SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada
Why firms are now looking for AS9100 certification

Why firms are now looking for AS9100 certification

Mon, 14th Sep 2026 (Today)
Jon Fielding
JON FIELDING Managing Director Apricorn

In sectors such as aerospace and defence, there is no room for risk. Best practices have become non-negotiable, with organisations redlining those partners and suppliers that haven't achieved highly specific criteria.

AS9100 is one certification that is typically required as a prerequisite for aerospace and defense contracts. Developed by the International Aerospace Quality Group (IAQA), it is the international quality management system (QMS) standard for the aerospace sector, building on ISO 9001 by introducing additional sector-relevant requirements. Among these are greater expectations in relation to risk management, supply chain management, configuration controls, product traceability and corrective actions. 

From manufacturers to government agencies, AS9100 is broadly applicable to a variety of organisations, with certification depending not only on the quality of aerospace products and solutions, but also a firm's ability to demonstrate robust data management and security protocols.

Here, the standard itself provides a specific QMS framework to help organisations develop stringent security and data controls across everything from document protection to electronic record security, serving as a guideline for the establishment for best practices. 

Realising competitive advantages through AS9100 certification

With many aerospace and defense firms automatically rejecting potential contracts with partners that haven't been AS9100 certified, alignment with the standard can be a critical competitive differentiator, opening the door to customers and opportunities that otherwise wouldn't be available.

The benefits go beyond customer confidence, however. AS9100 certified companies will also stand to reap the rewards of adopting best practices, which can serve as the catalyst for operational optimisation. By establishing effective quality management systems, companies will more easily be able to identify internal inefficiencies and make incremental improvements that can increase productivity, reduce errors, and lower costs over time.

How to prepare for the AS9100 certification audit 

The first step towards AS9100 certification involves ensuring awareness and buy-in to the standards requirements across the organisation. From the motivation for certifying and risks that it helps to mitigate, to the practical realities such as the secure and reliable management of data, everyone within the company needs to understand the reasons for aligning with these best practices, and the precise controls they must adhere to.

From here, organisations can then begin to see how their current policies and processes compare to the standard, identifying areas that are already aligned, as well as areas where changes will be needed. This might involve improvements to data storage and security, for example, which directly meet AS9100's requirements around configuration control and traceability. 

Once any gaps have been identified, the next step is to set measurable goals and realistic timelines in addressing them, adapting operations to fit AS9100's requirements. And finally, once the necessary changes have been made – complete with supporting documentation that can guide processes and verify compliance – firms can look to schedule in their certification audit with a qualified certification body.

The audit itself will be caried out in two phases. The certification body will begin by reviewing documentation, with this then being followed by an on-site assessment.

The importance of continuous improvement and proactivity ahead of IA9100

Becoming AS9100 certified is a key milestone, yet it's important to recognise that maintaining accreditation will require firms to adopt a culture of continuous improvement, assessing and adapting their practices, and aligning with the standards evolving requirements. This is because AS9100 will soon transition to IA9100, which is expected to be released in 2026 as the next-generation international quality management standard for the aviation, space, and defense industries.

The aim of IA9100 is to further ensure compliance aligns with modern operational realities. While the details are yet to be confirmed, the IAQG has already hinted that the new standard could include changes relating to product safety, quality culture and organisational accountability, stricter controls on counterfeit parts and supplier management, and greater expectations around the integrity, control, and traceability of digital information.

Once IA9100 comes into effect, organisations will have the usual three years to meet the new requirements. However, this does not mean that companies should kick the certification can down the road. In an industry in which contracts demand best practice alignment, being proactive will likely pay dividends. 

Trust, traceability, and operational assurance are non-negotiable in the defence and aerospace industries. Therefore, those companies that invest early in quality management system improvements and secure, disciplined information management will gain a competitive advantage, proving themselves to be reliable partners actively embracing best practices.