Search

Supply Chain Risk in Aerospace Manufacturing

Supply Chain Risk in Aerospace Manufacturing

Engineering integrity depends on maintaining control between what is designed, what is specified and what is actually manufactured. That becomes increasingly difficult when safety-critical components pass through complex, multi-tier supply chains.

Posted

18.09.2026

Written by

Richard Bowen

In aerospace and other high-consequence sectors, offshoring and subcontracting have become established commercial models. They can provide specialist capability, flexibility and reduced capital requirements. The issue is not outsourcing itself. The challenge arises when responsibility for critical manufacturing processes becomes separated from the engineering oversight needed to understand and control them.

Contracts, supplier approvals, quality certifications and inspection records all have an important role to play. But they provide assurance about the system of control, they do not necessarily demonstrate what is happening at the point of manufacture.

Certification is evidence, not control

AS9100 Rev D provides a framework for controlling external providers, but certification does not prove controls are effective where the work happens. The IAQG is clear that AS9100 does not require flowing down the standard itself to every sub-tier supplier. Instead, each purchasing organisation decides which specific technical and safety requirements to communicate down the chain. In practice, flowing down critical technical requirements can often be the weak link.

Special processes such as heat treatment, non-destructive testing and surface finishing are often sub-contracted to lower tiers where direct oversight is difficult to demonstrate. Formal accreditations like NADCAP do not, by themselves, guarantee approved processes are followed consistently when delivery pressures are high. Similarly, First Article Inspection documentation under AS9102 may be completed, but subsequent changes to tooling, equipment, materials or location can often slip through re-validation unchecked. When drawing revisions and process parameters fall out of synchronisation across tiers, configuration management breaks down.

In short, whilst documentation is necessary, it is not always sufficient evidence of control.

Where the gap develops

In a multi-tier supply chain, the distance between design intent and manufacturing reality increases with every interface. Process transfers, tooling changes, material substitutions and commercial pressures introduce new sources of variation. Delivery incentives and

contractual delay penalties create powerful behavioural drivers at lower tiers, encouraging shops to defer secondary operations, adjust process parameters outside approved limits or avoid escalating non-conformances.

This is a familiar pattern of procedural drift when operational reality diverges from written requirements under the stress of a tight delivery schedule. The risk is magnified where sub-tier machine shops hold quality accreditations but lack deep aerospace experience.

The further removed the prime contractor becomes from the shop floor, the harder it is to distinguish paper compliance from real control. Unfortunately there are many examples where defects remained latent, only becoming apparent when a component failed in service.

The responsibility does not disappear

Commercial contracts can delegate manufacturing activity, but they cannot contract away the statutory duties that apply to the manufacturer.

In the UK, Section 6 of the Health and Safety at Work etc. Act 1974 requires designers, manufacturers, importers and suppliers to ensure, so far as is reasonably practicable, that articles are safe and without risks to health at all times. In civil aviation, regulatory frameworks are absolutely clear. EASA Part 21 requires the production approval holder to ensure all parts produced internally or by suppliers conform to design data and are safe for operation. The FAA position under 14 CFR Part 21 is also explicit, confirming that a production approval holder does not delegate statutory responsibility to a supplier and remains fully responsible for conformity.

Sub-tier contractual complexity does not dilute these duties either. Instead, it merely weakens the evidential trail needed to demonstrate effective control when a significant non-conformance or failure occurs.

Three ways to restore engineering control

The depth of technical assurance must reflect the consequence of failure, process novelty, supplier maturity and supply-chain distance. Within that risk-based framework, three measures are vital:

Engineering control cannot be outsourced

Offshoring and subcontracting are commercial realities, but treating safety-critical assemblies as commodity transactions is fundamentally risky. Certification and documented assurance are essential, but where failure carries severe consequences, they are no substitute for engineering judgement, rigorous change control and proportionate physical verification.

Organisations must know where their critical processes reside, know who controls them, and retain sufficient direct evidence to prove that what is being manufactured matches what was designed.

Related insights

Finch Consulting
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.