1. Certification application & application review

The organization selects an IATF-recognized certification body and provides information on its legal entity, manufacturing site, automotive products, manufacturing processes, work shifts, personnel, design responsibility, customers and CSRs, remote support locations, outsourced processes and relevant certification history. The certification body reviews eligibility, the proposed scope, certification structure, audit duration, audit-team competence and contractual conditions in accordance with the current IATF Rules.

2. Audit planning & preparation

The audit plan is developed on the basis of the IATF Rules 6th Edition, current SIs and FAQs, the certification scope, manufacturing processes and shifts, support functions, CSRs, customer performance, complaints, warranty performance, delivery performance, changes and previous audit results. The organization prepares its latest performance data, process map, management-system documentation, internal-audit records, management-review records and evidence of implementation at the relevant locations.

3. Audit process

The initial certification audit is conducted in two stages:

• Stage 1 - readiness assessment: Confirms eligibility and scope; the establishment of the system in accordance with ISO 9001:2015 and IATF 16949:2016; CSRs; processes; support locations; internal audits; management review; performance data; and readiness to proceed to Stage 2.
• Stage 2 - certification audit: Evaluates the organization on site using the automotive process approach and covers the applicable manufacturing processes and shifts. It reviews product safety, APQP, FMEA, control plans, PPAP, suppliers, manufacturing, maintenance, MSA/SPC, changes, nonconforming product, warranty and support functions. The principal sequence is: Opening meeting → On-site process auditing → Consolidation of findings → Closing meeting.

4. Audit report & nonconformity management

The audit team prepares the audit report and manages nonconformities through IATF CARA as applicable. The organization immediately implements containment actions to protect the customer, completes corrections, evaluates systemic impact on similar products or processes, analyses root causes, implements corrective actions and provides evidence of effectiveness. A major nonconformity may require a special on-site audit; the deadlines and method for closing nonconformities follow the current IATF Rules, SIs and FAQs.

5. Review & certification

Authorized personnel independent of the audit team review the audit file, report, nonconformity management results and conformity with the IATF Rules. When the certification decision is approved, the IATF-recognized certification body issues the IATF 16949 certificate and registers the required information in the IATF system. The certificate clearly identifies the manufacturing site, product and process scope and design responsibility, and remains valid within a three-year certification cycle provided that the organization continues to fulfil all certification conditions.

6. Periodic surveillance & recertification

During the three-year cycle, the certification body conducts surveillance audits at the prescribed intervals to evaluate the continuing effectiveness of the system, customer performance, CSRs, changes, complaints, warranty performance, manufacturing processes and shifts, and relevant support functions. The organization must promptly notify the certification body of significant changes as required by the IATF Rules. The recertification audit is completed before certificate expiry to support a decision on the next certification cycle; the current status of applicable SIs and FAQs should be checked for each audit.