RSC Sphere: Quality, Compliance and Traceability

The Quality, Compliance and Traceability Sphere demonstrates how audit-grade credibility is built directly into execution workflows. It connects nonconformance, corrective action, inspection, traceability, and audit evidence into a continuous operational loop. The content emphasizes how quality systems must interact with live work rather than exist as parallel documentation processes. This sphere proves that compliance and execution can reinforce each other instead of competing for attention.

  • Aircraft-on-Ground (AOG)

    Aircraft-on-Ground (AOG) commonly refers to an unplanned situation in which an aircraft is unable to depart due to a technical fault, missing or nonconforming part, documentation issue, or other condition that prevents safe and compliant operation. The aircraft is grounded until the issue is resolved, and this status typically triggers expedited maintenance, logistics, and decision making.

    Scope and usage in industrial and regulated environments

    In aerospace and other highly regulated manufacturing and maintenance environments, AOG is used to describe:

    • An operational status where an in-service aircraft cannot fly and requires immediate corrective action.
    • A priority level applied to maintenance tasks, parts orders, and engineering support for that aircraft.
    • A driver for rapid coordination across maintenance, supply chain, quality, and engineering functions, including OT/IT and MES/ERP processes.

    AOG conditions may be caused by issues such as unavailable spare parts, nonconforming components, incomplete or inconsistent maintenance records in digital systems, unresolved findings from inspections, or system failures detected by onboard monitoring.

    Operational and systems implications

    In operations and manufacturing systems that support airlines, MROs, and aerospace OEMs, an AOG event can affect:

    • Maintenance execution: Work is re-prioritized, often requiring immediate work orders, deviations, or concessions managed through maintenance or MES systems.
    • Supply chain and inventory: Parts movements, reservations, and procurement may be escalated, with AOG-specific order types or priority flags in ERP systems.
    • Quality and compliance: Documentation, release records, and configuration control must be verified quickly to return the aircraft to service in a compliant manner.
    • Data and integration: Accurate and timely information exchange between maintenance systems, MES, ERP, and airline operations is critical to track status, approvals, and traceability related to the AOG event.

    Common confusion

    • AOG vs routine maintenance: Routine or scheduled maintenance is planned and typically does not place the aircraft in an urgent grounded status. AOG specifically refers to unplanned grounding that requires immediate attention.
    • AOG vs non-operational for commercial reasons: An aircraft that is parked or not in use for scheduling or commercial reasons is not necessarily in AOG status. AOG is tied to a technical, safety, or compliance-related inability to fly.

    Context in manufacturing and MRO operations

    Within manufacturing plants and maintenance, repair, and overhaul (MRO) facilities that support fleets, AOG conditions influence production priorities, capacity planning, and expediting rules. For example, a component repair order may be flagged as AOG, causing it to bypass standard queues, with additional documentation and digital tracking to maintain configuration and traceability requirements while responding quickly.

  • characteristics

    In industrial and aerospace manufacturing, characteristics commonly refer to specific, measurable features, properties, or requirements of a part, material, or process that must be defined, produced, and verified. Characteristics are typically derived from engineering drawings, specifications, or customer requirements and are used as the basis for inspection and quality records.

    What characteristics include in manufacturing

    In regulated and aerospace environments, characteristics often include:

    • Dimensional characteristics: lengths, diameters, hole locations, flatness, position, and other geometry called out on a drawing.
    • Material and physical characteristics: alloy or resin type, hardness, tensile strength, grain direction, surface roughness, coating thickness.
    • Functional characteristics: performance-related requirements such as pressure rating, flow rate, torque, electrical resistance, or continuity.
    • Process characteristics: parameters that must be controlled in the process, such as heat-treat cycle, cure time and temperature, torque values, or test conditions.
    • Key or critical characteristics: a subset of characteristics that have significant impact on safety, fit, function, or regulatory requirements and often require enhanced control and documentation.

    Characteristics are usually identified and numbered during drawing review or ballooning, then referenced in inspection reports, first article inspection (FAI) forms, and electronic records in MES, QMS, or inspection systems.

    Characteristics in AS9102 and First Article Inspection

    In the context of AS9102 First Article Inspection, characteristics are the individual drawing or specification requirements that must be verified and documented for the part being qualified. Each characteristic is:

    • Linked to a drawing or specification callout (often via a balloon number).
    • Described in an inspection report (for example, AS9102 Form 3 fields).
    • Associated with actual measured or observed results and the status of acceptance.

    Consistent handling of characteristics is important for traceability, change control, and auditability across parts, suppliers, and revisions.

    Operational role of characteristics

    Operationally, characteristics are used to:

    • Define what must be checked at receiving inspection, in-process inspection, and final inspection.
    • Configure inspection plans, sampling plans, and electronic checklists in MES or quality systems.
    • Support root cause analysis and nonconformance investigation by tying defects back to specific failed characteristics.
    • Maintain evidence for internal and external audits by showing requirements, results, and dispositions.

    Common confusion

    Characteristics vs. tolerances: A characteristic is the feature or requirement itself (for example, hole diameter), while a tolerance is the acceptable variation for that characteristic (for example, 10.00 mm ± 0.05 mm).

    Characteristics vs. requirements: “Requirements” is a broader term that can include process, documentation, and regulatory obligations. Characteristics usually refer to the specific, measurable technical or process features that are checked to confirm those requirements are met.

    Tie-back to AS9102 audit risk context

    In AS9102-related audits, gaps often involve how characteristics are identified, ballooned, transferred between PLM, MES, and QMS, and documented in FAI packages. Incomplete, inconsistent, or mismatched characteristic lists and results can create traceability issues and increase audit risk.

  • Are FMEA or similar tools required by AS9100 for risk management?

    AS9100 does require risk management, but it does not require FMEA, FMECA, or any specific tool. FMEA is one recognized method for identifying and mitigating risk, yet the standard is written to be tool-agnostic.

    What AS9100 actually requires for risk management

    AS9100 (e.g., Rev. D, clause 6.1 and related clauses) expects you to:

    In practice, this connects to AS9100 compliance when teams need to turn the answer into repeatable execution habits.

    • Plan actions to address risks and opportunities related to product quality and conformity.
    • Define and apply a risk management process that is appropriate to your products and operations.
    • Establish criteria for risk acceptance, prioritization, and treatment.
    • Integrate risk thinking into planning, design and development, production, and change control.
    • Maintain documented information (evidence) showing how risks are identified, evaluated, mitigated, and reviewed.

    The standard does not name FMEA as a requirement. Certification bodies will not normally insist on FMEA specifically, provided your risk management approach is robust and traceable.

    Using FMEA and similar tools in an AS9100 context

    While not mandated, FMEA (or FMECA, hazard analysis, risk registers, etc.) is often used because it provides:

    • Structured identification of failure modes, causes, and effects at product or process level.
    • A way to prioritize issues using severity/occurrence/detection or similar scoring.
    • Clear linkage to controls, inspection plans, work instructions, and process changes.

    In regulated aerospace environments, FMEA or similar methods can also help tie together design inputs, process controls, inspection characteristics (e.g., for AS9102/FAI), and NCR/CAPA data. That said, an FMEA that is created once for audit and never maintained will not satisfy AS9100 expectations on risk being an ongoing discipline.

    What auditors typically look for

    Auditors generally focus on the effectiveness and consistency of your risk approach, not the brand name of the method:

    • Can you show how high-risk items are identified and prioritized?
    • Are risks linked to actions (controls, additional inspection, process changes, training, supplier controls)?
    • Is risk information kept current when there are engineering changes, process changes, supplier changes, or new NCR trends?
    • Is there traceability between risk assessments and downstream artifacts such as routers, work instructions, control plans, and inspection records?
    • Is risk management integrated into design reviews, MRB decisions, and CAPA, or is it a stand-alone form?

    If you can demonstrate these elements using another structured method (risk matrix, hazard analysis, bow-tie diagrams, etc.), that is typically acceptable.

    Brownfield and systems reality

    In most aerospace plants, risk management data ends up scattered across legacy QMS, spreadsheets, PLM, and MES/ERP. Introducing a new FMEA tool or module can be useful, but it also introduces:

    • Integration risk: keeping FMEA in sync with current BOMs, routings, and work instructions.
    • Change control burden: ensuring that engineering changes, supplier changes, and process changes trigger FMEA reviews.
    • Validation and qualification cost: if the tool feeds controlled documentation or is used as a quality record, it may require validation and documented change control.

    Trying to replace all existing risk-related artifacts with a single new tool often fails in long-lifecycle, regulated environments because of downtime constraints, integration complexity, and the need to preserve historical evidence. A more realistic approach is usually to:

    • Define a minimum, standard risk method (which may be FMEA-based) for new or changed products and processes.
    • Phase it in where the risk and payback are highest, instead of retrofitting every legacy part family at once.
    • Ensure that whatever tool you use feeds or aligns with your existing MES/ERP/QMS artifacts without breaking traceability.

    Practical takeaway

    You do not have to use FMEA to comply with AS9100, but you do need a disciplined, documented, and maintained approach to risk management. Choose tools that fit your process maturity and system landscape, and focus on traceability, integration with planning and change control, and evidence that risks drive concrete actions.

  • What is the role of PDCA in ISO 9001:2015?

    PDCA (Plan-Do-Check-Act) is the management and improvement cycle that ISO 9001:2015 is built around. The standard does not treat PDCA as an optional tool, but as the basic logic for how a quality management system (QMS) is planned, run, monitored, and improved.

    How PDCA maps to ISO 9001:2015 clauses

    ISO 9001:2015 is structured to follow PDCA across the whole QMS:

    In practice, this connects to the ISO 9001 quality baseline when teams need to turn the answer into repeatable execution habits.

    • Plan: Understand context and risks, define processes and objectives.
      • Key clauses: 4 (Context of the organization), 5 (Leadership), 6 (Planning), selected parts of 7 (Support).
      • Typical activities: defining process interactions, setting quality objectives and KPIs, risk-based thinking, resource and competence planning, document and data control strategies.
    • Do: Operate the processes as planned and controlled.
      • Key clause: 8 (Operation).
      • Typical activities: executing production and service provision, managing changes, controlling external providers, using work instructions, travelers, inspection plans, and production records.
    • Check: Monitor performance and compliance to planned arrangements.
      • Key clause: 9 (Performance evaluation).
      • Typical activities: process and product monitoring, analysis of production and quality data, internal audits, management review, supplier performance review.
    • Act: Take action based on what was learned to improve the QMS and its processes.
      • Key clause: 10 (Improvement).
      • Typical activities: corrective action, addressing nonconformities, preventive and risk-based actions, structured continuous improvement projects, updating procedures and controls under change control.

    Role of PDCA in a regulated, brownfield environment

    In industrial and aerospace-grade operations, PDCA is not a separate “tool” layered on top of existing systems. It is the way you coordinate them:

    • Plan often lives across multiple systems: requirements in ERP/PLM, risk registers, process maps, and controlled procedures in QMS or document control tools.
    • Do is executed via legacy MES, paper or hybrid travelers, machine controls, MRO systems, and supplier portals that cannot be simply replaced without major requalification and downtime.
    • Check relies on data pulled from these disparate systems: QMS (NCRs/CAPA), MES or travelers (as-built, scrap, rework), ERP (delivery and cost), and audit findings.
    • Act must respect change control, validation, qualification of equipment and software, and the long lifecycle of assets and documentation.

    Because of this, PDCA in ISO 9001:2015 is less about installing a new improvement program and more about ensuring that your existing planning, execution, monitoring, and improvement mechanisms are deliberately connected, traceable, and operating as a closed loop.

    What PDCA does and does not guarantee

    • PDCA supports compliance and audit readiness by providing a repeatable way to plan, execute, check, and improve your QMS.
    • PDCA does not guarantee certification outcomes or regulatory compliance. Results depend heavily on process discipline, data integrity, operator adoption, and integration quality across MES/ERP/QMS and shop-floor systems.
    • In practice, many failures in ISO 9001 systems come from PDCA breaks: changes implemented without proper planning or validation, data not reviewed, audit findings not acted on, or improvements not embedded into controlled documentation and training.

    Using PDCA effectively with existing systems

    For most regulated plants, trying to replace all legacy systems to “get PDCA” is high risk and often unsuccessful because of validation cost, downtime, and integration complexity. A more practical approach is to:

    • Make explicit which existing tools and processes play each PDCA role for each major value stream.
    • Ensure traceability between Plan (requirements and risks), Do (records), Check (metrics, audits), and Act (CAPA, engineering changes, procedure updates).
    • Align PDCA cycles with formal management review, MRB, and CAPA processes so improvement actions are documented, reviewed, and controlled.
    • Use digitalization projects (for example, digital travelers or nonconformance workflows) to close specific PDCA gaps instead of attempting a full QMS/ERP/MES replacement.

    In summary, PDCA is the organizing logic of ISO 9001:2015. Its role is to ensure that planning, operation, evaluation, and improvement of your QMS form a controlled, evidence-based loop across the many systems and processes already in place.

  • Which leading indicators should executives track weekly to prevent scrap from compounding into margin erosion?

    Executives trying to prevent scrap from eroding margin should focus weekly reviews on a small set of leading indicators that expose quality drift and process instability before they appear in financials. The exact numbers and thresholds will be plant-specific, but the structure below is generally applicable in regulated, mixed-system environments.

    1. First-pass yield on critical value streams

    Rather than a global yield number, track first-pass yield (FPY) on the few value streams or product families that drive most contribution margin.

    In practice, this connects to scrap and rework reduction when teams need to turn the answer into repeatable execution habits.

    • Metric: FPY by value stream / product family / key line.
    • Why it is leading: FPY deterioration often appears weeks before formal scrap write-offs hit the P&L.
    • What to watch weekly:
      • Trend vs a 4–12 week baseline, not just week-over-week changes.
      • FPY for high-risk operations (special processes, tight tolerances, final assembly/test).
    • Dependencies/risks: FPY reliability depends on how well rework loops are captured in MES/LIMS/QMS and whether inspection data is complete and timely.

    2. Early defect signals and nonconforming material

    Executives do not need every Pareto chart, but they do need early visibility into nonconformances before they become large scrap events.

    • Metric: Count and rate of new nonconformances / defects opened, segmented by severity, operation, and source (in-process, final, customer, supplier).
    • Why it is leading: Rising minor or in-process defects often precede major scrap or recalls.
    • What to watch weekly:
      • New nonconformances per 1,000 units or per production hour on top-margin products.
      • Repeat issues by defect code, operation, or component over the last 4–8 weeks.
      • Defects emerging after process changes, new tooling, or new suppliers.
    • Dependencies/risks: Requires consistent coding of nonconformances in QMS and linkage to lot/batch, operation, and part numbers. In many brownfield sites, this linkage is partial and will need improvement over time.

    3. Rework and deviation usage

    Rising rework and reliance on deviations or concessions are strong leading indicators that processes are operating out of control, even if scrap is temporarily contained.

    • Metrics:
      • Rework rate (rework hours or quantity as a percentage of total production).
      • Number of active deviations / concessions and their aging.
      • Units shipped under deviation vs total shipments for key customers or programs.
    • Why they are leading: Plants often choose rework and deviations to protect service levels, allowing scrap risk to accumulate in WIP and latent defects.
    • What to watch weekly:
      • Upward trends in rework on any high-margin product line.
      • Any deviation older than a defined threshold (for example, >30 days) that has not been fully addressed by engineering or process changes.
    • Dependencies/risks: Many sites track rework and deviations inconsistently across MES, QMS, and paper travelers. Expect gaps and be explicit about them in executive reviews.

    4. Scrap in WIP and quarantine, not just final write-offs

    Waiting for formal scrap disposition guarantees that executives will see the problem late. Earlier stages are more predictive.

    • Metrics:
      • Value of material in quarantine / hold status by week, especially for key products or processes.
      • WIP at-risk: lots tagged with quality concerns, rework pending, or engineering review.
      • Number and size of emerging scrap events (for example, lots where more than a defined percentage has already failed in-process checks).
    • Why they are leading: Quarantine stocks and at-risk WIP are often a 2–8 week leading signal for margin impact, depending on lead times and disposition cycles.
    • Dependencies/risks: Requires at least partial integration between ERP inventory, MES status, and QMS nonconformances. In brownfield settings, this may start as a partially manual weekly roll-up.

    5. Schedule impact from quality issues

    Scrap rarely stays isolated to material cost. Executives should see how quality issues are eroding capacity and on-time performance.

    • Metrics:
      • Hours of unplanned downtime / lost capacity due to quality investigations, rework, or containment.
      • Number of rescheduled orders or line changeovers directly attributable to quality problems.
      • On-time delivery for top-margin products, annotated where quality issues were a contributing cause.
    • Why they are leading: Capacity disruption and rescheduling costs appear before clear scrap accounting and quickly affect contribution margin.
    • Dependencies/risks: Requires reason codes for schedule changes and downtime, which are often missing or free-text in legacy scheduling systems.

    6. Containment and CAPA load

    Increasing containment and corrective activity is often the first signal that problems are compounding, even when scrap and warranty still look acceptable.

    • Metrics:
      • Number of open containment actions and their duration.
      • Number of open CAPAs related to scrap, rework, or customer escapes.
      • Average age of open CAPAs and whether interim risk controls are in place.
    • Why they are leading: Rising CAPA and containment workload usually precedes chronic scrap and customer dissatisfaction.
    • Dependencies/risks: This depends on disciplined use of QMS workflows and change control. In many organizations, CAPA data quality is variable and needs active governance.

    7. Supplier-related scrap risk

    Supplier quality problems can silently accumulate as in-process scrap, rework, and schedule risk.

    • Metrics:
      • Incoming inspection failure rate by critical supplier or commodity.
      • Supplier-related nonconformances that have reached in-process operations or customers.
      • Use of waivers / deviations against supplier material.
    • Why they are leading: Supplier instability often hits margins indirectly via late rework, expedited logistics, and line interruptions rather than immediate scrap recognition.
    • Dependencies/risks: Requires consistent supplier identifiers across ERP, QMS, and sometimes PLM. Many brownfield environments have fragmented supplier master data.

    8. Financial visibility: trending cost of poor quality

    Executives should see scrap within a broader view of cost of poor quality (COPQ), with enough frequency to intervene but not so much that finance spends all week compiling numbers.

    • Metrics:
      • Estimated COPQ as a percentage of sales for the last 4–12 weeks, broken into scrap, rework, and warranty/returns where possible.
      • Scrap value trends by key product family or program.
      • Correlation of COPQ trends with specific plants, suppliers, or processes.
    • Why it is leading: While scrap value itself is more lagging, weekly trend visibility lets leaders connect operational indicators to financial impact and prioritize action.
    • Dependencies/risks: COPQ is often only partially modeled, and allocations may be approximate. It is more useful as a relative trend than an absolute truth, especially early on.

    9. How to structure an executive weekly scrap-risk review

    The metrics above are most effective when presented as a stable, short deck or dashboard that focuses on trends and exceptions rather than raw data volume.

    • Keep it small: 10–15 tiles or views, stable over time, with clear owners.
    • Trend-first view: 4–12 week rolling trends, with simple traffic-light thresholds that are periodically recalibrated.
    • Explicit connections: For each alert or trend, show which process, supplier, or product line is implicated and whether a CAPA or containment action is active.
    • Traceability: From each executive metric, there must be a clear path back to underlying data (lot, batch, work order, nonconformance record) for audit and investigation, even if it requires drilling into multiple systems.

    10. Brownfield and regulated environment realities

    In most regulated, long-lifecycle environments, these metrics must coexist with existing MES, ERP, PLM, LIMS, and QMS systems.

    • Do not assume a full system replacement: Replacing core systems just to improve scrap visibility usually fails due to validation burden, qualification of interfaces, downtime risk, and the need to preserve historical traceability.
    • Layered integration: A pragmatic pattern is to pull limited, high-value fields from existing systems into a lightweight analytics layer or report, while keeping source-of-truth systems unchanged and validated.
    • Manual bridges where needed: Initially, some leading indicators will rely on manual extracts or structured spreadsheets, especially for WIP-at-risk and containment actions. These can still be valuable if they are repeatable, documented, and under change control.
    • Validation and change control: Any automation of metric calculations that feeds formal decision-making should be documented, version-controlled, and, where required, validated to the appropriate level. Changes to metric definitions should be visible in the weekly review so leaders understand discontinuities in trends.

    11. How to avoid common failure modes

    Several patterns tend to undermine the value of leading scrap indicators at the executive level.

    • Too many metrics, not enough action: A large, constantly changing dashboard encourages passive viewing rather than decisions. Limit to a core set tied to specific triggers for investigation or escalation.
    • Lagging-only views: Scrap and warranty data alone are too late. Always pair them with FPY, nonconformance, rework, and containment indicators.
    • Unclear ownership: Each metric should have an operational owner who can explain movements and outline short-term containment and long-term corrective action.
    • Unstable definitions: Redefining metrics frequently without clear history makes year-over-year or even month-over-month comparisons unreliable and undermines trust.
    • No link to root cause work: Make sure nonconformances and CAPAs referenced in the weekly review are tied to root cause analysis efforts, not just paperwork closure.

    Executives do not need exhaustive detail to prevent scrap from compounding into margin erosion. They need a disciplined, traceable set of leading indicators that connect process behavior, quality risks, and financial impact, built on top of existing systems and constrained by validation and change control realities.

  • Do we need separate manuals for quality and information security?

    You do not always need completely separate manuals for quality and information security, but you do need clearly separated scope, responsibilities, and evidence. How you achieve that separation can be through two manuals or one integrated manual with clearly partitioned sections.

    When separate manuals are usually preferred

    Many regulated manufacturers keep distinct manuals (for example, a Quality Management System (QMS) manual and an Information Security Management System (ISMS) or cybersecurity manual) because it simplifies:

    In practice, this connects to qms integration and evidence trails when teams need to turn the answer into repeatable execution habits.

    • Audit handling: Different auditors (regulatory, customer, certification, IT/cyber) care about different clauses and evidence sets. Separate manuals allow you to share only what is relevant.
    • Ownership and change control: Quality is typically owned by QA/Operations; information security by IT/cyber. Separate manuals reduce cross-team friction in approvals and change cycles.
    • Lifecycle differences: Quality processes around production and validation often change slower than security controls, which must react to changing threats and IT landscapes.
    • Scope boundaries: Quality often focuses on product realization, nonconformance, and CAPA, while information security spans enterprise systems, networks, and sometimes third-party services well outside manufacturing.

    In brownfield environments with legacy MES/ERP/QMS and long-qualified equipment, this separation helps avoid frequent rework of quality documentation every time a security configuration or network architecture changes.

    When a single integrated manual can work

    A single manual can be workable if:

    • Your management system is intentionally integrated: For example, a combined ISO 9001 / 27001 / 13485 / AS9100 structure with a common policy framework.
    • Document control is mature: You can reliably manage section-level ownership, versioning, and change logs so edits to security sections do not unintentionally affect quality sections and vice versa.
    • Auditor expectations are aligned: You have validated with key customers, certifiers, or notified bodies that an integrated manual is acceptable if the structure clearly maps to applicable requirements.
    • Traceability is explicit: You maintain a clause-to-section matrix showing where each quality and security requirement is addressed, so that combined content is still easy to navigate during audits.

    Even in a single manual, it is wise to keep separate top-level sections and role-based access controls in your document management system, so security-sensitive details are restricted while high-level process descriptions remain broadly available.

    Key decision factors

    When deciding whether to separate or integrate, consider:

    • Regulatory and customer drivers: Some customers or regulatory schemes implicitly expect distinct quality and security governance, even if they do not mandate separate manuals.
    • Audit load and frequency: If you face frequent product audits plus separate cybersecurity assessments, separate manuals often reduce preparation effort and cross-impact risk.
    • Organization structure: If quality and information security report into different leadership chains with separate review boards, separate manuals usually create fewer conflicts over content and priorities.
    • Systems landscape: In mixed, brownfield IT/OT environments, information security content tends to change more often as you harden networks, patch legacy systems, or deploy compensating controls. Housing all of that in the QMS manual can introduce unnecessary revalidation work.
    • Validation and change control burden: In regulated manufacturing, changes to quality documentation may force impact assessments, training updates, and sometimes system re-validation. Tightly coupling fast-moving security content to the QMS manual can slow necessary security changes.

    Practical middle ground: linked but distinct

    A practical compromise in many plants is:

    • Separate manuals: Maintain a QMS manual and an information security / cybersecurity manual as standalone, controlled documents.
    • Shared framework elements: Use a common policy hierarchy, risk management principles, and CAPA concepts so terminology aligns.
    • Cross-references: In the QMS manual, reference the security manual where data integrity, access control, or OT cybersecurity are relevant. In the security manual, reference quality documents where product data and regulated records are in scope.
    • Shared procedures where necessary: For example, incident management, change control, and supplier management can be defined once and referenced by both manuals with clear role ownership.

    This approach keeps boundaries clear for audits and change control, while acknowledging that product quality and information security are interdependent in modern manufacturing systems.

    Coexistence with existing systems

    Whatever you choose, align the manual structure with your existing QMS, document control, and IT/security tooling:

    • Document control system: Ensure both manuals, and all referenced procedures, are under consistent version governance, with traceable approvals and training records.
    • Legacy MES/ERP/PLM: If quality processes are tightly coupled to legacy systems, avoid embedding detailed, system-specific security configurations in the QMS manual. Instead, keep those in the security manual or technical standards and reference them.
    • OT environments: For industrial control systems and plant-floor networks, define security controls in a way that acknowledges long equipment lifecycles and limited downtime windows, and link those controls to relevant quality risks (for example, data integrity, batch records, and traceability).

    Full replacement of existing manuals or management systems purely to “unify” everything is rarely justified in aerospace- or medical-grade environments, given validation effort, audit disruption, and the risk of introducing documentation gaps. Incremental restructuring with clear cross-references is usually safer.

    Summary

    You are not universally required to have separate quality and information security manuals, but combining them into a single document often increases complexity, especially in regulated, brownfield environments. Most organizations benefit from either two manuals or a carefully structured integrated manual with clearly distinct sections, explicit ownership, and strong document control.