Worked example
Meridian Aerostructures, October 2026
Meridian is an aerostructures machine shop of 78 people. R. Chen is the quality manager, with M. Okafor as quality engineer and deputy; T. Brooks is the plant manager; S. Patel runs supplier quality and K. Ward buys; J. Alvarez is the manufacturing engineer; L. Nguyen is the production manager; B. Ellison is the contract lead auditor; D. Ruiz is the inspector; N. Ellis runs HR. The IT is a contractor.
Internal audit (H11 ), October 14 and 15. B. Ellison's purchasing and receiving audit, IA-26-10, raised two AS9100D nonconformities (an obsolete supplier manual in the buyer's folder; certificates checked for presence, not for the heat) and four transition observations: the buyer and shipping inspector without counterfeit awareness (CF-1), no levels of control (ST-2), no sub-tier change notice in the PO terms (ST-1), no obsolescence monitoring (CF-2).
Self-check (H01 ), October 19 and 20. R. Chen and M. Okafor, records open, using the audit's observations as evidence. Of 30 change items: 9 shown, 10 partly shown, 7 gaps, 3 can't tell, 1 not applicable (no design responsibility).
Planning matrix (H02 ), October 22. Twenty items to work: 8 Do now, 9 Plan it, 3 Hold for the final text. The restore test (IS-2) done the same day by T. Brooks with the IT contractor.
Risks (H04 ), October 22. Twelve risks rated: 3 High (suppliers not returning sub-tier lists; transition work losing to deliveries; practices that leave no record), 5 Medium, 4 Low.
Impact (H08 ), October 26. Information security rated High (IT and data). The brief: Option A, a one-page plan with the contractor, ending shared logins, six-monthly access reviews and restore tests: 24 of our hours and 40 contractor hours, $6,360 in all. Option B, a managed service at about $900 a month. Recommended: A.
Documents (H05 ) and training (H06 ). Forty-one controlled documents read: fourteen to change (five now, nine held for or decided with the final text) and three new (information security plan, concern procedure, obsolescence instruction). QP-08 rev G with the safety question issued October 28, users briefed October 29. Sixteen training needs, 172 planned hours; the MSA course done October 28 for one of the two people who run gauge studies.
Decision at the October 29 briefing (H07) Outcome TD-01: approve the eight Do now actions, reviewed monthly in the production meeting Approved TD-02: approve 40 IT contractor hours, $4,800, for the plan and restore tests Approved TD-03: hold the quality manual rewrite for the final text; quarterly self-check Approved TD-04: T. Brooks owns the culture and ethics items Approved TD-05: protect four hours a week for S. Patel and M. Okafor for three months Approved November 2
Scorecard (H10 ), Q4 2026 line. 30 items; 9 shown, 10 partly, 7 gaps, 3 can't tell, 1 not applicable; shown of applicable 31 percent; 19 actions open, 1 done, none overdue; 14 training needs open; 9 documents waiting on the final text; 3 High risks open. Two themes marked Needs help (sub-tier control, information security), two Watch (product safety, culture and ethics).
Roadmap (H09 ). Phase 0 in progress; Gate 0 passed on October 29. Owners named for every later phase; dates left blank until the final text and the transition arrangements are published.
IA9100 draft: based on the IAQG's published changes. IA9100 is not yet final, and the final text may change these topics and clause numbers.
A management aid, not certification or a registrar audit. Using it does not by itself show conformity to AS9100D or any other standard, and your customers' requirements may add to it.
Clause numbers refer to AS9100D (SAE AS9100 Rev D) unless another document is named. The standards' text is not reproduced here: use your own licensed copy.
Aegis Insights are our own guidance, labeled wherever they appear: how we approach this work, not a requirement of any standard or customer.