Quality & InspectionFree templatePDF, Excel, Word exportAutomotive

IATF 16949 Contingency Plan Example

This is a filled-in IATF 16949 contingency plan example you can edit for your own plant. It covers utility, equipment, labor, supply, disaster and IT interruptions, and the restart checks that keep nonconforming product from shipping after an event.

Fill in

Live preview
Download:

IATF 16949 Contingency Plan Example and Template

Contingency Plan

Acme Precision Components Ltd Site: Plant 2, Stamping and Welding Document: QP-CP-006 Rev C Plan owner: Plant manager Last management review: 2026-09-15

1. Purpose and scope

This plan describes how Plant 2, Stamping and Welding keeps supply of conforming product to customers when normal operations are interrupted. It supports the IATF 16949 requirement for contingency plans (clause 6.1.2.3) and applies to all manufacturing processes and the infrastructure that supports them.

2. Risk identification summary

RiskLikelihood (1-5)Impact (1-5)Plan section
Utility interruption (power, gas, water, compressed air)353
Key equipment failure444
Labor shortage or strike345
Supplier or logistics interruption356
Fire, flood or natural disaster257
IT or cyber disruption348

3. Utility interruption

Standby generator covers presses P1-P3 and weld cells W1-W4 for 36 hours at full load. Heat treat and paint are shut down safely. Fuel contract guarantees delivery within 12 hours.

4. Key equipment failure

Critical equipment: 400 t press P2, laser blanking line, robotic weld cell W3. Critical spares held on site. Alternate tools qualified on press P4. Service contract response time 8 hours.

5. Labor shortage

Cross-training matrix keeps at least 2 qualified operators per critical operation. Temporary agency pre-approved for non-critical roles. Overtime and weekend shifts authorized up to the agreed limit.

6. Externally provided product and logistics

Safety stock of 10 working days on coil steel and 15 on purchased fasteners. Dual-source approved for 80 percent of purchased value. Premium freight authorized by purchasing manager.

7. Fire, flood and natural disaster

Emergency response team and evacuation plan are in place. Customer-owned tooling locations and fixture drawings are stored off site. Alternate manufacturing site and tooling transfer sequence are identified in the recovery table below.

8. IT and cyber disruption

Daily backups of ERP, quality records and control plans, with a restore test each year. Paper fallback travelers and labels are available for each line so production and traceability can continue during short outages.

9. Customer notification and restart

Key customers to notify: OEM A (Tier 1 program), OEM B (service parts). Notify the customer contact within the agreed time of confirming any event likely to affect delivery. After any emergency restart, confirm product conformity before shipment: first-piece approval, verification of setup, and review of all work in process and stock affected by the event.

10. Recovery priorities

PriorityPart familyAlternate source or lineTarget restart (days)
1Safety-related bracketsPress P4, qualified tool set B2
2Weld assembliesWeld cell W1 with fixture transfer5
3Service partsSafety stock, then Plant 110

11. Testing and review

TestMethodFrequencyLast dateResult
Generator and fuel supplyLive load testQuarterly
Evacuation drillDrillAnnual
IT restoreRestore to test serverAnnual
Supply interruptionTable-top simulationAnnual

Approvals

Plan owner / Date
Quality manager / Date
Top management / Date

This is a starting example, not a certified document. Replace every default with your own risks, assets and contacts. IATF 16949 expects plans to be tested periodically, reviewed at least yearly with top management and updated when changes occur, so keep the test log and revision history. Check any customer-specific requirements from your OEMs.

Contingency gap review from your ERP data

Optional: we can check single-source parts, stock days and supplier lead times in your ERP against this plan.

Optional. The tool and every export work without this. No spam.

How to use this example

Replace the sample plant, customers and response text with your own. Start with the risk table: rate each risk for likelihood and impact based on your history, location and supply base, then keep the sections that matter and add any specific to your process, such as a heat treat furnace or a single-source casting. Export to Word or PDF, then hold it in your document control system under a revision number. Keep it short enough that a shift manager can find the right page at 2 a.m.

  • Rate risks on your own site, not generic ones
  • Name an owner and a phone contact for each section
  • Store a printed copy where power or IT may be down
  • Link each plan section to a recovery priority

What IATF 16949 expects

Clause 6.1.2.3 asks the organization to identify and evaluate internal and external risks to all manufacturing processes and infrastructure needed to keep supply to the customer. It then asks for contingency plans that cover, as a minimum, items such as key equipment failure, interruption of externally provided products, recurring natural disasters, fire, utility interruption, labor shortage and infrastructure disruption. The plan has to include provisions to confirm product conformity after a restart. It must be tested periodically for effectiveness, reviewed at least annually by top management, and updated when needed.

Testing the plan

An untested plan is a document, not a plan. The test table gives you four starting points: a live generator load test, an evacuation drill, an IT restore and a table-top simulation of a supplier shutdown. Record the date, the result and any action that comes out of the test. Auditors usually ask to see evidence that the plan was exercised and that a finding led to a change. A simple test log with actions closed in your corrective action system is enough.

Common mistakes

The most frequent audit findings are plans that cover only fire and flood, no evidence of testing, no restart conformity check, and no link to supplier risk. Another is a plan that lists generic actions without names, times and quantities. Be specific: how many hours of power, how many days of stock, which alternate line, which customer contact and who authorizes premium freight.

Frequently Asked Questions

Is a contingency plan required for IATF 16949?

Yes. Clause 6.1.2.3 requires contingency plans to keep supply of product to the customer after events such as equipment failure, utility interruption, labor shortage or supplier problems. The plan must be tested, reviewed by top management at least yearly and updated when needed.

How often must the contingency plan be tested?

The standard says periodically and as appropriate, with simulations where suitable. Most plants test elements at different intervals: generator load each quarter, evacuation and IT restore each year. Keep dated records and actions from every test.

Do I need one plan per site?

Generally yes, because the risks, utilities and alternates differ by site. A corporate plan can set common rules, but each manufacturing site should have its own risk assessment and plan sections that its own team can execute.

What should happen after a restart?

Confirm that product still meets requirements before it ships. That normally means first-piece approval, verification of setup, and a review of work in process and stock held when the event occurred, plus customer notification where required.

If your risk data sits in ERP, such as single-source parts, stock days and supplier delivery history, we can build a private AI layer that flags contingency gaps from live data on your own servers.

Keep exploring

Free tools

Guides

AI on your ERP