Back to Knowledge Hub
Audit Readiness 8 min read September 12, 2026

Aeronautical Quality Surveillance Audit Preparation: AS9100D Checklist for Defence Suppliers

Aeronautical quality assurance authorities conduct rigorous Clause 8.7 and 10.2 surveillance at defence suppliers. This is the exact checklist your quality team must prepare.

Understanding Aeronautical Quality Oversight in AS9100D Surveillance

Aeronautical quality assurance authorities function as the oversight body for aeronautical systems and defence equipment. Suppliers to defence public sector units and national aerospace programs are subject to rigorous quality oversight that operates in parallel with standard AS9100D registrar surveillance.

Quality surveillance representatives perform:

•
**Pre-Production Quality Plans (PPQP) reviews** before manufacturing begins
•
**Stage inspections** at key manufacturing checkpoints
•
**Record reviews** of NCR registers, MRB minutes, and CAPA status
•
**Source acceptance inspections** before despatch clearance

Aerospace Quality Surveillance NCR Record Requirements

Unlike civilian registrar audits, defence quality audits have specific documentation expectations shaped by Defence Procurement Procedures and stringent quality heritage:

Mandatory Records for Every Nonconformance:

1Internal NCR Number

— sequential, never reused, cross-referenced to customer surveillance discrepancy numbering

2Stage of Detection

— Vendor inspection, Resident inspector stage inspection, or Customer return

3Technical Description against Drawing/Specification

— must reference drawing number, revision, and specific characteristic. "Dimensional nonconformance" is insufficient without balloon reference and actual measured value

4Quantity Affected

— lot size, quantity inspected, quantity rejected, quantity quarantined

5Containment Segregation Evidence

— quality representatives physically verify quarantine during stage inspections. Red tags must be in place and legible

6MRB Decision

— documented with attendees, designation, and formal disposition outcome. Verbal MRB decisions carry significant audit risk

7Design Authority Concession

— for any Use As-Is disposition on a customer-controlled drawing, written concession from the accredited design authority is mandatory

8Root Cause Analysis

— for recurring defects, a structured 8D or 5-Why format is required. "Cause: Tool wear" without corrective action on the tool change frequency process is a finding


Special Considerations for Defence Aircraft Builders & Aerospace Manufacturers

No Cloud Storage of NC Records for Classified Programs

For shops working on sensitive defence programmes, quality records including NCR logs must remain on-premise. Foreign cloud-hosted quality tools create compliance risk where data must remain within approved quality infrastructure boundaries.

Immutable Record Architecture

Surveillance auditors specifically check for evidence of altered records. Quality records must show creation timestamp, modification history, and responsible person at each stage. Spreadsheets with untracked edits before an audit are an immediate major finding.

Long-Term Retention

Defence programme NCR records are subject to programme-life retention requirements, which can extend to 40+ years for flight safety critical parts.


How Defence Suppliers Pass Quality Audits Consistently

Manufacturers passing quality surveillance consistently share three operational practices:

1NCR is opened the same day the nonconformance is detected

— no batching nonconformances for weekly entry

2No NCR is dispositioned without physical review

— MRB is a scheduled meeting with minutes, not an informal chat

3CAPA verification evidence is collected at the next production lot

— not at the next audit

Purpose-built AS9100D quality software enforces all three practices at the workflow level, making compliance the default path rather than an audit-week scramble.

Download the Aerospace & Defence AS9100D Audit Readiness Checklist — 20 mandatory evidence points.Includes Excel sheet, CSV mapping, and Clause 8.7 / 10.2 registrar checklist.
Get Free Toolkit