The certification requirements to the international standard IATF 16949 are presented in the IATF Certification Specifications (“IATF Rules”). The sixth edition of the “Rules for Achieving and Maintaining IATF Recognition” was published on March 31, 2024. It has been stated that the changes have been made to improve certifiability, audit procedures and overall efficiency. The transition to the new Rules 6 must be completed by January 1, 2025, after which they will be mandatory for all audits. The most significant changes are performance and risk-based audit days instead of the current method, which is based on employee count. The following are changes that have a significant impact, but do not represent all the changes within Rules 6.

 

Requirement

Rules 5th Edition

Rules 5th Edition

Eligibility and Certificate Structure

 

  • Automotive Vehicles shall be understood as homologated vehicles that are intended to be driven on public roads,

Note: The term homologated means the whole vehicle approval process that results in a government issued certificate

  • "Replacement Parts and materials” belong to automotive products.
  • EMS & main site must be in one legal entity and one QMS.
  • EMS & main site must be in one legal entity and one QMS with common management system.
  •  

Conflict of Interest

 

The CB can't provide QMS related consulting service to the certified client.

Certificate Structure

Completed by January 1

Allowed to perform a registration audit at the next planned audit 

Audit Timing Surveillance Audits

-3/+1 Month 

-3 /+3 months

Audit Cycles

6, 9 & 12 months

 

-3/+1 Month

 

 

  • Only 12 months
  • The interval for surveillance audits is -3/+3 months from the last audit day (due date) of the initial, transfer or recertification audit.
  • Failure to carry out a surveillance audit at the required interval will result in the certificate being withdrawn within 7 days.

Audit Planning

 

  • Add at least 0.5 days for audit planning, and input into IATF database.
  • Confirmation of Audit date for Surveillance/Recertification/Transfer Audit: at least 90 days before the audit starts, otherwise postpone audit. 
  • The client shall provide audit planning information at least 30 days before audit. If not, the CB shall consider postponing the audit to ensure audit plan to client at least 14 days before audit.
  • The client shall provide information about the received QMS related consulting service since last audit
  • If Management Review Record is not provided due to confidential consideration, add at least two hours for On-site Information Verification before Opening Meeting to the audit planning time and enter in the IATF database. 

Determination of audit days

 

The total number of employees on site (including permanent, part time, contract, average number of daily workers for the previous six (6) month period, and temporary employees); and the number of relevant employees in supporting activities (remote or on site)

 

  • Based on performance and risk-based audit,
  • When assigning an audit team, each auditor shall perform no less than one audit day.
  • One audit day = 8 hours, including time for auditing of production shifts.
  • Audit duration <= 10 hours calendar day.< li> =>

Audit Days Reduction

 

  • For a Corporate Audit Scheme <= 15% reduction< li>
  • If all possible reduction factors are added together, max. 30% reduction
  • =>

Special Audits related to performance complaints

 

The CB may appoint an auditor not part of the current audit cycle and the auditor is not considered part of the audit time for the current cycle.

Standalone remote support locations

 

Audit team is assigned and maintained for a 3-year period and shall be rotated after each 3-year period.

Special Audit following certification withdrawal

 

CB must assign an audit team ether from the previous audit cycle or from the upcoming audit cycle

IATF Observers

 

  • IATF Observers (not witness auditor) shall be allowed to observe the whole audits, with the exception for confidential client data.

Systematic problem solving

  • Client must provide initial responses to major NCs, including corrections, root causes, corrective action plan, etc., within 20 calendar days, and further responses with corrective actions and their effectiveness verifications within 60 calendar days.
  • To issue Major NC, if no effective actions in time to address customer (i.e. OEM) reported performance issues.
  • Client must provide initial responses to major NCs, including corrections, root causes, corrective action plan, etc., within 15 calendar days, and further responses with corrective actions and their effectiveness verifications within 60 calendar days.
  • Without receiving responses to NCs in time as stated above, withdraw certificate.

Stage 1 Readiness Assessment, Part 1 – System and Structure Review

 

Requires the client’s relevant top management and management team member to demonstrate the quality management system and communicate other information as needed for the auditor to understand and confirm the items required in the mandatory fields in the IATF CARA Stage 1 assessment report.

 

Stage 1 Readiness Assessment, Part 2 – Operational Review

 

Shall be based upon the “Gemba” principle to gain sufficient understanding of the QMS in operation on the shop floor,

Stage 1 Readiness Assessment Closing Meeting

 

  • The Stage 1 Readiness Assessment closing meeting shall be held with the client’s top management.
  • A complete assessment report shall be issued to the client at the closing meeting

Stage 1 Readiness Assessment Decision

 

Assessment decision within a maximum of 15 days after closing meeting and in the IATF database.

Stage 2 Certification Audit

Time between closing meeting date of the Stage 1 and start date of Stage 2 shall be no more than 90 days.

Time between closing meeting date of the Stage 1 and start date of Stage 2 shall be minimum of 20 days but no more than 90 days.

Decision on suspension

 

If suspension is due to performance complaint, the client shall provide response in IATF CMS, within 20 days after receiving suspension notification.