Aerospace & DefenseFree worksheetPDF, Excel, Word exportAerospace

AS9100 Internal Audit Programme Planner Worksheet

AS9100 requires an internal audit programme that takes into account the importance of the processes, customer feedback, changes and the results of previous audits. This worksheet lets you list each process, set its risk and frequency, and see the total annual workload.

Download:
Process or areaRisk levelLast audit resultAudits per yearHours per audit (h)Annual hoursNext audit date
4
12
16
3
10
3
Total audits per year
9
Total audit hours
48
Auditor days (6 productive hours per day)
8
Average hours per process
8
Hours including 40% for preparation and reporting
67.2

Risk levels and frequencies are yours to justify. AS9100 clause 9.2 expects the programme to consider process importance, changes and past audit results. Keep auditors independent of the area they audit.

Audit data from your ERP

Optional: we can review how nonconformance and corrective action data could feed your audit programme.

Optional. The tool and every export work without this. No spam.

How to use it

List every process or area in your quality system, including support processes like training and calibration. Rate each for risk, note the last result, and set audits per year and hours per audit. The annual hours column calculates automatically and the summary adds preparation and reporting time. Export to Excel to share the schedule or attach it to management review.

  • Audit high-risk processes more often than once a year.
  • Increase frequency after major findings.
  • Plan next audit dates so no month is overloaded.

Choosing frequency

A common starting pattern is once per year for low-risk processes, twice for medium or those with recent findings, and more for high-risk or customer-sensitive ones like special processes and purchasing. The audit programme should also be revisited after process changes, new customer requirements or an escape. Document the rationale so an auditor from a certification body can see how you decided.

Common mistakes

Auditing by clause rather than by process, so related requirements are never tested end to end. Letting the same person audit their own area. Scheduling every audit in the last quarter. And forgetting that follow-up of corrective actions also takes time. The 40% allowance in the summary is a planning default, adjust it to your own records.

Frequently Asked Questions

How often must internal audits happen?

AS9100 does not give a fixed number. It requires audits at planned intervals covering the whole quality system, and your programme must consider risk and prior results. Most organisations cover every process at least yearly.

Can I audit by process instead of clause?

Yes, and it is the better approach. Process audits follow work from input to output and test several clauses at once, which finds more real problems than clause-by-clause checking.

How many hours per audit should I plan?

It depends on process size and risk. Three to eight hours is typical for a site audit of a single process. Use actual time from past audits to adjust the figures here.

Who can be an internal auditor?

Anyone trained and competent in the standard and audit technique who is independent of the area audited. Keep training records, since certification bodies ask for evidence of auditor competence.

If audit findings and corrective actions are tracked in separate spreadsheets, we can help link them to your ERP and quality records.