Risk Based Audit Project

AIAG is pleased to report the first step in deployment of Risk Based Audit Days criteria into the IATF Rules for Achieving and Maintaining Certification (Rules 5th) has been achieved.

Up to this point, in automotive 3rd party IATF 16949 audits, determination of audit days has been based on employee headcount at the site(s). Due to changes in manufacturing technologies over the past few decades, this approach is antiquated and no longer accurately aligns audit time with QMS risks.

The Risk Based Audit Days criteria defined by the AIAG work group includes five “risk drivers” that are assessed, and increase/decrease adjustments to audit days are made depending on the results. The risk drivers include: APQP/New Product Development project risks, Product Safety risks, QMS Complexity risks, QMS Maturity risks, and risks associated with current Quality and Delivery Performance to IATF OEM customers.

As part of the work group’s development, a pilot deployment was conducted in collaboration with Certification Bodies contracted to the IAOB, from August 2019 to January 2020. The pilot included 137 supplier sites, including 90 Tier 1 supplier sites and 37 Tier 2 supplier sites. These site audits were conducted by 9 of the 20 IAOB CB’s. The pilot results were reported to the IATF in March 2020. Since that time, the Systematic Review Team (SRT) of the IATF has been working on the associated Sanctioned Interpretations and obtaining final IATF approval.

Aspects of the Quality and Delivery Performance risk driver criteria, defined and piloted by the team, are now being integrated into the IATF Rules through the release of IATF Sanctioned Interpretations #26, #27 and #28. See the latest Sanctioned Interpretations released by the IATF on 23 February 2021.

The effectivity for the implementation of the “Risk Based” SI’s by Certification Bodies is 30 June 2021.

Implementing additional aspects of the Risk Based Audit Days criteria is part of the scope of the IATF’s recently launched project for the next revision of the Rules for Achieving and Maintaining Certification (Rules 6th).

While the AIAG Risk Based Audit Days project is now closed, we are interested in your thoughts on adoption of Risk Based Audit Days concepts and are open to take your questions. Please contact us at quality@aiag.org with any inquiries about Risk Based Audit Days.

These companies are participating in Risk Based Audit:


Current Participants

  • Adient
  • Axalta Coating Systems
  • DENSO International America, Inc.
  • DRIV Inc.
  • IAOB
  • Inteva Products LLC
  • Meritor, Inc.
  • Tenneco, Inc.

Program Management: Quality Team - (248) 358-3570