Aerospace & defense · quality, special processes, export and cybersecurity
Aerospace and defense manufacturing standards, explained.
Aerospace and defense work adds layers on top of ordinary quality: product safety, configuration control, first article inspection, accredited special processes, controlled materials, export law and cybersecurity. Each one changes how a machine is bought, run, moved and sold.
Reviewed October 7, 2026Independent reference19 standards on this page
Why it matters even if you never ship a flight part
These requirements flow down through purchase orders. A three-person shop machining brackets for a Tier 2 supplier can be bound by AS9100 clauses, a first article inspection, DFARS metal restrictions and CUI handling rules, all from the paperwork attached to one order. The machine on the floor is part of that chain: its capability, its location and its control software are all things the standards care about.
The machine is part of the approved process
Under AS9102, moving a part to a different machine, changing the NC program, changing the location of manufacture or tooling, or a two-year lapse in production can each require a new full or partial first article inspection when the change can affect fit, form or function. Buying a replacement machine is not just a capital decision; it is a process change your customers may need to approve.
Aerospace & defense
Aerospace quality systems (IAQG 9100 series)
AS9100 → IA9100
Quality management systems — Requirements for aviation, space and defense organizations
Issued by IAQG; published as AS9100 (SAE), EN 9100 and JIS Q 9100 · certifiable
ISO 9001 plus the requirements aerospace customers consider non-negotiable: product safety, counterfeit-part prevention, configuration management, risk management in operations, first article inspection, control of special processes, key characteristics and on-time delivery measurement. Certified organizations are listed in the IAQG OASIS database.
Manufacturer
The usual entry ticket for aerospace and much defense machining. Expect auditors to look at how you control NC programs, tooling, first articles and process changes, including machine changes.
Seller
A machine sold out of an AS9100 shop often comes with useful evidence: maintenance logs, calibration and capability records. Ask for it. The certificate itself does not transfer to the buyer.
End user
If you buy a machine to bring work in-house, your own system must cover it, and your customers may require notification or new first articles for the parts you move onto it.
Status (reviewed October 7, 2026): AS9100D (2016) is the current certifiable revision. IAQG is revising the 9100 series under a single name, IA9100 (with AS9110 and AS9120). IAQG had not confirmed a binding publication date at the time of review; industry expectations range from late 2026 to 2027, with a transition window of about three years.
Quality management systems for aviation maintenance organizations
Issued by IAQG / SAE · certifiable
The 9100-series variant for maintenance, repair and overhaul organizations, with requirements for airworthiness, maintenance records and human factors.
Why it matters: Relevant when a shop repairs or overhauls aircraft components rather than producing new parts.
Quality management systems for aviation, space and defense distributors
Issued by IAQG / SAE · certifiable
The 9100-series variant for stockists and distributors of parts and materials: traceability back to the original manufacturer, split-lot control, shelf-life and counterfeit prevention.
Manufacturer
Buy aerospace raw material and hardware from distributors that can prove traceability; AS9120 is the usual evidence.
Seller
Anyone reselling aerospace parts, hardware or certified material (including surplus from a closing shop) should expect buyers to ask for the full certification chain.
End user
Parts without a documented chain of custody may be unusable on aerospace work regardless of price.
Aerospace series — First article inspection requirement
Issued by IAQG / SAE
Defines first article inspection (FAI): a complete, documented verification that the first production part made by a defined process meets every drawing and specification requirement, recorded on three forms (part number accountability; product accountability for materials, special processes and functional tests; and characteristic accountability for every dimension and note).
Manufacturer
A new or partial (delta) FAI is required after a change in design; a change in manufacturing source, process, inspection method, location of manufacture, tooling or materials that can affect fit, form or function; a change in the NC program or its translation to another medium; a natural or man-made event that may affect the process; or a lapse in production of two years.
Seller
When a machine leaves a shop, any aerospace part that ran on it will need at least a delta FAI wherever it runs next. That is a real cost for the buyer, and worth knowing when you price the machine with its jobs.
End user
Budget the FAI when you move work to a new or used machine. A capable machine with good documentation shortens it; a mystery machine lengthens it.
Status (reviewed October 7, 2026): AS9102 Revision C (2023) is current. It added a required reason for a full or partial FAI on Form 1 and strengthened requirements around special-process documentation.
Requirements for advanced product quality planning (APQP) and production part approval process (PPAP)
Issued by IAQG / SAE
Aerospace’s version of the automotive APQP and PPAP disciplines: planning a new part’s process, risks (PFMEA), control plan and measurement systems, then proving the process with a PPAP package before rate production.
Why it matters: Machine selection is a planning output under APQP. The capability you can demonstrate on the chosen machine feeds the control plan and the PPAP.
How to identify key characteristics (features whose variation most affects fit, performance or service life) and keep their variation under control, typically with statistical process control.
Why it matters: Key characteristics are where machine accuracy and repeatability (measured under ISO 230) turn directly into scrap or acceptance.
AESQ quality management system requirements for aero engine design and production organizations
Issued by AESQ / SAE
Supplementary supplier quality requirements developed by the Aerospace Engine Supplier Quality (AESQ) group and used by major aero-engine manufacturers, layered on top of AS9100.
Why it matters: Engine work (rotating parts in titanium and nickel alloys) carries some of the most demanding process-control and inspection expectations in machining.
National Aerospace and Defense Contractors Accreditation Program
Issued by Performance Review Institute (PRI) · accreditation
Industry-managed accreditation of special processes, where the result cannot be fully verified by inspecting the finished part: heat treating, chemical processing, coatings, welding, nondestructive testing, materials testing and nonconventional machining (such as EDM and laser processes), among others. Audits are process-specific and very detailed.
Manufacturer
If a customer requires a Nadcap-accredited source for a process, an unaccredited shop cannot perform it on that customer’s parts, however good the result looks.
Seller
Process equipment from an accredited line (furnaces, EDMs, NDT systems) is worth more with its calibration, survey and maintenance records intact.
End user
Buying a furnace or EDM to bring a special process in-house means earning accreditation, not just installing the machine.
Requirements for temperature measurement in thermal processing: thermocouples, instruments, system accuracy tests and temperature uniformity surveys of furnaces.
Why it matters: A used heat-treat furnace’s value for aerospace work depends on whether it can pass AMS2750 surveys for the required furnace class and instrumentation type.
Thousands of material and process specifications (for example, AMS 4911 for Ti-6Al-4V sheet and plate) that define chemistry, condition, properties and testing. Drawings call them out; material certifications must match them exactly.
Why it matters: Substituting a “near-equivalent” alloy or temper is a nonconformance, no matter how well it machines.
Counterfeit electronic parts avoidance / Counterfeit materiel avoidance
Issued by SAE International
AS5553 covers detection, avoidance, mitigation and disposition of counterfeit electronic parts; AS6174 extends the approach to other materiel such as fasteners, bearings and raw material.
Why it matters: Machine sellers and rebuilders source replacement drives, boards and spindle bearings; on defense-related equipment, provenance of those parts can matter.
U.S. defense acquisition, export and cybersecurity
DFARS 252.225-7009
Restriction on acquisition of certain articles containing specialty metals
Issued by U.S. Department of Defense (DFARS)
Requires that specialty metals in many defense items (certain steels, nickel and cobalt alloys, titanium and zirconium alloys) be melted or produced in the United States or a qualifying country, subject to defined exceptions.
Manufacturer
Material certifications must show compliant melt source; non-compliant stock can make finished parts unacceptable.
Seller
Selling surplus bar or plate to defense shops? Keep the mill certs with the material; without them it is general-purpose stock.
End user
Flowdowns may require DFARS-compliant material even several tiers down.
Contractor counterfeit electronic part detection and avoidance system; sources of electronic parts
Issued by U.S. Department of Defense (DFARS)
Require covered contractors to maintain a counterfeit-electronic-part detection and avoidance system and to buy electronic parts from original manufacturers, authorized sources or contractor-approved suppliers.
Why it matters: Applies to electronic parts in delivered items; machine builders and integrators supplying defense programs need traceable electronics.
International Traffic in Arms Regulations (22 CFR Parts 120–130)
Issued by U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Controls the export and temporary import of defense articles, defense services and related technical data on the U.S. Munitions List. U.S. persons that manufacture or export defense articles generally must register with DDTC (22 CFR part 122), even if they never export.
Manufacturer
Drawings, models, CAM files, NC programs and inspection data for ITAR parts are technical data. Access by foreign persons (including visiting service technicians) can be an export.
Seller
Before a machine leaves an ITAR shop, wipe the control memory, any DNC or PC storage and probe or macro libraries that could hold controlled programs or data, and document that you did.
End user
Buying a used machine from a defense shop? Ask how the control was sanitized. Bringing on ITAR work? Plan registration, access control and how service visits are supervised.
Issued by U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Most commercial machines are governed by the EAR (15 CFR Parts 730–774) rather than ITAR. Export Control Classification Number 2B001 controls numerically controlled turning, milling and grinding machines, EDMs and certain deep-hole drilling machines that meet multi-axis and very tight positioning-repeatability thresholds, measured under ISO 230-2. Related entries include 2B201 (machine tools with nuclear-proliferation relevance) and 2B991 (other numerically controlled machine tools, controlled more lightly).
Manufacturer
Builders classify their machines and may fit export-controlled models with relocation detection that disables the control after a move until the builder re-authorizes it.
Seller
Exporting a used five-axis machine or a high-accuracy grinder may require an export license depending on its classification, destination and end user. Classify before you quote overseas, and screen the buyer against U.S. restricted-party lists.
End user
Ask whether the machine has relocation detection and what reactivation requires before you pay for rigging.
Safeguarding covered defense information; protecting Controlled Unclassified Information (CUI)
Issued by DoD / NIST
DFARS 252.204-7012 requires contractors that handle covered defense information to protect it using the security requirements in NIST SP 800-171 and to report cyber incidents. DoD contracts continue to reference Revision 2 of SP 800-171.
Why it matters: Networked CNC controls, DNC servers, CAM workstations and file shares that hold CUI drawings or programs are in scope. That shapes how new machines are networked and how old ones are retired.
Cybersecurity Maturity Model Certification (32 CFR Part 170; DFARS 252.204-7021)
Issued by U.S. Department of Defense
DoD’s program for verifying that contractors actually implement required cybersecurity: Level 1 for Federal Contract Information, Level 2 (aligned to NIST SP 800-171) for CUI, Level 3 for the most sensitive programs. Assessments are self-assessments or third-party (C3PAO) assessments depending on level and contract.
Manufacturer
Plan for CMMC on any work involving CUI. The rule itself remains in force even while the rollout timing shifts.
Seller
Machine and software vendors serving defense shops are increasingly asked how their connected products support CUI controls.
End user
Treat the machine network as part of the assessed environment.
Status (reviewed October 7, 2026): Phased contract implementation began November 10, 2025. In July 2026 DoD suspended advancement to Phase 2; DFARS Class Deviation 2026-O0025, Revision 3 (September 3, 2026) allows requiring activities to accept self-assessments for Levels 1 and 2 during the suspension and sets November 10, 2028 as the date from which CMMC clauses apply broadly to contracts involving FCI or CUI. Baseline NIST SP 800-171 Rev. 2 requirements under DFARS 252.204-7012 continue. Check the current status before relying on any date.
Machine Blue Book does not sell certification, consulting or machines, and is not affiliated with any standards body named here. Standards are copyrighted by their publishers; this reference describes them in our own words and links to the issuing organization. It is educational, not legal or regulatory advice. Facts reviewed October 7, 2026. Found an error or a change? Tell the editor.