Guide

Savunma Sanayiinde ERP: AS9100 Uyumluluk Rehberi 2026

Koray Çetintaş 2 February 2026 7 min read

Introduction: The Critical Importance of ERP in the Defense Industry

Turkey’s defense industry hits a new milestone in 2026. The targets on the table are steep: raising the domestic production rate to 83%, pushing exports to $8 billion, and reaching $20 billion in revenue. Numbers like those make the pressure to digitalize hard to ignore. You don’t get to that scale on spreadsheets and disconnected tools; at the center of it sits a modern ERP (Enterprise Resource Planning) system that pulls operational processes under one roof.
Defense is a different animal from automotive or general manufacturing. Companies working in aerospace and defense have no say in whether they comply with AS9100D and AQAP; they simply must. These aren’t just a mark of quality; they’re a legal requirement for doing business with NATO allies.
So how does an ERP actually make compliance with these demanding standards workable? In the rest of this article we walk through the topics that come up on the ground, from choosing the right ERP to NADCAP certification, traceability, and project-based cost tracking.


What are AS9100D and AQAP Standards?

AS9100D: Aerospace, Space, and Defense Industry Quality Management System

AS9100 is a standard built on top of ISO 9001 and published by the International Aerospace Quality Group (IAQG). The version in force today is AS9100D, which took effect in 2016 and represents its most binding form.
At its core, AS9100D asks for the following:

  • Product Safety: Zero tolerance for defects in critical parts
  • Configuration Management: Every design and production change put on record
  • Traceability: Tracking each part from raw material to finished product
  • Documentation Control: Versioning and access control across all technical documents
  • Foreign Object Debris (FOD): Foreign object contamination ruled out entirely

AQAP: NATO Allied Quality Assurance Publications

NATO has published its AQAP (Allied Quality Assurance Publications) standards since 1968. As a NATO member, Turkey requires companies bidding on Ministry of National Defense tenders to hold AQAP certification.
Sub-standards such as AQAP-2310 and AQAP-2210 spell out requirements specific to software quality, hardware delivery, and supplier management.
Important Note: As Turkey grows its defense exports, foreign customers—NATO members in particular—ask for AS9100D and AQAP certification too. So these standards are the entry ticket to international trade, not just the domestic market.


Defense Industry ERP Requirements

Off-the-shelf ERP packages rarely go far enough for defense work. Here are the capabilities that matter in the critical processes:

1. Lot and Serial Number Tracking

During production, materials from the same source and held to the same standard form a “lot.” A capable ERP system:

  • Records the full identity of each production lot
  • Tracks serial numbers through barcode and RFID
  • Can recall an entire lot the moment a problem surfaces

Example: If an electronic component built for the KAAN project fails, every component from the same lot has to be found and inspected.

2. Full Traceability

In defense, full traceability isn’t a nice-to-have; it’s vital:

  • Backward Traceability: The raw materials that make up the final product
  • Forward Traceability: Which products a given material ended up in
  • Source Tracking: The supplier and production date behind each material
  • Inspection Records: Every quality control result

Once the ERP automates this data flow, the errors that creep in through manual records disappear.

3. Document Management

AS9100D expects technical documents to be managed meticulously, start to finish:

4. Qualified Supplier Management

In defense, you can only work with certified suppliers:

  • The ERP tracks each supplier’s certification status in real time
  • Flags certifications before they expire
  • Blocks purchases from unapproved suppliers
  • Keeps a record of quality performance metrics

5. Quality Control and Statistical Process Control (SPC)

SPC (Statistical Process Control) watches a process statistically and catches deviations earlier than the eye would:
`
ERP Quality Module:

  • Defining inspection points
  • Sampling plans (AQL – Acceptable Quality Level)
  • Control charts (X-bar, R-chart)
  • Capability indices (Cpk, Ppk)
  • Deviation alerts

`
Together, these modules keep production quality from drifting batch to batch.

6. Project-Based Cost Tracking

Defense programs (KAAN, KIZILELMA, and the like) run on budgets in the billions of dollars. Here the ERP:

  • Tracks material, labor, and overhead for each project separately
  • Sets the budget against actual spend
  • Produces the profitability analysis
  • Reports project status back to management

NADCAP Certification and ERP Integration

NADCAP (National Aerospace and Defense Contractors Accreditation Program) is an international program that certifies special processes—welding, heat treatment, molding, and so on.
To come through a NADCAP audit cleanly:

  • Process Procedures: Held inside the ERP and within reach of the operators
  • Calibration Tracking: All equipment calibrated, with certificates reachable through the ERP
  • Training Records: Operator training files and certification dates kept current
  • Inspection Results: Inspection results stored for every component
  • Auditor Access: NADCAP auditors able to pull ERP reports
  • When the ERP automates all of this, certification prep stops being a scramble and becomes a routine.


    ERP Selection Criteria for the Defense Industry


    Turkey’s Defense Industry: 2026 Growth and Digitalization Trend

    Turkey’s defense industry is going through the fastest growth stretch in its history across 2025-2026:

    2026 Targets

    • Revenue: $20 billion
    • Exports: $8 billion
    • Domestic Production Rate: 83%
    • Employment: 120,000 people
    • R&D Portfolio: $920 million

    Critical Projects

    • KAAN: The national combat aircraft; a mass-production contract is expected to be signed in 2026
    • KIZILELMA: The unmanned combat aircraft, with first delivery anticipated in 2026
    • Defense Technologies: Cybersecurity, artificial intelligence, electric power systems

    Digitalization Trends

    The sector is putting real money into artificial intelligence, unmanned systems, and cybersecurity. Managing those technologies well simply isn’t feasible without solid ERP underpinnings.
    Financing Ease: 5.7 billion Turkish Lira in financing has gone to the sector, and that money is clearing the way for technology investment.


    Success Factors and Common Mistakes

    Success Factors

  • Top Management Support: The ERP effort has to be owned at the CEO or corporate-strategy level
  • Adequate Budget: Set aside a realistic budget covering software, hardware, consulting, and training
  • Project Management: An experienced project manager keeping a close eye on the timeline and the snags
  • Training and Adaptation: Operators, managers, and auditors prepared to actually use the system
  • Data Migration: Data moved from the old system to the new one without errors
  • Pilot Implementation: Start with a single department rather than the whole company to keep risk down
  • Common Mistakes


    Frequently Asked Questions (FAQ)

    1. What is the cost of AS9100D compliance with an ERP system?

    The cost of an AS9100D-compliant ERP depends on how big the company is:

    • Small company (50-100 employees): 200-400 thousand TL
    • Medium company (100-500 employees): 400-800 thousand TL
    • Large company (500+ employees): 1-3 million TL and above

    Those figures cover the software license, hardware, consulting, training, and data migration.

    2. How long does implementation take?

    A typical ERP rollout wraps up in 3-12 months. For defense work, it breaks down roughly like this:

    • Pilot phase: 2-3 months
    • Full implementation: 4-8 months
    • Stabilization: 2-4 months

    That timeline can stretch if you run into trouble with data preparation, business-process changes, or training.

    3. Does NADCAP certification mandate an ERP?

    NADCAP certification doesn’t strictly require an ERP, but leaning on paper documents rarely satisfies auditors. With an ERP in place and NADCAP requirements built into it, the audit goes far more smoothly.

    4. Are large-scale enterprise ERPs for the defense industry?

    Yes—with a few caveats:

    • Large ERPs are powerful and flexible
    • But their implementation costs run high
    • Defense-specific modules may need to be switched on separately
    • Smaller, sector-focused ERPs tend to go live faster and cheaper

    In the end, the right call comes down to the company’s size and budget.

    5. Is cloud-based ERP secure for the defense industry?

    For national-security reasons, the defense industry usually leans toward on-premises servers. That said, NATO or international partners may accept a cloud-based ERP as long as:

    • Data is encrypted
    • The data center sits in Turkey or a NATO country
    • Data sovereignty agreements are signed
    • Cybersecurity audits have been passed

    About the Author

    Koray Cetintas is an advisor specializing in digital transformation, ERP architecture, process engineering, and strategic technology leadership. He applies a "Strategy + People + Technology" approach shaped by hands-on experience in AI, IoT ecosystems, and industrial automation.

    Get Support for Your Project

    I can help guide your digital transformation initiative. Book a free preliminary call to discuss your priorities.