under schedule pressure, or reconstructs records after the fact. The documentation looks correct. The physical product flow does not match it. This is the failure mode that produces the situations where a Certificate of Conformity describes a product that was not produced to the stated requirements.

Competency of personnel in quality-critical roles versus training records. Training records confirm that an operator attended a course or passed a qualification test. Asking the operator directly — „what happens if this parameter is outside the specified range?“ — reveals the actual competency state faster than any training matrix. This is exactly the kind of question that IA9100’s human factors root cause analysis requirement will eventually make a formal audit criterion — but second party audits can ask it now.

3. The Risk Management Argument

Using certification status as a substitute for second party audit activity transfers the consequences of that gap to your production line, your customer, or your safety record.

QSTRAT’s December 2025 analysis of best practices for supplier qualification in aerospace confirmed that suppliers are typically requalified every one to three years, involving updated risk assessments, quality system evaluations, on-site or remote audits, and validation of special processes. The requalification cycle creates a risk window between qualification events. Second party audits during that window are not redundant — they are the mechanism for detecting drift between qualification states.

The more useful question is not whether to conduct second party audits, but how to focus them. Risk-based audit planning — directing second party audit resources toward suppliers with elevated risk profiles, recent changes, or open corrective actions — allows organizations to maintain meaningful oversight without auditing every supplier every year.

3 Concrete Actions

1. Review your current approved supplier list and identify how many suppliers are qualified exclusively on the basis of third party certification status, without an active second party audit in the last 24 months. For any of those suppliers providing safety-critical or quality-critical parts, that is a risk exposure that needs active management — not necessarily immediate audit action on every supplier, but explicit risk register acknowledgment and a plan.

2. When planning second party audits, build your audit agenda from your quality agreement and purchase order requirements — not from the EN 9100 or AS9100 clause structure. The certification auditor covers the standard. You need to cover what your contract requires and what your product needs. These are related but not identical sets of requirements.

3. For suppliers who have received a major finding from a certification body in the last 18 months: conduct an independent second party audit before the corrective action closure date, not after. Certification body follow-up visits verify that the corrective action was documented. A second party audit verifies whether the underlying process failure has actually been addressed. The difference between those two verification methods is the difference between compliance on paper and process reality.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IAQG — OASIS Insights Launch Announcement (March 31, 2025), iaqg.org
  • Intact Systems — IAQG Unveils OASIS Insights: A New Era in Aerospace Audit and Certification (March 31, 2025), intact-systems.com
  • Intact Systems — OASIS Insights Case Study: AI-Enabled Audit Benchmarking, intact-systems.com
  • Quality Magazine — Driving Change in Aerospace Quality Management (May 2026), qualitymag.com
  • Quality Assurance Authority — Third-Party Audit Compliance for Quality Systems (February 23, 2026), qualityassuranceauthority.com
  • TÜV SÜD — What is the Difference Between First-, Second-, and Third-Party Audits?, tuvsud.com
  • QSTRAT — Best Practices for Supplier Qualification in Aerospace (December 2025), qstrat.com
  • BSI Group — Embracing Changes to IAQG Aerospace Standards, bsigroup.com

#SupplierAudit #QualityManagement #EN9100 #SecondPartyAudit #AerospaceQuality #OASISInsights #IAQG #SKQC

Composite Repair Quality in Aviation: Why MRO Standards for CFRP Need a Closer Look

Composite Repair Quality in Aviation: Why MRO Standards for CFRP Need a Closer Look

admin

The global composite repair market is projected at USD 16.39 billion in 2026 and USD 22.82 billion by 2031, growing at a CAGR of 6.85%, according to Mordor Intelligence’s January 2026 market report. Carbon-fibre Reinforced Polymer commands 54.69% of that market share. The Boeing 787 Dreamliner and Airbus A350 XWB incorporate composite materials for over 50% of their structural weight. Early CFRP structures are reaching their 15-year inspection thresholds, and the MRO industry is executing composite repairs at scale for the first time.

The problem is that most Part 145 quality systems were built for metallic structure maintenance. Aviathrust Aviation News stated clearly in its December 2025 analysis: „Applying metal repair practices to composite structures may be inappropriate and risk the repair outcome.“ The GAO made the same point in its assessment of FAA composite oversight: experts expressed concern that while composite training is available to technicians, they may lack incentives to pursue it. That concern has not gone away in the years since.

The FAA updated Advisory Circular 20-107B in 2024, shortening structural-repair approvals by one-third — releasing deferred maintenance budgets and giving operators a faster route to keep high-value assets in service. More repairs, faster approvals, and an industry workforce built primarily on metallic maintenance experience: that is the quality risk environment for 2026.

1. Why CFRP Repair Is Structurally Different from Metallic Maintenance

Damage Characterization

In metallic structures, damage is visible or measurable with standard NDT methods calibrated for the material. In CFRP, impact damage can delaminate internal plies while leaving the surface essentially intact. The MRO industry standard for initial damage assessment — visual inspection and basic surface scanning — is insufficient for composite primary structure. EASA’s 2025 standards now mandate NDT for all primary-structure composite repairs, closing a gap in the previous regulatory text and raising entry barriers for repair stations that have not invested in the required NDT capability.

For quality managers auditing MRO suppliers, the specific question is whether the NDT equipment is present, calibrated, and operated by technicians qualified to the specific technique and material being inspected. A repair station with composite repair scope on their Part 145 capability list but no calibrated ultrasonic C-scan equipment and no qualified Level II NDT technician for composite inspection is operating a paper capability, not a real one.

Material Shelf Life and Storage Compliance

Prepreg repair materials — the carbon fiber/resin systems used for structural CFRP repairs — have defined out-time limits at room temperature and storage temperature requirements when frozen. Material that has been exposed slightly beyond its out-time limit may appear normal at layup. The consequences appear later: incomplete cross-linking that produces lower-than-specified interlaminar shear strength, or elevated void content detectable only by destructive testing or advanced NDT. A repair executed correctly in all other respects, but using material outside its process window, does not meet the approved repair data.

For Part 145 quality systems, the minimum traceable record for composite repair materials is: lot number, received date, frozen storage records with temperature log, cumulative out-time, and confirmation that out-time was within limits at the time of layup. DAS — a Part 145 structural MRO specialist — has identified material traceability as a primary documentation requirement in structural repair record packages. In practice, these records are often incomplete or reconstructed from memory after the repair rather than documented in real time during the operation.

Cure Cycle Validation and Documentation

Hotbonder cure cycles for composite repairs require thermocouple placement on the repair area, controlled temperature ramp rates, specific dwell temperatures and times, and vacuum bag integrity throughout the cure. The cure cycle chart — the printed or electronic record of temperature versus time — is a mandatory deliverable for composite repairs to primary structure. It is the primary objective evidence that the thermal process was executed within the approved data requirements.

In practice, cure cycle records are missing from a significant proportion of composite repair packages. In some cases the hotbonder data was not downloaded before the equipment was reset for the next job. In other cases the record was generated but not associated with the aircraft maintenance record. Either failure leaves the maintenance organization without the primary objective evidence that the repair conformed to approved data — which means the basis for the release-to-service entry is incomplete.

2. The Audit Question That Is Rarely Asked

When a Part 145 organization is audited for composite repair capability, the typical scope covers certification scope, tooling calibration, and training records. DAS’s structural repair guidance explicitly frames the requirement in terms of documentation and audit-ready records supporting compliant execution — not just procedure existence. The audit questions that reveal actual process compliance:

Show me the damage characterization record — the NDT output that defined the damage extent — for the last composite repair to primary structure your organization executed. Show me the material lot traceability record confirming the prepreg was within out-time limits at layup. Show me the cure cycle chart for that repair. Show me how that cure cycle chart is linked to the aircraft maintenance record.

If any of those records cannot be produced for a recent repair, the audit has identified a systemic documentation gap. The cure cycle either conformed to the approved data or it did not. Without the record, neither the maintenance organization nor the regulator can verify which outcome occurred.

3 Concrete Actions

1. If you are qualifying or re-qualifying a Part 145 MRO supplier that performs composite repairs to primary structure, add material traceability and cure cycle record review to your audit agenda as non-negotiable items. Request records for three recent composite repairs to primary structure. The records should be retrievable within minutes from the repair package file — not reconstructed from memory or assembled from multiple systems.

2. For Part 145 organizations executing composite repairs: review your procedure for cure cycle data download and retention. The most common failure mode is procedural — the process for downloading hotbonder data and associating it with the aircraft record is absent or not consistently followed. A one-page procedure with a specific step for data download and record linking, verified by a supervisor sign-off, addresses the majority of the gap.

3. For airline quality managers reviewing MRO supplier qualification: verify that your supplier’s composite repair scope under their Part 145 approval is supported by actual NDT capability and competency on-site. The 2024 FAA AC 20-107B update and EASA’s 2025 NDT mandate for primary-structure repairs are raising the baseline. A qualification audit that does not verify NDT capability at the technique-and-material level is not assessing the process that matters most.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Mordor Intelligence — Composite Repair Market Size, Growth, Trends and Share Report 2025-2031 (January 2026), mordorintelligence.com
  • Aviathrust Aviation News — Building a World-Class Composite Repair Workshop for EASA Part-145 Organizations (December 7, 2025), aviathrust.com
  • DAS (Diverse Aero Solutions) — Aircraft Composite Repair Guide for Decision Makers (April 2026), diverseaero.com
  • DAS — Structural Repair Traceability in Part 145 Repair Stations, diverseaero.com
  • FAA Advisory Circular AC 43-214A — Repairs and Alterations to Composite and Bonded Aircraft Structure
  • FAA Advisory Circular AC 20-107B (Updated 2024) — Composite Aircraft Structure
  • GAO-11-849 — Aviation Safety: Status of FAA’s Actions to Oversee the Safety of Composite Airplanes
  • Fortune Business Insights — Aircraft Component MRO Market Size, Share, Growth to 2034 (2026), fortunebusinessinsights.com
  • Stratview Research — Aircraft MRO Market Size and Trend Industry Analysis 2025-2035, stratviewresearch.com

#CompositeRepair #MROQuality #CarbonFiber #CFRP #AviationMaintenance #Part145 #EASA #NDT #SKQC

EN 9100 to IA9100: What Is Actually Changing for Supplier Quality Managers in 2026

EN 9100 to IA9100: What Is Actually Changing for Supplier Quality Managers in 2026

admin

Late 2026. That is the target publication date for IA9100 — the standard that replaces AS9100 Rev D and becomes the new certification baseline for aviation, space, and defense quality management systems globally. The IAQG confirmed the timeline: IA9100 aligns with ISO 9001:2026, expected September 2026, with a transition window of two to three years placing the compliance deadline between late 2028 and late 2029. Note: BSI Group has indicated that if ISO 9001:2026 is delayed, the new IA 9100 series may not be released until early 2027.

AS9100 Rev D was published in 2016. A decade of aerospace industry evolution — digitalization, geopolitical supply chain disruption, increasing cyber threats to manufacturing systems, and a documented workforce competency crisis — is being incorporated into the revision. The IAQG has published its Key Change Summary, and Quality Magazine described the transition as representing „a strategic modernization to address the realities of 21st-century aerospace challenges.“ That description is accurate in terms of intent. It understates the operational implications of the specific requirements being added.

1. The Rebranding: What „IA“ Means and Why It Matters Operationally

AS9100 was an American designation — AS for Aerospace Standard, a SAE International designation. The same standard was published regionally as EN 9100 in Europe and JISQ 9100 in Japan. The move to IA9100 — International Aerospace — consolidates them under a single global designation. As BSI Group noted in its official guidance: „Previously published standards, including the AS 9100 series, will transition from sector designations of AS, EN, SJAC or JISQ to the new singular IA designation at the time of revision. The aim is to significantly improve the efficiency of change control and translation.“

For European organizations currently certified to EN 9100:2018, the practical implication is that the transition audit to IA9100 will be conducted against a unified global standard with unified audit scheme requirements (IA9101) and unified auditor competency requirements. The current five certificate structures will be simplified to two — Single Site and Multiple Site — to drive simplicity and consistency in approach, according to BSI Group’s published guidance on the IAQG standards changes.

2. Four Substantive Changes That Require New Processes — Not Just Documents

Cybersecurity Integration into the QMS

Paradygm’s detailed clause analysis of IA9100 identified the specific addition at Clause 8.1: information security and data protection added as a new NOTE requirement, making cybersecurity risk assessment integration into the quality risk management process mandatory rather than advisory. Quality Magazine’s January 2026 analysis of the convergence between IA9100, IATF 16949:2027, and CMMC requirements was explicit: „Begin updating supplier quality agreements to anticipate cyber and export-control clauses“ and „Plan for two transition audits instead of one.“

Cavendish Scott’s analysis noted that under IA9100, „aerospace organizations aren’t just required to validate processes — they’re expected to predict and control outcomes,“ specifically in the context of digital systems and cybersecurity. The IAQG’s own Key Change Summary confirms: „Information security (e.g., cyber) and data protection“ as one of the six named areas being elevated in the revision.

The audit evidence that will be expected is not a policy document. It is governance structures, evidence of threat assessment covering ERP systems, CAD and quality data storage, remote access infrastructure, production monitoring systems, access control implementation, and incident response procedures linked to quality records.

Human Factors in Nonconformance Root Cause Analysis

Quality Magazine’s June 2025 deep-dive on IA9100 was specific: „The most personally transformative element of the upcoming revisions is arguably the formalization of quality culture and human factors within the QMS framework. Expectations will include: Clear leadership commitment to quality as a corporate value, demonstrated through behavior and resources — incorporating human factors, such as fatigue, into root cause investigations and providing employee well-being programs that support quality outcomes.“

QT9 Software’s interview with AS9100 consultant Mike Varney confirmed the direction: „Leadership will be tasked with demonstrating commitment to a culture of quality through behavior and resources, including incorporating human factors, such as fatigue, into root cause investigations.“ This is not a minor documentation change. A corrective action process that does not examine organizational conditions — time pressure, shift fatigue, work instruction ambiguity — will produce incomplete D5 root cause entries that an IA9100 auditor will challenge.

APQP Integration as a Required QMS Methodology

Cavendish Scott’s analysis was direct on this point: „In IA9100:2026, Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP) aren’t optional. They’re officially required tools, supported by IA9145 guidance.“ Paradygm’s clause-level analysis confirmed that Clause 8.1 now includes APQP as „one method for operational planning and control“ in the revised note structure — with Annex B providing the IA9145 linkage.

Quality Magazine noted: „Customers — particularly primes like Boeing, Airbus, and Lockheed Martin — are increasingly demanding APQP evidence during contract award and oversight activities.“ Assent Risk Management observed that „IA9100 more explicitly incorporates APQP principles, aligning the standard with AS9145 and improving launch discipline.“ For aerospace-only suppliers who have never systematically applied APQP, this is a process design requirement, not a documentation update.

Sub-Tier Supplier Controls

The IAQG Key Change Summary identifies „sub-tier supplier controls“ as one of six named areas of expansion. Cavendish Scott described the counterfeit parts prevention enhancement as aligned with „SAE AS5553 for counterfeit electronic parts and AS6174 for counterfeit mechanical parts.“ Quality Magazine noted that IA9100 „enhances measures“ addressing the proliferation of counterfeit parts as a safety, legal, and reputational risk. Organizations whose supplier quality programme focuses primarily on Tier-1 suppliers with limited visibility into Tier-2 and Tier-3 will need to extend their oversight model structurally.

3. The OASIS Transition Dimension

In parallel with the IA9100 content changes, the IAQG launched OASIS Insights in April 2025 — the first certification ecosystem globally to apply AI at scale to analyze audit findings data worldwide, according to Intact Systems. Starting April 1, 2025, certified suppliers automatically receive an OASIS Insights report following completion and publication of initial, recertification, or surveillance audits. Eric Jefferies, President of IAQG, stated: „OASIS Insights will transform how organizations showcase the value of audits and identify areas for improvement, ultimately driving continuous improvement in the aerospace industry.“

IAQG also introduced a dual-track approach for standards revision — incremental revisions between major revisions, potentially including quarterly or biannual updates for small changes — representing a significant shift from the traditional five-year update cycle. Organizations should anticipate that IA9100 is not a final state but the beginning of a more agile standards maintenance regime.

3 Concrete Actions

1. Conduct a gap analysis against the IAQG’s published Key Change Summary (available at iaqg.org) now — before the final IA9100 text publishes. The six named areas — product safety, information security, quality culture and ethics, APQP linkage, counterfeit parts, sub-tier supplier controls — are confirmed. The gap analysis conducted against coordination draft materials will be accurate enough to define preparation priorities. Organizations that wait for the final text to begin gap analysis will be starting 18 months behind competitors who started in 2025.

2. Review your certification body relationship and confirm their transition roadmap. BSI Group has published guidance noting that the 9104 series standards have already been through writing and approval, are being translated into seven languages, and will be ready in late 2025 with official training material and a published timeline for transition expected towards the end of 2026. Your certification body should have an equivalent roadmap. If they cannot articulate it, that is information worth acting on before your next recertification cycle.

3. Begin your cybersecurity assessment now — not when IA9100 publishes. The assessment needs to cover ERP systems, CAD and quality data storage, remote access infrastructure, and production monitoring systems. It needs to produce documented findings and a remediation plan with implementation evidence. A policy document referencing ISO 27001 without evidence of implementation will not satisfy the IA9100 auditor at Clause 8.1.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IAQG — IA9100 Key Change Summary, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-Clause-View.pdf
  • IAQG — IA9100 Key Changes System View, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-System-View.pdf
  • Quality Magazine — A Deeper Dive into Aero Quality: Upcoming IA9100 Series Standards Updates (June 16, 2025), qualitymag.com
  • Quality Magazine — ISO 9001 in 2026: How AS9100 (IA9100), IATF 16949, NIST and CMMC Fit Together (January 8, 2026), qualitymag.com
  • Quality Magazine — Driving Change in Aerospace Quality Management (May 2026), qualitymag.com
  • QT9 Software — IA9100 is Coming: Key Updates for Aerospace and Defense (October 23, 2025), qt9software.com
  • Cavendish Scott — IA9100 is Coming: What the 2026 Updates Mean for Aerospace Quality (October 15, 2025), cavendishscott.com
  • BSI Group — Embracing Changes to IAQG Aerospace Standards, bsigroup.com
  • Paradygm — Latest Changes to the AS9100D Standard (Clause-Level IA9100 Analysis), paradygm.co
  • Assent Risk Management — AS9100 Is Becoming IA9100: What Aerospace Businesses Need to Know in 2026 (March 17, 2026), assentriskmanagement.co.uk
  • Intact Systems — IAQG Unveils OASIS Insights (March 31, 2025), intact-systems.com
  • My ISO Consultants — Updated Schedule and Upcoming Changes in IA9100 and ISO 9001 (March 1, 2025), myisoconsultants.com

#EN9100 #IA9100 #AS9100 #AerospaceQuality #QualityManagement #SupplierAudit #ISO9001 #IAQG #APQP #SKQC

Solar Energy Quality Standards: What Aerospace-Grade Auditing Brings to Photovoltaic Manufacturing

admin

698 GWp of solar photovoltaic capacity was added globally in 2025 — the largest single-year expansion of any electricity generation technology in recorded history. Cumulative installed capacity reached approximately 2,974 GW by the end of 2025, nearly triple the total installed before 2020. The IEA’s Global Energy Review 2026 confirmed that solar PV accounted for more than three-quarters of all new renewable capacity additions worldwide last year.

The manufacturing quality infrastructure has not scaled at the same rate.

In June 2025, Kiwa PVEL published the 11th edition of its PV Module Reliability Scorecard. The headline finding: 83% of module manufacturers and 59% of bills of materials tested had at least one test failure. This is up from 66% of manufacturers and 41% of BOMs in the 2024 Scorecard. The trend line across five scorecards shows the failure rate rising consistently, not fluctuating.

The solar industry is installing at aerospace speed. It is auditing at consumer electronics standards. That gap accrues over a 25-year performance guarantee horizon, not a 12-month warranty period.

1. What the Kiwa PVEL Data Actually Shows

The 2025 Scorecard failure data is specific enough to be actionable. The most common failure type was visual inspection major defects at 60% of all failures. Power degradation failures accounted for 21%. Module breakage during Mechanical Stress Sequence testing increased sharply — the BOM-level failure rate for MSS rose from just 7% in 2023 and 2024 to significantly higher levels in 2025. Forty percent of manufacturers experienced at least one MSS failure.

Junction box failures appear in every edition of the Scorecard. Kiwa PVEL has flagged junction box reliability in six consecutive annual reports. One third of manufacturers in 2025 had at least one junction box-related failure: 11% with covers falling off, 8% with loose cables or exposed wires, 8% with bypass diode failures.

The persistence of these failure modes across six annual reports is not a quality improvement story. It is a process control story. These are known, documented, repeatable failure modes that a mature process control system would have addressed. The fact that they continue at the same manufacturers across multiple years is evidence that corrective action processes are not producing sustained improvement.

I have spent 26 years working in aerospace and automotive quality, primarily in carbon fiber composite structures. The failure modes in the Kiwa PVEL Scorecard are not unfamiliar. What is unfamiliar is the industry’s tolerance for their persistence.

2. The Process Control Gap: Three Specific Areas

Lamination Process Control

Photovoltaic module lamination is a thermal bonding process with direct parallels to aerospace composite manufacturing. Deviations in temperature profile — ramp rate, dwell time, peak temperature — produce encapsulant cross-linking variations that are invisible at final visual inspection but measurable in long-term field performance.

In aerospace composite manufacturing, lamination process parameters are specified, validated against process capability studies, and monitored with continuous SPC. Cure cycle records are mandatory deliverables — not optional documentation. In solar manufacturing, lamination process monitoring varies significantly between manufacturers.

NREL has explicitly noted that IEC 61215 is designed to identify early failures in the first 5-10 years — it is insufficient for assessing long-term risk or establishing field performance degradation over a 25-year service life. The standard itself acknowledges its limitation.

Bill of Materials Traceability

In aerospace, every component traces to a raw material certificate. This traceability is the foundation of root cause analysis when a field failure occurs years after delivery. In solar manufacturing, cell-level traceability within a module is frequently incomplete. When a field failure occurs in year 15 of a 25-year performance guarantee, the ability to establish whether the failure is systematic depends on traceability records that may not exist.

Supplier Qualification Depth

In July 2025, the Chinese Ministry of Industry and Information Technology convened leading solar manufacturers — including LONGi, JA Solar, Trina, and Tongwei — explicitly urging them to end „disorderly low-price competition“ and improve product quality. The Chinese government identified product quality deterioration as a direct consequence of aggressive price competition in a market where module prices had fallen to approximately USD 0.10/Watt — a 45% reduction year-on-year. Quality is the first casualty of margin compression in a commodity market.

3. What Aerospace Audit Methodology Brings to Solar Manufacturing

Process FMEA at the component integration level. Systematic FMEA on lamination, stringing, and junction box assembly processes identifies failure modes that standard factory acceptance testing does not detect. The failure modes in the Kiwa PVEL Scorecard are exactly the failure modes that a well-executed process FMEA would capture and address.

Statistical Process Control on key process parameters. Cell efficiency, Voc, Isc, and encapsulant cure temperature are measurable in-process. The data exists at most manufacturing facilities. The systematic use of that data for process control with control limits and trend analysis is less consistently implemented.

Supplier qualification with process audit depth. Material qualification in solar manufacturing typically relies on type certification and incoming inspection. An aerospace-style supplier qualification adds process audit — examining the actual manufacturing process, the process parameter controls, and the change management practices of the cell, encapsulant, and junction box supplier.

3 Concrete Actions

1. If you are procuring solar modules for utility-scale deployment under 20+ year performance guarantees, request Kiwa PVEL PQP test data for the specific BOM you are procuring — not just the manufacturer’s Top Performer status. Top Performer status does not mean every BOM from that manufacturer performs equivalently.

2. For solar module manufacturers: commission a process FMEA on your lamination and junction box assembly processes using AIAG-VDA FMEA methodology. The failure modes appearing in six consecutive Kiwa PVEL Scorecards are your starting point.

3. For EPC contractors and asset owners: specify cell-level traceability and lamination process record retention as contractual requirements in your module procurement agreements. This requirement is absent from IEC 61215 — it will not be enforced unless you enforce it.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IEA — Global Energy Review 2026: Technology Solar PV and Wind (May 2026)
  • Kiwa PVEL — 2025 PV Module Reliability Scorecard, 11th Edition (June 2025)
  • TaiYang News — Test Failures Surge in Kiwa PVEL’s 2025 Module Reliability Scorecard (June 2025)
  • NREL — IEC 61215 Qualification Tests vs Outdoor Performance
  • PV Magazine — Solar approaches 3 TW, but the industry faces new challenges (May 2026)

#SolarEnergy #PhotovoltaicQuality #RenewableEnergy #QualityManagement #ProcessControl #SupplierAudit #IEC61215 #SKQC