Quality

Supplier Qualification in the U.S. Market: What European OEMs Get Wrong

Supplier Qualification in the U.S. Market: What European OEMs Get Wrong

admin

The United States aviation ecosystem is not a single market. Stratview Research identified over 500 MRO players in the USA alone. Florida represents one of the most geographically diverse aviation concentrations in the country — running from Naval Air Station Jacksonville and the dense defense supplier network in the northeast, through Orlando’s Lockheed Martin facilities and defense manufacturing cluster, to Miami, which anchors one of the largest commercial MRO concentrations in the Western Hemisphere. The Sarasota-Bradenton area sits near the center of this geography, with access to both commercial airports (SRQ and TPA) and a growing base of FBOs, Part 145 repair stations, and specialized component manufacturers.

Fortune Business Insights valued the global aircraft component MRO market at USD 20.36 billion in 2025, projecting growth to USD 28.42 billion by 2034 at a CAGR of 3.30%. North America dominated with 30.70% market share in 2025. European OEMs entering the Florida and broader U.S. market consistently underestimate one specific challenge: their supplier qualification process was designed for a regulatory and business culture that does not fully translate across the Atlantic. This is not about language. It is about structural differences in how supplier relationships, documentation expectations, and audit authority are understood on each side.

1. The Certification Landscape Is Not What It Appears

European supplier qualification typically leans on EN/ISO certification status as a baseline qualification indicator. In the U.S. market, the same logic applies to AS9100 certification — but the interpretation of compliance, and the rigor of certification body audits, varies significantly more than in the European EAQG-governed certification environment.

The IAQG’s OASIS database, launched with OASIS Insights in April 2025, provides certificate validity information and now includes AI-generated benchmarking reports for certified suppliers. According to Quality Assurance Authority’s February 2026 analysis: „The supplier quality compliance function within the prime contractor monitors certificate validity through databases such as OASIS. However, the OASIS database provides certificate validity information — it does not provide information about actual process capability, recent audit findings in detail, or the specific processes included in the certification scope.“

European qualification teams who access OASIS to verify certificate status and proceed to approve the supplier without further investigation are using a verification tool as a qualification tool. They are not the same thing. OASIS Insights now provides a quantitative performance score and anonymized benchmarking — but it does not substitute for a process audit conducted against your specific product requirements.

2. Documentation Expectations Are Contractually Explicit — Not Culturally Assumed

U.S. aerospace and defense suppliers are accustomed to detailed purchase order quality requirements. Flow-down clauses, First Article Inspection requirements, Certificate of Conformity format specifications, material traceability requirements, and source inspection rights are typically embedded in contract documents or referenced quality clauses. These are conditions of doing business with a prime contractor or OEM in the U.S. market — they are negotiated at contract award and enforced through the supplier quality agreement.

European OEMs frequently approach U.S. supplier relationships with quality agreements that reference general standards — EN 9100, AS9100, ISO 9001 — and assume that certification implies compliance with specific customer requirements. It does not. A U.S. supplier certified to AS9100 has a quality system that meets the standard requirements. They do not have a quality system calibrated to your specific product requirements, your traceability expectations, or your corrective action process unless those requirements are explicitly documented in your contract.

The gap becomes visible at the first deviation. The European OEM issues a corrective action request in their standard format with their standard response timeline. The U.S. supplier responds with a format that meets their internal procedure, on a timeline that meets their certification body requirements. Neither party did anything wrong. The contract did not specify what was required. This scenario repeats with sufficient frequency in transatlantic supplier relationships that it deserves explicit contractual prevention, not reactive resolution.

3. On-Site Audit Authority and Cultural Expectation

The expectation in European aerospace — particularly in DACH manufacturing environments — that a customer can conduct an unannounced process audit is less culturally established in the U.S. market. First-time audits from European customers frequently encounter not obstruction, but a genuine lack of a prepared audit interface. The quality manager is travelling. The production records are not organized for external review. The key personnel needed for an audit are not available on short notice.

This is a preparation and relationship issue, not a willingness issue. U.S. suppliers who regularly work with U.S. prime contractors are accustomed to source inspection visits and supplier assessment audits that are scheduled in advance and conducted against a defined scope. An unannounced visit from a European customer they have never met, requesting access to process records and production areas, is an unusual request that triggers a natural defensive response — regardless of contractual audit rights.

Having a local quality representative who operates in the same time zone, understands both the European customer’s expectations and the U.S. supplier’s operational reality, removes this friction significantly. The representative can prepare the supplier for the audit format, facilitate access to the right people and records, and interpret findings in terms that both parties understand. Without that intermediary, the first audit produces friction that damages the supplier relationship regardless of what the findings show.

4. Sub-Tier Visibility Requires Contractual Flow-Down

U.S. aerospace supply chains often involve more tiers of distribution and brokering than European equivalents. Over 500 MRO players and a broad distributor network in the U.S. market mean that traceability to raw material source — manufacturer, lot number, heat treat record — requires explicit contractual flow-down from the prime to Tier-1 and from Tier-1 to Tier-2. It is not culturally assumed to exist unless the contract specifically requires it.

IA9100’s strengthening of sub-tier supplier controls — one of six named areas in the IAQG Key Change Summary — will formalize this expectation at the standard level. Until that standard publishes, the requirement needs to be contractual and explicitly audited. European OEMs qualifying U.S. suppliers who source from distributors need to verify through audit that the distributor qualification process extends to the original manufacturer, not just to the distributor’s internal documentation practices.

3 Concrete Actions

1. Before qualifying any U.S.-based supplier for safety-critical or quality-critical parts, conduct a first article process audit — not a document review — that specifically examines whether the supplier’s actual process matches their quality plan. Request walk-through of the production process for your specific part, with measurement records from the last production run. Certificate verification and OASIS Insights benchmarking are inputs to qualification, not substitutes for process audit.

2. Build your purchase order quality clauses specifically — not by reference to standards. Include explicit requirements for CoC format and content, material lot traceability depth, First Article Inspection report format, corrective action response timeline and content requirements, and source inspection rights with advance notice requirements. U.S. suppliers will comply with contractually explicit requirements. They cannot comply with requirements they do not know you have.

3. If you are a European OEM with U.S. suppliers in Florida or the broader southeastern U.S. market, consider establishing a local quality representative who operates in the same time zone, knows the regional supplier landscape, and can conduct process audits and source inspections without transatlantic travel. The cost of that representation is significantly lower than the cost of managing a quality escape that a timely process audit would have prevented.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Fortune Business Insights — Aircraft Component MRO Market Size, Share and Growth 2025-2034 (2026), fortunebusinessinsights.com
  • Stratview Research — Aircraft MRO Market: Over 500 MRO Players in the USA, stratviewresearch.com
  • Market Research Future — US Aircraft MRO Market Size and Share, Forecast 2034 (June 2025), marketresearchfuture.com
  • Quality Assurance Authority — Third-Party Audit Compliance for Quality Systems (February 23, 2026), qualityassuranceauthority.com
  • IAQG — OASIS Insights Launch (April 1, 2025), iaqg.org
  • Intact Systems — OASIS Insights Case Study: AI-Enabled Audit Benchmarking, intact-systems.com
  • IAQG — IA9100 Key Changes System View (Sub-tier supplier controls), iaqg.org
  • EASA — European Plan for Aviation Safety 2026 (EPAS 2026), easa.europa.eu

#SupplierQuality #USMarket #EuropeanOEM #QualityManagement #FloridaAviation #AerospaceQuality #SarasotaBusiness #MROQuality #SKQC

What LinkedIn Gets Wrong About Quality Management — And What Actually Works

What LinkedIn Gets Wrong About Quality Management — And What Actually Works

admin

LinkedIn quality management content follows a recognizable pattern: a statistic of uncertain origin, three bullet points that could apply to any industry in any decade, and a call to action authored by someone who has never been inside a supplier facility. After 26 years in aerospace, automotive, and composite manufacturing quality — including time on shop floors, in supplier audit rooms, and in front of customers holding nonconformance reports — I want to push back on three ideas that circulate constantly on this platform.

They sound right. They lead organizations in the wrong direction.

1. „Quality Culture Starts at the Top“

Leadership commitment matters. I am not arguing otherwise. But in practice, quality culture is built or destroyed at the first-line supervisor level, not in the boardroom.

I have been in facilities with genuinely committed executive teams — quality policies on the wall, quality as a stated strategic priority, QMS management review meetings with C-suite attendance — where the shop floor operated on a completely different set of priorities. The people making daily decisions about rework, inspection frequency, and documentation completeness were first-line supervisors whose performance was measured against output targets and on-time delivery, not against quality outcomes.

The supervisor who tells an operator to ship a borderline part because the customer needs it today is not acting against executive intent. They are responding to the actual incentive structure they operate within. That incentive structure is a management design decision, not a culture problem. You fix it by changing what the first-line supervisor is accountable for and how they are evaluated — not by adding another quality awareness session or updating the quality policy.

This is not a new observation. Deming’s 14 Points — articulated in the early 1980s, still largely unimplemented at most organizations — include „drive out fear“ and „break down barriers between departments“ precisely because he understood that culture lives in the daily decisions made at the operational level. The gap between knowing this and acting on it has persisted for 40 years.

Quality culture is a local phenomenon. It lives in the decisions made when no one from leadership is watching. If those decisions consistently prioritize schedule and output over quality, that is the culture — regardless of what the quality policy says.

2. „Root Cause Analysis Prevents Recurrence“

Root cause analysis documents recurrence prevention. It does not guarantee it.

The 8D report closes the loop on paper. D5 identifies the root cause. D6 defines the corrective action. D7 addresses recurrence prevention. D8 closes the issue. The customer receives the report, closes the SCAR, and the supplier moves on. What the 8D does not tell you: whether the corrective action was actually implemented, whether it was sustained under production pressure three months later, or whether it transferred to similar processes where the same failure mode exists.

I have audited suppliers who had correct 8D reports for failure modes that were still present in their production process at the time of the audit. The paperwork was good. The process had not changed. The corrective action had been implemented for the specific part family covered by the customer complaint and had not been extended to adjacent processes where the same risk existed.

The SixSigma.us practitioner guide noted from real consulting experience: effectiveness verification — not document closure — is the metric that matters. „One automotive parts supplier credits Ppk with quantifying their success in meeting a new customer’s stringent defect requirements through focused implementation of SPC methods.“ The key word is „quantifying“ — measurement data, not document closure, is what demonstrated that the corrective action worked.

Follow-up audits 90 days after 8D closure tell the real story. Most supplier quality programmes measure 8D closure rate. Fewer measure recurrence rate by root cause category. That second number is where the actual quality system performance is visible.

3. „Digital Transformation Solves Quality Problems“

I have seen digital quality systems generate real-time dashboards for processes that were fundamentally unstable. The data was clean and current. The process it described was not producing conforming parts at a consistent rate.

Technology surfaces information faster. It does not replace the judgment required to act on that information correctly. A digital nonconformance management system that produces real-time rejection rate data is valuable — if the people reviewing that data understand what it means for the process that generated it and are empowered to act on it. Without those two conditions, it produces faster reporting of problems that are not being solved.

Paradygm’s IA9100 clause analysis makes an interesting related observation: under IA9100, Clause 9.2 elevates reviewing performance indicators from a note to a mandatory requirement during internal audits. The point is not just that you collect data — it is that „objective evaluation of QMS effectiveness“ requires people who understand how to interpret that data in the context of their specific manufacturing environment. Digital tools generate the data. Qualified people with process knowledge evaluate it.

The quality problems I have seen in 26 years that were solved by a digital system: none. The quality problems solved by people who understood the process, had the authority to change it, and were held accountable for sustaining the improvement: most of them.

What Actually Works — and Why It Is Harder to Sell

The quality interventions that consistently produce sustained improvement share three characteristics: they address the process, not the symptom; they change the accountability structure, not just the procedure; and they are verified through physical observation and measurement, not document review.

Process FMEA conducted by people who actually work the process — not by quality engineers working from a specification document — identifies failure modes that documentation-based approaches miss. SPC reviewed daily by the operator and the first-line supervisor produces process control. Supplier audits that include conversation with shop floor operators — not just review of the quality manager’s presentation — reveal actual process stability.

None of these approaches are new. None of them are digital. They require sustained investment in people who understand manufacturing processes and have the authority to change them. That investment is less visible than a quality management platform implementation and harder to explain to a cost reduction programme. It is consistently more effective.

What quality advice have you seen repeated on this platform that does not match what you have experienced on the production floor? I am genuinely interested in what practitioners are seeing — not what the next framework recommends.

👉 www.skqc.org

Sources

  • Deming, W.E. — Out of the Crisis (1986), MIT Press. The 14 Points for Management remain the foundational reference for systemic quality thinking.
  • Paradygm — Latest Changes to the AS9100D Standard: IA9100 Clause 9.2 Analysis (2025/2026), paradygm.co
  • SixSigma.us — A Practitioner’s Guide to Choosing Between Cpk vs Ppk (January 13, 2025), 6sigma.us
  • iSixSigma — Process Capability Cp, Cpk and Process Performance Pp, Ppk — What is the Difference? (October 2024), isixsigma.com
  • AIAG — Production Part Approval Process (PPAP) Reference Manual, 4th Edition
  • AIAG — Statistical Process Control (SPC) Reference Manual, 2nd Edition

#QualityManagement #Manufacturing #SupplierQuality #ProcessImprovement #8D #RootCauseAnalysis #Deming #SKQC

Farnborough 2026: What the Airshow Floor Tells Us About Aerospace Quality Priorities

Farnborough 2026: What the Airshow Floor Tells Us About Aerospace Quality Priorities

admin

Farnborough International Airshow 2026 runs July 20-24 at Farnborough International Exhibition and Conference Centre in Hampshire, UK. It is the largest edition in the show’s 78-year history. Exhibitor space sold out with a waiting list of more than 50 organisations. Over 1,400 exhibitors from 41 countries will present, and FIA2024 attracted over 100,000 visitors from 114 countries — the 2026 edition is expected to exceed that. Twenty-six international pavilions are already confirmed, including India, Japan, Australia, Mexico, Brazil, and Switzerland.

The order book announcements and flying display will generate the media coverage. For supplier quality professionals, the more relevant signals come from what OEMs and primes are demanding from their supply base — signals that translate into supplier quality agreement requirements, audit scope changes, and qualification criteria in the 6-12 months following the show.

1. The Enterprise Gateway: Supply Chain Resilience as a Headline Theme

FIA2026 introduces The Enterprise Gateway — a three-day programme running July 21-23 alongside the Business Connections Exchange. According to the official Farnborough International announcement, the Gateway provides „practical workshops on procurement, regulation, exports, and funding; keynotes and mentoring from industry leaders and policymakers; live pitching sessions connecting SMEs with investors and primes; and insights aligned with the UK Government’s Plan for Change.“

The focus on SME supplier development is not accidental. It is a direct response to the supply chain failures of 2022-2024, when aerospace production rates at Boeing and Airbus were constrained not by OEM capacity but by supplier capability and raw material availability. The lesson absorbed by the prime contractors: production continuity depends on the quality and stability of their smallest suppliers, not just their largest ones.

For quality managers in the supply base, the FIA2026 supply chain emphasis translates to a specific expectation shift. The question has moved from „do you have an AS9100 certificate?“ to „can you demonstrate that your processes will remain stable through material constraints, workforce changes, and regulatory transitions?“ The Enterprise Gateway is explicitly designed to equip businesses with the tools, connections, and confidence to meet that expectation.

2. The Defence SME Zone: What It Signals About Qualification Pressure

The Defence SME Zone debuts at FIA2026 as a dedicated showcase for high-potential international organisations specialising in defence and security technologies. Designed exclusively for businesses with a turnover under £10 million, the zone — sponsored by FTSE 100 defence company Babcock International — provides SMEs the opportunity to engage directly with the global defence supply chain, connect with primes, investors, media, and government delegations.

Confirmed participants include Cognitive Design by CDS, Elite EMC, Emergent, Infortecorp Solutions, Inspectahire, and Needles And Pins Aerospace. The explicit focus on accelerating „next-generation defence suppliers“ reflects the rearmament reality: European allies and Canada increased defence spending by 20% in 2025 to a combined $574 billion, according to NATO Secretary General Rutte’s March 26, 2026 annual report. All 32 NATO member states met or exceeded the 2% GDP target for the first time. The NATO Summit in The Hague in June 2025 committed members to 5% of GDP by 2035.

The defence spending surge is creating demand for new suppliers in the defence supply base — including civil aerospace suppliers who have not previously operated under AQAP 2110 or DCMA oversight. The qualification requirements for those suppliers are significantly more demanding than civil AS9100 certification. The Defence SME Zone at FIA2026 is where those conversations begin.

3. Pioneers of Tomorrow: The Workforce Signal That Matters Most

FIA2026 concludes on July 24 with Pioneers of Tomorrow — a dedicated STEM day for young people featuring a Careers Fair and a digital Job Board advertising apprenticeships, graduate schemes, and entry-level roles. Organisations confirmed to participate include Babcock International Group, Parker Aerospace, and Belcan.

This is not a marketing exercise. EASA EPAS 2026 identified workforce competency as a systemic safety risk, adding a new section titled „Availability of Competent Aviation Personnel“ to Volume I: „Unless the aviation industry addresses this challenge, the level of aviation safety may degrade in the long term.“ The aerospace auditor shortage documented by Quality Magazine in 2025 — with many experienced auditors retiring and the pipeline of qualified replacements not keeping pace — is one visible manifestation of the broader workforce challenge.

For supplier quality managers, the workforce dimension is not abstract. It is the reason that EASA EPAS 2026’s workforce competency flag matters to their audit programme: the supply base is placing undertrained personnel in quality-critical roles because the qualified workforce is not available at the rate required by industry growth. That reality shows up in process audit findings before it shows up in nonconformance data.

What Farnborough Signals for Supplier Qualification in H2 2026

Farnborough alternates with the Paris Air Show — Paris in odd years, Farnborough in even years — and both function as the global stage where the direction of aerospace commercial relationships is set for the following 18-24 months. The qualification requirements appearing in new supplier agreements from mid-2026 onwards will reflect the priorities being discussed in the chalets and meeting rooms of FIA2026 this July.

Three specific signals worth tracking after the show closes July 24: which OEMs announce new supplier development programmes and what competency gaps they address; what digital documentation requirements appear in new supply agreements discussed at the Airshow Global Forum; and what the Pioneers of Tomorrow programme focus areas signal about where the skills gap is most acute in the quality engineering community.

3 Concrete Actions

1. If you are attending FIA2026 as a supplier: use the Enterprise Gateway programme (July 21-23) to engage with procurement and qualification conversations. The workshops on procurement, regulation, and funding are more directly relevant to building a sustainable supplier qualification position than the exhibition floor. Book early — the programme has limited capacity.

2. For quality managers not attending: review the FIA2026 press releases and programme announcements after the show closes July 24. The supply chain session outputs will contain specific signals about new supplier requirements, digital documentation expectations, and workforce development priorities. These signals typically translate into supplier quality agreement updates within 6-12 months of the show.

3. For organisations preparing for IA9100 transition and defence qualification: the convergence of IA9100 publication (expected late 2026) with the FIA2026 supply chain theme and the NATO rearmament-driven qualification pressure creates a compressing timeline for quality system modernisation. Use the post-Farnborough period — August through October 2026 — to complete your IA9100 gap assessment and your AQAP 2110 readiness review if defence qualification is on your agenda.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Farnborough International — FIA2026 Unveils New Features As Trade Tickets Launch (January 22, 2026), farnboroughairshow.com
  • Aero-Mag — Farnborough International Airshow 2026 Unveils New Features (January 22, 2026), aero-mag.com
  • ADS Advance — Farnborough International Airshow 2026 Unveils New Features (January 2026), adsadvance.co.uk
  • Aerospace Global News — Farnborough International Airshow 2026: Ticket Sales Open (February 6, 2026), aerospaceglobalnews.com
  • Defense Advancement — Farnborough International Airshow 2026: 20-24 July (January 2, 2026), defenseadvancement.com
  • NATO — Secretary General Mark Rutte Annual Report (March 26, 2026), nato.int
  • Atlantic Council — NATO Defence Spending Tracker (last updated April 9, 2026), atlanticcouncil.org
  • SIPRI — Trends in World Military Expenditure 2025 (April 27, 2026), sipri.org
  • EASA — European Plan for Aviation Safety 2026 (EPAS 2026), Volume I, easa.europa.eu
  • Quality Magazine — Aerospace Auditing: How Its Impact Makes It a Smart Career Move (May 2025), qualitymag.com

#Farnborough2026 #AerospaceQuality #SupplierDevelopment #FIA2026 #EnterpriseGateway #QualityManagement #SKQC

Second Party Audits vs. Third Party Certification: What Actually Protects Your Quality

Second Party Audits vs. Third Party Certification: What Actually Protects Your Quality

admin

A supplier with a valid EN 9100 certificate failed a customer source inspection last month. The certificate was current. The surveillance audit had been completed six weeks earlier with no major findings. The process was not what the certification record described.

This is not an unusual situation. I have encountered variations of it repeatedly across 26 years of supplier quality work in aerospace, automotive, and composite manufacturing. Certification audits and customer audits serve different functions — and the gap between what each one reveals is where quality escapes live.

1. What Third Party Certification Audits Actually Assess

Third party certification audits verify that a quality management system meets the requirements of the standard. They assess documentation, process descriptions, and the evidence that the system is being operated. A well-prepared organization can achieve and maintain certification with a QMS that is largely compliant on paper.

Certification auditors operate on a fixed schedule, with advance notice, against a defined scope. The scope is broad by design — it covers the entire quality management system. For a mid-size aerospace supplier, a surveillance audit may be one to two days. The auditor cannot examine every process in that time.

The IAQG launched OASIS Insights in April 2025 — described by Eric Jefferies, President of IAQG, as a tool that „will transform how organizations showcase the value of audits and identify areas for improvement.“ OASIS Insights version 3.0.0 made IAQG the first certification ecosystem globally to apply AI at scale to analyze audit findings data worldwide, according to Intact Systems. Starting April 1, 2025, certified suppliers automatically receive an OASIS Insights report following completion and publication of initial, recertification, or surveillance audits — providing anonymized benchmarking, a quantitative performance score, and an AI-generated summary of key risk areas.

This is a meaningful development. An organization now understands how its QMS performance compares to the industry as a whole and to other similar organizations. It does not change what a certification audit observes in a single two-day visit, against a broad scope, with advance notice. And it does not provide the customer-specific context that second party audits deliver.

Quality Assurance Authority noted in its February 2026 analysis: „The supplier quality compliance function within the prime contractor monitors certificate validity through databases such as OASIS. However, the OASIS database provides certificate validity information — it does not provide information about actual process capability, recent audit findings in detail, or the specific processes included in the certification scope.“

2. What Second Party Audits Reveal

Customer audits focus on whether the processes your supplier uses to produce your specific parts are stable and capable. The scope is narrower, the questions more specific, and the auditor has context that a certification body auditor cannot have: knowledge of your product requirements, your quality agreement terms, your previous nonconformances, and your upcoming program needs.

TÜV SÜD’s published guidance on audit types is explicit: „Second-party audits remain relevant even if the supplier is certified to ISO 9001, as they address specific contractual requirements beyond the general standard.“ The contractual requirements dimension is critical in aerospace. Customer-specific requirements — flow-down clauses, First Article Inspection requirements, material certification obligations, key characteristics controls — are not fully visible to a certification body auditor who does not have access to your purchase orders and quality agreements.

In my experience, second party audits on certified suppliers consistently surface findings in three areas that certification audits regularly miss:

Actual process parameters versus approved parameters. The process description in the quality plan describes what the process should be. The SPC chart, the setup sheet used by the operator yesterday, and the measurement data from the last 30 production runs describe what the process actually is. These are not always the same document. The certification auditor reviews the documented process. The customer auditor examines whether the documented process is what is actually happening.

Real traceability versus documented traceability. A quality system can have excellent traceability documentation while having a physical process that intermixes materials, skips recording steps under schedule pressure, or reconstructs records after the fact. The documentation looks correct. The physical product flow does not match it. This is the failure mode that produces the situations where a Certificate of Conformity describes a product that was not produced to the stated requirements.

Competency of personnel in quality-critical roles versus training records. Training records confirm that an operator attended a course or passed a qualification test. Asking the operator directly — „what happens if this parameter is outside the specified range?“ — reveals the actual competency state faster than any training matrix. This is exactly the kind of question that IA9100’s human factors root cause analysis requirement will eventually make a formal audit criterion — but second party audits can ask it now.

3. The Risk Management Argument

Using certification status as a substitute for second party audit activity transfers the consequences of that gap to your production line, your customer, or your safety record.

QSTRAT’s December 2025 analysis of best practices for supplier qualification in aerospace confirmed that suppliers are typically requalified every one to three years, involving updated risk assessments, quality system evaluations, on-site or remote audits, and validation of special processes. The requalification cycle creates a risk window between qualification events. Second party audits during that window are not redundant — they are the mechanism for detecting drift between qualification states.

The more useful question is not whether to conduct second party audits, but how to focus them. Risk-based audit planning — directing second party audit resources toward suppliers with elevated risk profiles, recent changes, or open corrective actions — allows organizations to maintain meaningful oversight without auditing every supplier every year.

3 Concrete Actions

1. Review your current approved supplier list and identify how many suppliers are qualified exclusively on the basis of third party certification status, without an active second party audit in the last 24 months. For any of those suppliers providing safety-critical or quality-critical parts, that is a risk exposure that needs active management — not necessarily immediate audit action on every supplier, but explicit risk register acknowledgment and a plan.

2. When planning second party audits, build your audit agenda from your quality agreement and purchase order requirements — not from the EN 9100 or AS9100 clause structure. The certification auditor covers the standard. You need to cover what your contract requires and what your product needs. These are related but not identical sets of requirements.

3. For suppliers who have received a major finding from a certification body in the last 18 months: conduct an independent second party audit before the corrective action closure date, not after. Certification body follow-up visits verify that the corrective action was documented. A second party audit verifies whether the underlying process failure has actually been addressed. The difference between those two verification methods is the difference between compliance on paper and process reality.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IAQG — OASIS Insights Launch Announcement (March 31, 2025), iaqg.org
  • Intact Systems — IAQG Unveils OASIS Insights: A New Era in Aerospace Audit and Certification (March 31, 2025), intact-systems.com
  • Intact Systems — OASIS Insights Case Study: AI-Enabled Audit Benchmarking, intact-systems.com
  • Quality Magazine — Driving Change in Aerospace Quality Management (May 2026), qualitymag.com
  • Quality Assurance Authority — Third-Party Audit Compliance for Quality Systems (February 23, 2026), qualityassuranceauthority.com
  • TÜV SÜD — What is the Difference Between First-, Second-, and Third-Party Audits?, tuvsud.com
  • QSTRAT — Best Practices for Supplier Qualification in Aerospace (December 2025), qstrat.com
  • BSI Group — Embracing Changes to IAQG Aerospace Standards, bsigroup.com

#SupplierAudit #QualityManagement #EN9100 #SecondPartyAudit #AerospaceQuality #OASISInsights #IAQG #SKQC

Composite Repair Quality in Aviation: Why MRO Standards for CFRP Need a Closer Look

Composite Repair Quality in Aviation: Why MRO Standards for CFRP Need a Closer Look

admin

The global composite repair market is projected at USD 16.39 billion in 2026 and USD 22.82 billion by 2031, growing at a CAGR of 6.85%, according to Mordor Intelligence’s January 2026 market report. Carbon-fibre Reinforced Polymer commands 54.69% of that market share. The Boeing 787 Dreamliner and Airbus A350 XWB incorporate composite materials for over 50% of their structural weight. Early CFRP structures are reaching their 15-year inspection thresholds, and the MRO industry is executing composite repairs at scale for the first time.

The problem is that most Part 145 quality systems were built for metallic structure maintenance. Aviathrust Aviation News stated clearly in its December 2025 analysis: „Applying metal repair practices to composite structures may be inappropriate and risk the repair outcome.“ The GAO made the same point in its assessment of FAA composite oversight: experts expressed concern that while composite training is available to technicians, they may lack incentives to pursue it. That concern has not gone away in the years since.

The FAA updated Advisory Circular 20-107B in 2024, shortening structural-repair approvals by one-third — releasing deferred maintenance budgets and giving operators a faster route to keep high-value assets in service. More repairs, faster approvals, and an industry workforce built primarily on metallic maintenance experience: that is the quality risk environment for 2026.

1. Why CFRP Repair Is Structurally Different from Metallic Maintenance

Damage Characterization

In metallic structures, damage is visible or measurable with standard NDT methods calibrated for the material. In CFRP, impact damage can delaminate internal plies while leaving the surface essentially intact. The MRO industry standard for initial damage assessment — visual inspection and basic surface scanning — is insufficient for composite primary structure. EASA’s 2025 standards now mandate NDT for all primary-structure composite repairs, closing a gap in the previous regulatory text and raising entry barriers for repair stations that have not invested in the required NDT capability.

For quality managers auditing MRO suppliers, the specific question is whether the NDT equipment is present, calibrated, and operated by technicians qualified to the specific technique and material being inspected. A repair station with composite repair scope on their Part 145 capability list but no calibrated ultrasonic C-scan equipment and no qualified Level II NDT technician for composite inspection is operating a paper capability, not a real one.

Material Shelf Life and Storage Compliance

Prepreg repair materials — the carbon fiber/resin systems used for structural CFRP repairs — have defined out-time limits at room temperature and storage temperature requirements when frozen. Material that has been exposed slightly beyond its out-time limit may appear normal at layup. The consequences appear later: incomplete cross-linking that produces lower-than-specified interlaminar shear strength, or elevated void content detectable only by destructive testing or advanced NDT. A repair executed correctly in all other respects, but using material outside its process window, does not meet the approved repair data.

For Part 145 quality systems, the minimum traceable record for composite repair materials is: lot number, received date, frozen storage records with temperature log, cumulative out-time, and confirmation that out-time was within limits at the time of layup. DAS — a Part 145 structural MRO specialist — has identified material traceability as a primary documentation requirement in structural repair record packages. In practice, these records are often incomplete or reconstructed from memory after the repair rather than documented in real time during the operation.

Cure Cycle Validation and Documentation

Hotbonder cure cycles for composite repairs require thermocouple placement on the repair area, controlled temperature ramp rates, specific dwell temperatures and times, and vacuum bag integrity throughout the cure. The cure cycle chart — the printed or electronic record of temperature versus time — is a mandatory deliverable for composite repairs to primary structure. It is the primary objective evidence that the thermal process was executed within the approved data requirements.

In practice, cure cycle records are missing from a significant proportion of composite repair packages. In some cases the hotbonder data was not downloaded before the equipment was reset for the next job. In other cases the record was generated but not associated with the aircraft maintenance record. Either failure leaves the maintenance organization without the primary objective evidence that the repair conformed to approved data — which means the basis for the release-to-service entry is incomplete.

2. The Audit Question That Is Rarely Asked

When a Part 145 organization is audited for composite repair capability, the typical scope covers certification scope, tooling calibration, and training records. DAS’s structural repair guidance explicitly frames the requirement in terms of documentation and audit-ready records supporting compliant execution — not just procedure existence. The audit questions that reveal actual process compliance:

Show me the damage characterization record — the NDT output that defined the damage extent — for the last composite repair to primary structure your organization executed. Show me the material lot traceability record confirming the prepreg was within out-time limits at layup. Show me the cure cycle chart for that repair. Show me how that cure cycle chart is linked to the aircraft maintenance record.

If any of those records cannot be produced for a recent repair, the audit has identified a systemic documentation gap. The cure cycle either conformed to the approved data or it did not. Without the record, neither the maintenance organization nor the regulator can verify which outcome occurred.

3 Concrete Actions

1. If you are qualifying or re-qualifying a Part 145 MRO supplier that performs composite repairs to primary structure, add material traceability and cure cycle record review to your audit agenda as non-negotiable items. Request records for three recent composite repairs to primary structure. The records should be retrievable within minutes from the repair package file — not reconstructed from memory or assembled from multiple systems.

2. For Part 145 organizations executing composite repairs: review your procedure for cure cycle data download and retention. The most common failure mode is procedural — the process for downloading hotbonder data and associating it with the aircraft record is absent or not consistently followed. A one-page procedure with a specific step for data download and record linking, verified by a supervisor sign-off, addresses the majority of the gap.

3. For airline quality managers reviewing MRO supplier qualification: verify that your supplier’s composite repair scope under their Part 145 approval is supported by actual NDT capability and competency on-site. The 2024 FAA AC 20-107B update and EASA’s 2025 NDT mandate for primary-structure repairs are raising the baseline. A qualification audit that does not verify NDT capability at the technique-and-material level is not assessing the process that matters most.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • Mordor Intelligence — Composite Repair Market Size, Growth, Trends and Share Report 2025-2031 (January 2026), mordorintelligence.com
  • Aviathrust Aviation News — Building a World-Class Composite Repair Workshop for EASA Part-145 Organizations (December 7, 2025), aviathrust.com
  • DAS (Diverse Aero Solutions) — Aircraft Composite Repair Guide for Decision Makers (April 2026), diverseaero.com
  • DAS — Structural Repair Traceability in Part 145 Repair Stations, diverseaero.com
  • FAA Advisory Circular AC 43-214A — Repairs and Alterations to Composite and Bonded Aircraft Structure
  • FAA Advisory Circular AC 20-107B (Updated 2024) — Composite Aircraft Structure
  • GAO-11-849 — Aviation Safety: Status of FAA’s Actions to Oversee the Safety of Composite Airplanes
  • Fortune Business Insights — Aircraft Component MRO Market Size, Share, Growth to 2034 (2026), fortunebusinessinsights.com
  • Stratview Research — Aircraft MRO Market Size and Trend Industry Analysis 2025-2035, stratviewresearch.com

#CompositeRepair #MROQuality #CarbonFiber #CFRP #AviationMaintenance #Part145 #EASA #NDT #SKQC

EN 9100 to IA9100: What Is Actually Changing for Supplier Quality Managers in 2026

EN 9100 to IA9100: What Is Actually Changing for Supplier Quality Managers in 2026

admin

Late 2026. That is the target publication date for IA9100 — the standard that replaces AS9100 Rev D and becomes the new certification baseline for aviation, space, and defense quality management systems globally. The IAQG confirmed the timeline: IA9100 aligns with ISO 9001:2026, expected September 2026, with a transition window of two to three years placing the compliance deadline between late 2028 and late 2029. Note: BSI Group has indicated that if ISO 9001:2026 is delayed, the new IA 9100 series may not be released until early 2027.

AS9100 Rev D was published in 2016. A decade of aerospace industry evolution — digitalization, geopolitical supply chain disruption, increasing cyber threats to manufacturing systems, and a documented workforce competency crisis — is being incorporated into the revision. The IAQG has published its Key Change Summary, and Quality Magazine described the transition as representing „a strategic modernization to address the realities of 21st-century aerospace challenges.“ That description is accurate in terms of intent. It understates the operational implications of the specific requirements being added.

1. The Rebranding: What „IA“ Means and Why It Matters Operationally

AS9100 was an American designation — AS for Aerospace Standard, a SAE International designation. The same standard was published regionally as EN 9100 in Europe and JISQ 9100 in Japan. The move to IA9100 — International Aerospace — consolidates them under a single global designation. As BSI Group noted in its official guidance: „Previously published standards, including the AS 9100 series, will transition from sector designations of AS, EN, SJAC or JISQ to the new singular IA designation at the time of revision. The aim is to significantly improve the efficiency of change control and translation.“

For European organizations currently certified to EN 9100:2018, the practical implication is that the transition audit to IA9100 will be conducted against a unified global standard with unified audit scheme requirements (IA9101) and unified auditor competency requirements. The current five certificate structures will be simplified to two — Single Site and Multiple Site — to drive simplicity and consistency in approach, according to BSI Group’s published guidance on the IAQG standards changes.

2. Four Substantive Changes That Require New Processes — Not Just Documents

Cybersecurity Integration into the QMS

Paradygm’s detailed clause analysis of IA9100 identified the specific addition at Clause 8.1: information security and data protection added as a new NOTE requirement, making cybersecurity risk assessment integration into the quality risk management process mandatory rather than advisory. Quality Magazine’s January 2026 analysis of the convergence between IA9100, IATF 16949:2027, and CMMC requirements was explicit: „Begin updating supplier quality agreements to anticipate cyber and export-control clauses“ and „Plan for two transition audits instead of one.“

Cavendish Scott’s analysis noted that under IA9100, „aerospace organizations aren’t just required to validate processes — they’re expected to predict and control outcomes,“ specifically in the context of digital systems and cybersecurity. The IAQG’s own Key Change Summary confirms: „Information security (e.g., cyber) and data protection“ as one of the six named areas being elevated in the revision.

The audit evidence that will be expected is not a policy document. It is governance structures, evidence of threat assessment covering ERP systems, CAD and quality data storage, remote access infrastructure, production monitoring systems, access control implementation, and incident response procedures linked to quality records.

Human Factors in Nonconformance Root Cause Analysis

Quality Magazine’s June 2025 deep-dive on IA9100 was specific: „The most personally transformative element of the upcoming revisions is arguably the formalization of quality culture and human factors within the QMS framework. Expectations will include: Clear leadership commitment to quality as a corporate value, demonstrated through behavior and resources — incorporating human factors, such as fatigue, into root cause investigations and providing employee well-being programs that support quality outcomes.“

QT9 Software’s interview with AS9100 consultant Mike Varney confirmed the direction: „Leadership will be tasked with demonstrating commitment to a culture of quality through behavior and resources, including incorporating human factors, such as fatigue, into root cause investigations.“ This is not a minor documentation change. A corrective action process that does not examine organizational conditions — time pressure, shift fatigue, work instruction ambiguity — will produce incomplete D5 root cause entries that an IA9100 auditor will challenge.

APQP Integration as a Required QMS Methodology

Cavendish Scott’s analysis was direct on this point: „In IA9100:2026, Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP) aren’t optional. They’re officially required tools, supported by IA9145 guidance.“ Paradygm’s clause-level analysis confirmed that Clause 8.1 now includes APQP as „one method for operational planning and control“ in the revised note structure — with Annex B providing the IA9145 linkage.

Quality Magazine noted: „Customers — particularly primes like Boeing, Airbus, and Lockheed Martin — are increasingly demanding APQP evidence during contract award and oversight activities.“ Assent Risk Management observed that „IA9100 more explicitly incorporates APQP principles, aligning the standard with AS9145 and improving launch discipline.“ For aerospace-only suppliers who have never systematically applied APQP, this is a process design requirement, not a documentation update.

Sub-Tier Supplier Controls

The IAQG Key Change Summary identifies „sub-tier supplier controls“ as one of six named areas of expansion. Cavendish Scott described the counterfeit parts prevention enhancement as aligned with „SAE AS5553 for counterfeit electronic parts and AS6174 for counterfeit mechanical parts.“ Quality Magazine noted that IA9100 „enhances measures“ addressing the proliferation of counterfeit parts as a safety, legal, and reputational risk. Organizations whose supplier quality programme focuses primarily on Tier-1 suppliers with limited visibility into Tier-2 and Tier-3 will need to extend their oversight model structurally.

3. The OASIS Transition Dimension

In parallel with the IA9100 content changes, the IAQG launched OASIS Insights in April 2025 — the first certification ecosystem globally to apply AI at scale to analyze audit findings data worldwide, according to Intact Systems. Starting April 1, 2025, certified suppliers automatically receive an OASIS Insights report following completion and publication of initial, recertification, or surveillance audits. Eric Jefferies, President of IAQG, stated: „OASIS Insights will transform how organizations showcase the value of audits and identify areas for improvement, ultimately driving continuous improvement in the aerospace industry.“

IAQG also introduced a dual-track approach for standards revision — incremental revisions between major revisions, potentially including quarterly or biannual updates for small changes — representing a significant shift from the traditional five-year update cycle. Organizations should anticipate that IA9100 is not a final state but the beginning of a more agile standards maintenance regime.

3 Concrete Actions

1. Conduct a gap analysis against the IAQG’s published Key Change Summary (available at iaqg.org) now — before the final IA9100 text publishes. The six named areas — product safety, information security, quality culture and ethics, APQP linkage, counterfeit parts, sub-tier supplier controls — are confirmed. The gap analysis conducted against coordination draft materials will be accurate enough to define preparation priorities. Organizations that wait for the final text to begin gap analysis will be starting 18 months behind competitors who started in 2025.

2. Review your certification body relationship and confirm their transition roadmap. BSI Group has published guidance noting that the 9104 series standards have already been through writing and approval, are being translated into seven languages, and will be ready in late 2025 with official training material and a published timeline for transition expected towards the end of 2026. Your certification body should have an equivalent roadmap. If they cannot articulate it, that is information worth acting on before your next recertification cycle.

3. Begin your cybersecurity assessment now — not when IA9100 publishes. The assessment needs to cover ERP systems, CAD and quality data storage, remote access infrastructure, and production monitoring systems. It needs to produce documented findings and a remediation plan with implementation evidence. A policy document referencing ISO 27001 without evidence of implementation will not satisfy the IA9100 auditor at Clause 8.1.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IAQG — IA9100 Key Change Summary, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-Clause-View.pdf
  • IAQG — IA9100 Key Changes System View, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-System-View.pdf
  • Quality Magazine — A Deeper Dive into Aero Quality: Upcoming IA9100 Series Standards Updates (June 16, 2025), qualitymag.com
  • Quality Magazine — ISO 9001 in 2026: How AS9100 (IA9100), IATF 16949, NIST and CMMC Fit Together (January 8, 2026), qualitymag.com
  • Quality Magazine — Driving Change in Aerospace Quality Management (May 2026), qualitymag.com
  • QT9 Software — IA9100 is Coming: Key Updates for Aerospace and Defense (October 23, 2025), qt9software.com
  • Cavendish Scott — IA9100 is Coming: What the 2026 Updates Mean for Aerospace Quality (October 15, 2025), cavendishscott.com
  • BSI Group — Embracing Changes to IAQG Aerospace Standards, bsigroup.com
  • Paradygm — Latest Changes to the AS9100D Standard (Clause-Level IA9100 Analysis), paradygm.co
  • Assent Risk Management — AS9100 Is Becoming IA9100: What Aerospace Businesses Need to Know in 2026 (March 17, 2026), assentriskmanagement.co.uk
  • Intact Systems — IAQG Unveils OASIS Insights (March 31, 2025), intact-systems.com
  • My ISO Consultants — Updated Schedule and Upcoming Changes in IA9100 and ISO 9001 (March 1, 2025), myisoconsultants.com

#EN9100 #IA9100 #AS9100 #AerospaceQuality #QualityManagement #SupplierAudit #ISO9001 #IAQG #APQP #SKQC

Solar Energy Quality Standards: What Aerospace-Grade Auditing Brings to Photovoltaic Manufacturing

admin

698 GWp of solar photovoltaic capacity was added globally in 2025 — the largest single-year expansion of any electricity generation technology in recorded history. Cumulative installed capacity reached approximately 2,974 GW by the end of 2025, nearly triple the total installed before 2020. The IEA’s Global Energy Review 2026 confirmed that solar PV accounted for more than three-quarters of all new renewable capacity additions worldwide last year.

The manufacturing quality infrastructure has not scaled at the same rate.

In June 2025, Kiwa PVEL published the 11th edition of its PV Module Reliability Scorecard. The headline finding: 83% of module manufacturers and 59% of bills of materials tested had at least one test failure. This is up from 66% of manufacturers and 41% of BOMs in the 2024 Scorecard. The trend line across five scorecards shows the failure rate rising consistently, not fluctuating.

The solar industry is installing at aerospace speed. It is auditing at consumer electronics standards. That gap accrues over a 25-year performance guarantee horizon, not a 12-month warranty period.

1. What the Kiwa PVEL Data Actually Shows

The 2025 Scorecard failure data is specific enough to be actionable. The most common failure type was visual inspection major defects at 60% of all failures. Power degradation failures accounted for 21%. Module breakage during Mechanical Stress Sequence testing increased sharply — the BOM-level failure rate for MSS rose from just 7% in 2023 and 2024 to significantly higher levels in 2025. Forty percent of manufacturers experienced at least one MSS failure.

Junction box failures appear in every edition of the Scorecard. Kiwa PVEL has flagged junction box reliability in six consecutive annual reports. One third of manufacturers in 2025 had at least one junction box-related failure: 11% with covers falling off, 8% with loose cables or exposed wires, 8% with bypass diode failures.

The persistence of these failure modes across six annual reports is not a quality improvement story. It is a process control story. These are known, documented, repeatable failure modes that a mature process control system would have addressed. The fact that they continue at the same manufacturers across multiple years is evidence that corrective action processes are not producing sustained improvement.

I have spent 26 years working in aerospace and automotive quality, primarily in carbon fiber composite structures. The failure modes in the Kiwa PVEL Scorecard are not unfamiliar. What is unfamiliar is the industry’s tolerance for their persistence.

2. The Process Control Gap: Three Specific Areas

Lamination Process Control

Photovoltaic module lamination is a thermal bonding process with direct parallels to aerospace composite manufacturing. Deviations in temperature profile — ramp rate, dwell time, peak temperature — produce encapsulant cross-linking variations that are invisible at final visual inspection but measurable in long-term field performance.

In aerospace composite manufacturing, lamination process parameters are specified, validated against process capability studies, and monitored with continuous SPC. Cure cycle records are mandatory deliverables — not optional documentation. In solar manufacturing, lamination process monitoring varies significantly between manufacturers.

NREL has explicitly noted that IEC 61215 is designed to identify early failures in the first 5-10 years — it is insufficient for assessing long-term risk or establishing field performance degradation over a 25-year service life. The standard itself acknowledges its limitation.

Bill of Materials Traceability

In aerospace, every component traces to a raw material certificate. This traceability is the foundation of root cause analysis when a field failure occurs years after delivery. In solar manufacturing, cell-level traceability within a module is frequently incomplete. When a field failure occurs in year 15 of a 25-year performance guarantee, the ability to establish whether the failure is systematic depends on traceability records that may not exist.

Supplier Qualification Depth

In July 2025, the Chinese Ministry of Industry and Information Technology convened leading solar manufacturers — including LONGi, JA Solar, Trina, and Tongwei — explicitly urging them to end „disorderly low-price competition“ and improve product quality. The Chinese government identified product quality deterioration as a direct consequence of aggressive price competition in a market where module prices had fallen to approximately USD 0.10/Watt — a 45% reduction year-on-year. Quality is the first casualty of margin compression in a commodity market.

3. What Aerospace Audit Methodology Brings to Solar Manufacturing

Process FMEA at the component integration level. Systematic FMEA on lamination, stringing, and junction box assembly processes identifies failure modes that standard factory acceptance testing does not detect. The failure modes in the Kiwa PVEL Scorecard are exactly the failure modes that a well-executed process FMEA would capture and address.

Statistical Process Control on key process parameters. Cell efficiency, Voc, Isc, and encapsulant cure temperature are measurable in-process. The data exists at most manufacturing facilities. The systematic use of that data for process control with control limits and trend analysis is less consistently implemented.

Supplier qualification with process audit depth. Material qualification in solar manufacturing typically relies on type certification and incoming inspection. An aerospace-style supplier qualification adds process audit — examining the actual manufacturing process, the process parameter controls, and the change management practices of the cell, encapsulant, and junction box supplier.

3 Concrete Actions

1. If you are procuring solar modules for utility-scale deployment under 20+ year performance guarantees, request Kiwa PVEL PQP test data for the specific BOM you are procuring — not just the manufacturer’s Top Performer status. Top Performer status does not mean every BOM from that manufacturer performs equivalently.

2. For solar module manufacturers: commission a process FMEA on your lamination and junction box assembly processes using AIAG-VDA FMEA methodology. The failure modes appearing in six consecutive Kiwa PVEL Scorecards are your starting point.

3. For EPC contractors and asset owners: specify cell-level traceability and lamination process record retention as contractual requirements in your module procurement agreements. This requirement is absent from IEC 61215 — it will not be enforced unless you enforce it.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IEA — Global Energy Review 2026: Technology Solar PV and Wind (May 2026)
  • Kiwa PVEL — 2025 PV Module Reliability Scorecard, 11th Edition (June 2025)
  • TaiYang News — Test Failures Surge in Kiwa PVEL’s 2025 Module Reliability Scorecard (June 2025)
  • NREL — IEC 61215 Qualification Tests vs Outdoor Performance
  • PV Magazine — Solar approaches 3 TW, but the industry faces new challenges (May 2026)

#SolarEnergy #PhotovoltaicQuality #RenewableEnergy #QualityManagement #ProcessControl #SupplierAudit #IEC61215 #SKQC

IATF 16949 vs. EN 9100: Same Foundation, Different Universe

IATF 16949 vs. EN 9100: Same Foundation, Different Universe

admin

🔍 IATF 16949 vs. EN 9100: Same Foundation, Different Universe

Both standards are built on ISO 9001:2015. Both follow a plan-do-check-act structure with near-identical section numbering. That is where practical overlap ends.

In January 2025, IATF 16949 entered its most significant audit scheme revision in nearly a decade: Rules 6th Edition replaced employee-count-based audit days with a Risk-Based Audit Duration (RBAD) model and capped surveillance visits at 2 per 3-year certification cycle. Simultaneously, the IAQG is retiring the AS9100 designation entirely — the next version will be called IA9100, for International Aerospace — aligned to ISO 9001:2026, expected for publication in September 2026. Two parallel revision cycles. One ISO 9001 baseline forcing both frameworks forward at the same time.

For quality professionals operating across aviation and automotive, or advising DACH manufacturers whose suppliers hold one or both certifications, the differences are not theoretical. They are audit findings.

But let me be direct: treating IATF 16949 and EN 9100 as interchangeable credentials is a root cause, not a qualification. The risk tolerance, the required tools, the documentation depth, and the incoming requirements under IA9100 differ in ways that will show up on your next audit report.

1. The Philosophy Gap: Safety-Critical vs. Cost-Efficient Reliability

EN 9100 / AS9100D — and the incoming IA9100 — operates under a zero-defect-tolerance philosophy rooted in a hard engineering reality: a fastener on a commercial aircraft fuselage that fails at altitude is not a warranty claim. This shapes everything from how safety-critical characteristics are identified at design stage, to configuration management obligations, to traceability requirements that extend to raw material lot level. The standard expects organizations to demonstrate that failure modes have been considered and controlled before the first part ships, not after the first defect is reported.

IATF 16949 operates under a different constraint. Automotive production at volume — think a modern assembly line running 60 vehicles per hour — cannot carry the cost structure of aerospace traceability on every fastener. The standard instead prioritizes defect prevention at high throughput: statistical process control, error-proofing (Poka-Yoke), measurement system analysis calibrated to production process capability, and PPAP (Production Part Approval Process) that validates the production system against customer requirements before serial production launch. The question IATF 16949 asks is: can this process reliably produce conforming parts at rate? The question EN 9100 asks is: can this organization prove that every delivered part is what the design record says it is?

Neither framework is more rigorous than the other. They are calibrated to different risk profiles and different consequence scales. The confusion arises when organizations assume that holding one certification prepares them for the other.

2. The Technical Divergence: What Each Standard Mandates That the Other Does Not

Three EN 9100 / AS9100D requirements have no direct equivalent in IATF 16949:

Configuration management (AS9100D Section 8.1.2) requires documented configuration baselines, formal change control processes, and product traceability throughout the full lifecycle. This is not a generic document control requirement — it is a structured engineering discipline with defined records and a continuous audit trail from design release through end-of-life.

First Article Inspection (FAI) per AS9102 mandates a documented inspection against the full design record for every new or modified part. The FAI must address all drawing characteristics via a balloon drawing, with measured data, functional test results, and material certifications captured in a single package. IATF 16949 has PPAP — overlapping intent, different scope, different execution.

Key Characteristics (KCs) and safety-critical feature controls must be explicitly identified, linked to appropriate risk mitigation, and — under the incoming IA9100 — connected to the organization’s Safety Management System (SMS). An AS9100D auditor will ask to see how KCs are identified, controlled, and monitored in production. An IATF 16949 auditor will not.

Three IATF 16949 requirements with no direct equivalent in EN 9100:

Total Productive Maintenance (TPM) is a required system under IATF 16949 Section 8.5.1.5. Organizations must demonstrate documented OEE targets, planned maintenance intervals, and structured predictive maintenance programs. EN 9100 requires equipment control, but not at this level of operational discipline.

Production scheduling and capacity analysis (IATF 16949 Section 8.1.1) requires suppliers to demonstrate that schedules are achievable and that capacity constraints are actively managed. This requirement is driven by just-in-time automotive production realities — automotive OEMs expect their suppliers to know their own capacity limits before a line stop occurs.

AIAG Core Tools — APQP (Advanced Product Quality Planning), PPAP, FMEA (aligned to the AIAG-VDA FMEA Handbook, 1st Edition 2019), MSA (AIAG MSA Reference Manual, 4th Edition), and SPC — are referenced as required methodologies throughout IATF 16949, not optional references. An IATF 16949 auditor will ask to see your MSA study results and SPC control charts as a default. An EN 9100 auditor will not — unless your aerospace customer has flowed down AS9145 requirements via contract.

3. The 2026 Double Revision: ISO 9001:2026 Puts Both Frameworks in Motion Simultaneously

ISO 9001:2026 is expected for publication in September 2026. This triggers mandatory revision cycles for both sector standards.

For IATF 16949: The standard itself remains at the 2016 version until the next revision publishes, expected 12–18 months after ISO 9001:2026 — placing it in 2027 or early 2028. Rules 6th Edition already restructured the audit scheme: RBAD replaced the employee-count model on January 1, 2025. Surveillance audits are now capped at 2 visits per 3-year cycle with 12-monthly intervals required. The uniform 15% corporate audit day reduction replaced the previous 20–40% variable range. Certified organizations that have not reviewed their audit contracts against these rules are operating on an outdated basis.

For EN 9100 / IA9100: The IAQG is renaming the standard from AS9100 to IA9100 — International Aerospace — reflecting global coordination across the Americas, Europe, and Asia Pacific regions. IA9100 is expected in late 2026. The formal transition window is 2–3 years from publication, placing the compliance deadline between late 2028 and late 2029. The new requirements that do not exist in AS9100D include: mandatory cybersecurity programs integrated into the quality risk plan (organizations must evaluate cyber threats on ERP systems, remote access tools, and production data flows, and deploy documented access controls and recovery plans), ethics and quality culture requirements extending from top management to the shop floor, human factors analysis in nonconformance root cause investigations (fatigue, mental workload), and strengthened sub-tier supplier controls beyond Tier-1 relationships.

Organizations holding AS9100D / EN 9100:2018 certification today should not assume their current gap analysis will remain valid when the IA9100 final text publishes. The cybersecurity requirement alone requires process design, documented programs, and evidence of implementation — not a gap assessment performed two weeks before the transition audit.

3 Concrete Actions

1. Map your standard scope against your product families before your next internal audit. If you produce for both aviation and automotive customers, confirm that every procedure references the correct standard for that product line. A TPM program written to satisfy IATF 16949 Section 8.5.1.5 is not evidence for AS9100D Section 8.5.1 — the requirements diverge at the implementation level. Procedure scope confusion is a consistent source of major non-conformances on dual-certified sites.

2. For EN 9100 / AS9100D certified organizations: begin your IA9100 readiness assessment now, not when the standard publishes. The cybersecurity integration requirement and the human factors root cause analysis obligation are not minor document additions — they require new processes, trained personnel, and implementation evidence. Starting 18 months before the transition deadline is minimum lead time, not early action.

3. For IATF 16949 certified organizations: verify your audit contract and RBAD calculation with your certification body. If your current contract still specifies 6-monthly or 9-monthly surveillance intervals, it is non-compliant with the January 2025 Rules 6th Edition requirement for 12-monthly intervals. The shift from employee-count to risk-based audit days also changes the number of billable audit days — review the calculation before your next recertification cycle.

The Bigger Picture

ISO 9001:2026, the next IATF 16949 revision, and IA9100 are all arriving within the same 24-month window. This is not coincidence — it is the structural consequence of how sector standards are built. ISO 9001 is the foundation; IATF 16949 and EN 9100 extend it with industry-specific requirements. When the foundation revises, both sector standards must follow.

For organizations in aviation or automotive quality, 2026 and 2027 will be dominated by transition planning. The organizations that treat this as a documentation update will struggle in audit. The organizations that use the revision cycle to redesign their quality systems around the new requirements — particularly IA9100’s cybersecurity and sub-tier supplier control additions — will build measurably stronger frameworks.

26 years working across aviation, automotive, and regulated industries tells me the following: standards transitions are where the gap between organizations that understand their QMS and organizations that maintain their QMS becomes visible. The window to close that gap is open now. After the first IA9100 transition audits begin, it becomes remediation.

Request a Technical Consultation →

Sources

Hashtags

#AviationQuality #IATF16949 #EN9100 #AS9100 #IA9100 #QualityManagement #SupplierQuality #ISO9001 #AerospaceQuality #AutomotiveQuality #IAQG #AIAG #QMS #SecondPartyAudit #SKQC

Raw Material Prices in 2026: What Geopolitical Shifts Mean for Your Supplier Quality

admin

Titanium sponge in the USA reached USD 3,081 per metric ton in June 2025 — compared to USD 1,590/MT in China during the same period. That price gap is not a market anomaly. It is the measurable cost of geopolitical decoupling, and it is now embedded in the cost structure of every Western aerospace supplier who cannot source from Russia or China. For quality managers, the material price is the headline. The risk underneath it is what matters.

Three raw material stories are running simultaneously in 2026. Each one is creating a different set of quality risks in the supplier base. None of them will show up in a standard supplier scorecard.

1. Titanium: The Decoupling That Cannot Be Reversed Quickly

VSMPO-AVISMA — Russia’s integrated titanium producer — historically supplied 25-30% of the global aerospace-grade titanium market. Boeing halted Russian imports in March 2022. Airbus followed, more slowly. Ukraine’s Zaporizhzhia Titanium-Magnesium Plant, which previously supplied feedstock to Russian smelters, has been out of operation since the invasion with no clear reopening timeline.

The structural consequence: new aerospace-grade titanium qualification from alternative sources — Japan, Kazakhstan, the U.S. — requires multi-year certification cycles under FAA, EASA, and OEM material standards. ATI Inc. opened a new titanium alloy sheet production facility in Pageland, South Carolina in June 2025. It is a meaningful investment. It is not a 2026 solution at scale. As Nils Backeberg from Project Blue stated: „US sponge production revival and increasing the scale of Indian production are strategic, long-term options, not 2026 solutions.“

For quality managers, the titanium situation creates three specific risks that a standard audit does not address:

Unauthorized material substitution under cost pressure. When aerospace-grade titanium from qualified sources is constrained and expensive, suppliers face margin pressure that can lead to substitution with nominally equivalent but uncertified alternatives. In aerospace, this is a direct airworthiness risk. The substitution frequently goes undocumented and undetected until a deviation surfaces in production or in the field. An FAI or PPAP completed with one material source does not cover a subsequent substitution, regardless of nominal material equivalency.

Sub-tier sourcing changes that bypass your approved supplier list. Your Tier-1 supplier may have qualified sources. Their Tier-2 material supplier may not. Geopolitical disruptions force mid-tier sourcing decisions that are made quickly, often without formal change notification. The approved supplier list you audited against six months ago may not reflect current sourcing reality.

Lead time extension creating schedule pressure that erodes process margins. Longer lead times from qualified titanium sources mean suppliers are building with tighter inventory buffers. Schedule pressure consistently correlates with reduced inspection frequency, deferred maintenance on critical equipment, and operator decisions that fall outside the process window defined in the approved quality plan.

2. Rare Earths: China’s Export Controls Are a Quality System Event

On April 4, 2025, China’s Ministry of Commerce introduced export licensing requirements for seven medium and heavy rare earth elements: samarium, gadolinium, terbium, dysprosium, lutetium, scandium, and yttrium. China controls approximately 85-90% of global rare earth refining capacity and more than 90% of high-performance permanent magnet production.

The quality implications are already visible in production. Yttrium — essential for aeroengine thermal barrier coatings — saw exports from China to the United States collapse from 333 tons in the eight months before April 2025 to 17 tons in the eight months after. Aviation Week reported in April 2026 that U.S. avionics, actuator, and aeroengine manufacturers are experiencing procurement delays, longer lead times, higher costs, and growing schedule risk in both new production and aftermarket spares.

The October 2025 escalation went further: China introduced extraterritorial controls requiring export licenses for foreign-made products containing 0.1% or more of Chinese-origin rare earths. This applies globally. Any European aerospace supplier whose process uses Chinese-origin rare earth inputs, at any tier of the value chain, is now subject to Chinese licensing requirements.

Three concrete checks worth making in your next supplier audit:

First, ask your suppliers to identify which of their process inputs contain rare earth elements and whether those elements are sourced from Chinese-controlled supply chains. The answer „we don’t know“ is itself an audit finding.

Second, verify whether your suppliers have reviewed their change notification obligations in light of potential sourcing shifts. If a rare earth material shortage forces a process change, that is a formal customer notification requirement under EN 9100 Section 8.1.2 and IATF 16949 Section 8.3.6.

Third, assess whether force majeure clauses in your supplier contracts actually cover government-imposed export restrictions. Legal advisors across Europe noted in 2025 that this coverage cannot be assumed.

3. Carbon Fiber: Price Stability Masking Process Instability

Carbon fiber prices in Germany reached EUR 33.8/kg in December 2025. The stability is regional. For aerospace and automotive composite suppliers, the real issue is the material qualification regime. Aerospace-grade carbon fiber requires OEM-qualified material specifications that cannot be transferred between suppliers without requalification taking 12-24 months. Suppliers under cost pressure may rationalize that „equivalent“ material is acceptable without understanding that equivalency in aerospace is defined by the approved materials list, not by specification similarity.

What This Means for Your Audit Programme

Risk-based audit planning in 2026 needs to explicitly address material sourcing stability. For each critical supplier, the questions worth adding to your audit agenda: Has the supplier experienced any raw material sourcing changes in the past 12 months that were not formally notified? Has the supplier assessed their exposure to geopolitical supply risks and incorporated that into their risk register? Does the emergency response plan address material substitution scenarios with a customer notification requirement before any unapproved substitution occurs?

3 Concrete Actions

1. Add a raw material sourcing review to your next supplier audit for any supplier working with titanium, rare earth-containing materials, or aerospace-grade composites. Request documentation of current approved sources, evidence of any sourcing changes in the past 12 months, and their sub-tier visibility process. An undocumented sourcing change at Tier-2 level is a Tier-1 quality system finding.

2. Review your supplier change notification requirements and verify that they explicitly cover material sourcing changes — not just process or design changes. Many quality agreements were written before geopolitical raw material risk was a routine operational concern.

3. For organizations with European suppliers using rare earth-containing materials: initiate a conversation about exposure to Chinese export licensing requirements under the April 2025 and October 2025 MOFCOM controls. CSIS analysts noted explicitly that China has demonstrated it is not a reliable export partner during periods of geopolitical tension.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IMARC Group — Titanium Price Trend, Index and Forecast 2025: USD 3,081/MT USA
  • AeroTime — Global titanium supply squeeze: Who controls the market? (October 2025)
  • CSIS — Rare Earth Export Restrictions One Year Later (May 2026)
  • Aviation Week — China’s Rare Earth Leverage Is Aerospace’s Latest Constraint (April 2026)
  • Mayer Brown — PRC Announces New Export Controls on Rare Earth and Battery Materials (October 2025)
  • IMARC Group — Carbon Fibre Price Trend, Index, Chart 2026

#SupplierQuality #RawMaterials #GeopoliticalRisk #QualityManagement #AerospaceQuality #TitaniumSupply #RareEarths #SKQC

independent quality consultant aviation audit documentation whistleblower

„What a Whistleblower Case in Aviation Taught Me About the Value of Independence“

admin

🔍 Sometimes the Most Important Quality Tool Is Someone Who Has Nothing to Lose by Telling the Truth.

In my 26 years in aviation and automotive quality management, some of the most consequential work I have done has not been in audit rooms or supplier development meetings. It has been in situations where an organization needed someone with technical authority, no internal political stake, and the professional backing to document what others already knew but could not formally say.

Whistleblower situations in aviation are more common than the industry publicly acknowledges. They arise when a supplier documents a non-conformance that an OEM does not want to accept. They arise when a process deviation is known internally but not reported because of schedule pressure. They arise when an incoming inspection finding is overridden without proper engineering disposition — and someone in the organization recognizes that the decision creates airworthiness risk.

In these situations, an independent quality consultant with no employment relationship to either party is not just useful. In some cases, they are the only professional who can document the situation with the technical credibility and legal independence that the circumstances require.

I have supported organizations in exactly these situations — in aviation, in automotive, and in renewable energy. My role has included technical documentation of non-conformances, independent audit findings, regulatory reporting support, and bridging the communication gap between a European parent organization and a U.S.-based operation where the concern originated.

This is not a common service offering. It requires:

→ Deep technical knowledge of the relevant quality standards (EN9100, IATF 16949, EASA Part-21/145) → Professional independence — no ongoing commercial relationship with the organization under review → The ability to document findings in a format that is legally defensible and regulatorily actionable → Cross-cultural competency — particularly when a European organization is trying to understand and respond to a situation at a U.S. facility

If your organization is facing a situation where internal quality processes have not produced a resolution — or where the stakes are high enough that an independent technical assessment is needed — I am available for that work.

📌 Independent quality assessment and whistleblower support — confidential, technically grounded, professionally documented. 👉 Contact Sascha Kauderer → skqc.org