AS9100 Standard: Recognize how to Approach Risks and Opportunities in the Aerospace Industry

The EN9100:2018 standard, commonly known as the AS9100D or AS9100 standard, is the most recent one for businesses that design, produce, or provide aviation, space, and defence products and services, including parts, components, and assemblies. The International Aerospace Quality Group (IAQG) produced the standard with assistance from representatives of aviation, space, and defense companies in the Americas, Asia/Pacific, and Europe.

EN9100:2018 standardizes the criteria for quality management systems for businesses participating in the aerospace industry and supply chain, much as previous iterations of AS9100. The standard accomplishes this by adding sector-specific instructions for the secure development, manufacture, and distribution of high-quality aerospace components and products to the general ISO 9001 criteria for quality management systems. Organizations all over the world can obtain AS9100 certification to enhance quality, cost, and delivery performance at all points in the supply chain. This is achieved by reducing or getting rid of requirements that are specific to the organization, putting the quality management system into operation effectively, and applying excellent business practices more broadly.

Two distinct aspects for handling risk in the aerospace quality management system (QMS) are included in the most recent revision of AS9100 Rev D. One is brand-new to the standard and results from the incorporation of ISO 9001:2015: clause 6.1 Actions to address risks and opportunities. After the last revision of AS9100 Rev C, clause 8.1.1 Operational risk management was added as a requirement for aerospace.

Actions to address risks and opportunities

The concept of risk-based thinking, which was added to ISO 9001:2015, is included in a new section of the standard called Clause 6.1. The top level of the planning process is discussed in this section as a means of identifying hazards for the QMS. It also demands you recognize these high-level hazards and decide what, if anything, needs to be done to address them. If you do take action, it's crucial to include these actions in your QMS' regular activities or mentioned in the AS9100 Documents to ensure that they are not neglected or forgotten. The idea is to deal with these risks at the highest level possible because they are the organization's top priorities. The processes for examining strategic organizational risk may already be in place. For instance, many businesses employ business planning procedures that consider potential risks and opportunities, such as the SWOT analysis (strengths, weaknesses, opportunities, and threats).

The implementation of a SWOT analysis in company planning will also entail formulating plans to address the risks and opportunities identified, as required by the AS9100 Rev D standard. For instance, if you foresee a possibility that a crucial element of your product or service could age out, you can take the required steps to find a replacement before customers are adversely affected. Another illustration may be the opportunities or hazards that come with finding out that a supplier or rival is closing up shop and how it might impact the company.

Operational risk management

The operational risk management clause in AS9100 Clause 8.1.1 is not a new requirement and is fairly similar to the previous version of the standard. The requirements are far more constrained than for Clause 6.1 and are only confined to managing the risks connected with the operational processes required to offer goods and services, as stated in Clause 8.1.1. This section discusses risk management strategies for things like anticipated timetable delays, hurried delivery schedules, high-risk components, etc. Organizations must first identify these risks, choose a strategy of action, and then manage them.

It is significant to highlight that a complete risk management approach is anticipated in this place. You track the risk until it ceases to be a risk in addition to identifying it and developing any appropriate plans to mitigate it, as necessary. Therefore, you will still need to keep an eye on the risk until it has passed, even if you decide not to take any action to address it.