Aerospace Quality Management: Why Certified Firms Still Fail

In early 2024, the FAA ran a six-week audit of Boeing’s 737 Max production line, one of the most scrutinized aerospace quality management programs on the planet. Boeing, holder of more aerospace certifications than most companies will ever see, failed 33 of 89 product audits with 97 documented instances of non-compliance. Mechanics at Spirit AeroSystems, Boeing’s largest fuselage supplier, used dish soap as a lubricant and a hotel key card to check door seals. Neither action appeared in any production order.

That is the paradox at the center of aerospace quality management: the industry with the most rigorous quality standards on earth still produces catastrophic failures. Not because the standards are weak, but because compliance on paper and quality in practice are two different things.

If you manage a quality program in aviation, space, or defense (or you are deciding whether to invest in one), this piece covers what the standards actually require in 2026, what they cost, where they break down, and what the IA9100 transition means for your next three years.

What Aerospace Quality Management Actually Means

Aerospace quality management is the system of standards, processes, and oversight that ensures products and services in aviation, space, and defense meet safety, reliability, and regulatory requirements throughout their lifecycle. It is governed primarily by the AS9100 family of standards, published by the International Aerospace Quality Group (IAQG) through SAE International.

The foundation is ISO 9001:2015, the generic quality management system used across industries. AS9100 takes every ISO 9001 requirement and layers on aerospace-specific mandates: configuration management, product safety, operational risk management, full traceability, and tighter supplier controls. If ISO 9001 is the baseline for any manufacturing operation, AS9100 is what happens when a quality failure can bring down an aircraft.

The scale is worth pausing on. As of May 2025, 29,224 companies worldwide held AS9100-series certifications, up from about 24,781 in mid-2023. The U.S. alone accounts for 10,205 certifications, roughly 41% of the global total. And here is the part most people miss: 96% of those certified firms have fewer than 500 employees, with 43% operating with 25 people or fewer.

This is not a Boeing-and-Airbus story. Aerospace quality management is overwhelmingly a small-business compliance reality, played out in machine shops, MRO bays, and parts distribution warehouses across 90+ countries.

The Standards Stack: AS9100, AS9110, AS9120, and the Rest

The AS9100 family is not one standard. It is a system of interlocking standards, each covering a different segment of the aerospace supply chain.

AS9100D, revised September 20, 2016, is the core. It covers organizations involved in design, production, installation, and servicing of aerospace products. Boeing, Lockheed Martin, Airbus, Raytheon, Northrop Grumman, the FAA, NASA, and the U.S. Department of Defense all require it from their supply chain. The “D” revision aligned the standard with ISO 9001:2015 and added explicit clauses for operational risk management (Clause 8.1.1), identification and traceability (Clause 8.5.2), product safety, and configuration management.

AS9110C covers maintenance, repair, and overhaul (MRO) organizations, from large commercial shops to small military maintenance units. With Deloitte forecasting global commercial MRO demand growing at 3.2% CAGR through 2035 and the engine segment reaching 53% of total MRO demand, AS9110 is becoming a harder requirement for anyone servicing powerplants, airframes, or avionics.

AS9120B targets distributors and stockists who handle aerospace parts but do not manufacture them. It strips out design and production clauses, replacing them with distribution-specific controls around part authentication, traceability, and storage conditions.

Beyond these three, the ecosystem includes several specialized standards:

• AS9101G defines how QMS audits are conducted and reported across aviation, space, and defense. It is the auditor’s operating manual.
• AS9145 covers Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP), establishing a phased quality methodology from concept through production and use.
• Nadcap accredits special processes (heat treating, welding, NDT, chemical processing, composite layup) that cannot be verified by post-production inspection alone. Nadcap is mandatory for suppliers to Airbus, Boeing, Honeywell, and Rolls-Royce.
• AS5553, AS6081, and AS6496 form the counterfeit parts avoidance stack. A 2012 U.S. Senate Armed Services Committee investigation found over 1,800 cases involving more than one million suspect counterfeit electronic parts in the defense supply chain. The problem is still severe: industry estimates put counterfeit content at roughly 15% of spare electronic parts purchased by the Pentagon. These standards, backed by DFARS 252.246-7007 and 252.246-7008, make counterfeit avoidance a contractual obligation.

In total, the IAQG maintains 26 published standards. No single company implements all of them. But every organization in the aerospace supply chain touches at least two or three.

What Certification Actually Costs (and What Not Having It Costs More)

For a company with about 100 employees, total AS9100 implementation typically lands near $40,000, split roughly between consultant fees and certification body costs. The timeline for a focused small business is about four months from gap assessment to certificate. Certification body audit days run $1,700 to $2,000 each, with the number of days scaled to headcount and process complexity. Stage 1 (readiness review) takes one to two days. Stage 2 is the full certification audit.

After that, you are on a three-year cycle: annual surveillance audits to confirm ongoing compliance, then a full recertification. Let the certificate lapse and you are off the approved supplier list for every OEM and prime contractor that matters.

The cost conversation usually focuses on what certification costs to get. The more consequential number is what it costs not to have. AS9100 is a contract requirement for Boeing, Lockheed Martin, Raytheon, Northrop Grumman, and virtually every defense prime contractor. For a small machine shop trying to break into the aerospace supply chain, the $40,000 and four months are the entrance fee. Without them, you do not bid.

The certification services market reflects this pressure. QY Research projects it will grow from $6.27 billion in 2024 to $15.13 billion by 2031 at a 13.6% CAGR, driven by new space-launch companies, eVTOL entrants, and the coming IA9100 recertification wave that will hit tens of thousands of firms simultaneously.

When Standards Meet the Factory Floor: What Boeing Exposed

On January 5, 2024, Alaska Airlines Flight 1282 lost a door plug six minutes after takeoff while climbing through 15,000 feet with 177 people on board. Four bolts that should have held that plug in place were missing. They had been missing since Boeing delivered the aircraft in October 2023.

The NTSB investigation, concluded June 24, 2025, traced the cause: a 24-person rework team had removed and reinstalled the door plug panel, but the only member with prior experience doing so was on vacation at the time. Nobody documented the removal. Nobody flagged the missing bolts. NTSB chair Jennifer Homendy called the missing documentation “a single point of failure.”

This is exactly the scenario AS9100 Clause 8.5.2 (Identification and Traceability) and Clause 8.5.1 (Control of Production) exist to prevent. It happened anyway, at the company that probably holds more aerospace quality certifications than any other single entity on earth.

The subsequent FAA audit made the problem look systemic. Spirit AeroSystems failed 7 of 13 product audits. Auditors found mechanics using Dawn dish soap as a lubricant and a hotel key card to test door seals, with neither practice appearing in any production record.

Boeing’s response was structural. By December 2025, Boeing completed its acquisition of Spirit AeroSystems, pulling its most safety-critical Tier 1 supplier in-house to exercise direct control under AS9100 Clause 8.4.2. The FAA imposed a production cap of 38 aircraft per month and fundamentally restructured its oversight posture.

The lesson for every quality manager in the supply chain: AS9100 certification is necessary. It is not sufficient. The gap between documented procedures and actual shopfloor behavior is where quality failures live. Closing it requires something paper-based systems were never designed to do: continuous, real-time visibility into what is actually happening on the production floor and across the supply chain.

IA9100: The Biggest Revision in a Decade

The next major revision will not even be called AS9100. It will be IA9100, reflecting the IAQG’s move to an “International Aerospace” naming convention. The final draft is expected in late 2026, with a transition window of two to three years. Most organizations will need to recertify by 2028 or 2029.

Three additions are drawing the most attention from quality teams I talk to:

IA9100 is expected to embed cybersecurity protocols directly into the QMS framework, not as a parallel IT exercise. For organizations running connected manufacturing systems, IoT sensors, or cloud-based document control, this expands the audit scope into territory many quality teams have never owned.

Advanced Product Quality Planning (APQP), currently an optional layer via AS9145, is expected to be integrated into the core standard. That means phased quality planning from concept through production becomes a baseline certification requirement for the first time.

Sustainability and climate provisions will likely push environmental reporting into the QMS itself. OEMs are already publishing net-zero commitments; IA9100 is the mechanism that will push those commitments down to Tier 2 and Tier 3 suppliers, requiring carbon accounting capabilities tied to the quality audit cadence.

The practical concern is timing, not content. Industry consultants are already recommending that organizations start staging transition resources now. 29,000+ certified firms will all need to be re-audited during the same window, competing for a finite pool of qualified aerospace auditors. CVG Strategy projects the transition period extending to 2029, but firms that wait until 2028 will face the longest queues and highest auditor day rates.

If you are currently AS9100D certified, the action items are clear: audit your QMS platform against the IA9100 draft clauses, budget for recertification, and book auditor time early. If you are building a quality system for the first time, consider designing against IA9100 requirements from the start rather than certifying to AS9100D and immediately facing a transition.

Where AI and Real-Time Data Close the Quality Gap

The Boeing audit findings exposed a specific failure mode: work happened on the factory floor that never made it into the quality record. Bolts removed and not replaced. Unauthorized materials used. Door seals tested with improvised tools. The QMS existed. The data inside it did not match reality. This is precisely the gap that manufacturing execution systems for aerospace are built to close, tying every shopfloor action back to the quality record in real time.

This is the gap that AI and real-time monitoring are now being deployed to close. Achieving aerospace supply chain visibility at the asset level creates the continuous data foundation that quality management systems need to function as designed.

Boeing deployed a photo-driven AI tool on its Commercial Airplanes factory floors in early 2026 that lets inspectors photograph part numbers instead of entering them manually. The system uses OCR to eliminate transcription errors and creates an automatic audit trail. It is a direct response to the traceability failures that produced the Flight 1282 incident. These deployments are part of the wider shift toward a smart factory aerospace model. Lockheed Martin is running a parallel program, deploying AI for predictive health monitoring and decision-making across its programs.

The spending confirms the direction. U.S. aerospace and defense AI spending is projected to reach $5.8 billion by 2029, roughly 3.5 times the 2025 baseline. Agentic AI is expected in scaled deployments across the sector by 2026. QMS software vendors (Ideagen, ComplianceQuest, ETQ Reliance) are racing to add AI co-pilots for document classification, supplier surveillance, and CAPA root-cause analysis. This acceleration is part of the broader digital transformation in aerospace manufacturing reshaping quality management practices.

But AI is only as good as the data it ingests. For many aerospace operations, the weakest link is not the analysis. It is the data capture layer itself: knowing where assets are, what condition they are in, whether they moved through the correct process steps, and whether environmental conditions stayed within spec during transit and storage.

This is where IoT-driven asset tracking intersects directly with aerospace quality management. AS9100 Clause 8.5.2 requires that products, materials, and components be identifiable and traceable throughout the entire production and distribution process. Clause 8.1.1 requires operational risk management that assumes real-time awareness. Both clauses assume the data exists. In many operations, it does not, because the tracking infrastructure was designed for shipment-level visibility rather than asset-level lifecycle monitoring.

The distinction matters more than most quality teams realize. Shipment tracking tells you a crate arrived at the MRO facility. Asset tracking tells you which serialized components are inside it, how long they dwelled in transit, what temperatures they experienced, and whether they were routed through the correct handling process. One answers a logistics question. The other satisfies a quality clause.

This is the kind of problem we work on at Datanet. Our Thingfox T2 is DO-160 airfreight approved, and our asset tracking portfolio is built for environments where paper trails fail: ramp operations, MRO shops, container pools, cross-border freight. If you are building or upgrading a quality management system and the real-time data layer is missing, that is a conversation worth having.

Frequently Asked Questions

What is aerospace quality management?

Aerospace quality management is the framework of standards, processes, and audits that ensures aviation, space, and defense products meet safety, reliability, and regulatory requirements throughout their lifecycle. It is governed by the AS9100 family of standards, published by the IAQG through SAE International, built on ISO 9001:2015 with additional requirements for traceability, configuration management, product safety, operational risk management, and supplier control.

What is the difference between AS9100, AS9110, and AS9120?

AS9100 covers organizations that design, produce, and service aerospace products. AS9110 is tailored for maintenance, repair, and overhaul (MRO) organizations. AS9120 applies to distributors and stockists. All three build on ISO 9001:2015 but add requirements specific to each supply chain role. Most organizations only need certification to one of the three.

How much does AS9100 certification cost?

For a company with roughly 100 employees, total implementation costs (consultant plus certification body fees) commonly land near $40,000. Audit days run $1,700 to $2,000 each. The process takes approximately four months for a focused small business. Annual surveillance audits and full recertification every three years are required after initial certification.

What is IA9100 and when does it take effect?

IA9100 is the upcoming revision of AS9100, renamed under the IAQG’s “International Aerospace” convention. The final draft is expected in late 2026 with a two-to-three-year transition window, meaning most organizations will need to recertify by approximately 2029. Expected additions include cybersecurity protocols, APQP integration, and sustainability provisions.

Why do certified companies still have quality failures?

AS9100 certification verifies that a quality management system meets the standard’s requirements at the time of audit. It does not guarantee continuous compliance between audits. The 2024 Boeing and Spirit AeroSystems findings showed that traceability breakdowns, inadequate training, and undocumented shopfloor practices persist even in certified organizations. This is why the industry is shifting toward continuous, data-driven monitoring alongside periodic audit cycles.

How does IoT support aerospace quality requirements?

IoT devices provide real-time data on asset location, condition, and environmental exposure throughout the production and distribution lifecycle. This directly supports AS9100 Clause 8.5.2 (traceability) and Clause 8.1.1 (operational risk management) by replacing manual data entry with automated, continuous capture. DO-160-approved devices can operate in airfreight and aviation environments where conventional tracking methods are insufficient.