For manufacturers and engineering businesses looking to enter or expand within the automotive supply chain, an existing ISO 9001 Quality Management System can provide an excellent foundation.
However there are some significant differences. IATF 16949 builds upon the requirements of ISO 9001 but introduces considerably more detailed requirements specifically designed around automotive manufacturing and its supply chain. These include greater emphasis on defect prevention, product safety, supplier development, manufacturing process controls, traceability, contingency planning, customer-specific requirements and the automotive quality tools used throughout the industry.
For a business that already operates an effective ISO 9001 Quality Management System (QMS), this means that achieving IATF 16949 does not necessarily involve starting again. Instead, the existing QMS can be developed into a much more comprehensive Automotive Quality Management System.
Assent Risk Management can support organisations through this process, helping identify the gaps between their existing ISO 9001 system and the additional requirements associated with IATF 16949.
What is the Difference Between ISO 9001 and IATF 16949?
ISO 9001 is the internationally recognised standard for Quality Management Systems and can be applied to organisations across almost any industry.
It establishes a continual improvement framework that includes management of risks, competency of staff, operational control, design and development, supplier management and more.
IATF 16949 takes this foundation and applies it specifically to the automotive industry with more detailed requirements.
The International Automotive Task Force developed IATF 16949 to establish a common approach to automotive quality management across the international automotive supply chain. It is particularly focused on continual improvement, defect prevention and reducing variation and waste.
Importantly, IATF 16949 does not reproduce the ISO 9001 requirements within the standard. Therefore organisations need to use IATF 16949 in conjunction with ISO 9001.
For an ISO 9001 certified manufacturer, it can be useful to think about the project as not replacing ISO 9001, but as extending ISO 9001 into an automotive QMS.
Can an Existing ISO 9001 QMS Be Extended to IATF 16949?
Yes, and for many organisations this is the logical route.
An established ISO 9001 certified business should already have many of the fundamental management system processes required. It may already have controlled processes for document management, competence, supplier approval, design and development, calibration, non-conforming outputs, internal auditing, management review and corrective action.
But the challenge is determining whether those processes are sufficiently developed for the automotive environment.
For example, an ISO 9001 system may contain a perfectly reasonable supplier evaluation process but IATF 16949 introduces significantly greater expectations around supplier monitoring, development and quality performance.
Likewise, an ISO 9001 system may already address risks and opportunities. An automotive system is likely to require a much more structured approach to manufacturing risk, including techniques such as Failure Mode and Effects Analysis (FMEA).
The starting point should therefore normally be an IATF 16949 gap analysis rather than rewriting the entire Quality Management System.
This allows the organisation to map what it already has against ISO 9001 and identify the additional automotive requirements that need to be incorporated.
Businesses unfamiliar with the underlying requirements may also find our guide to the requirements of ISO 9001 useful before considering the automotive extensions.
What are the Major Differences Between ISO 9001 and IATF 16949?
The main thing you will notice is that IATF 16949 is much more prescriptive than ISO 9001, because it has been designed to meet the specific needs of the automotive industry.
ISO 9001 deliberately provides considerable flexibility over how organisations establish and operate their QMS. That flexibility allows the same standard to work for a software developer, construction company, engineering business or professional services organisation.
Automotive manufacturing requires something more specific.
IATF 16949 therefore introduces additional requirements covering areas such as product safety, embedded software where applicable, warranty management, supplier development, manufacturing process design, contingency planning, preventive maintenance, traceability and the management of customer-specific requirements.
There is also a much greater emphasis on reducing process variation and preventing defects before they reach the customer.
An organisation moving from ISO 9001 to IATF 16949 should therefore expect its QMS to become more detailed, particularly around its operational and manufacturing processes.
Automotive Core Tools and IATF 16949
One of the biggest practical changes for a business entering the automotive supply chain is the use of established automotive quality methodologies, often collectively described as the Automotive Core Tools.
These include Advanced Product Quality Planning (APQP), Production Part Approval Process (PPAP), Failure Mode and Effects Analysis (FMEA), Statistical Process Control (SPC) and Measurement Systems Analysis (MSA).
Automotive quality management is heavily concerned with understanding how products and manufacturing processes could fail, controlling variation, demonstrating manufacturing capability and providing evidence that a production process can consistently deliver conforming products.
For a precision engineering or manufacturing company familiar with ISO 9001, developing competence in these techniques can represent one of the more significant challenges in the transition towards automotive quality management.
Customer-Specific Requirements are Particularly Important
Another major difference is the importance of Customer-Specific Requirements, commonly referred to as CSRs.
Automotive customers can impose requirements in addition to ISO 9001 and IATF 16949. Organisations therefore need processes for identifying applicable customer requirements, incorporating them into their QMS and ensuring they continue to be met.
Therefore, achieving automotive quality compliance is wider than just meeting the requirements of the IATF 16949 standard. Your automotive quality management system needs to reflect the actual requirements of the customers and programmes you supply.
Do You Need ISO 9001 Before IATF 16949?
You will need to meet the requirements of ISO 9001 because IATF 16949 is designed to operate in conjunction with ISO 9001 but that doesn’t mean an organisation has to spend years independently certified to ISO 9001 before beginning an IATF 16949 project.
For businesses already certified to ISO 9001, there is an obvious advantage because much of the management system infrastructure already exists.
However it is also feasible to implement both standards side-by-side within a reasonable timeframe.
Do You Get Both ISO 9001 and IATF 16949 Certificates?
IATF 16949 certification demonstrates conformity with an automotive Quality Management System framework that incorporates the applicable ISO 9001 requirements.
Whether an organisation also maintains a separate ISO 9001 certificate will depend upon its certification arrangements, scope and business requirements.
There can be commercial reasons for retaining ISO 9001 certification. A manufacturer may, for example, operate in several markets and want a general ISO 9001 certificate to demonstrate its QMS credentials to other non-automotive customers, while its eligible automotive manufacturing activities are covered by IATF 16949.
The appropriate certification structure should therefore be considered as part of the project rather than assuming that one certificate automatically replaces the other.
Can Every ISO 9001 Certification Body Certify IATF 16949?
No.
This is a particularly important distinction for businesses considering IATF 16949.
Many certification bodies can provide accredited ISO 9001 certification, but this does not automatically entitle them to provide recognised IATF 16949 certification.
IATF operates its own recognition scheme for certification bodies. Organisations seeking recognised IATF 16949 certification must therefore select an IATF-recognised certification body authorised to perform IATF 16949 certification activities.
The International Automotive Task Force maintains an official list of recognised certification bodies.
If your current ISO 9001 certification body is not IATF recognised, you may therefore need to consider a change of certification arrangements as part of your automotive compliance project.
Assent is independent of the certification process and can help organisations understand their options when selecting an appropriate certification body. Contact Us!
See also: Considering an IATF 16949 Transfer? Here’s What to Expect – Assent Risk Management
Can Any Company Become IATF 16949 Certified?
No, and this is another significant difference from ISO 9001.
ISO 9001 can be applied across virtually every sector. IATF 16949 certification has specific eligibility requirements relating to organisations manufacturing automotive products and vehicles.
Under the current IATF certification rules [as of August 2026], eligibility is centred around manufacturing sites producing eligible automotive parts and processed materials. Organisations that only undertake activities such as design, warehousing or testing without eligible manufacturing are not independently eligible simply because they work within the automotive industry.
Similarly, not everything involving a vehicle automatically qualifies as automotive manufacturing for IATF purposes.
Eligibility should therefore be established at the beginning of an IATF 16949 project.
What if We Supply Automotive and Other Industries?
This is extremely common.
Precision engineers, metal fabricators, plastics manufacturers, electronics businesses and other specialist manufacturers frequently serve several industries from the same facilities.
A company might currently manufacture components for general engineering, aerospace, energy or construction customers and then win its first automotive contract.
The existing ISO 9001 system does not need to be discarded.
Instead, you can consider how the automotive-specific requirements need to be incorporated into your existing business processes and how the certification scopes should be structured.
Done properly, this creates a layered management system rather than several disconnected systems.
The underlying processes for document control, competence, purchasing, calibration, internal audit and corrective action can often remain common across the organisation, while additional controls are introduced where automotive requirements apply.
How Long Does it Take to Extend ISO 9001 to IATF 16949?
There is no one-size-fits-all answer that applies to every organisation.
A company with a mature ISO 9001 system, experienced automotive personnel, established automotive customers and familiarity with APQP, PPAP, FMEA, SPC and MSA will be in a very different position from a manufacturer entering automotive for the first time.
The complexity of the products, manufacturing processes, supply chain, sites, customer-specific requirements and existing QMS maturity will all affect the project.
This is another reason why an initial gap analysis is valuable. It replaces guesswork with an evidence-based implementation plan.
How Can Assent Help Extend ISO 9001 to IATF 16949?
Assent Risk Management works with organisations to develop practical management systems around their real operational processes.
If you already hold ISO 9001 certification and are considering IATF 16949, we can begin by assessing the maturity of your existing QMS and conducting a structured gap analysis against the additional automotive requirements.
From there, our automotive consultants can work collaboratively with your team to develop the required processes, documentation and controls. This can include support around automotive quality management processes, risk management, supplier controls, internal auditing, management review, competence and preparing the organisation for third-party certification.
Our approach is not to replace a working ISO 9001 system with an unnecessarily complicated new one.
Instead, we can help you develop your existing ISO 9001 QMS into an Automotive Quality Management System, retaining what works and introducing the additional controls necessary for the automotive sector.
Our wider ISO Consultancy services can also provide ongoing resources where organisations need additional compliance capacity before, during or after certification.
Speak to Assent about extending your ISO 9001 Quality Management System towards IATF 16949 and automotive supply chain compliance.
