How To Become AS9100 Certified: A step by step guide

If you’ve been told you need AS9100 certification, the first question is usually straightforward:

Where do we actually start?

For many businesses, the process feels unclear from the outset. There’s a standard to interpret, audits to prepare for, and somewhere in between, a management system that needs to be developed to meet aerospace requirements.

What’s often missing is a clear, practical path from where you are now to where you need to be.

This guide sets that out in a structured way, based on how AS9100 implementation works in practice.

Understanding What’s Actually Required

Before any work begins, there needs to be clarity.

Not just on what AS9100 says, but on what it means for your business specifically.

That starts with understanding your position within the aerospace supply chain, what your customers expect from you, and the level of control required across your operations.

Without that context, it is very easy to build a system that looks compliant on paper but does not hold up in reality.

For most organisations, this is where a GAP Analysis becomes valuable. It provides a structured comparison between your current system and AS9100 requirements, highlighting where control is already in place and where it needs to be strengthened.

This step sets the direction for everything that follows.

Building the System Around How You Actually Operate

This is the stage where most projects either succeed or begin to struggle.

AS9100 is not something that can be layered on top of a business. It needs to be built around the way the organisation already functions.

That means clearly defining your core processes - from sales and contract review through to purchasing, production or goods receipt, inspection, and delivery - and then introducing the level of control required by the standard.

Traceability, product control, and risk management should not sit separately from your operations. They need to be part of the workflow itself.

When this is done properly, the management system feels like a natural extension of the business.

When it is not, it quickly becomes something that is followed for the sake of audit, rather than something that supports how the business runs.

Implementing the System in Practice

Once the system has been developed, it needs to be embedded into day-to-day operations.

This is the point where the system becomes real.

Processes need to be understood by the people carrying them out, applied consistently, and supported by records that demonstrate what has taken place.

Without this, even a well-designed system will fall short during audit.

It is also where many businesses underestimate the level of detail involved. Auditors will not only review what is documented, but will examine how activities are performed in practice, often following processes step by step.

Implementation, therefore, is not just about communication. It is about ensuring that the system is being used as intended.

Testing the System Before Certification

Before engaging a certification body, the system needs to be tested.

This is done through internal audits and management review, both of which serve a specific purpose.

Internal audits provide an objective check on whether processes are being followed and whether they remain effective.

Management review, on the other hand, allows leadership to assess performance, risks, and opportunities for improvement at a strategic level.

These activities are not formalities. They are the mechanism through which the business demonstrates that its system is functioning and under control.

When carried out properly, they provide confidence that the organisation is ready for certification.

Choosing a Certification Body and Preparing for Audit

Certification is carried out by an accredited certification body, typically one recognised by organisations such as UKAS.

The audit itself takes place in two stages.

Stage 1 is a review of your management system and readiness for certification.

Stage 2 is a full audit of your operations, where the system is assessed in practice.

While choosing a suitable certification body is important, the more significant factor is preparation.

A well-prepared system will perform consistently regardless of the auditor.

A poorly prepared one will struggle regardless of who conducts the audit.

The Certification Audit

During the Stage 2 audit, the focus is entirely on how your business operates.

The auditor will review your processes, sample records, speak to your team, and assess how effectively your system controls your activities. This is where the work carried out during development and implementation is tested.

If the system demonstrates control, consistency, and traceability, certification is typically straightforward. Where gaps are identified, these will need to be addressed before certification is granted.

The outcome is not determined by presentation, but by how well the system reflects reality.

How Long Does It Take?

The timeframe for achieving AS9100 certification depends largely on your starting point.

For businesses with a well-established ISO 9001 system, the process can often be completed within three to six months.

Where a system is being developed from scratch, it is more typical to see a timeframe of six to twelve months.

The key factor is not the size of the organisation, but how closely existing processes align with the requirements of the standard.

Where that alignment already exists, progress is naturally faster.

Where Businesses Typically Go Wrong

The most common issue is treating AS9100 as a documentation exercise.

Systems are built around templates rather than operations, with the intention of meeting requirements as quickly as possible. While this can create the appearance of compliance, it rarely stands up under audit.

The result is often confusion within the business, gaps between what is documented and what actually happens, and increased pressure during certification.

In a highly regulated industry, short-term shortcuts tend to create longer-term problems.

Establishing control from the outset is far more effective than trying to correct issues later.

What a Strong AS9100 System Looks Like

When AS9100 is implemented properly, the outcome is not just certification.

It is a business that operates with greater clarity and control.

Processes are clearly defined and consistently followed; traceability is built into the way work is carried out; teams understand their roles and responsibilities; and the system stands up to audit because it reflects how the organisation actually works.

That is what creates confidence within the Aerospace supply chain.

Final Thought

Achieving AS9100 certification is not about ticking boxes or building a system for the sake of audit.

It is about developing a level of operational control that allows your business to be trusted within the aerospace industry.

When approached properly, the process strengthens what already exists and positions the organisation for long-term growth within the supply chain.

This is the work we do every day at Vaelo Aerospace - helping businesses take what they already have and develop it into a system that stands up to the expectations of Aerospace.