| Rhythm | Who | What | Tool |
|---|---|---|---|
| Weekly, 15 minutes | Program owner | Audits this week and next: plans sent, auditors free, areas ready. Reports due. Responses due or overdue. | A06 schedule |
| Monthly, 30 minutes | Program owner and general manager | The Summary: coverage, overdue audits, late reports, findings, responses outstanding. Bring forward any audit risk calls for. | A06 Summary |
| Quarterly | Program owner | Evidence map check; auditor pool and refreshers; ratings on the process list reviewed | A04, A06 |
| Each management review | Top management | Audit results: coverage, findings by type and process, repeats, responses shown effective, program changes | A06 Summary; A11 reports |
| Yearly | Program owner | Rebuild the program from the process list; plan the system audit; contract auditor booked for the quality team's processes | A06, A05 |
When the program is in trouble
| What you see | What is usually behind it | What we do |
|---|---|---|
| Audits postponed month after month | No protected time; one auditor doing everything | Grow the auditor pool; the general manager protects dates; postponements get a new date the same day |
| A run of audits with no findings | Desk audits; sampling from lists; auditors too close to the area | Follow a job; sample from the floor; rotate auditors across departments |
| Lots of trivial minors | Findings written to show activity | Apply the A08 tests; group lapses with one cause; use OFIs for improvements |
| Findings disputed at every closing meeting | Vague evidence; concerns not raised during the audit | Record numbers and sample counts; nothing new at the closing meeting |
| Responses late or sent back | Process owners unsure what a good response is | Walk them through A10 and its worked example; escalate late responses through the CAPA Command Kit's escalation guide |
| Repeats at follow-up | Responses fix the instance, not the cause; closure on implementation | Require extent, escape cause and an effectiveness criterion before accepting a response |
| Registrar finds what internal audit missed | The program is not looking where the risk is | Re-rate the process list; bring the process's audit forward; audit the way the registrar sampled |
| Reports issued weeks late | Report written from memory; no template | Write from the checklist with A11; issue within ten working days; the schedule flags late reports |
Need more than one resource, or not sure where to start? Book a complimentary 30-minute Aegis Quality Guidance Call. We'll find the tools that fit your situation and a sensible place to start. No sales pressure, no obligation.
A management aid, not certification or a registrar audit. Using it does not by itself show conformity to AS9100D or any other standard, and your customers' requirements may add to it.
Clause numbers refer to AS9100D (SAE AS9100 Rev D) unless another document is named. The standards' text is not reproduced here: use your own licensed copy.
Aegis Insights are our own guidance, labeled wherever they appear: how we approach this work, not a requirement of any standard or customer.