QMS Comparison

Posted by SZFRS Engineering Team

AS9100, IATF 16949, and ISO 13485 are the three dominant industry-specific quality management system standards. Each governs a distinct regulated industry — AS9100 for aerospace and defense, IATF 16949 for automotive (specifically the global automotive supply chain), ISO 13485 for medical devices — and each builds on the ISO 9001 foundation with industry-specific additions. For cable suppliers serving multiple regulated industries, understanding the differences and overlaps among the three standards drives both supplier qualification strategy and program cost. This guide compares the three standards across structure, content, supplier expectations, audit cycles, and cost impact, with the practical detail that program teams need for supplier selection and qualification.

TL;DR — The Three Standards in One Sentence Each

AS9100 is the aerospace and defense QMS, currently in Revision D. Adds rigorous configuration management, risk management depth, and traceability requirements to ISO 9001. Required for most aerospace OEM tier-1 supplier programs. IATF 16949 is the automotive QMS, current edition 2016. Adds APQP (Advanced Product Quality Planning), PPAP (Production Part Approval Process), supplier IATF certification cascade, and customer-specific requirements. Required for direct or near-direct supply to automotive OEMs. ISO 13485 is the medical device QMS, current edition 2016. Adds design controls, risk management per ISO 14971, document management (DHF/DMR/DHR), and CAPA. Required for medical device manufacturing and supply chain. All three standards build on ISO 9001 with industry-specific additions; many cable suppliers maintain multiple certifications. Below covers each in detail with comparison framework.

AS9100 — Aerospace and Defense

AS9100 is the international aerospace QMS standard, developed by IAQG (International Aerospace Quality Group) and aligned with major aerospace OEMs (Boeing, Airbus, Lockheed Martin, Northrop Grumman, Raytheon Technologies, BAE Systems). Current revision is AS9100 Rev D (published 2016, with subsequent minor updates).

Key requirements beyond ISO 9001:

• Configuration management. Strict control over configuration changes throughout the design and manufacturing process. Each design baseline gets formally approved; changes follow controlled review.
• First Article Inspection (FAI). Per AS9102, the first production unit gets comprehensive inspection covering every drawing dimension, material, and process. FAI documentation is part of the program record.
• Risk management. Formal risk identification, assessment, and mitigation throughout the program lifecycle. Aerospace risk management is more rigorous than ISO 9001’s general approach.
• Counterfeit parts prevention. Specific requirements for preventing counterfeit electronic and mechanical parts from entering the supply chain. Includes supplier qualification, lot traceability, and authentication procedures.
• Foreign Object Debris (FOD). Rigorous control of debris in manufacturing environments — drilling chips, packaging fragments, anything that could end up in an aerospace product.
• Special processes. Welding, soldering, plating, painting, heat treating — these “special processes” require qualified procedures and qualified personnel. Compliance to specific NADCAP (National Aerospace and Defense Contractors Accreditation Program) certifications often required.
• Supplier control. Hierarchical supplier qualification cascading from prime contractor through tiers. Each tier must demonstrate AS9100 compliance.
• OASIS database. Online Aerospace Supplier Information System tracks AS9100-certified suppliers globally. Aerospace OEMs and tier-1 suppliers source from OASIS-listed companies.

Audit cycle: Initial certification audit, surveillance audits annually, recertification audit every 3 years. AS9100 auditors must be IAQG-recognized and registered through specific aerospace auditing bodies.

Where AS9100 dominates: Tier-1 and tier-2 aerospace suppliers; specialty defense contractors; aviation MRO (Maintenance, Repair, Overhaul) facilities; aerospace and defense product programs across commercial aviation, military, and space.

IATF 16949 — Automotive

IATF 16949 is the automotive QMS standard, replacing the predecessor ISO/TS 16949 in 2016. Developed by IATF (International Automotive Task Force, comprising major automotive OEMs and trade associations including AIAG in North America, ANFAC in Spain, FIEV in France, SMMT in UK, VDA in Germany, plus the major OEMs). Required for direct supply to most global automotive OEMs.

Key requirements beyond ISO 9001:

• APQP (Advanced Product Quality Planning). A structured 5-phase product development methodology — planning, product design and development, process design and development, validation, and feedback/corrective action. Each phase has specific deliverables tracked through formal program reviews.
• PPAP (Production Part Approval Process). Formal supplier submission to OEM demonstrating that the supplier can consistently produce parts meeting all engineering and quality requirements. PPAP typically includes 18 elements covering everything from design records and dimensional results to control plans and material certifications.
• FMEA (Failure Mode and Effects Analysis). Both Design FMEA (DFMEA) and Process FMEA (PFMEA) required. PFMEA covers manufacturing processes; DFMEA covers product design (when supplier has design responsibility).
• Control plans. Formal documents specifying inspection points, frequencies, and methods at each manufacturing process step. Control plans link FMEA findings to actual production controls.
• SPC (Statistical Process Control). Capability studies (Cpk, Ppk) for critical characteristics. Process capability indices typically required to be 1.33+ for production.
• MSA (Measurement System Analysis). Gauge R&R studies for measurement systems used in production. Measurement variation must be small relative to production variation.
• Customer-specific requirements (CSRs). Beyond IATF requirements, each automotive OEM has customer-specific requirements that suppliers must meet. Ford has FCSR, GM has GMW requirements, Stellantis has its own, Toyota has its own. Suppliers maintain compliance to all customer CSRs.
• Supplier qualification cascade. Tier-1 automotive suppliers must work with IATF 16949 certified tier-2 suppliers, who in turn work with IATF or ISO 9001 certified tier-3 suppliers. The qualification cascade is rigorous.

Audit cycle: Initial certification, surveillance audits typically every 6 months (more frequent than AS9100 or ISO 13485), recertification every 3 years. IATF auditors are accredited through IATF-recognized bodies.

Where IATF 16949 dominates: Direct automotive OEM suppliers (Tier 1); near-direct suppliers (Tier 2 supplying Tier 1s); automotive aftermarket parts; some specialty aftermarket suppliers. Generally not required for indirect components or specialty automotive niches.

ISO 13485 — Medical Devices

ISO 13485 is the medical device QMS standard, current edition 2016. Aligned with FDA 21 CFR Part 820, EU MDR 2017/745, and similar regulations globally. Covered in detail in our ISO 13485 Medical Workflow Guide; key elements summarized here for comparison.

Key requirements beyond ISO 9001:

• Design controls. Formal design inputs, design outputs, design review, design verification, design validation, design transfer, and design change control.
• Document management. DHF (Design History File), DMR (Device Master Record), DHR (Device History Record).
• Risk management. Per ISO 14971, throughout the device lifecycle. Risk identification, evaluation, control, and post-market monitoring.
• CAPA. Corrective and Preventive Action process for non-conformances and customer complaints.
• Supplier qualification. Medical device manufacturers maintain Approved Supplier Lists (ASL) with documented qualification.
• Process validation. For specific high-risk processes (sterilization, sealing for sterile barriers), formal process validation per IQ/OQ/PQ.
• Software validation. Validation of software used in production, distribution, or quality control activities.
• Sterile barrier requirements. For sterile devices, additional controls for cleanroom production, environmental monitoring, and process validation.

Audit cycle: Initial certification, surveillance audits annually, recertification every 3 years. Notified Body audits for EU MDR, FDA inspections for US programs.

Where ISO 13485 dominates: Medical device manufacturers; medical component suppliers; medical contract manufacturing; medical software development; medical device service providers.

Side-by-Side Comparison

Aspect	AS9100 Rev D	IATF 16949:2016	ISO 13485:2016
Industry	Aerospace, defense, space	Automotive global supply chain	Medical devices
Primary regulators	IAQG, FAA, EASA, MoD	IATF, automotive OEMs	FDA, EU competent authorities, ISO
Founding bodies	IAQG (Boeing, Airbus, etc.)	IATF (AIAG, VDA, etc.)	ISO Technical Committee 210
Certification body audit cycle	3-year recertification, annual surveillance	3-year recertification, semi-annual surveillance	3-year recertification, annual surveillance
Risk management depth	Formal program-level	FMEA-based (Design + Process)	ISO 14971 lifecycle
First article inspection	AS9102 FAI required	PPAP submission	First article per program; not standardized
Configuration management	Rigorous configuration baselines	APQP-driven	Design change control
Special processes certification	NADCAP recommended/required	Generally not required externally	Process validation per program
Statistical process control	Required for critical characteristics	Cpk/Ppk required (typically 1.33+)	Required where applicable
Supplier audits frequency	Per program; OASIS-tracked	Annual or as required by customer	Per program; ASL-managed
Documentation overhead	High (configuration, FAI, NADCAP)	High (PPAP, control plans)	High (DHF, DMR, DHR, CAPA)
Cost premium vs ISO 9001	+30-50% certification, +25-40% production	+25-40% certification, +20-35% production	+30-50% certification, +25-50% production
Common cable supplier overlap	Defense connectors, MIL-DTL-38999	Automotive harnesses	Medical handpiece, surgical

When Do Cable Suppliers Need Multiple Certifications?

For cable suppliers, certification strategy depends on customer mix:

• Single industry focus. If 80%+ of business is in one regulated industry, single industry-specific certification fits. Aerospace-only supplier maintains AS9100; automotive-only maintains IATF 16949; medical-only maintains ISO 13485.
• Multi-industry portfolio. Cable suppliers serving multiple regulated industries (common for diversified contract manufacturers) often maintain multiple certifications. The QMS structures align since all build on ISO 9001, but documentation and audit overhead multiplies.
• Overlap programs. Some programs span industries — telematics components might serve automotive and aerospace; medical aerospace (some military medical applications); medical automotive (in-vehicle medical monitoring). These programs require certifications spanning the relevant industries.
• Strategic positioning. Holding multiple certifications signals capability to customers and creates flexibility to pursue programs across industries. Even programs that don’t strictly require multi-certification benefit from supplier rigor.

For our cable manufacturing, we maintain ISO 9001 as foundation, with industry-specific certifications for major customer industries. The certification investment is real but enables programs across multiple regulated industries and signals supplier rigor to evaluating customers.

Cost Impact on Cable Manufacturing

QMS certification adds real cost to cable manufacturing. Specific drivers:

• Certification audit fees. Initial certification typically $25,000-75,000 depending on facility size and certification scope. Annual surveillance audits $10,000-30,000. Recertification audit every 3 years $20,000-50,000.
• Documentation overhead. Each industry’s QMS adds ~25-50% documentation labor. Procedures, work instructions, records, audit support — all consume engineering and quality department time that doesn’t directly produce product.
• Personnel certifications. CIS (IPC/WHMA-A-620), AS9100 internal auditors, IATF 16949 internal auditors, ISO 13485 quality personnel — each certification requires training investment and renewal.
• Equipment and process control. Statistical process control software, calibration management systems, document control systems — all require investment.
• Inspection labor. Higher inspection frequencies and more rigorous criteria for industry-specific work increase per-unit inspection labor by 20-50%.
• Supplier qualification. Working with qualified sub-suppliers adds material cost (qualified components cost more) and administrative cost (supplier audits, performance tracking).
• Customer-specific requirements (IATF specifically). Each automotive customer adds CSRs that compound documentation requirements.

For programs requiring industry certifications, this cost manifests as 25-50% premium over equivalent commercial work. The premium is real and worth paying for safety-critical applications; the premium isn’t justified for general industrial or consumer cable.

Real-World Case Study — Multi-Certification Strategy

An industrial customer was evaluating cable suppliers for a multi-product platform spanning their medical, aerospace, and high-end industrial product lines. Three programs in scope:

• Medical handpiece cable. Class III FDA-pathway product, requiring ISO 13485 supplier alignment.
• Aerospace test equipment cable. Ground support equipment for commercial aviation, requiring AS9100 alignment.
• Industrial precision instrument cable. No specific industry certification required, but customer expected ISO 9001 minimum.

The customer evaluated three supplier strategies:

• Strategy A. Three suppliers, each industry-specialized. Lowest per-program cost; highest supply chain complexity.
• Strategy B. Two suppliers — one for medical, one for aerospace + industrial. Compromise on supplier expertise.
• Strategy C. Single multi-certified supplier (us, with ISO 9001 + ISO 13485 + AS9100). Higher per-unit cost; simpler supply chain.

The customer’s analysis weighed cost savings (Strategy A) against supply chain complexity (managing three suppliers, cross-program coordination, multiple supplier qualification programs). They chose Strategy C — single multi-certified supplier — based on the calculation that supply chain simplification across the three programs saved more than the per-unit premium cost.

Outcome: Three years into the relationship, all three programs run smoothly. The customer’s supplier management overhead is minimized; cross-program design collaboration accelerates new product development; supplier consolidation simplifies their procurement workflow. The per-unit cost premium has been offset by program efficiency gains.

This pattern — multi-certified supplier serving multi-industry customer — has become more common as customers consolidate their supply bases. The strategic value of multi-certification is increasingly recognized.

Common Misunderstandings

Patterns we see in supplier qualification conversations:

Treating ISO 9001 as equivalent to industry certifications. ISO 9001 is the foundation but doesn’t include industry-specific requirements. AS9100, IATF 16949, and ISO 13485 add substantial industry-specific content beyond ISO 9001.

Assuming all aerospace suppliers need AS9100. Lower-tier aerospace work, MRO services, and some specialty programs work with ISO 9001 suppliers under prime contractor oversight. AS9100 is required at higher tiers; lower tiers may use ISO 9001 with prime contractor compensating controls.

Confusing IATF 16949 with ISO/TS 16949. IATF 16949 (2016) replaced ISO/TS 16949. Suppliers still claiming “ISO/TS 16949” certification are out of date.

Assuming ISO 13485 implies FDA registration. ISO 13485 is the QMS standard; FDA registration is a separate regulatory action. Both are typically required for US medical device programs.

Underestimating multi-certification overhead. Multi-certified suppliers carry real overhead — separate audits, separate documentation streams, distinct customer-specific requirements. The overhead is real but justified for multi-industry programs.

Bottom Line

AS9100, IATF 16949, and ISO 13485 are the three industry-specific QMS standards governing aerospace, automotive, and medical device manufacturing. Each builds on ISO 9001 with industry-specific additions — risk management depth, supplier qualification rigor, FAI/PPAP/CAPA, traceability requirements. For cable suppliers, certification strategy follows customer mix; multi-industry suppliers maintain multiple certifications at substantial documentation overhead but enable programs across regulated industries. For procurement teams, matching supplier certifications to actual program requirements (and not over-specifying) optimizes cost while ensuring compliance. The certification investment is real and worth paying for safety-critical applications; ISO 9001 alone covers commercial and general industrial work without the cost premium.

Related Reading

• ISO 13485 Medical Workflow Guide — medical QMS deep dive.
• IPC/WHMA-A-620 Complete Guide — workmanship standard.
• Crimping Fundamentals — process fundamentals.
• Medical Cable Assembly — medical cable product range.
• Automotive Solutions — automotive industry solutions.
• Aerospace Solutions — aerospace industry solutions.

---

QMS-Aligned Cable Quote?

Send us your application and required QMS certification (AS9100, IATF 16949, ISO 13485, or ISO 9001 baseline). We’ll quote within 5-10 days with documentation of relevant certifications and supplier qualification capabilities.