AS9100 Certification in Four Months, From a Standing Start

The situation

The business had assets most aerospace suppliers would envy — engineering capability, research and development facilities and test infrastructure built for one of the most demanding environments in motorsport. What it did not have was a way to sell any of it to aerospace customers.

The barrier was not capability. It was approval. Aerospace primes and their tier-one suppliers do not place work with an organisation that cannot demonstrate a quality management system meeting AS9100, regardless of how sophisticated its engineering is. Motorsport and aerospace are both unforgiving sectors, but they evidence control in entirely different ways: motorsport proves itself every fortnight on a timing screen, while aerospace requires the documented, auditable trail that lets a part be traced and justified years later.

A new management team had been brought in to open this line of business. They had a commercial window and very little internal resource to throw at compliance work.

The work came to us on a referral from another motorsport business we had worked with.

What we found

Two things shaped the whole approach.

The engineering discipline was already there. This is rarer than it sounds and it changed the sequencing entirely. We were not being asked to fix how the business worked — we were being asked to describe how it already worked, in the language and evidence structure the standard requires, and to close the specific gaps where motorsport practice and aerospace expectation genuinely diverge. Configuration management, traceability of material and process, and formal nonconformance handling were the real work.

Resource was the binding constraint, not time. The team could give us very little of their own capacity. That ruled out the conventional approach of embedding a consultant to coach a client team through writing their own system over a year. The system had to be built largely by us, but built in a way the client could own on day one rather than inherit as a document set they had never seen before.

What we did

We wrote the quality management system around the operation the business actually ran, rather than around clause numbers — the same principle we apply everywhere, but under unusual time pressure it matters more, not less. A system modelled on the standard's structure would have been faster to draft and far slower to adopt.

The work ran in parallel rather than in sequence, which is how four months was possible at all. Process design, documentation, training and evidence generation happened alongside each other, with the certification body engaged early so the audit date anchored the plan rather than following it.

Anna Lavender-Moore led the engagement and wrote the system. Because an auditor cannot be independent of work they produced themselves, I ran the internal audit programme against it rather than Anna — the same separation we would insist on inside a client's business, applied to our own. It is not a technicality: an internal audit carried out by the person who wrote the procedure tests whether the document says what they meant, not whether the business does what the document says.

We raised and closed the findings from that audit before the certification body arrived. We also planned, booked and hosted the certification audit on the client's behalf — selecting and engaging the certification body, scheduling the visit around the readiness of the system rather than around optimism, and running the audit day itself. For a management team that had never been through one, with almost no internal resource to spare, that removed a great deal of risk from the single day the whole project depended on.

To be precise about the boundary: we are not a certification body and cannot certify anyone. The certificate came from an accredited certification body. Our part was writing and deploying the system, auditing it internally, managing the certification process end to end, and making sure nothing in it came as a surprise on the day.

The result

The business was certified to AS9100 four months from a standing start, with a system built around its own processes rather than a template.

Commercially, that opened a market that had previously been closed to it. A motorsport engineering operation with genuine aerospace approval can sell capacity, capability and test facilities to a customer base that could not previously have placed the work, however impressive the facilities were.

Four months is fast. It was achievable because the underlying engineering discipline was strong, the management team made decisions quickly, and the scope was defined tightly around what the business actually intended to sell. We would not hold it up as a typical timeline — our step-by-step guide to AS9100 certification sets out a more usual one.

What they took away

A certified system that described their own operation, and a management team that had now been through a certification audit start to finish and knew exactly what one involves — which matters, because they would be facing surveillance visits on their own.

The wider point is one we make often: certification is a commercial instrument, not an administrative one. This business did not pursue AS9100 because it wanted a certificate. It pursued it because the certificate was the entry condition for a market it had decided to enter, and the work was scoped accordingly.

Frequently asked questions

Is four months realistic for AS9100 certification?

It is at the fast end and it required specific conditions: strong existing engineering discipline, fast decision-making, a tightly defined scope and a certification body booked early. A more typical timeline from a standing start is considerably longer, particularly where processes need improving before they can be documented.

Can you write the system for us rather than coaching us through it?

Yes, where resource genuinely does not exist — as here. The risk is a system the client does not recognise, so we build it around the real operation and involve the people who will run it at the points that matter. A system nobody owns fails its second surveillance visit, whoever wrote it.

We work to demanding standards in another sector. Does that count?

It helps enormously with the engineering and not at all with the evidence. Sectors like motorsport and medical devices build real discipline, but aerospace asks you to prove control through documentation and traceability in a particular way. Expect the gap to be in configuration management, traceability and formal nonconformance handling rather than in capability.

Do you certify the system yourselves?

No. We are not a certification body and never will be — the certificate has to come from an accredited body. What we do is write and deploy the system, carry out internal and second-party audits, and plan, book and host the certification audit itself, so a client who has never been through one is not managing the process alone.

We build quality management systems around how a business actually runs. See our quality management work, our startup structures service for new ventures, or get in touch.