AS9100 and ISO 9001 are closely related, but they are not interchangeable. AS9100 is built on ISO 9001 and adds aerospace and defense specific requirements. In practice, an AS9100-compliant QMS must meet all ISO 9001 requirements plus additional clauses tailored to high-risk, highly regulated aerospace production and services.
Core relationship
- ISO 9001: A generic quality management system (QMS) standard that can apply to any industry. It focuses on customer satisfaction, process control, risk-based thinking, and continual improvement.
- AS9100: An aerospace QMS standard developed by the International Aerospace Quality Group (IAQG). It includes all ISO 9001 text and then adds or modifies requirements specific to aviation, space, and defense.
If you implement AS9100 properly, you are effectively implementing ISO 9001 plus aerospace-specific extensions. However, having an ISO 9001-based system does not automatically mean you satisfy AS9100.
Key areas where AS9100 goes beyond ISO 9001
Exact details depend on the revision of the standards and your implementation, but typical AS9100 additions include:
- Product safety and airworthiness focus
AS9100 requires more explicit controls for product safety, reliability, and airworthiness throughout the lifecycle. This affects design transfer, manufacturing, maintenance, and sometimes end-of-life activities.
- Risk management and operational risk
ISO 9001 requires risk-based thinking at a high level. AS9100 goes deeper into structured risk management, including analysis of operational risks, mitigation plans, and monitoring of risk controls. This frequently ties into FMEA, PFMEA, and other formal risk tools, although these tools themselves are not mandated by name.
- Configuration management
AS9100 requires formal configuration management to control versions of designs, parts, software, documents, and records. This includes traceability between requirements, design, manufacturing data, inspection criteria, and delivered configuration. ISO 9001 expects document and change control, but configuration control in AS9100 is more rigorous and integrated.
- Special processes and validation
Aerospace work often depends on special processes (heat treatment, welding, NDT, coatings, composites) where outputs cannot be fully verified by inspection. AS9100 emphasizes validation, qualification, and periodic re-qualification of these processes, and tighter control of personnel qualifications and equipment.
- Traceability, records, and retention
AS9100 typically drives much stronger traceability requirements than ISO 9001:
- Lot and serial-level traceability for critical items.
- Linkage of materials, processes, inspections, and test results to individual parts or assemblies.
- Longer and more prescriptive record retention aligned with customer and regulatory expectations.
- Supplier control and flowdown
Both standards require supplier evaluation, but AS9100 is stricter about:
- Approval of special process suppliers.
- Flowdown of customer, regulatory, and AS-specific requirements to sub-tiers.
- Monitoring supplier performance with defined metrics and escalation.
- Handling counterfeit parts risk and ensuring authenticity of materials.
- Nonconformance control and corrective action
ISO 9001 requires nonconformance control and CAPA. AS9100 adds requirements around:
- Stricter review and authorization of use-as-is and repair dispositions, often with customer involvement.
- More detailed analysis of recurring nonconformities and systemic issues.
- Stronger expectations on root cause, corrective actions, and effectiveness verification.
- Awareness of human factors and ethics
AS9100 places more emphasis on human factors, ethics, and reporting of safety or quality concerns without retaliation, reflecting the critical safety implications of aerospace failures.
Implications for systems and processes in a brownfield environment
In regulated aerospace manufacturing, the difference between ISO 9001 and AS9100 is less about having different software and more about how tightly processes, data, and records are controlled and connected:
- Existing MES/ERP/PLM/QMS stacks: Most brownfield plants layer AS9100 controls onto legacy systems rather than replacing them. You often end up with additional workflows, fields, approvals, and reports in existing tools to meet AS9100 requirements.
- Traceability and genealogy: AS9100-level traceability can exceed what a basic ISO 9001 system typically tracks. Plants frequently add integrations, custom fields, or bolt-on solutions for serial/lot tracking, special process records, and document-to-part linkages.
- Configuration and document control: Moving from ISO 9001 to AS9100 usually increases the burden on engineering change control, build records, and the linkage between design, planning, and shop floor execution. PLM and document control practices need to support this end-to-end configuration story.
- Validation and change management: In aerospace, system changes (e.g., to MES, QMS, or PLM) must be validated and controlled. Attempting full system replacement to “achieve AS9100” is risky and often unnecessary. Most organizations extend and harden existing systems, because requalification, integration complexity, and downtime risk make rip-and-replace difficult to justify.
Do you need AS9100 if you already follow ISO 9001?
It depends on your business and customers:
- If you only serve non-aerospace customers, ISO 9001 may be sufficient.
- If you serve or plan to serve aerospace, defense, or space customers, they typically expect AS9100 alignment and may contractually require it. Some customers also expect certification from a recognized body, but that is a commercial and contractual issue, not something the standard itself can guarantee.
In many aerospace environments, operating at ISO 9001 level without the AS9100 extensions would create gaps in risk control, traceability, and supplier oversight. How large those gaps are depends on your current processes and how rigorously you already manage safety-critical work.
Summary
ISO 9001 is the baseline, cross-industry quality management standard. AS9100 incorporates that baseline and adds aerospace-specific requirements for risk, safety, configuration management, special processes, supplier controls, and traceability. Closing the gap is less about a new software stack and more about operational discipline, integrated records, and change-controlled process improvements across existing systems.
