FAQ: How To Prepare for an IATF 16949 STAGE 1 Audit – Common Pain Points and What Organizations Often Miss

Can an organization go directly for IATF 16949, or does it need another standard first?

This is one of the most common questions: Can we go directly for IATF 16949, or do we need ISO 9001 first?

The practical answer is that IATF 16949 builds on ISO 9001. An organization cannot skip ISO 9001 requirements, because they are embedded within IATF 16949. However, an organization does not always need to already hold a separate ISO 9001 certificate before pursuing IATF 16949. If the company is starting from scratch, the audit can assess conformity to both ISO 9001 requirements and the additional automotive-specific IATF requirements together.

A common pain point is that organizations assume having a “general QMS” is enough. In reality, IATF 16949 demands much more, including:

• clear process interaction
• customer-specific requirements linked to operations
• measurable process performance
• risk-based thinking supported by PDCA
• stronger operational discipline throughout the automotive supply chain

If the organization already has another standard—especially ISO 9001—the system foundation is usually stronger. In some cases, the certification approach may become more efficient, but the actual audit duration and any reduction in manday must always be confirmed directly with the IATF-recognized certification body, based on current rules, risk, performance, headcount, and site structure.

What kind of organization is eligible for IATF 16949 certification?

Another major pain point happens when a customer asks a supplier to get IATF 16949, but the organization later finds that its scope is not actually eligible.

In principle, IATF 16949 certification applies to organizations that manufacture automotive products or vehicles within the certification rules. It is not intended for organizations that only perform sales, warehousing, testing, or design without manufacturing, or for companies that outsource all manufacturing activities. Under Rules 6th Edition, eligibility was clarified further, including requirements related to replacement parts and materials, with additional clarification affecting certain aftermarket parts under the current rules.

Before Stage 1, organizations should clearly confirm:

• whether the product is truly used in a vehicle
• whether the automotive customer relationship is valid and relevant
• whether any aftermarket parts must be included or explained in the certification scope
• whether the scope fits the current IATF Rules

What audit planning information and key documents should be prepared?

Stage 1 is not simply about “sending documents.” It is about demonstrating that the organization is truly ready to proceed to Stage 2.

Under Rules 6th Edition, audit planning is more structured. Audit planning information should be submitted at least 30 days before the audit, and the time between the closing meeting of Stage 1 and the start of Stage 2 must be a minimum of 20 calendar days and a maximum of 90 calendar days. Pre-audits or pre-assessments are no longer permitted.

Why are team readiness and top management readiness so importance?

One reason Stage 1 does not go smoothly is not only missing documentation, but the fact that the team does not fully understand the objective of the process they own, nor the risks associated with it.
The wider team should understand:

• the purpose of the process
• the KPI for that process
• the main risks and their severity
• the response plan for those risks
• how improvement is managed using PDCA

Top management matters as well. IATF 16949 is not looking only at documented procedures; it also looks at whether management involvement is real—for example in setting direction, tracking KPIs, reviewing risk, allocating resources, and responding to customer issues.

What scope and site issues are commonly missed during stage 1?

This is another area where organizations often struggle. Many assume that if they have several locations, they can simply include everything in one system. Under IATF 16949, site structure and support functions must be defined very clearly.

Certification scope

The certification scope must relate to eligible automotive product categories and relevant manufacturing activities. Rules 6th clarified eligibility further, including replacement parts / materials and certain situations involving aftermarket parts.

Site types that organizations should understand

• MS = Manufacturing Site A location where actual manufacturing takes place. This is the primary type of site eligible for independent certification.
• RSL / SA-RSL = Remote Support Location / Stand Alone Remote Support Location Locations where support functions are performed, such as contract review, engineering, purchasing, internal audit, management review, HR, IT, or other support processes for one or more manufacturing sites.
• EMS = Extended Manufacturing Site Under Rules 6th, EMS criteria are more clearly defined. It must be under the same legal entity and QMS, and be located within 10 miles (16 km) and no more than 60 minutes of driving distance from the main manufacturing site.

Pain point: Many organizations have support functions spread across multiple locations, but they do not clearly map which site supports which manufacturing site, creating confusion in scope and audit planning.