Your plant is someone’s supplier

An IATF 16949 certificate is how your customers’ supplier quality teams evaluate your plant. Losing it, or having it suspended, quickly becomes a commercial problem. Since January 1, 2025, certification audits follow IATF Rules 6th Edition, which tightened several points that plant quality teams feel directly (Smithers).

What changed under Rules 6th Edition

TopicRule (per Smithers)What it means for the plant
Audit daysCapped at 10 hours per auditor per day: up to 8 hours of direct audit time plus 2 hours additionalYou cannot shorten the audit by working long days; plan the calendar
Pre-assessmentsPre-assessment and gap analysis audits no longer allowedDo your own readiness checks internally
Planning informationMust reach the auditor at least 30 days before the auditLate information can postpone the audit or put certification at risk
Major nonconformitiesInitial response due within 15 days, down from 20Missing the deadline fails the audit and starts withdrawal procedures
Remote auditingOnly surveillance at standalone remote support locations with no product handling; on-site every other cycleManufacturing sites are audited on site

The 15-day rule is the one that catches plants out: a major nonconformity found on the last day leaves two working weeks for containment, root cause analysis and a credible response.

Roles in readiness

TaskPlant quality managerQuality supervisor
Audit planning data to certification bodyOwns; sends 30+ days aheadSupplies shift and process data
Internal audits and layered auditsSets programRuns layered process audits on shift
Control plans and work instructionsApprovesChecks they match practice on the line
Customer scorecards and complaintsReviews trendsKnows open issues in their area
Nonconformity responseLeads 15-day responseLeads containment on the floor
Auditor interviewsHostsPrepares operators and inspectors

Shop-floor readiness, the supervisor’s view

Auditors follow the process approach: they pick a product and walk its process. Supervisors should be able to show, at any station:

  • The current control plan and work instruction, at the right revision.
  • Inspection and test records completed as the control plan requires.
  • Reaction plans used when results go out of limits, with records.
  • Calibration status of gauges in use.
  • Identification and segregation of nonconforming product.
  • Operator training records for the job being done.

System readiness, the manager’s view

  • Customer performance: scorecards, complaints and special status notifications from each customer, with actions.
  • Customer-specific requirements: a current CSR matrix and evidence they are applied.
  • Internal audit program: system, process and product audits covering all shifts.
  • Management review: inputs and decisions, including customer performance.
  • Supplier management: the plant’s own supplier evaluation and development (section 8.4).
  • Problem solving: corrective actions that show real root cause and verified effectiveness.

A 15-day response plan, ready in advance

Write the plan before the audit:

  1. Day 0–1: containment, team and owner named.
  2. Day 2–7: root cause analysis with evidence.
  3. Day 8–12: corrective action plan and initial implementation evidence.
  4. Day 13–14: internal review of the response.
  5. Day 15: submit.

Looking ahead

A revised IATF 16949 is in drafting, expected in late 2026 or early 2027, with reported emphasis on software quality, cybersecurity, supply chain resilience, sustainability and risk-based thinking (Smithers). Transition dates will be announced after publication.

Common weaknesses

  • Control plans and work instructions out of step with the line.
  • Layered audits done on day shift only.
  • Customer scorecard issues without actions.
  • Corrective actions that stop at “retrain operator”.
  • Audit planning information sent late.

Checklist

  • Planning information sent at least 30 days ahead
  • Internal audits cover all shifts and processes
  • Control plans match practice at every station checked
  • Customer scorecards and CSRs reviewed with actions
  • 15-day major nonconformity response plan ready
  • Supervisors and operators briefed

How AskDona helps

Audit readiness means cross-checking control plans, work instructions, inspection records and corrective actions against each other and against IATF 16949 and CSRs. AskDona reads those documents and flags mismatches, such as a characteristic in the control plan that never appears in inspection records, with page citations. Run a sample audit-readiness review on one product line. AskDona shows the evidence; your plant quality team decides.

Editor’s note: Rules 6th Edition details are as reported by Smithers; confirm with your certification body. The role split and response plan are practical models, not IATF requirements. LinkedIn counts were supplied by the client.

FAQ

When did IATF Rules 6th Edition take effect? January 1, 2025.

How long do I have to respond to a major nonconformity? 15 days for the initial response, down from 20.

Are pre-assessment audits still allowed? No. Pre-assessments and gap analysis audits by the certification body are no longer allowed.

Can a manufacturing plant be audited remotely? Generally no; remote auditing is limited to certain standalone remote support locations.

References

All pages opened and checked by October 23, 2026.

SourceTypeUsed for
Smithers: IATF 16949 news, 2025 rules and 2026 changesIndustry updateRules 6th Edition changes, revision timing
DQS: Expectations for IATF supply chain management, section 8.4Certification body guidePlant’s supplier management