Skip to content
IAQG Authentication Information

Grandfathering based on 9104/3:2007

This page defines third-party auditor authentication requirements based on the authentication level, according to time-limited grandfathering criteria based on 9104/3:2007. The requirements in this document apply to new/initial authentication applications.

In response to auditor and stakeholder feedback resulting from Resolution 176, IAQG Authentication is offering a time-limited opportunity for auditors to apply for authentication using the criteria outlined below.

This is intended to support auditors who were working toward an application prior to the IAQG Authentication launch.

Application Period

Section titled “Application Period”

The grandfathering application process is scheduled to open on October 27, 2026 around 19:00 UTC (3:00pm EDT), and remain available through January 14, 2027.

During this limited period, eligible auditors may apply using either:

The same $500 USD application fee applies to all new applications, regardless of the criteria selected.

The information below is provided to help review the requirements in advance. Applications under the grandfathered criteria cannot be submitted until the application period opens.

Level 2 Authentication based on 9104/3:2007 Criteria

Section titled “Level 2 Authentication based on 9104/3:2007 Criteria”

NOTE: These time-limited requirements will be available only from 27 October 2026 to 14 January 2027. Applications must be completed in full and paid prior to the deadline for consideration.

The following table defines the requirements for applying for 9100 initial authentication at Auditor Level 2 (third-party audit team member) based on 9104/3:2007 criteria:

Requirement Criteria
Baseline Training Successful completion of the IAQG-sanctioned 9100:2016 Auditor Authentication Transition Training (AATT) course. Attending the AATT course requires the prior successful completion of a QMS (ISO 9001) or AQMS auditor training course by an IAQG-approved Training Provider.
Audit Experience 4 qualifying* full QMS or AQMS audits conducted for a total of 20 audit person days within the past 3 years. Only 2nd or 3rd party audits shall be considered.
Work Experience Not required (except when necessary to meet the Additional Requirements listed below)
ASD Industry Knowledge Successfully achieve a minimal pass grade on the related IAQG ASD Knowledge Examination.  (Temporarily paused until 2027 Authentication Year.)
Additional Requirements Quality Management System (QMS) auditor by nationally-recognized AAB or meet the education, training, work experience, and audit experience of ISO 19011**.

* See requirements for qualifying audits. When submitting audits that do not cover all requirements of the standard, use the Audit Clause Correlation Matrix Form.

** See clarifications for QMS Auditor by nationally-recognized AAB and Meeting the requirements of ISO 19011.

Level 1 Authentication based on 9104/3:2007 Criteria

Section titled “Level 1 Authentication based on 9104/3:2007 Criteria”

Criteria based on Work Experience

Section titled “Criteria based on Work Experience”

NOTE: These time-limited requirements will be available only from 27 October 2026 to 14 January 2027. Applications must be completed in full and paid prior to the deadline for consideration.

The following table defines the requirements for applying for 9100 initial authentication at Auditor Level 1 (third-party lead auditor/audit team leader) based on 9104/3:2007 work experience criteria:

Requirement Criteria
Baseline Training Successful completion of the IAQG-sanctioned 9100:2016 Auditor Authentication Transition Training (AATT) course. Attending the AATT course requires the prior successful completion of a QMS (ISO 9001) or AQMS auditor training course by an IAQG-approved Training Provider.
Audit Experience 4 qualifying* full QMS or AQMS audits conducted for a total of 20 audit person days within the past 3 years. Only 2nd or 3rd party audits shall be considered.
Work Experience 4 years of AQMS work experience within the past 10 years.

AQMS work experience must be full-time at one of the following types of organizations:
- Major Airframe Manufacturer (Major Equipment Manufacturer/Integrator Organization)
- Prime Supplier (ASD Prime Organization)
- Auxiliary Equipment Supplier
- Appropriate official civil, military, or space organization (ASD Regulatory Agency)

AQMS work experience must be directly involved in engineering, design, manufacturing, quality, or process control. See 9104/3:2007 clause 3.16 for full requirements.
ASD Industry Knowledge Successfully achieve a full pass grade on the related IAQG ASD Knowledge Examination.  (Temporarily paused until 2027 Authentication Year.)
Additional Requirements Quality Management System (QMS) auditor by nationally-recognized AAB or meet the education, training, work experience, and audit experience of ISO 19011**.

* See requirements for qualifying audits. When submitting audits that do not cover all requirements of the standard, use the Audit Clause Correlation Matrix Form.

** See clarifications for QMS Auditor by nationally-recognized AAB and Meeting the requirements of ISO 19011.

Criteria based on Training/Witness Audits

Section titled “Criteria based on Training/Witness Audits”

NOTE: These time-limited requirements will be available only from 27 October 2026 to 14 January 2027. Applications must be completed in full and paid prior to the deadline for consideration.

The following table defines the requirements for applying for 9100 initial authentication at Auditor Level 1 (third-party lead auditor/audit team leader) based on 9104/3:2007 training/witness audit criteria:

Requirement Criteria
Baseline Training Successful completion of the IAQG-sanctioned 9100:2016 Auditor Authentication Transition Training (AATT) course. Attending the AATT course requires the prior successful completion of a QMS (ISO 9001) or AQMS auditor training course by an IAQG-approved Training Provider.
Audit Experience 4 qualifying* full QMS or AQMS audits conducted for a total of 20 audit person days within the past 3 years. Only 2nd or 3rd party audits shall be considered.
Work Experience 2 years of AQMS work experience within the past 15 years.

AQMS work experience must be full-time at one of the following types of organizations:
- Major Airframe Manufacturer (Major Equipment Manufacturer/Integrator Organization)
- Prime Supplier (ASD Prime Organization)
- Auxiliary Equipment Supplier
- Appropriate official civil, military, or space organization (ASD Regulatory Agency)

AQMS work experience must be directly involved in engineering, design, manufacturing, quality, or process control. See 9104/3:2007 clause 3.16 for full requirements.
ASD Industry Knowledge Successful completion of an approved aerospace industry specific course for 9100.

Successfully achieve a full pass grade on the related IAQG ASD Knowledge Examination.  (Temporarily paused until 2027 Authentication Year.)
Additional Requirements Quality Management System (QMS) auditor by nationally-recognized AAB or meet the education, training, work experience, and audit experience of ISO 19011**.

Successful completion of 2 full audits witnessed by an authenticated Level 1 auditor for the related standard authenticated based on work experience or the current IAQG Authentication criteria. The witnessing auditor shall not perform the audit as a member of the assessment team.
See clarifications about witnessed audits

NOTE: When submitting applications, applicants must provide all information in full, including evidence of prior completion of all required witness audits. Applicants will NOT be granted provisional authentication to complete witness audits later.

* See requirements for qualifying audits. When submitting audits and/or witnessed audits that do not cover all requirements of the standard, use the Audit Clause Correlation Matrix Form.

** See clarifications for QMS Auditor by nationally-recognized AAB and Meeting the requirements of ISO 19011.

Audit Clause Correlation Matrix Form

Section titled “Audit Clause Correlation Matrix Form”

In accordance with ICOT Resolution 144, submitted audit evidence “shall include and demonstrate direct evaluation and acceptable auditing of all clauses of the standard.” Audits where the auditor did not cover all clauses of the standard maybe complemented by further audit records that, collectively, demonstrate full coverage of the standard up to at least the minimum required number of audits, audit days, and/or witnessed audits. (Learn more.)

When submitting audits that do not cover all requirements of the standard (including witnessed audits, where applicable), applicants must complete and submit the Audit Clause Correlation Matrix Form linked below to demonstrate clause coverage across relevant audits:

Download Audit Clause Correlation Matrix Form (.xlsx)

The online application process will indicate the location to upload this completed form.

IAQG Authentication reserves the right to review other audit records and perform outside verification as needed to confirm the declarations provided on this form.

Clarifications & FAQs

Section titled “Clarifications & FAQs”

What are the AQMS work experience requirements in 9104/3:2007 clause 3.16?

Section titled “What are the AQMS work experience requirements in 9104/3:2007 clause 3.16?”

“Full-time work experience in the aerospace industry directly involved in engineering, design, manufacturing, quality, or process control for a major airframe manufacturer, prime supplier, auxiliary equipment supplier and/or appropriate official civil, military, or space organization, such as, National Aviation Authorities (NAA), domestic Space Agency (e.g., European Space Agency [ESA], National Aeronautics and Space Administration [NASA], Canadian Space Agency [CSA]), Ministry of Defense (MoD).

“This work experience should have included direct involvement and/or knowledge of aerospace industry specific aspects (e.g., aerospace industry quality, regulatory and/or military aerospace requirements, first article inspection, airworthiness and safety requirements, aerospace material traceability requirements, aerospace sub-contractor approval and control, variation management of key characteristics, flow-down of AQMS requirements, Foreign Object Damage/Debris (FOD) prevention program, use of customer supplied products, calibration controls and positive recall system, acceptance authority media, nonconforming material management, sampling inspection/statistical process control requirements and limitations, special processes, configuration management/requirements control, manufacturing techniques, tool control, design development verification and validation).

“In addition for maintenance, this work experience should have included direct involvement and/or knowledge of maintenance regulations (e.g., European Aviation Safety Agency [EASA]/Federal Aviation Regulations [FAR] 145/147, EASA part M), return to service processes, flight test, functional checks prior to flight, weight and balance, wing walking, or aircraft marshalling techniques.”

Clarifications/Guidance

Section titled “Clarifications/Guidance”

What is meant by an “Auxiliary Equipment Supplier”?

Section titled “What is meant by an “Auxiliary Equipment Supplier”?”

An ‘auxiliary equipment supplier’ is a company that designs and/or produces auxiliary equipment for use within the ASD industry. ‘Auxiliary equipment’ refers to products that support, supplement, or enable the operation of aircraft and spacecraft. Examples of auxiliary equipment include, but are not limited to: auxiliary power units, fuel and hydraulic pumps, external fuel tanks, oxygen and lighting systems, armament racks, and ground support/launch equipment. Sub-tier suppliers who only produce parts that are used within auxiliary equipment do NOT qualify as an auxiliary equipment supplier under this definition.

What can be counted as qualifying full QMS/AQMS audits?

Section titled “What can be counted as qualifying full QMS/AQMS audits?”

Qualifying audits may be either second-party or third-party.

  • Second-party audits are those conducted by parties having an interest in the organization, such as customer or supplier audits. A second-party audit may also be an entirely independent party or external entity (consultant) that has no direct stake in the management of an organization’s QMS.
  • For third-party audits, the applicant must be an employee or contractor for an accredited Certification Body.

The following requirements apply:

  • The audit and associated audit records used as experience shall include and demonstrate direct evaluation and acceptable auditing of all clauses of the standard. (A clause is described by the section and the first level of clause e.g. 4.1 or 7.5.) If any clause is a justified non-applicability of a requirement of ISO 9001:2025 or associated AQMS within the scope of the audit as shown within the audit records, further audit records are required to demonstrate experience of direct evaluation of the full detail of all the certification standard, as detailed in the completed Audit Clause Correlation Matrix Form.
  • For 9100 applications, a maximum of two of the four presented audits may exclude clause 8.3 design and development requirements.
  • The auditor must participate in the full duration of the audit, according to their assigned role.
    • If serving as an Audit Team Member, participation could exclude any activities only performed by the Lead Auditor.
    • If an Audit Team Member’s participation in a given audit results in incomplete clause coverage, this must be offset by other audits as needed to demonstrate “direct evaluation of all clauses of the standard” and be counted towards the “four qualifying full QMS or AQMS audits” requirement. Related objective evidence must be submitted within the application using the Audit Clause Correlation Matrix Form.
    • As noted in ICOT Resolution 91, “submitted audits shall not include any audit where the applicant was an observer, an auditor or assessor under training, a witness assessor, an oversight witness assessor, a witness assessor for a CB or similar.”
  • Qualifying second-party and third-party QMS/AQMS audits must occur on-site. Along with the number of on-site audit days performed by the applicant, applicants may also submit legitimate off-site audit days to account for audit planning, report writing, and those portions of the audit (up to a maximum of 30% of audit duration) conducted via Information and Computer Technology (ICT). Even for QMS and second-party audits, this will be calculated based on the IAQG scheme requirements/limitations for third-party audits outlined in 9104/1 and applicable IAQG ICOT resolutions.
  • Partial audit days must be rounded down to the nearest half-day increment.
  • Applicants may NEVER conduct third-party AQMS audits for which they are not yet authenticated.

Clarifications/Guidance

Section titled “Clarifications/Guidance”

Regarding the requirement to include clause 8.3 design & development requirements:

  • This will only be enforced for 9100 applications, and will not be enforced for 9110 and 9120 applications, given that the applicant has a currently active 9100 authentication.
  • This will be evaluated as “at least two full QMS/AQMS audits include design”.
  • Applicants may submit additional “offsetting” audits to demonstrate coverage of clause 8.3 requirements, if required.

In addition, applicants may submit more than four audits to add up to the minimum required number of audit days; there is no requirement to submit “only” four audits.

When applying for Level 1 Authentication via these grandfathering criteria, there is no requirement that the submitted audits must be in a lead role. However, the audits must demonstrate coverage of all requirements of the standard.

Under this grandfathering criteria, surveillance audits may be submitted as “full QMS/AQMS audits,” without restriction on the client or requiring “both parts,” provided they cover all requirements of the standard. If a given audit does not cover all requirements, additional offsetting audits must be submitted to cumulatively demonstrate the equivalent to at least four full QMS/AQMS audits that cover all requirements (notwithstanding clause 8.3, as explained above). This includes cases of audits performed as an Audit Team Member where audited processes were split between members of the audit team, and as a result the applicant did not cover all clause requirements in that audit.

What are the requirements for witnessed audits?

Section titled “What are the requirements for witnessed audits?”

The grandfathered Level 1 Authentication criteria based on Training/Witness Audits requires two full audits be witnessed by an already-authenticated Level 1 auditor (meeting certain criteria explained below). The purpose of the witnessed audits is to verify that the auditor has sufficient knowledge of aerospace requirements. This is considering both the auditor’s ASD industry specific knowledge and their ability to audit AQMS requirements appropriately. As stated in 9104/3:2007 Table 1: “If during a witness audit, the candidate shows insufficient knowledge of aerospace requirements, as defined by Appendix A, section A.3.1 (9100) or section A.4.1 (9110) industry specific training course, additional training and/or practical experience will be required.”

Please review below for further important clarifications:

About the audit conducted
The auditor shall only be witnessed in an audit role they are already authenticated to perform (whenever authentication is required). As the auditor is not yet authenticated as a Level 1 Auditor for a given standard, the auditor SHALL NOT perform in a lead role in an AQMS third-party audit for that standard. This is NEVER permitted, even in a “provisional” capacity. If the auditor is currently authenticated as a Level 2 Auditor (Audit Team Member), they may be witnessed performing an AQMS third-party audit as an Audit Team Member. Otherwise, the auditor may be witnessed conducting an AQMS second-party Full QMS audit for the related standard. When applying for 9120 Level 1 authentication, witnessed AQMS audits may be against 9100 or 9110.

For further clarity, the witnessed audits are NOT a “trial run” where you “see if the auditor is capable of performing a lead role.” The auditor is being witnessed in their current capacity as an AQMS auditor, reflecting their current authentication (if it exists). Auditors who are not yet authenticated with IAQG Authentication for the related standard may NEVER conduct AQMS third-party audits for that standard.

  1. The audits must be Full AQMS audits, as defined in IAQG ICOT Resolution 144.
  2. The auditor must participate for the full duration of the audit. If authenticated to Level 2 and conducting a third-party audit as an audit team member, this participation could exclude any functions only performed by the Lead Auditor.
    1. If Level 2 and participating as a third-party audit team member, the auditor would be a “full participant” in the team. For example, if this were a four-day audit with a two-person audit team, the auditor would be expected to perform two audit days.
  3. The evidence of witnessed audits shall include and demonstrate direct evaluation and acceptable auditing of all clauses of the standard. (A clause is described by the section and the first level of clause e.g. 4.1 or 7.5.) If any clause is a justified non-applicability of a requirement of ISO 9001:2015 or associated AQMS within the scope of the audit as shown in the audit records, further witnessed assessment records are required to demonstrate experience of direct evaluation of the full detail of all the certification standard.
    1. As the evidence must include all clauses, therefore, in case of 9100, clause 8.3 design and development requirements must be included in at least one of the witnessed audits. (This is not required for 9110 or 9120.)
    2. If Level 2 and participating as a third-party audit team member, it is understood that the processes assigned to that specific auditor might not cover the entire QMS within that single audit activity. In this case, applicants must ensure that the witnessed audits, collectively, address all clauses of the standard.
  4. The witnessed audits must also be listed in the “Audit Experience” section of the related IAQG Authentication application.

About the witnessing auditor
The auditor witnessing the audit must meet the following criteria:

  1. They must NOT be a member of the audit team. (They are only there to witness the applicant.)
  2. They must be an actively authenticated Level 1 auditor qualified either via the 9104/3:2007 Work Experience criteria, or IAQG Authentication Level 1 criteria. This means that the witnessing auditor must NOT, themselves, have been qualified via the “9104/3:2007 Training/Witness Audits” criteria.

Required documented information
If, upon completing the witness audit, the witnessing auditor agrees to recommend the witnessed auditor for Level 1 authentication, the witnessing auditor shall provide documentation of their recommendation to the applicant, and this documentation shall be provided to IAQG Authentication as part of the submitted application. Documentation must include:

  1. The witnessing auditor’s full name
  2. The witnessing auditor’s OASIS Identification Number (OIN)
  3. The witnessing auditor’s contact information (at a minimum, email address & phone number)
  4. The start and end dates of the witnessed audit
  5. The company and location of the witnessed audit
  6. A statement attesting that, having witnessed the applicant conducted the listed AQMS audit, the witnessing auditor recommends the applicant for IAQG Level 1 Authentication for the specified standard.

Documented information must also include objective evidence to demonstrate that, over the course of the witnessed audits, all clauses of the standard were evaluated.

IAQG Authentication reserves the right to contact the witnessing auditor as needed to verify witness audit details and results.

NOTE: When submitting applications, applicants must provide all information in full, including evidence of prior completion of all required witness audits. Applicants will NOT be granted provisional approval to complete witness audits later.

What is meant by a “QMS auditor by nationally-recognized AAB”?

Section titled “What is meant by a “QMS auditor by nationally-recognized AAB”?”

An ISO 9001 auditor recognition by a nationally-recognized AAB that attests/certifies the applicant is qualified to perform QMS audits. Such a program would typically consider the applicable training, audit experience, and work experience requirements to be deemed an authenticated/certified auditor, and would provide a qualification certificate to attest to this active authentication/certification status. This status would typically need to be renewed on an ongoing basis. Successful completion of a training course recognized by a nationally-recognized AAB is not sufficient to meet this definition.

Applicants who do not meet this definition may instead indicate that they “meet the education, training, work experience, and audit experience of ISO 19011.” This requires submission of additional evidence, as explained below.

How to demonstrate meeting the requirements of ISO 19011?

Section titled “How to demonstrate meeting the requirements of ISO 19011?”

Auditors who are not a “QMS auditor by nationally-recognized AAB” (as defined above may instead indicate that they “meet the education, training, work experience, and audit experience of ISO 19011.”

When selecting this option, applicants must provide additional evidence as part of their application to demonstrate they meet this criteria:

  1. In the “Qualification” section, applicants must provide evidence of their education history, professional credentials, and resume (curriculum vitae) supporting their eligibility for a QMS auditor role.
  2. In the “Baseline Training” section, applicants must provide evidence of any additional training completed supporting their eligibility for a QMS auditor role.
  3. In the “Work Experience” section, applicants must provide evidence of any work experience that supports their eligibility for a QMS auditor role. This must be provided even if the IAQG application criteria does not otherwise specifically require work experience to meet AQMS authentication requirements.

The Audit Experience requirements for AQMS authentication will also be evaluated towards this ISO 19011 requirement, and no additional audit experience is required.

IAQG Authentication will evaluate the totality of the information provided to verify the applicant meets the ISO 19011 requirements for a QMS auditor, in addition to the IAQG-specific criteria for AQMS auditor authentication eligibility.

Change History

Section titled “Change History”

UPDATE (2026-11-09):

  • Clarified that, in alignment with 9104/3:2007 A.1, “an attendee can only attend the AQMS Foundation Course, if he/she has successfully completed a QMS (ISO 9001) auditor training course approved by a TPAB.” The QMS or AQMS auditor training course listed in the 9100 Baseline Training section must have been delivered by an IAQG-approved Training Provider.
  • Incorporated requirements of ICOT Resolution 91, which states: “Applications for initial authentication shall only include audits where the applicant has experienced direct involvement as part of the audit team as an auditor or audit team leader and submitted audits shall not include any audit where the applicant was an observer, an auditor or assessor under training, a witness assessor, an oversight witness assessor, a witness assessor for a CB or similar.”

UPDATE (2026-10-29):

  • Clarified that the definition for an “appropriate civil, military, or space organization” in Level 1 work experience criteria is equivalent to the definition of an ASD Regulatory Agency.

UPDATE (2026-10-26):

  • Clarified that Grandfathering Applications will become available around 19:00 UTC (3:00pm EDT) on 27 October 2026.
  • Removed individual change history markers and planning-related guidance, to support impending launch.

UPDATE (2026-10-21):

  • Added note about time-limited application timeframe to each set of requirements to improve clarity. The timeframe has not changed.

UPDATE (2026-10-20):

  • Clarified that, for Level 1 criteria based on Training/Witness Audits, applicants must have completed their witness audits already at time of application. Provisional authentication will NOT be granted.
  • Clarified that, when applying for 9110 Level 1 or 9120 Level 1, AQMS work experience will be re-evaluated to confirm eligibility for the Work Experience or Training/Witness Audits paths. This does not impose any additional work experience requirements, only reflects that this will be re-evaluated as part of these 9110/9120 applications.
  • Reorganized presentation of work experience requirements for all Level 1 categories, incorporating some details previously found 9104/3:2007 clause 3.16 definition directly into the table itself. NOTE: The requirements did not change, only the presentation.
  • Clarified that, when applying for 9120 Level 1 via Training/Witness Audits, witnessed audits may be for 9100 or 9110, in alignment with 9104/3:2007.

UPDATE (2026-10-10):

UPDATE (2026-10-09):

  • Clarified that qualifying full QMS/AQMS audits must occur on-site. A limited amount of off-site audit time may be counted subject to the restrictions outlined in 9104/1. This requirement applies to both second and third-party audits.

UPDATE (2026-10-03):

  • For increased clarity regarding requirements that will not be re-evaluated for 9110/9120, application requirements have now been split by standard. (No change to requirements.)
  • Updated Advancement section to mention Advancement Grandfathering based on 9104/3:2020.

UPDATE (2026-10-01):

  • Clarified the Level 1 Work Experience requirements by standard. (Work experience already evaluated for 9100 authentication will not be re-evaluated for 9110 or 9120.)
  • Added Audit Clause Correlation Matrix Form.
  • Added additional clarifications/guidance regarding full QMS/AQMS audits.
  • Clarified that the clause 8.3 Design & Development requirement for audit experience will only be enforced for 9100 applications.

UPDATE (2026-09-22): The requirements in this document have been updated to reflect the requirements from ICOT Resolution 144, which IAQG has determined will be applied to the grandfathering process. Please review the updated requirements carefully. The IAQG Authentication Team apologizes for any confusion caused by this change.

© 2026 IAQG. All rights reserved. IAQG, AAQG, APAQG, EAQG, OASIS and SCMH are registered trademarks of IAQG.