AS9100 and ISO 9001 are closely related, but they are not interchangeable. ISO 9001 is the generic baseline quality management standard, while AS9100 is the aerospace-focused version that incorporates all of ISO 9001 plus additional, sector-specific requirements.
Core relationship
- ISO 9001: Generic Quality Management System (QMS) standard, applicable to any industry.
- AS9100: Aerospace QMS standard that includes ISO 9001 in full and adds extra requirements tailored to aviation, space, and defense.
If you are certified to AS9100 (current revision), you are effectively meeting ISO 9001 requirements plus additional aerospace expectations. However, how well this is realized in practice depends on your actual processes, implementation, and audit scope.
Key differences in requirements
AS9100 builds on ISO 9001 by tightening controls in areas that are critical for aerospace and other high-risk, regulated environments. Compared to ISO 9001 alone, AS9100 typically requires:
- Stronger risk and safety focus: More explicit requirements for risk-based thinking in design, production, and changes, including consideration of safety and reliability.
- Configuration management: Formal requirements to control configurations of products, documentation, software, and changes so that you always know exactly what was built and delivered.
- Product realization and design controls: Additional structure around planning, verification, validation, and design transfer into production, including design reviews and documented acceptance criteria.
- Special processes: Stricter control and qualification of processes where the output cannot be fully verified by subsequent inspection or testing (e.g., heat treatment, coating, certain NDT operations).
- Supplier control and flowdown: More demanding requirements for supplier approval, performance monitoring, and flowdown of requirements, including key characteristics and regulatory constraints.
- Traceability and product identification: More detailed expectations for identifying product, maintaining lot/batch/serial traceability, and keeping records long-term.
- Nonconformance and corrective action: Tighter expectations around containment, root cause, recurrence prevention, and reporting of nonconforming product, particularly when safety or airworthiness is affected.
- Human factors and awareness: Additional emphasis on human factors, ethics, and awareness of product safety and conformity responsibilities.
Impact on processes and systems
In a brownfield, mixed-system environment, the difference between ISO 9001 and AS9100 is usually less about new documents and more about how rigorously processes are defined, linked, and controlled across systems.
- Existing QMS / document control: ISO 9001-style procedures often exist, but AS9100 expects tighter alignment between engineering, production, inspection, and configuration records. Gaps commonly appear around change control and traceability.
- MES/ERP/PLM/QMS integration: AS9100 expectations for configuration management and traceability push more integration between PLM (design), ERP (BOMs, orders), MES (routing, execution) and QMS (deviations, CAPA). In many plants these are partially integrated or rely on manual bridges.
- Legacy data and records: Long equipment and product lifecycles mean historical records may be scattered across systems or paper. AS9100 expectations on traceability and retention can expose weaknesses in how legacy data is indexed and retrieved.
- Change management: Both standards require control of change, but AS9100 raises the bar on impact assessment (including safety, airworthiness, regulatory impacts) and proof that downstream operations and suppliers implemented the change.
Moving from ISO 9001 to AS9100 rarely means a greenfield system replacement. In regulated aerospace contexts, full system swaps are often slowed or blocked by qualification burden, downtime risk, and integration complexity. Most organizations incrementally tighten controls and integrations around their existing stack.
Certification considerations
- Scope: An AS9100 certificate applies only to the defined sites and activities in scope. Having an AS9100 certificate does not mean your entire enterprise or supply chain operates at that level.
- No compliance guarantees: Neither ISO 9001 nor AS9100 guarantees regulatory compliance, audit outcomes, or product safety. They provide a framework that must be interpreted and implemented effectively in your context.
- Audit depth: AS9100 audits typically probe deeper into technical processes (e.g., special process control, FAI, configuration management) than a generic ISO 9001 audit.
When ISO 9001 alone may be insufficient
For aerospace, defense, and space programs, ISO 9001 by itself is usually not accepted as adequate by primes or regulators. Common gaps when relying only on ISO 9001 include:
- Insufficient configuration and change control across design, NC programs, work instructions, and inspection plans.
- Inconsistent treatment of special processes and inadequate validation of critical outsourced processes.
- Limited or fragmented traceability that makes it difficult to reconstruct build history, concessions, and rework on a specific serial number.
- Less structured treatment of risk and product safety during design, process planning, and change.
Addressing these usually requires AS9100-style controls, whether or not you pursue formal AS9100 certification.
Practical takeaway for regulated manufacturing
- If you support aerospace customers, AS9100 (or at least implementation of its key practices) is often expected, even if some parts of your business operate under ISO 9001 only.
- If you already run ISO 9001, the main work is strengthening process integration, traceability, and risk controls rather than starting from scratch.
- System changes to meet AS9100 should follow rigorous change control and validation, especially where MES, PLM, ERP, or QMS are tightly coupled to production and configuration records.
