FAQ Tag: change control

  • How can I let auditors drill into data without exposing everything to all users?

    Yes, but usually not by opening the same level of access to every user.

    The practical pattern is to separate who can view summary information from who can drill into underlying records, and then control drill-down by role, site, program, product, supplier, or record type. Auditors and quality personnel may need deep evidence access. Most other users do not.

    In regulated environments, that typically means combining several controls rather than relying on a single permission setting:

    • Role-based access control so users only see the functions and records appropriate to their role.
    • Record-level or attribute-level security to limit visibility by plant, work center, part family, customer program, supplier, or document class.
    • Read-only audit workspaces or reports that let auditors trace from KPI or exception to underlying transaction, document, and approval history without exposing unrelated records.
    • Evidence links back to source systems so a drill-down lands on the governed record, not a disconnected export or screenshot.
    • Full audit trails for who viewed, changed, approved, or exported records, where the platform supports it.

    If the question is whether one dashboard can safely serve operators, supervisors, executives, quality, and auditors with no additional design, the answer is usually no.

    Drill-down access is only trustworthy if the underlying data model, identity controls, and integrations are disciplined. In many plants, the top-level metric may come from a BI layer, while the detailed record lives in MES, ERP, QMS, PLM, or a document repository. If those links are weak, users can drill into stale, incomplete, or mismatched data. That is a governance problem, not just a UI problem.

    What usually works

    A controlled approach often includes:

    • Tiered visibility: broad access to approved summaries, narrower access to detailed records, and highly restricted access to sensitive fields.
    • Context-aware filtering: users can drill only into the site, line, product, customer, or quality scope they are authorized to see.
    • Predefined audit paths: for example, from a nonconformance count to the NCR, then to disposition, approvals, attachments, and linked production history.
    • Masking or redaction for commercial, export-controlled, personnel, or supplier-sensitive data where applicable.
    • Controlled exports: allow viewing when needed, but restrict bulk download or uncontrolled sharing.
    • Change-controlled report definitions: if a report supports audit or release decisions, its logic should be versioned, reviewed, and managed accordingly.

    What can go wrong

    Common failure modes are predictable:

    • Users can see a chart but cannot reach the underlying evidence, so the metric is not defensible.
    • Users can drill too far and see unrelated programs, suppliers, or plants.
    • BI permissions do not match source-system permissions.
    • Exports bypass retention, traceability, or document control practices.
    • Master data inconsistencies cause one summary metric to map to multiple underlying records, or none at all.
    • Security models become so complex that plants start sharing generic accounts or offline files to get work done.

    That last point matters in brownfield environments. If MES, ERP, QMS, PLM, and reporting tools each have different role models, identity stores, and naming conventions, drill-down security becomes brittle fast. Full replacement is rarely the clean answer in long-lifecycle regulated operations because qualification burden, validation cost, downtime risk, and integration complexity are high. In practice, most organizations improve access control by federating identity, tightening system-to-system mappings, and creating governed audit views over existing systems.

    So the short answer is: give broad access to approved summaries, and limited, traceable drill-down to governed source records based on role and scope. Do not assume dashboard access alone solves evidence access, and do not assume one security model will fit every connected system without careful integration and validation.

  • How do aerospace manufacturers retrieve historic FAIRs during incident investigations?

    Aerospace manufacturers usually retrieve historic FAIRs by starting from the affected part number, drawing revision, serial number, lot, work order, or supplier batch, then following those links across the systems that hold the actual evidence.

    In a mature environment, the FAIR package can be found through indexed records tied to the part master, approved design baseline, manufacturing order, and inspection results. In a brownfield environment, retrieval is often slower and less direct because the FAIR may be split across multiple repositories such as QMS records, PLM attachments, MES or traveler history, ERP job data, shared file storage, email archives, and third-party portals.

    What retrieval usually looks like

    • Identify the exact configuration in question: part number, assembly, drawing revision, effectivity, supplier, process route, and date range.

    • Use the incident record, NCR, CAPA, or customer complaint to anchor the search to a specific serial number, lot, or work order.

    • Pull the FAIR index or reference record from the QMS, FAI software, PLM, or document control system.

    • Verify that the retrieved FAIR matches the approved revision and the actual manufactured configuration at the time.

    • Collect linked evidence such as ballooned drawings, characteristic results, material certs, process certs, special process approvals, and prior delta FAIRs if the part changed over time.

    • Confirm traceability to downstream product if the investigation concerns an assembly, field incident, escape, or supplier issue.

    What makes retrieval difficult

    The hard part is usually not opening a file. It is proving that the file is the correct historic FAIR for the exact configuration under investigation.

    Common failure modes include:

    • FAIRs stored as static PDFs with weak metadata

    • part numbers or revisions not synchronized across ERP, MES, PLM, and QMS

    • supplier FAIRs stored outside internal document control

    • delta FAIR history not linked cleanly to the original package

    • legacy scans that are searchable only by filename or folder path

    • changes in numbering conventions after ERP, MES, or QMS migrations

    • work orders closed without consistent linkage to the released design baseline

    • multiple unofficial copies of the same FAIR package

    When those issues exist, retrieval becomes a manual evidence exercise rather than a simple query.

    Which systems are usually involved

    There is rarely a single system of record for every FAIR artifact. Most aerospace manufacturers rely on coexistence:

    • PLM for released drawings, revisions, and change history

    • ERP for jobs, lots, suppliers, and order lineage

    • MES or digital traveler systems for execution history and serialized or lot traceability

    • QMS or FAI software for FAIR forms, approvals, and investigation links

    • document control repositories for archived PDFs and scanned records

    • supplier portals or external systems for outsourced or supplied FAIR content

    That coexistence is normal. Full replacement is often unrealistic in regulated, long lifecycle aerospace environments because qualification burden, validation effort, downtime risk, and integration complexity are high. For that reason, many companies improve retrieval by adding indexing, cross-references, and evidence trails across existing systems instead of trying to replace everything.

    What determines whether retrieval is fast and defensible

    • consistent part and revision master data

    • formal document control and approval workflows

    • clear linkage between FAIRs, orders, lots, serials, and change records

    • searchable metadata rather than file-only storage

    • retention practices that preserve old formats and prior revisions

    • validation of integrations where records move between systems

    • controlled handling of supplier-submitted FAIRs

    If those controls are weak, incident investigations often slow down while teams reconcile conflicting records and verify authenticity.

    Short answer

    Manufacturers retrieve historic FAIRs by tracing the affected configuration through their quality, product, and execution records, then assembling the approved FAIR package and linked evidence from multiple systems. Whether that process is fast, complete, and trustworthy depends heavily on metadata quality, revision control, integration quality, and archival discipline.

  • How should key characteristics be marked and documented on Form 3?

    They should be marked in a clear, traceable, and consistent way that matches the governing drawing, specification, or customer requirement and is carried through to the related entry on Form 3.

    In practice, that usually means the key characteristic is explicitly identified in the characteristic accountability used for the FAI, then documented on Form 3 with the same characteristic reference, the design requirement, the inspection result, and the applicable measurement method or evidence. If your organization uses balloon numbers, flag symbols, or a dedicated notation for key characteristics, that convention should stay consistent across the drawing review, ballooned print, inspection plan, and Form 3 record.

    What matters most is not a specific visual style on its own, but whether an auditor, customer, quality engineer, or downstream reviewer can reliably answer these questions from the record:

    • Which requirement was designated as a key characteristic?
    • Where is that requirement located in the source design data?
    • Which Form 3 line item corresponds to it?
    • What result was recorded?
    • What objective evidence supports the result?

    A practical approach is to ensure each key characteristic entry on Form 3 is:

    • linked to the exact drawing or specification characteristic number
    • visibly identified using your approved internal convention if one exists
    • recorded with the required result and units
    • supported by traceable inspection evidence, including gage, CMM, test report, or other controlled source as applicable
    • aligned to the correct revision of the design record and planning data

    If a customer, prime, or internal quality procedure requires a specific identifier, column use, annotation method, or supplemental form, follow that requirement. There is no safe universal shortcut here. AS9102 execution often varies by customer flowdown, software configuration, and how the organization controls ballooning and inspection planning.

    Common failure modes

    • Marking a characteristic as key on the print but not clearly carrying that designation into Form 3
    • Using inconsistent numbering between the ballooned drawing and Form 3
    • Recording a result without showing the key characteristic designation in a retrievable way
    • Relying on tribal knowledge or color coding in a spreadsheet that is lost when the record is exported or printed
    • Mixing revision levels between drawing, inspection plan, and FAI package
    • Assuming FAI software will infer the designation correctly without validation

    In brownfield environments, this often breaks at the handoff points between PLM, ERP, MES, QMS, and standalone FAI or ballooning tools. If the designation for key characteristics is managed in one system but Form 3 is produced in another, mapping and synchronization need to be checked carefully. Full replacement of legacy tools is often not realistic because of validation cost, qualification burden, downtime risk, and long-established evidence chains. Controlled coexistence is usually safer than a forced rip-and-replace approach.

    If your procedure does not define exactly how key characteristics must appear on Form 3, the right next step is to define and approve a standard method under document control, then validate that the method is followed consistently across programs and systems.

    So the short answer is: mark them using your approved, traceable convention and document them on Form 3 so the designation, requirement, result, and evidence are unambiguous. If that linkage is not clear, the record is weak even if the measurement itself is correct.

  • How do I decide whether an engineering change requires a full or partial FAI?

    You decide by evaluating what the engineering change could affect, then matching the FAI scope to that impact. In practice, a partial FAI is appropriate when the change is limited and you can clearly show which characteristics, processes, or assemblies are affected. A full FAI is usually warranted when the change has broader impact, the effect cannot be bounded with confidence, or traceability to the affected characteristics is weak.

    The key point is that this is not only a document control question. An engineering change notice by itself does not automatically mean full FAI or partial FAI. The decision depends on whether the change could alter product definition, manufacturing execution, verification methods, or the evidence trail needed to support the part revision.

    When partial FAI is typically reasonable

    A partial FAI is commonly used when the change is narrow and the affected scope is explicit. Typical examples include:

    • A drawing revision that changes only specific dimensions, notes, tolerances, or material callouts, and the downstream impact is limited to identified characteristics.

    • A manufacturing change that affects only one operation or feature, with no credible impact on other characteristics.

    • A tooling, fixture, CNC program, or inspection program update that can be shown to affect only certain features.

    • A change in an outside process, supplier, or source where the impact is limited and supported by equivalency evidence and updated verification.

    In these cases, the partial FAI should cover the changed characteristics and any other characteristics that could be affected indirectly. That indirect impact review matters. A change that appears local on paper can still affect datum structure, stack-up, surface condition, distortion, accessibility for inspection, or process stability.

    When a full FAI is usually the safer decision

    A full FAI is often the better choice when:

    • The change affects multiple features, assemblies, interfaces, or manufacturing steps.

    • The revised design changes fit, form, function, performance, interchangeability, or regulatory-critical characteristics.

    • The datum scheme, baseline model, drawing interpretation, or acceptance method changed.

    • The change introduces a new manufacturing route, major tooling change, machine transfer, software change, or inspection methodology change with wider impact.

    • You cannot confidently map the change to a bounded set of characteristics.

    • Your records, ballooning, characteristic traceability, or revision control are incomplete enough that a partial FAI would be difficult to defend.

    If the impact analysis is weak, a partial FAI can create more risk than it removes. It may save short-term effort, but it can leave gaps in objective evidence and create downstream disputes with customers, suppliers, or quality representatives.

    What to review before deciding

    A practical review usually includes:

    • The exact engineering revision delta, including notes, models, specifications, and linked documents.

    • Whether any characteristics were added, deleted, renumbered, or redefined.

    • Impact on material, special processes, sources, tooling, fixtures, programs, routers, work instructions, and inspection plans.

    • Impact on assembly interfaces, mating parts, and upstream or downstream operations.

    • Whether validation data, prior FAI records, and change history are complete enough to support a partial scope.

    • Customer or contract-specific requirements, because these may be stricter than your internal rule set.

    If any of those areas are ambiguous, the decision should be escalated rather than assumed.

    What commonly goes wrong

    The most common failure mode is treating the engineering change as isolated when the production system is not isolated. In brownfield environments, the drawing may be updated in one system while routings, inspection plans, ballooned characteristics, supplier instructions, and digital work instructions lag in other systems. That creates a real risk of under-scoping a partial FAI.

    Another common problem is assuming that because the part number did not change, the FAI scope can remain minimal. That is not reliable. Revision changes, process changes, source changes, and inspection method changes can all trigger broader reassessment even if the part number remains the same.

    There is also a tradeoff between speed and defensibility. Partial FAI reduces effort only if your change impact analysis, traceability, and configuration control are strong. If they are not, the time saved upfront can be lost later through rework, customer questions, repeat inspections, or internal investigations.

    Practical decision rule

    If you can answer all of the following with evidence, partial FAI is often defensible:

    • Exactly what changed is known and controlled.

    • The affected characteristics and processes can be identified without guesswork.

    • Indirect effects have been reviewed and found to be limited.

    • The related manufacturing, inspection, and supplier documents are updated consistently.

    • Your customer and internal procedures allow partial FAI for that scenario.

    If you cannot answer those points clearly, move toward full FAI or escalate for quality and customer review.

    So the short answer is: use partial FAI when the change impact is narrow, provable, and fully traceable. Use full FAI when the impact is broad, uncertain, or difficult to bound. The right decision depends on change control discipline, data quality, and how well your engineering, quality, and production systems stay aligned.