Aerospace & DefenseFree templatePDF, Excel, Word exportAerospace

AS9100 Risk Assessment Template with Organizational Context and Quality Objectives Examples

AS9100D asks you to understand your context, know who your interested parties are, plan for risks and set measurable objectives. This template puts those four requirements in one document with a worked example you can overwrite.

Fill in

Live preview
Download:

AS9100D Risk Assessment, Organizational Context and Quality Objectives Template

AS9100D Context, Risk and Objectives: Ridgeline Aerospace Machining Inc

Scope: Machining, deburr, inspection and shipment of titanium and aluminium structural parts Review date: 2026-11-05

1. Organizational context (clause 4.1)

TypeIssueEffect on QMSMonitoring
InternalAging 5-axis fleet with rising unplanned downtimeDelivery and capacity riskMonthly OEE and downtime review
ExternalPrimes are flowing down counterfeit part prevention and CMMC requirementsNew flowdown and system obligationsQuarterly customer and regulation review

2. Interested parties (clause 4.2)

PartyRequirementProcess that addresses it
Tier 1 prime customerOn-time delivery of 98 percent or better and zero escapesProduction planning, inspection, shipping
Regulators and aviation authoritiesApproved sources, records, product safetyQuality records, supplier control
EmployeesSafe, trained and stable workforceTraining, HR, EHS

3. Risk assessment (clause 6.1)

Risk: Single-source heat treat supplier loses Nadcap accreditation and halts deliveries of finished parts Severity: 4 Likelihood: 2 Risk score: severity multiplied by likelihood. Action is required on scores of 10 or above.

Mitigation: Qualify a second Nadcap heat treat source and hold four weeks of safety stock on top-ten part numbers

4. Quality objectives (clause 6.2)

ObjectiveMeasureTargetOwnerDue
Raise on-time delivery to 98 percent by December 2026Percent of lines shipped on time98 percentOperations managerDec 2026
Zero customer escapesEscapes per quarter0Quality managerOngoing
Reduce first article rejectionPercent of FAIs rejectedBelow 5 percentQuality engineeringJun 2027

Approvals

Prepared by / Date
Quality manager / Date
Top management / Date

A starting point to adapt. AS9100D expects risk thinking at the organizational level and operational risk management under clause 8.1.1, so link this register to the product realization process. Use your own scoring scale if you already have one.

Link risks to live ERP data

Optional review of automating AS9100 metrics from your ERP, on-prem.

Optional. The tool and every export work without this. No spam.

Organizational context and interested parties

Clause 4.1 asks you to determine external and internal issues that affect your ability to deliver conforming product. Keep it practical: a short list you review at least once a year and when something changes. Clause 4.2 asks for the interested parties relevant to the QMS and their requirements. In aerospace those usually include prime customers, aviation authorities, certification body, suppliers and employees. Link each issue to a process that deals with it, otherwise auditors see a list that nobody uses.

Scoring risk simply

A 5 by 5 severity and likelihood scale is enough for most suppliers. Multiply the two values, define the score above which action is mandatory, and record the planned action, owner and effectiveness check. The worked example scores a supplier accreditation loss at 8, which is 4 for severity and 2 for likelihood, so you can see how a lower threshold would work. AS9100D also expects operational risk in product realization, covering items like manufacturing process risk, on-time delivery and counterfeit parts.

  • Define the scale in writing, not in someone's head.
  • Record the action, owner, due date and a later effectiveness check.
  • Review the register at management review and after any major nonconformity.

Writing quality objectives that are measurable

Objectives must be consistent with the quality policy, measurable, monitored and updated as needed. A good objective names a measure, a target, an owner and a date. Weak examples are improve quality or increase customer satisfaction. Better examples are on-time delivery at 98 percent by year end, zero customer escapes per quarter, or first article rejection below 5 percent. Choose a small number linked to the risks you actually found.

Frequently Asked Questions

Does AS9100D require a formal risk assessment?

It requires risk-based thinking: planning actions to address risks and opportunities in clause 6.1 and managing operational risk under 8.1.1. It does not prescribe a scoring method, so a simple severity by likelihood register is acceptable if used consistently.

What belongs in an organizational context analysis?

A short list of external issues, such as regulation, customer flowdowns, market and supply chain, and internal issues, such as capacity, skills, equipment and culture, each with its effect on the QMS and how it is monitored. SWOT or PESTLE is allowed but not required.

How many quality objectives should an aerospace supplier have?

There is no required number. Most small and mid-sized suppliers use three to six, each with a measure, target, owner and date, covering delivery, quality escapes, first article or process performance, and customer satisfaction.

How often should context and risks be reviewed?

At least when management review happens and whenever something significant changes, such as a new customer flowdown, a supplier failure or a new process. Many sites review the register quarterly and the context annually.

Netray can help connect your ERP and quality records to this register through a private AI layer, so on-time delivery and escape data stays current without leaving your network.

Keep exploring

Free tools

ERP fixes and how-tos

Guides