# What IATF 16949 Adds to ISO 9001

IATF 16949:2016 is not a standalone standard: it is used **together with ISO 9001:2015** and adds automotive
requirements, the core tools and customer-specific requirements (CSRs). Certification follows the IATF Rules
(6th edition) and only IATF-recognised certification bodies may certify. Sanctioned Interpretations (SIs) and
FAQs issued by IATF clarify clauses; check the current list on the IATF website before an audit.

## Themes

| Theme | Key clauses | What auditors look for |
|-------|-------------|------------------------|
| Customer-specific requirements | 4.3.2, 7.5.1.1 | CSR matrix per customer, latest revision, where each CSR is met |
| Product safety | 4.4.1.2 | Documented process: identification of safety characteristics, approvals, escalation, traceability, lessons learned |
| Ethics | 5.1.1.1 | Anti-bribery policy, code of conduct, whistle-blowing escalation |
| Risk and contingency | 6.1.2.1-6.1.2.3 | Lessons learned in risk analysis; contingency plans incl. cyber-attack, tested |
| Measurement | 7.1.5.1.1, 7.1.5.2.1, 7.1.5.3 | MSA for every control-plan gauge; calibration records; lab scope or ISO/IEC 17025 |
| Competence | 7.2.1-7.2.4, 7.3.2 | Training needs process, OJT, internal and second-party auditor competence |
| Records | 7.5.3.2.1-7.5.3.2.2 | Part life + 1 year retention; engineering spec review within 10 working days |
| Design and special characteristics | 8.3.x | Product and process design, special characteristics, product approval (PPAP) |
| Suppliers | 8.4.1.2-8.4.2.5 | Selection with risk, ISO 9001 minimum, monitoring (quality, disruptions, delivery), second-party audits |
| Production | 8.5.1.1-8.5.1.7, 8.5.6.1 | Control plans, set-up verification, TPM, temporary change of process controls |
| Nonconforming product | 8.7.1.x | Customer authorization, rework and repair processes, disposition |
| Audits | 9.2.2.1-9.2.2.4 | QMS, manufacturing process (all shifts over 3 years) and product audits |
| Improvement | 10.2.3-10.2.6, 10.3.1 | Problem solving, error-proofing verification, warranty / NTF, continual improvement |

## Core tools

| Tool | Manual | Clauses |
|------|--------|---------|
| APQP and Control Plan | AIAG APQP 3rd ed. and CP 1st ed. (2024) | 8.1, 8.3, 8.5.1.1 |
| PPAP | AIAG PPAP 4th ed. | 8.3.4.4 |
| FMEA | AIAG-VDA FMEA Handbook (2019) | 6.1, 8.3.5, 8.5.1.1 |
| SPC | AIAG SPC 2nd ed. | 9.1.1.1 |
| MSA | AIAG MSA 4th ed. | 7.1.5.1.1 |

German OEMs use VDA volumes (VDA 6.3 process audit, VDA 2 PPA) instead of or alongside AIAG; the CSRs say which.

## Audit grading (IATF Rules)

Major: absence or total breakdown of a required process, nonconforming product likely shipped, or a condition
that could result in failure or reduce usability. Minor: a single lapse. Majors require a special audit
(on-site verification) within 90 days; an unresolved major can lead to certificate suspension.