AS9100 Rev D Surveillance Trap: Why Clause 8.1.3 Trips Up Aerospace SMEs Every Single Cycle

Clause 8.1.3 is one of the shortest clauses in AS9100 Rev D. It's also one of the easiest to get through certification and then quietly let drift.

The pattern is familiar. During implementation someone writes a product safety procedure, runs a hazard review and adds a line to the awareness briefing, and the Stage 2 auditor accepts it. A year later the hazard review hasn't been touched, new starters never got the briefing, and an escape with a clear safety angle was closed as a routine NCR. At surveillance, that gap doesn't take long to find.

What 8.1.3 actually asks for

In plain terms, AS9100D asks you to plan, implement and control the processes you need to assure product safety across the whole life of the product, scaled to your organisation and what you make.

Three points in that sentence matter:

• "Plan, implement and control" means it's a process, not a document. It needs inputs, owners, outputs and some way of knowing it's working.


• "The entire product life cycle" goes beyond your shop floor. It covers what you buy in, how you make and inspect it, how you pack and ship it, and what you learn after delivery.


• "As appropriate to the organisation and the product" gives you room to scale. It doesn't give you room to ignore it.

The standard defines product safety, roughly, as the product doing what it was designed to do without unacceptable risk of harm to people or damage to property. Reading it as "product integrity" helps a build-to-print shop see why it applies to them.

The clause note lists examples of the processes involved:

• Assessing hazards and managing the associated risks, tied to your operational risk management (8.1.1).


• Managing safety-critical items.


• Analysing and reporting events that have affected safety.


• Communicating those events and training people.

They're examples, not a mandatory checklist. But if you've decided one of them doesn't apply, expect to be asked why.

It isn't only 8.1.3

Product safety turns up in other places in Rev D too, and auditors often follow the thread between them:

• Awareness (7.3). People doing work under your control should be aware of their contribution to product safety. There's no record requirement for this, so it gets tested by talking to people.


• Information for external providers (8.4.3). You need to flow down critical items and key characteristics, and make sure your suppliers' people know their contribution to product safety too.


• Production controls (8.5.1). Identified critical items, including key characteristics, need controlling and monitoring under established processes.


• Design outputs (8.3.5). If you're design-responsible, your outputs should specify critical items and the actions they need.

8.1.3 is where product safety is written down. The proof it works lives in your training, POs, routers and inspection plans.

Why it trips up SMEs at surveillance

None of this means SMEs are careless. The clause just rewards a one-off effort at certification and punishes it later.

It was treated as a project deliverable. A procedure and a hazard register were produced for Stage 2 and never connected to day-to-day planning. New part numbers, new customers and new processes came in without anyone asking the product safety question.

"Not applicable" was concluded too quickly. "We only machine to print, so product safety doesn't apply to us" is a common position. Some guidance accepts that a simple part may need little more than a documented assessment. But IAQG's own product safety awareness material is clear that every part, however simple, contributes to the safety of the end product. If you've concluded there's limited risk, the reasoning has to hold up, part family by part family.

Critical items aren't visible where the work happens. A customer flags a key characteristic on the drawing or the PO, but the router, the inspection plan and the supplier PO don't carry it through. The auditor picks one critical item and follows it from contract review to dispatch. That's where it breaks.

Awareness is a slide, not an understanding. The induction pack mentions product safety, and the training matrix shows a tick. Then the auditor asks an operator what happens if this part is wrong, and gets a shrug.

Events aren't recognised as safety events. Escapes, customer complaints and supplier NCRs get the normal NCR and corrective action treatment. That's fine. But nobody asks whether the event had a safety dimension, whether it needed reporting to the customer, or what the lessons are for similar parts.

Lessons learned don't loop back. Even after a good investigation, the hazard assessment, awareness content and supplier flow-down stay the same.

What auditors typically look for

Expect a surveillance auditor following the process approach to:

• Ask who owns product safety and how it's planned for new work, not just existing parts.


• Sample a recent order with a critical item or key characteristic and trace it through contract review, planning, purchasing, production, inspection and release.


• Interview operators and inspectors about how their work contributes to product safety.


• Look at recent NCRs, escapes and complaints and ask how the safety angle was assessed, and whether anything was reported to the customer.


• Check that supplier purchase orders flow down critical items and product safety awareness.


• See whether hazard or risk records have actually changed since certification.


• Look for evidence that internal audit has tested 8.1.3 as a process, not just ticked it.

The clause has no explicit documented-information requirement. But you'll struggle to show "plan, implement and control" without evidence, which usually sits in your risk records, product information, training records and NCR system rather than one standalone file.

Pre-surveillance checklist for 8.1.3

Run through this a few weeks before your CB visit:

• Owner and process. Is there a named owner? Does the product safety process describe how hazards are identified for new parts, new customers and changes, not just at certification?


• Hazard and risk review is current. Has it been reviewed since your last audit? Does it cover every part family and process, including outsourced special processes?


• "Not applicable" decisions are justified. If you've concluded limited risk for any product, is the reasoning written down and still true?


• Critical items list. Do you know which current jobs have critical items or key characteristics? Are they flagged on routers, inspection plans and work instructions?


• Flow-down. Pull three recent supplier POs. Do they carry critical items, key characteristics and product safety awareness requirements where relevant?


• One full trace. Pick one critical item and walk it from contract review to dispatch yourself before the auditor does.


• Awareness that sticks. Ask three people on the floor, including a recent starter, how their work affects product safety. Are their answers specific to your parts?


• Event assessment. For the last year's NCRs, escapes and complaints, can you show where someone asked "is there a safety angle here?" and what was decided?


• Reporting. Do you know your customers' requirements for notifying them of escapes or safety-related events? Did you meet them?


• Lessons learned loop. Has anything you learned changed the hazard review, the training content or the supplier flow-down?


• Internal audit coverage. Has 8.1.3 been audited as a process since certification, by following the trail rather than reading the procedure?

If several of these made you wince, better to find out now than in the closing meeting.

A note on what's coming

The IAQG is revising the 9100 series, and the next edition is expected to be published as IA9100. IAQG material has signalled that product safety will be expanded. Timing and final wording aren't confirmed, so we won't guess at dates. A product safety process that actually runs today will be far easier to move across than one that only exists on paper.

How TAC helps

TAC is auditor-led. We've sat on the other side of the table, and we look at your system the way a surveillance auditor will: following trails, talking to people and testing whether the process actually runs.

For 8.1.3 that usually means:

• A focused review of your product safety process against how you really plan, buy, make and release.


• A walk-through of critical items and flow-down using your live jobs.


• Practical, part-specific awareness content your operators will remember.


• A pre-audit dry run that tests 8.1.3 alongside the rest of your surveillance scope.

Once it's working, it has to stay working. Where you want a permanent home for the risk records, training and CAPA that keep it alive, we recommend PICMS as the platform.

Next step

If your AS9100 surveillance is coming up and you're not sure 8.1.3 would survive a proper trace, talk to TAC. We'll tell you plainly whether you need a quick health check, a dry run, or some help rebuilding the process.

---


---

Follow us

• Instagram: @trainingassuranceconsultancy


• Facebook: facebook.com/trainingassuranceconsultancy


• LinkedIn: Training Assurance Consultancy

Sources

• Advisera 9100 Academy (Mark Hammar): How to implement product safety requirements according to AS9100 Rev D, 27 September 2018. https://advisera.com/9100academy/blog/2018/09/27/how-to-implement-product-safety-requirements-according-to-as9100-rev-d/


• Richard C. Randall: AS9100 – Product Safety (8.1.3; definitions 3.2 critical items and 3.4 product safety; related clauses 7.3, 8.4.2, 8.4.3, 8.5.1, 8.3.5). https://richardrandall.com/doku.php?id=articles%3Aas9100d_product_safety


• Aviation Suppliers Association, Walter Sam O'Connor: Product Safety as it applies to AS9100D/AS9110C/AS9120B (workshop, July 2017, based on IAQG SCMH material). https://www.aviationsuppliers.org/ASA/files/ccLibraryFiles/Filename/000000001848/SamO'Connor-WorkshopF.pdf


• IAQG Supply Chain Management Handbook: Make (SCMH 3.9 Product Safety Awareness; SCMH 3.9.2 Product Safety Awareness Guidance Rev B, 29 Sep 2021). https://scmh.iaqg.org/scmh-make/


• IAQG: IA9100 Key Change Summary (November 2023). https://iaqg.org/wp-content/uploads/2019/10/IA9100-Key-Changes-Clause-View.pdf


• BSI: Embracing changes to IAQG aerospace standards. https://www.bsigroup.com/en-GB/insights-and-media/insights/blogs/embracing-changes-to-iaqg-aerospace-standards/


• PJR: Update on the 9104 series, 9101 and AS revision (webinar slides, 11 November 2025). https://www.pjr.com/downloads/webinar_slides/11.11.2025_AS-Revision.pdf