Glossary

Government source inspection

Government source inspection is government quality review or inspection performed at the supplier or production source.

Defense and Regulated Manufacturing Inspection and Sampling (AQL)

Government source inspection is an inspection, review, or witnessing activity performed by a government quality representative at the supplier, subcontractor, or production source before shipment or acceptance. It is commonly used in defense and aerospace manufacturing when contract terms or customer flowdowns require government involvement at the point of manufacture.

In practice, government source inspection may include reviewing records, checking product characteristics, witnessing tests, verifying configuration or identification, or confirming that required inspection steps have been completed. The specific scope depends on the contract, purchase order, quality clauses, and applicable customer requirements.

Government source inspection does not replace the supplier’s responsibility for product conformity, inspection records, first article inspection evidence, configuration control, or nonconformance handling. It also should not be confused with receiving inspection, which occurs after delivery, or with general source inspection performed by a customer or third-party representative rather than a government representative.

You are not required to implement all 93 Annex A controls as-is. ISO/IEC 27001 requires you to perform a risk assessment, decide which Annex A controls are applicable and proportionate, justify any exclusions, and document this in the Statement of Applicability. In regulated, brownfield manufacturing environments, feasibility, integration, and validation constraints often drive a risk-based, prioritized adoption rather than a blanket rollout.

What are 5 example Key Performance Indicators (KPIs) for regulated manufacturing?

In regulated manufacturing, it is more useful to think in KPI categories than a universal list of five. Typical examples span safety, quality, delivery, cost, and asset performance. Specific definitions, calculations, and targets must align to your processes, data quality, and validation approach, and should coexist with existing MES/ERP/QMS metrics without creating conflicting "sources of truth."

How often should we review our Annex A control set?

Annex A controls should not be static. In most regulated manufacturing environments, a formal review at least annually is a baseline, but many plants benefit from a risk-based cadence: annual comprehensive review, plus interim reviews after major changes, incidents, audits, or new regulatory/customer requirements. Frequency must align with your risk profile, change rate, and governance maturity.

If I comply with NIST 800-171, am I automatically aligned with NIST 800-53?

No. NIST SP 800-171 is derived from NIST SP 800-53 but is a reduced, tailored control set focused on protecting CUI in non-federal systems. Being compliant with 800-171 does not automatically mean full alignment with 800-53, especially for control families and control enhancements that were never mapped into 800-171. Any mapping is partial and must be documented and validated.

Related Glossary

aerospace manufacturing and defense industry

The aerospace manufacturing and defense industry designs and produces aircraft, spacecraft, and military systems under strict regulation.

EASA Part 21

EASA Part 21 defines European aviation requirements for design, production, certification, and airworthiness approvals.