For each theme: the change items in our words, with the AS9100D clause where each sits today; the records to pull; the package tool; what is worth doing now and what to hold; where Meridian stood in October 2026; and how we approach it.
Theme 1: Product safety
What the draft changes, item by item (in our words):
- PS-1 (was guidance; now a requirement): Hazards to product safety are found two ways: from events that have happened and by looking ahead (PFMEA, hazard analysis). AS9100D today: 8.1.3, 6.1.
- PS-2 (was guidance; now a requirement): Each safety risk is assessed and given a recorded control, linked to the control plan. AS9100D today: 8.1.3, 8.1.1.
- PS-3 (was guidance; now a requirement): Every product or process change is checked for its effect on product safety before approval. AS9100D today: 8.1.3, 8.5.6.
- PS-4 (was guidance; now a requirement): The product-safety processes are reviewed at set intervals for whether they work. AS9100D today: 8.1.3, 9.3.
- PS-5 (was guidance; now a requirement): People with product-safety responsibilities are trained in them. AS9100D today: 7.2, 8.1.3.
- PS-6 (was guidance; now a requirement): Safety information, safety events and changes to safety procedures reach the people who need them. AS9100D today: 7.4, 8.1.3.
- PS-7 (was guidance; now a requirement): Safety events are reported to customers, authorities and type certificate holders as their requirements say. AS9100D today: 8.1.3, 8.7.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| Change log and form; escapes and safety-related NCRs; PFMEAs and control plans; training matrix; customer notification rules | D02 | The safety question on the change form, answered before approval; name the product-safety roles and train them; a notification rule for each customer | Procedure wording on product safety |
At Meridian Aerostructures: Partly shown on four items, gaps on two (no review of the product-safety processes; no product-safety training for the named roles), shown on one (safety information shared at shift meetings). The change form line was the first Do now item: procedure QP-08 rev G issued October 28.
Theme 2: Counterfeit parts prevention
What the draft changes, item by item (in our words):
- CF-1 (was guidance; now a requirement): Procurement, receiving inspection, shipping inspection and material control are trained in counterfeit awareness and prevention. AS9100D today: 7.2, 8.1.4.
- CF-2 (was guidance; now a requirement): Parts obsolescence is monitored, so end-of-life parts are found before a rush buy. AS9100D today: 8.1.4.
- CF-3 (was guidance; now a requirement): Parts are bought from original manufacturers, their authorized distributors or other approved sources. AS9100D today: 8.1.4, 8.4.1.
- CF-4 (was guidance; now a requirement): Parts can be traced to their original or authorized manufacturer. AS9100D today: 8.1.4, 8.5.2.
- CF-5 (was guidance; now a requirement): Verification and test methods are used at receipt to detect counterfeit parts. AS9100D today: 8.1.4, 8.6.
- CF-6 (was guidance; now a requirement): Counterfeit reports from outside sources (GIDEP, for example) are monitored and checked against your parts. AS9100D today: 8.1.4.
- CF-7 (was guidance; now a requirement): Suspect or detected counterfeit parts are segregated, contained and reported. AS9100D today: 8.1.4, 8.7.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| Approved supplier list with source type; certificates and receiving records; alert log; training matrix for the four functions | D04 | Counterfeit awareness for the buyer and shipping inspection, not only receiving; a watch list of ten parts you cannot easily substitute; trace three receipts to the manufacturer | Procedure wording; any change to the risk bands the final text may drive |
At Meridian Aerostructures: Strongest theme: four of seven shown (approved sources, traceability, alert reviews, suspect-part handling). The buyer and the shipping inspector had no counterfeit awareness record, and there was no obsolescence monitoring: one connector was already on last-time-buy notice. Both are Do now items owned by S. Patel.
Theme 3: Sub-tier supplier control
What the draft changes, item by item (in our words):
- ST-1 (unchanged text, now part of a wider requirement): Suppliers are required to control their own direct and sub-tier suppliers. AS9100D today: 8.4.1, 8.4.3.
- ST-2 (new in IA9100): The level of control for each supplier and its sub-tiers is decided and told to them. AS9100D today: 8.4.2, 8.4.3.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| PO terms and supplier quality manual; approved supplier list; supplier files; any sub-tier lists | H03 | The PO terms lines (flow-down, notice before a sub-tier change, ethics, information security); a level of control for the riskiest suppliers, told to them in writing | Nothing material: this theme helps today's audits |
At Meridian Aerostructures: PO terms rev D required flow-down but not notice of a sub-tier change (Partly shown); no level of control was recorded for any of 38 active suppliers (Gap). Levels are being set, top ten first, with a letter signed by the plant manager; the risk that suppliers do not answer is High on the risk register.
Theme 4: Product quality planning and foreign object prevention
What the draft changes, item by item (in our words):
- AP-1 (strengthened): Operations are planned to prevent, detect and mitigate foreign objects and debris. AS9100D today: 8.1, 8.5.1.
- AP-2 (strengthened): New products and programs are planned in phases with gate reviews (APQP or equivalent). AS9100D today: 8.1.
- AP-3 (strengthened): Statistical techniques support process control: key characteristics, capability, control plans, statistical process control. AS9100D today: 8.1, 8.5.1, 9.1.1.
- AP-4 (new in IA9100): Measurement variation is understood through measurement systems analysis (gauge R&R or attribute studies). AS9100D today: 7.1.5.1.
- AP-5 (strengthened): Where you design, design work is divided into defined activities with tasks, owners, inputs and outputs. AS9100D today: 8.3.2.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| PFMEAs and control plans; FOD procedure and training; new-part phase plans and gate minutes; MSA and capability studies | D14 | Walk one PFMEA for FOD; check the MSA on five key-characteristic gauges; record that the design item does not apply if you build to print | Procedure wording on phased planning and statistical techniques |
At Meridian Aerostructures: Phase plans with gates already in use for new parts (shown). FOD procedure in place but FOD not in the PFMEA or control plan (Partly shown). Nobody could say which key-characteristic gauges had an MSA (Can't tell). Meridian builds to customer drawings, so the design item is Not applicable, with that reason written down.
Theme 5: Production process verification
What the draft changes, item by item (in our words):
- PV-1 (strengthened): Production process verification covers new or changed processes, not only the first part. AS9100D today: 8.5.1.3.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| FAI reports; process change records for programs, fixtures, machines and sources | D14 | List every process change in the last six months and how each was verified | Procedure wording |
At Meridian Aerostructures: Shown: Meridian's FAI procedure already covers partial re-verification after program, fixture and machine changes, and the last six changes had records.
Theme 6: Information security and data protection
What the draft changes, item by item (in our words):
- IS-1 (new in IA9100): Information security is planned, put in place and controlled for the systems and data the quality system depends on, including incidents and remote access. AS9100D today: None directly; nearest 7.1.3, 7.5.3.
- IS-2 (strengthened): Electronic records are protected: access control, off-site copies with a tested restore, and protection against unauthorized or unintended change. AS9100D today: 7.5.3.
- IS-3 (new in IA9100): Planning for each product or program takes information security and data protection into account, including customer data and drawings. AS9100D today: 8.1.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| IT backup log; restore tests; the list of who can access what; remote access arrangements; contract review checklist | H01 | Test a restore and open what you restored; list who can change quality records; a one-page information security plan | A full information security procedure |
At Meridian Aerostructures: No restore had ever been tested (fixed October 22, the first Do now item done). No plan, shared logins on the CMM PCs, and no record of who used the IT contractor's remote tool (Gap). Whether planning considered customer data was Can't tell. The impact brief rated the theme High and the October 29 briefing approved 40 contractor hours.
Theme 7: Organizational culture and ethics
What the draft changes, item by item (in our words):
- CE-1 (new in IA9100): Culture and ethical behavior are treated as part of an effective quality system, and culture is named as a factor of the work environment. AS9100D today: 5.1.1, 7.1.4.
- CE-2 (new in IA9100): Top management sets goals or objectives that build a quality culture. AS9100D today: 5.1.1, 6.2.
- CE-3 (new in IA9100): An ethical work environment: a code of conduct, training, a confidential channel for concerns, investigation and resolution, and no penalty for raising a concern. AS9100D today: 5.1.1, 7.3.
- CE-4 (unchanged text, now part of a wider requirement): People are aware of the importance of ethical behavior. AS9100D today: 7.3.
- CE-5 (unchanged text, now part of a wider requirement): Suppliers are told of the importance of ethical behavior. AS9100D today: 8.4.3.
| Records to pull first | Package tool | Worth doing now | Hold for the final text |
|---|---|---|---|
| Code of conduct; quality policy and objectives; management review minutes; training matrix; PO terms | H01, H03 | A concern log and a second person to go to besides the supervisor; ethics awareness for everyone; a draft quality-culture objective | Quality manual and policy wording: this theme may still change in the final text |
At Meridian Aerostructures: Ethics awareness for people and suppliers already shown (induction training; PO terms line). A code of conduct existed but no concern channel beyond the open door (Partly shown); no quality-culture objective (Gap); and nobody could say whether the manual treats culture as part of the system (Can't tell). All three items are held for the final text, owned by T. Brooks, with the concern log and a second contact (K. Walsh, HR) started now.
Need more than one resource, or not sure where to start? Book a complimentary 30-minute Aegis Quality Guidance Call. We'll find the tools that fit your situation and a sensible place to start. No sales pressure, no obligation.
IA9100 draft: based on the IAQG's published changes. IA9100 is not yet final, and the final text may change these topics and clause numbers.
A management aid, not certification or a registrar audit. Using it does not by itself show conformity to AS9100D or any other standard, and your customers' requirements may add to it.
Clause numbers refer to AS9100D (SAE AS9100 Rev D) unless another document is named. The standards' text is not reproduced here: use your own licensed copy.
Aegis Insights are our own guidance, labeled wherever they appear: how we approach this work, not a requirement of any standard or customer.