Supply chain quality sits at the core of aerospace and defence manufacturing. Organisations working within an AS9100 environment must control every stage of the product lifecycle with precision, discipline and full traceability. Any weakness in supplier control, configuration management or design integrity introduces significant risk to safety, compliance and contractual performance.

A robust supply chain quality framework does not rely on inspection alone. It demands structured governance, integrated systems and clear accountability across every tier of the supply chain.

Why supply chain control matters in AS9100

AS9100 places strong emphasis on the control of externally provided processes, products and services. Organisations must make sure suppliers consistently meet stringent requirements, not only for product conformity but also for regulatory compliance, documentation accuracy and configuration control.

The goal is a controlled, transparent supply chain that delivers:

  • Full traceability from raw material to finished product.
  • Verified compliance with engineering and regulatory requirements.
  • Consistent product conformity across all batches and builds.
  • Controlled change management throughout the lifecycle.

Without these controls, organisations are exposed to nonconformance, product recalls and customer dissatisfaction.

Key considerations for supply chain quality management

Effective supply chain quality management needs a structured approach that brings together people, processes and technology.

Supplier selection and approval

Define clear supplier approval criteria based on capability, certification, performance history and risk. AS9100-certified suppliers provide a strong foundation, but certification alone is not enough; due diligence through audits and performance monitoring is still needed.

Risk-based thinking

Apply risk-based thinking to all supply chain activities. High-risk components, critical safety items and complex assemblies need enhanced controls, more verification and closer supplier engagement.

Performance monitoring

Monitor supplier performance actively using measurable KPIs such as on-time delivery, product conformity rates, corrective action responsiveness and audit outcomes. This data allows early intervention and drives continual improvement.

Supplier audit strategy and control of high-risk vendors

A robust supplier audit schedule is a fundamental control within an AS9100 system. Supplier audits should not be reactive; they should form a structured, risk-based programme that drives assurance and improvement.

Establishing a risk-based audit schedule

Base the audit schedule on supplier criticality, product risk and historical performance, so resources go where they deliver the most value. A good audit schedule:

  • Prioritises suppliers of critical or safety-related components.
  • Increases audit frequency for poorly performing suppliers.
  • Includes both system and process audits.
  • Covers sub-tier supplier controls where applicable.

Keep the audit plan forward-looking and aligned with business risk and programme requirements.

Controlling high-risk vendors

High-risk vendors, typically those providing complex assemblies, special processes or safety-critical components, need enhanced controls to protect product integrity and compliance. Effective measures include:

  • Increased audit frequency and deeper audit scope.
  • Mandatory First Article Inspection (FAI) to AS9102.
  • Enhanced incoming inspection and verification.
  • Close monitoring of process capability and variation.
  • Formal approval of any process or design changes.

High-risk vendors should also be able to demonstrate robust internal controls, including their own supplier management.

Audit outcomes and continual improvement

Audits must lead to measurable improvement. Every finding should result in structured corrective action, root cause analysis using recognised methods, verification of effectiveness and ongoing performance monitoring. This discipline strengthens supplier capability and reduces long-term risk.

The role of PLM in design control and configuration management

Product Lifecycle Management (PLM) systems play a critical role in supply chain quality. PLM controls product data, manages engineering changes and keeps every stakeholder aligned.

Accurate design control

PLM makes sure all stakeholders work from the latest approved design data, controlling engineering drawings, specifications, revision status and change history. That prevents obsolete or incorrect information being used anywhere in the supply chain.

Configuration management

Configuration management is a fundamental AS9100 requirement: every product build must match its defined configuration baseline. PLM enables organisations to define and control product configurations, track changes through formal approval workflows, maintain a complete audit trail of revisions and ensure consistency across production batches. Without strong configuration management, organisations risk building nonconforming products that fail to meet customer or regulatory requirements.

Flow-down of requirements to suppliers

Flow-down is one of the most critical elements of supply chain quality. Every applicable requirement must transfer clearly and accurately to every supplier in the chain.

Clear communication of requirements

Flow down all relevant requirements, including engineering specifications, quality requirements, regulatory and statutory obligations, customer-specific requirements, and inspection and test criteria. Suppliers must understand and implement them without ambiguity.

Alignment with the bill of materials

Suppliers must work strictly to the defined bill of materials (BOM), the authoritative structure of the product. Key controls include verifying that supplied parts match BOM requirements, aligning part numbers, revisions and specifications, preventing unauthorised substitutions and validating material and component traceability. Any deviation from the BOM introduces configuration risk and potential non-compliance.

Supplier accountability

Hold suppliers accountable for product integrity: verifying conformity before delivery, maintaining accurate records and traceability, managing their own sub-tier suppliers and implementing corrective action where required. Strong contractual agreements and quality clauses reinforce these expectations.

Inspection, verification and validation

Inspection alone cannot guarantee quality, but it remains a vital control. A layered approach typically includes First Article Inspection to validate initial production, incoming inspection based on risk and supplier performance, in-process verification for critical operations, and final inspection before release. Align inspection with risk, so critical items receive the highest level of scrutiny. Commercial off-the-shelf parts need particular care; see our article on COTS components in manufacturing.

Change management across the supply chain

Uncontrolled change is one of the biggest risks in an AS9100 environment. Engineering changes, supplier process changes, material substitutions and manufacturing location changes must all go through formal evaluation, approval and communication before implementation. PLM provides the structure to manage these changes with full visibility across the supply chain.

Driving continual improvement

Supply chain quality is never static. Drive improvement through supplier development programmes, root cause analysis and corrective action, regular performance reviews and close collaboration with key suppliers. Strong supplier relationships enable long-term improvement and greater resilience.

Conclusion

Supply chain quality within AS9100 demands far more than basic compliance. It needs an integrated system that combines robust supplier control, risk-based audit scheduling and enhanced oversight of high-risk vendors. With strong flow-down, strict alignment to the BOM and PLM-based configuration control, organisations protect product integrity and consistently deliver compliant, high-quality products.

Supplier control is also a major theme of the forthcoming IA9100, the successor to AS9100D. Our article on AS9100 to IA9100 covers what is expected to change.

How Hillscom can help

Hillscom helps aerospace and defence suppliers build supplier management, flow-down and configuration control processes that work in practice and stand up at audit. Find out more on our AS9100 page, or get in touch.