IATF 16949 is not a separate quality system. It is a set of automotive requirements written to be used together with ISO 9001:2015, so every IATF 16949 site must meet all of ISO 9001 first. IATF then adds what automotive customers expect: the core tools (APQP, PPAP, FMEA, MSA and SPC), customer-specific requirements, product safety, warranty and problem-solving rules, and three kinds of internal audit. ISO 9001 fits any organization. IATF 16949 applies only to sites that make production or service parts for the automotive supply chain.
| ISO 9001:2015 | IATF 16949:2016 | |
|---|---|---|
| What it is | A stand-alone quality management system standard | Automotive supplemental requirements, used together with ISO 9001 |
| Who can use it | Any organization, any sector, any size | Sites making automotive production or service parts, plus supporting functions |
| Customer-specific requirements | Customer requirements in general | Each OEM’s customer-specific requirements must be identified and met |
| Core tools | Not named | APQP, PPAP, FMEA, MSA and SPC are expected, usually in the AIAG or VDA formats your customers name |
| Control plans | Not required by name | Required for each manufacturing process, at prototype, pre-launch and production phases where the customer asks |
| Internal audits | A QMS audit programme | QMS audits, manufacturing process audits and product audits, all on a risk-based schedule |
| Problem solving | Corrective action with root cause | A documented problem-solving method, error-proofing, and warranty management |
| Certification body | Any accredited certification body | Only certification bodies recognized by the IATF, following the IATF rules |
ISO 9001 sets the framework: context, leadership, planning, support, operation, performance evaluation and improvement, in ten clauses. IATF 16949 follows the same clause numbers and adds sub-clauses under them. Clause 8.5.1 in ISO 9001 covers controlled production; IATF 16949 adds sub-clauses under it for control plans, standardised work, job set-up verification, total productive maintenance and more. You cannot be certified to IATF 16949 without a system that also meets ISO 9001, and the IATF document itself is not sold with the ISO text.
That structure is why gap assessments usually go clause by clause. Start from your ISO 9001 system, then read each IATF addition and ask whether your procedure, record or practice already covers it. The ISO 9001 internal audit checklist gives the baseline; the IATF additions sit on top.
Most of the extra effort lands on the shop floor, not in the quality manual. These are the IATF additions that touch production every day:
ISO 9001 asks for a planned internal audit programme. IATF 16949 asks for three kinds of audit: the QMS audit, a manufacturing process audit of each process across shifts, and product audits at appropriate stages of production and delivery. Internal auditors must also show competence in the core tools and in the customer-specific requirements that apply to what they audit. The internal audit guide, the pillar for this cluster, covers how to plan and run them, and layered process audits are a common way to cover process checks between formal audits.
Only if you supply automotive production or service parts and a customer requires it. IATF 16949 certification is not open to every site: the IATF rules limit it to sites that make automotive parts for customers who ask for it. If your automotive work is small, or you supply tooling, equipment or aftermarket accessories, ISO 9001 plus the customer’s supplier manual is often what the customer actually expects. Ask your customer’s supplier quality contact before you start.
If you also supply aerospace, the comparison is different. AS9100 vs ISO 9001 covers what aerospace adds, and medical device makers should read ISO 9001 vs ISO 13485.
Most shops that make the move follow a similar order. First, confirm with the customer that IATF 16949 certification is required and in scope for your site. Second, collect every customer-specific requirement document and supplier manual that applies, because they often add more than the standard itself. Third, run a clause-by-clause gap assessment against your current ISO 9001 system, using the format in the Example below.
Then close the gaps in an order that matches risk. Product-related items come first: process flow diagrams, PFMEAs and control plans for every active part, measurement system studies on control plan gauges, and capability studies on special characteristics. System items come next: the three audit types, auditor competency records, contingency plans, and the problem-solving and error-proofing procedures. Finally, run at least one full internal audit cycle and a management review on the new system before the certification audit, so the auditor sees records, not just procedures. The process flow diagram how-to is a good starting point for the product-side work.
Example: Gap count for a fictional machine shop moving from ISO 9001 to IATF 16949
Result: Example result: about 59% ready. The shop schedules the 12 Missing items first because a certification body will raise each as a nonconformity. The tally and the 48-item count are illustrative; build your own list from the standard and your customers’ requirements.
You do not need a separate ISO 9001 certificate, but your system must meet every ISO 9001 requirement because IATF 16949 is written to be used with it. The IATF audit covers both.
It is more prescriptive. ISO 9001 lets you decide how much documentation you need; IATF 16949 names specific documents, analyses and audits, and adds each customer’s own requirements.
APQP for product launch planning, PPAP for part approval, FMEA for risk analysis, MSA for measurement systems and SPC for process control. The [quality core tools guide](/guides/quality-core-tools) explains each one.
Size is not the limit; scope is. A small site that makes automotive production parts for a customer who requires IATF 16949 can be certified. A site that does not supply production or service parts generally cannot.
Yes. IATF 16949:2016 replaced ISO/TS 16949:2009, and certificates to the older document are no longer valid.
COPLAIN AI PLATFORM
Coplain turns your control plans and PFMEA controls into clear work instructions, so the floor follows the same method your IATF auditor reads.
Generate yours automatically with Coplain →Related Tools & Templates