EN 9100 to IA9100: What Is Actually Changing for Supplier Quality Managers in 2026

Late 2026. That is the target publication date for IA9100 — the standard that replaces AS9100 Rev D and becomes the new certification baseline for aviation, space, and defense quality management systems globally. The IAQG confirmed the timeline: IA9100 aligns with ISO 9001:2026, expected September 2026, with a transition window of two to three years placing the compliance deadline between late 2028 and late 2029. Note: BSI Group has indicated that if ISO 9001:2026 is delayed, the new IA 9100 series may not be released until early 2027.

AS9100 Rev D was published in 2016. A decade of aerospace industry evolution — digitalization, geopolitical supply chain disruption, increasing cyber threats to manufacturing systems, and a documented workforce competency crisis — is being incorporated into the revision. The IAQG has published its Key Change Summary, and Quality Magazine described the transition as representing „a strategic modernization to address the realities of 21st-century aerospace challenges.“ That description is accurate in terms of intent. It understates the operational implications of the specific requirements being added.

1. The Rebranding: What „IA“ Means and Why It Matters Operationally

AS9100 was an American designation — AS for Aerospace Standard, a SAE International designation. The same standard was published regionally as EN 9100 in Europe and JISQ 9100 in Japan. The move to IA9100 — International Aerospace — consolidates them under a single global designation. As BSI Group noted in its official guidance: „Previously published standards, including the AS 9100 series, will transition from sector designations of AS, EN, SJAC or JISQ to the new singular IA designation at the time of revision. The aim is to significantly improve the efficiency of change control and translation.“

For European organizations currently certified to EN 9100:2018, the practical implication is that the transition audit to IA9100 will be conducted against a unified global standard with unified audit scheme requirements (IA9101) and unified auditor competency requirements. The current five certificate structures will be simplified to two — Single Site and Multiple Site — to drive simplicity and consistency in approach, according to BSI Group’s published guidance on the IAQG standards changes.

2. Four Substantive Changes That Require New Processes — Not Just Documents

Cybersecurity Integration into the QMS

Paradygm’s detailed clause analysis of IA9100 identified the specific addition at Clause 8.1: information security and data protection added as a new NOTE requirement, making cybersecurity risk assessment integration into the quality risk management process mandatory rather than advisory. Quality Magazine’s January 2026 analysis of the convergence between IA9100, IATF 16949:2027, and CMMC requirements was explicit: „Begin updating supplier quality agreements to anticipate cyber and export-control clauses“ and „Plan for two transition audits instead of one.“

Cavendish Scott’s analysis noted that under IA9100, „aerospace organizations aren’t just required to validate processes — they’re expected to predict and control outcomes,“ specifically in the context of digital systems and cybersecurity. The IAQG’s own Key Change Summary confirms: „Information security (e.g., cyber) and data protection“ as one of the six named areas being elevated in the revision.

The audit evidence that will be expected is not a policy document. It is governance structures, evidence of threat assessment covering ERP systems, CAD and quality data storage, remote access infrastructure, production monitoring systems, access control implementation, and incident response procedures linked to quality records.

Human Factors in Nonconformance Root Cause Analysis

Quality Magazine’s June 2025 deep-dive on IA9100 was specific: „The most personally transformative element of the upcoming revisions is arguably the formalization of quality culture and human factors within the QMS framework. Expectations will include: Clear leadership commitment to quality as a corporate value, demonstrated through behavior and resources — incorporating human factors, such as fatigue, into root cause investigations and providing employee well-being programs that support quality outcomes.“

QT9 Software’s interview with AS9100 consultant Mike Varney confirmed the direction: „Leadership will be tasked with demonstrating commitment to a culture of quality through behavior and resources, including incorporating human factors, such as fatigue, into root cause investigations.“ This is not a minor documentation change. A corrective action process that does not examine organizational conditions — time pressure, shift fatigue, work instruction ambiguity — will produce incomplete D5 root cause entries that an IA9100 auditor will challenge.

APQP Integration as a Required QMS Methodology

Cavendish Scott’s analysis was direct on this point: „In IA9100:2026, Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP) aren’t optional. They’re officially required tools, supported by IA9145 guidance.“ Paradygm’s clause-level analysis confirmed that Clause 8.1 now includes APQP as „one method for operational planning and control“ in the revised note structure — with Annex B providing the IA9145 linkage.

Quality Magazine noted: „Customers — particularly primes like Boeing, Airbus, and Lockheed Martin — are increasingly demanding APQP evidence during contract award and oversight activities.“ Assent Risk Management observed that „IA9100 more explicitly incorporates APQP principles, aligning the standard with AS9145 and improving launch discipline.“ For aerospace-only suppliers who have never systematically applied APQP, this is a process design requirement, not a documentation update.

Sub-Tier Supplier Controls

The IAQG Key Change Summary identifies „sub-tier supplier controls“ as one of six named areas of expansion. Cavendish Scott described the counterfeit parts prevention enhancement as aligned with „SAE AS5553 for counterfeit electronic parts and AS6174 for counterfeit mechanical parts.“ Quality Magazine noted that IA9100 „enhances measures“ addressing the proliferation of counterfeit parts as a safety, legal, and reputational risk. Organizations whose supplier quality programme focuses primarily on Tier-1 suppliers with limited visibility into Tier-2 and Tier-3 will need to extend their oversight model structurally.

3. The OASIS Transition Dimension

In parallel with the IA9100 content changes, the IAQG launched OASIS Insights in April 2025 — the first certification ecosystem globally to apply AI at scale to analyze audit findings data worldwide, according to Intact Systems. Starting April 1, 2025, certified suppliers automatically receive an OASIS Insights report following completion and publication of initial, recertification, or surveillance audits. Eric Jefferies, President of IAQG, stated: „OASIS Insights will transform how organizations showcase the value of audits and identify areas for improvement, ultimately driving continuous improvement in the aerospace industry.“

IAQG also introduced a dual-track approach for standards revision — incremental revisions between major revisions, potentially including quarterly or biannual updates for small changes — representing a significant shift from the traditional five-year update cycle. Organizations should anticipate that IA9100 is not a final state but the beginning of a more agile standards maintenance regime.

3 Concrete Actions

1. Conduct a gap analysis against the IAQG’s published Key Change Summary (available at iaqg.org) now — before the final IA9100 text publishes. The six named areas — product safety, information security, quality culture and ethics, APQP linkage, counterfeit parts, sub-tier supplier controls — are confirmed. The gap analysis conducted against coordination draft materials will be accurate enough to define preparation priorities. Organizations that wait for the final text to begin gap analysis will be starting 18 months behind competitors who started in 2025.

2. Review your certification body relationship and confirm their transition roadmap. BSI Group has published guidance noting that the 9104 series standards have already been through writing and approval, are being translated into seven languages, and will be ready in late 2025 with official training material and a published timeline for transition expected towards the end of 2026. Your certification body should have an equivalent roadmap. If they cannot articulate it, that is information worth acting on before your next recertification cycle.

3. Begin your cybersecurity assessment now — not when IA9100 publishes. The assessment needs to cover ERP systems, CAD and quality data storage, remote access infrastructure, and production monitoring systems. It needs to produce documented findings and a remediation plan with implementation evidence. A policy document referencing ISO 27001 without evidence of implementation will not satisfy the IA9100 auditor at Clause 8.1.

👉 Request a Technical Consultation → www.skqc.org

Sources

  • IAQG — IA9100 Key Change Summary, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-Clause-View.pdf
  • IAQG — IA9100 Key Changes System View, iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-System-View.pdf
  • Quality Magazine — A Deeper Dive into Aero Quality: Upcoming IA9100 Series Standards Updates (June 16, 2025), qualitymag.com
  • Quality Magazine — ISO 9001 in 2026: How AS9100 (IA9100), IATF 16949, NIST and CMMC Fit Together (January 8, 2026), qualitymag.com
  • Quality Magazine — Driving Change in Aerospace Quality Management (May 2026), qualitymag.com
  • QT9 Software — IA9100 is Coming: Key Updates for Aerospace and Defense (October 23, 2025), qt9software.com
  • Cavendish Scott — IA9100 is Coming: What the 2026 Updates Mean for Aerospace Quality (October 15, 2025), cavendishscott.com
  • BSI Group — Embracing Changes to IAQG Aerospace Standards, bsigroup.com
  • Paradygm — Latest Changes to the AS9100D Standard (Clause-Level IA9100 Analysis), paradygm.co
  • Assent Risk Management — AS9100 Is Becoming IA9100: What Aerospace Businesses Need to Know in 2026 (March 17, 2026), assentriskmanagement.co.uk
  • Intact Systems — IAQG Unveils OASIS Insights (March 31, 2025), intact-systems.com
  • My ISO Consultants — Updated Schedule and Upcoming Changes in IA9100 and ISO 9001 (March 1, 2025), myisoconsultants.com

#EN9100 #IA9100 #AS9100 #AerospaceQuality #QualityManagement #SupplierAudit #ISO9001 #IAQG #APQP #SKQC

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert