Question 1

What does an AS9102 Rev C first-article inspection package contain?

Accepted Answer

An AS9102 Rev C first-article inspection package normally includes Forms 1, 2, and 3; ballooned drawing and specification traceability; the defined characteristics and inspection results; material, special-process, and other required certifications; references to nonconformances or approved deviations; and the required review, approval, and sign-off records. The exact package should follow the customer, drawing, and contract requirements. Confirm program-specific requirements with your quality, contracts, and security teams.

Question 2

What is the difference between an AS9102 Rev C FAI and AS9100D certification?

Accepted Answer

An AS9102 Rev C first-article inspection, or FAI, demonstrates that a specific part and its production process conform to the drawing and applicable specifications. AS9100D is an organization-level quality-management-system certification. An FAI does not replace AS9100D certification, and AS9100D certification does not by itself complete the FAI for a particular part. Confirm the required scope and acceptance criteria with the customer and your quality team.

Question 3

What CMMC Level 2 evidence should a defense subcontractor be ready to show?

Accepted Answer

A subcontractor should be ready to organize evidence for the applicable NIST SP 800-171 practices, including policies and procedures, the defined system and security scope, implementation records, assessments or reviews, and a current plan of action and milestones or status record where applicable. A customer or C3PAO may review different artifacts based on contract scope. Headstock can help keep evidence organized, but it does not grant CMMC certification or provide an assessment result. Confirm the required evidence with your contracts, security, and assessment teams.

Question 4

Does a CNC subcontractor need CMMC Level 2 for every defense RFQ?

Accepted Answer

Not automatically. Applicability depends on the contract, whether the work involves Controlled Unclassified Information, the flow-down language, and the systems and personnel in scope. Before sharing controlled information, procurement should confirm the solicitation and prime contractor requirements, identify the approved handling environment, and involve the organization’s contracts and security teams. A shop should not treat a general defense label as a substitute for a contract-specific determination.

Question 5

What ITAR flow-down clauses matter for CNC machining work?

Accepted Answer

The prime contract and the technical data determine the required flow-downs. Those requirements can address controlled technical-data access, nationality or authorized-personnel restrictions, export and re-export controls, broker obligations, recordkeeping, and how a subcontractor handles drawings and derivative files. Use the exact clauses and definitions in the contract rather than generic ITAR assumptions. Headstock does not grant ITAR authorization; confirm jurisdiction, licensing, and personnel requirements with the prime, export-control counsel, and security team.

Question 6

What does DFARS 252.204-7012 require from a defense subcontractor?

Accepted Answer

The clause focuses on safeguarding covered defense information, reporting and cooperating on qualifying cyber incidents, preserving and providing relevant information, and flowing the applicable obligations to covered subcontracts. The details depend on the contract language, information involved, and the subcontractor’s role and systems. Read the exact clause and flow-down, then confirm applicability and response procedures with your contracts counsel and security team. Headstock does not make a legal compliance or reporting determination for a customer.

Question 7

How do defense procurement teams qualify an AS9100-certified CNC shop?

Accepted Answer

Start with the certification scope and validity, then verify process and material capability, tolerance and equipment fit, quality history, first-article readiness, controlled-data posture, and current capacity evidence. Procurement should also check whether special processes, calibration, inspection, and approved supplier controls match the part and contract. Headstock surfaces those qualification signals in a shop shortlist, but the customer and prime remain responsible for their supplier-approval decision.

Question 8

How does Headstock’s RFQ-to-shop matching qualify capacity?

Accepted Answer

Headstock compares the RFQ’s process, material, tolerance, certification and compliance scope, delivery need, and available or open capacity against each shop’s capability records. It then returns a ranked shortlist with the qualification context procurement needs to review, including where a shop fits and where a requirement still needs confirmation. The shortlist is a decision aid, not a customer, prime, assessor, or regulator approval.

Question 9

How does Headstock keep AS9102, supplier qualification, and compliance evidence together?

Accepted Answer

The bureau keeps the part or RFQ record as the organizing thread: evidence status, supplier-qualification artifacts, AS9102 workflow records, revisions, and activity history stay connected to the work they support. That gives procurement and quality teams a clearer audit trail than separate inboxes and shared-drive folders. Software does not replace customer acceptance, prime approval, C3PAO assessment, regulator authorization, or legal review; those decisions stay with the responsible people and organizations.

Question 10

What should a procurement officer send to get a qualified CNC-shop shortlist?

Accepted Answer

Send the drawing or specification, revision, quantity, material, critical tolerances, machining process and finish, delivery schedule, jurisdiction or controlled-data flags, and required quality or security clauses. Include any AS9102, AS9100D, CMMC, ITAR, or DFARS scope already stated by the prime or solicitation. With that context, Headstock can return a more useful capacity shortlist for procurement review. Confirm customer-specific requirements with your quality, contracts, and security teams before releasing controlled data.

The paper trail behind a qualified part.

Answers for the qualification review.

Have a part, a deadline, or a gap in the paper trail?

Answers for the qualification review.

01What does an AS9102 Rev C first-article inspection package contain?

02What is the difference between an AS9102 Rev C FAI and AS9100D certification?

03What CMMC Level 2 evidence should a defense subcontractor be ready to show?

04Does a CNC subcontractor need CMMC Level 2 for every defense RFQ?

05What ITAR flow-down clauses matter for CNC machining work?

06What does DFARS 252.204-7012 require from a defense subcontractor?

07How do defense procurement teams qualify an AS9100-certified CNC shop?

08How does Headstock’s RFQ-to-shop matching qualify capacity?

09How does Headstock keep AS9102, supplier qualification, and compliance evidence together?

10What should a procurement officer send to get a qualified CNC-shop shortlist?

Have a part, a deadline, or a gap in the paper trail?