Electronics buyers trace a defect back to the reel

Not on its own. IATF 16949 and AS9100 are built on ISO 9001 but add sector requirements: part approval submissions, special process controls, counterfeit avoidance, configuration management. ISO 9001 is the base system and the usual first step, and most manufacturers certify to it before taking on a sector scheme. For general industrial and consumer OEMs it is normally enough.

CE marking is applied by the manufacturer, on the manufacturer’s own declaration of conformity - no body hands it over. What is needed is the assessment route the applicable directive requires, the test evidence behind it, and a technical file that survives inspection. SIS carries out the assessment and certification work; the declaration and the marking remain the manufacturer’s act and the manufacturer’s liability.

Through the supplier chain, not the parts bin. Auditors look at how suppliers are approved, whether purchases outside the franchised distribution channel are controlled, what incoming inspection is triggered for high-risk part numbers, and how a suspect part is quarantined and reported. Under ISO 28000 the same logic extends to transport and storage custody.

Scope decides that. If design sits inside the certified scope, design control, verification and change management are audited at the design centre; if it does not, the certificate says so and buyers will read it. Manufacturers quoting on design-and-build normally want design inside the scope, because customers look at the scope line before the standard name.

It becomes worth it once external testing costs more than the accreditation does, which usually happens as variants multiply. ISO/IEC 17025 makes in-house results recognised rather than indicative, so a customer or a certification body can rely on them. That removes a round trip to an external laboratory for every derivative model, and that round trip is where launch dates are lost.

Three years, with a surveillance audit each year. Surveillance is shorter and concentrates on what changed since the last visit: new product lines, new suppliers, a relocated process, incidents and complaints. Skipping one puts the certificate at risk of suspension, which buyers see immediately on the accreditation register. Recertification runs before the three years expire.