AS9100D Clauses That Directly Impact CNC Operations
AS9100D has 10 main clauses, but not all of them require action from the machine shop floor. The following clauses have direct, day-to-day implications for CNC machining operations:
| Clause | Title | CNC Impact | Required Evidence |
|---|---|---|---|
| 7.1.5 | Monitoring & Measuring | CMM calibration, gage control | Calibration certificates, R&R studies |
| 7.5 | Documented Information | Program version control, setup sheets | Revision logs, controlled copies |
| 8.1.1 | Operational Risk Management | Process FMEA for critical operations | FMEA documents, mitigation actions |
| 8.4 | External Providers | Approved tooling/material suppliers | Approved Supplier List (ASL) |
| 8.5.1 | Control of Production | Work instructions, process control | Setup sheets, control plans |
| 8.5.2 | Identification & Traceability | Part marking, material lot tracing | Traveler system, MTR linkage |
| 8.6 | Release of Products | Final inspection, FAI verification | Inspection reports, CoC |
| 8.7 | Nonconforming Output | Scrap/rework disposition | NCR log, MRB records |
First Article Inspection (FAI) per AS9102
FAI is not just "measure the first part." AS9102 defines a rigorous three-form process that documents every dimension, every material property, and every process parameter for the first production article of a new or changed part:
AS9102 FAI Three-Form System
Lists the part number, revision, drawing reference, material specification, and special process requirements. This form establishes WHAT is being inspected and against WHICH drawing revision.
Documents the raw material used: supplier, heat lot number, material spec conformance, hardness verification, and MTR (Material Test Report) linkage. Proves the RIGHT material was used.
Every characteristic (dimension, tolerance, surface finish, thread spec) is numbered on a ballooned drawing, measured, and recorded with actual vs. nominal values. ALL characteristics must be measured — not just critical ones.
A critical detail: FAI is required not just for new parts, but also when any change occurs that could affect form, fit, or function — including: new machine, new fixture, tooling change, program revision, material supplier change, operator certification lapse, or a gap exceeding 2 years since last production.
Document Control for CNC Programs and Tooling
One of the most common AS9100 non-conformances in CNC shops is uncontrolled program versions. A program saved to the machine memory in 2021 may not match the current drawing revision. AS9100D Clause 7.5 requires that documented information (including CNC programs) be:
- Identified: Program name must include part number, revision level, and operation number (e.g.,
PN12345-RevC-OP20.nc) - Controlled: Only authorized personnel can modify programs. Changes require ECN (Engineering Change Notice) review.
- Distributed: Programs must be distributed to machines from a controlled source (network drive, DNC server), not from USB sticks or local copies.
- Retained: Previous program versions must be archived (not deleted) with the date superseded.
Setup Sheet Requirements (Clause 8.5.1)
Every CNC operation must have a documented work instruction (setup sheet) that includes:
NADCAP Machining Audit: What Auditors Look For
NADCAP conventional machining audits focus on process control — verifying that your cutting parameters, tooling decisions, and inspection methods are not only documented but consistently followed. The auditor will:
- Select 3–5 active jobs and trace each from drawing to finished inspection report
- Verify the CNC program matches the controlled version on the DNC server
- Check tool management: are tool life limits defined, tracked, and enforced?
- Review measurement records: are in-process checks performed at the specified frequency?
- Audit operator qualifications: are operators trained and certified for the specific material/process?
- Inspect non-conformance handling: how were recent NCRs dispositioned? Was root cause analysis performed?
Top 10 AS9100 Non-Conformances in CNC Shops
Based on audit data from registrars (BSI, SAI Global, PRI), these are the most frequently cited non-conformances in aerospace CNC operations:
| # | Non-Conformance | Clause | Prevention |
|---|---|---|---|
| 1 | Uncontrolled CNC program versions | 7.5 | DNC server with revision control |
| 2 | Incomplete FAI documentation | 8.6 | AS9102 form checklist before submission |
| 3 | Missing material traceability | 8.5.2 | MTR linkage in traveler system |
| 4 | Expired calibration on gages | 7.1.5 | Automated cal due date alerts |
| 5 | Tool life not tracked/enforced | 8.5.1 | Counter-based tool management in CNC |
| 6 | Inadequate process FMEA | 8.1.1 | Cross-functional FMEA reviews |
| 7 | NCR disposition without root cause | 8.7 / 10.2 | 5-Why or fishbone for every NCR |
| 8 | Operator not trained on material | 7.2 | Material-specific training records |
| 9 | Setup sheet missing parameters | 8.5.1 | Standardized template with all fields |
| 10 | FOD control not documented | 8.5.4 | FOD prevention SOP with signoff |
The IA9100 Transition: What's Changing in Late 2026
The most significant aerospace quality standard update in a decade is underway: AS9100 is being rebranded to IA9100 (International Aerospace), unifying the previously separate regional designations — AS9100 (Americas), EN 9100 (Europe), and JISQ 9100 (Asia-Pacific) — into a single global standard.
IA9100 Key Changes for CNC Shops
CNC program storage, DNC server access, and digital data must meet cybersecurity controls. Requires confidentiality, integrity, and availability of all QMS-related information.
All audit reporting migrates to the OASIS v3 platform. Pre-audit data submission required for planning.
Removal of mandatory annual purchasing process audits. Simplified site classifications to "single site" and "multiple site."
Existing product safety guidance notes become mandatory requirements. Stronger hazard identification and risk assessment expectations.
Timeline: IA9100 is expected to publish in Q4 2026, aligned with ISO 9001:2026. A three-year transition period follows, meaning current AS9100D certifications remain valid until approximately 2029. CNC shops should begin assessing their information security posture and DNC server access controls now — Clause 7.1.7 will be the most operationally impactful change for machining operations.
Frequently Asked Questions
How long does AS9100 certification take?
From starting system development to receiving the certificate: 9–18 months for a typical CNC shop. This includes 3–6 months of system documentation, 3–6 months of implementation and internal audits, and 1–3 months for the stage 1 and stage 2 certification audits. Total cost (consulting + registrar fees): $15,000–$40,000.
What triggers a new FAI requirement?
Per AS9102, FAI is required when: new part number, drawing revision affecting form/fit/function, new manufacturing process or machine, material source change, tooling redesign, production gap > 2 years, or when directed by the customer. Program-only changes (optimization without affecting geometry) generally do not trigger FAI, but document this assessment.
Can a small shop afford AS9100?
Yes, but the overhead is significant. Budget 15–25% of administrative labor for quality system maintenance (document control, calibration management, internal audits, NCR processing). For a 5-person shop, this typically means 0.5–1 FTE dedicated to quality. The payoff: aerospace contract rates are 30–60% higher than commercial work.
What is IA9100 and when does it replace AS9100?
IA9100 (International Aerospace 9100) is the next-generation aerospace quality standard, replacing AS9100, EN 9100, and JISQ 9100 under a single global designation. It is expected to publish in Q4 2026, aligned with ISO 9001:2026. Organizations will have a three-year transition period (until ~2029) to migrate. The biggest change for CNC shops is the new Clause 7.1.7 on Information Security, which requires cybersecurity controls over CNC program storage and QMS data. Current AS9100D certificates remain valid throughout the transition window.