Oklahoma City, Oklahoma
ISO 9001 consulting for Oklahoma City manufacturers.
Everyone here assumes aerospace means AS9100. The federal organisations at the centre of this metro’s aerospace economy publish something else entirely.
We work in the Kansas City metro. Engagements here run remotely, with on-site visits at the points where being in the building changes the outcome — gap analysis, internal audit, and the certification audits themselves. We do not maintain an office in this market and would rather say so than imply otherwise.
The assumption this market makes about aerospace
Oklahoma City has 1,023 manufacturing establishments and only about 30,630 manufacturing employees — and 952 of those establishments, 93%, have fewer than 100 people (US Census County Business Patterns, 2023). That is an unusually small-shop metro even by the standards of the markets we serve. It is precisely the population that cannot staff a quality function internally.
The metro's identity, though, is aerospace, and the assumption that follows is automatic: aerospace means AS9100, a standard we do not offer.
At the top of this market that assumption is wrong, and it is wrong on the federal government's own website. The FAA Logistics Center at the Mike Monroney Aeronautical Center is described by the FAA as “an ISO 9001:2015-certified organization.” AS9100 does not appear on that page at all.
There is more. In September 2020 the same centre completed an external audit of its environmental, occupational safety and health management system, and the FAA recorded that “the MMAC is the first location in the FAA to achieve certification to ISO 45001.” That record is six years old and sits on an archived page, so we state it as history rather than as current status — but it is a documented first, in this metro, on the standards we actually sell.
Industry in Oklahoma City
- The FAA Logistics Center Described by the FAA as an ISO 9001:2015-certified organisation. AS9100 does not appear on the page at all
- Mike Monroney Aeronautical Center Recorded in 2020 as the first FAA location to achieve ISO 45001 certification, as part of a combined environmental and safety management system. We state it as history, not current status
- Tinker AFB and the air logistics complex Over 9,000 professionals in the complex — and its official fact sheet names no quality standard at all. AS9100 lives in the private suppliers feeding it, not in the depot
- The Quality Jobs Program Nothing to do with quality management. Eligibility turns on payroll thresholds, health insurance and county wage requirements; ISO is never mentioned
- Federal OSHA only No state plan here, which simplifies a compliance obligations register — and removes the state programme criteria a manufacturer elsewhere can point at to justify the spend
Where the AS9100 boundary really falls
Tinker Air Force Base and the air logistics complex on it are enormous — over 9,000 military and civilian professionals in the complex across 98 job skills, doing depot maintenance on tanker, bomber and airborne command aircraft and on nine engine families, within a base employing more than 26,960 people.
Here is the detail almost nobody notices: the complex's own official fact sheet names no quality standard whatsoever. Not AS9100, not ISO 9001, not ISO 14001. Organic depot work runs on military technical orders and the Air Force's own quality systems, not a commercial third-party certificate.
So the honest boundary is narrower than the one this market assumes. It is not that all work touching the base is AS9100. It is that the private aerospace suppliers and independent maintenance firms feeding that chain carry AS9100 and the special-process accreditations that go with it. Those firms we cannot serve, and we would rather say so in the first call than the third.
The regional figures put roughly 338 aerospace firms and about 78 independent maintenance companies in the wider region. Set that against 1,023 manufacturing establishments in the metro, of which 952 are small. The AS9100-bound population is a visible minority of this metro's manufacturers, not the bulk of them. The bulk is metal fabrication, plastics, machinery and building products — ISO 9001 work.
A programme with a confusing name, and what it actually is
Oklahoma runs an incentive programme called the Quality Jobs Program. We mention it because the name causes real confusion locally, and because correcting it is more useful than any pitch.
It has nothing to do with quality management. Reading the state's own guidelines, eligibility turns on a basic-industry classification, a threshold of new annualised payroll to be reached within twelve quarters, basic health insurance for employees working thirty or more hours a week, and county-specific average wage requirements. ISO 9001 and quality management systems are never mentioned. The word “quality” refers to the quality of the jobs — wages and benefits.
If someone has suggested that certifying to ISO 9001 helps you qualify, it does not. And if you are pursuing the incentive, the eligibility criteria are worth reading directly rather than through anyone's summary, including this one.
While we are on state programmes: we went looking for an Oklahoma environmental recognition programme comparable to those some other states run. We did not find one. We put that as we found it rather than as a finding — a search cannot prove a programme does not exist, only that we could not locate it. If you know of one, we would genuinely like to hear about it.
One regulator, and no state programme to lean on
Oklahoma has no OSHA-approved State Plan for private-sector workers. Federal OSHA covers most private employees in the state. That makes an ISO 45001 compliance obligations register simpler here than in the state-plan markets we serve, and it also means there is no state safety programme to point at as a driver. ISO 45001 in Oklahoma is voluntary and customer-driven, and we would rather say that than invent a compliance reason.
That absence cuts both ways, and it is worth being clear about which way. It removes a source of pressure — nobody here is going to fine you for not having a safety management system. It also removes a source of evidence: in a state-plan market you can point at the regulator's own programme criteria when you need to justify the spend internally. In Oklahoma the justification has to come from your customers, your insurer or your incident history instead.
So the question we would ask before quoting an ISO 45001 project here is simply who is asking for it. If the answer is a customer questionnaire or a contract clause, the project has a deadline and a defined scope, and it is worth doing properly. If the answer is that it seemed like a good idea, the honest advice is usually to fix the two or three hazards you already know about first and revisit certification when something external requires it.
A narrow laboratory requirement, honestly sized
Oklahoma's medical marijuana rules require a testing laboratory to hold, or to have applied for, accreditation to ISO/IEC 17025 from one of several named bodies, in both chemistry and biology (or cannabis). Laboratories may only report results from methods for which they hold accreditation. Later rulemaking added round-robin testing for statistical comparison, along with tightened requirements for instrumentation, calibration, method validation and personnel training.
Two features make this a different problem from the equivalent rule in Missouri, which we cover on our St. Louis page. Oklahoma accepts having applied rather than only holding accreditation, which is a softer entry gate. And it requires dual-discipline scope, which is a harder ongoing one. The Oklahoma question is about scope and inter-laboratory comparability rather than about whether a mandate exists.
Now the honest sizing, because we would rather undersell this than have you discover it: there were only 13 active testing laboratories in the whole state as of August 2026. This is a credibility exhibit, not a revenue segment. We are including it because ISO/IEC 17025 scope work is genuinely what we do and this is a real local instance of it — not because we think it is a market.
What we are not going to claim about this metro
This is a market where a lot of confident claims turn out to be unsupported, so here is the list of things we checked and will not assert.
We could not verify the scope or headcount of the large aerospace manufacturer's operations here, so we do not name it. We could not find any credible source for another frequently-cited maintenance company's presence here at all. We could not verify the laboratory accreditation of the FAA's aerospace medical research facility, despite a filename that strongly implies one — the certificate itself was not retrievable, so we will not claim it.
The restaurant company people associate with Oklahoma City is not an independent local business — it was acquired in 2018 — and more to the point it is a franchisor rather than a food manufacturer, so it is the wrong example for a manufacturing standards page. Food manufacturing here runs on GFSI-benchmarked schemes, which we do not offer, and we could not verify any individual local processor's certification, so we make the point at category level only.
There is one recent, MSA-confirmed manufacturing project worth noting: a 270,000 square foot pole manufacturing plant broke ground in south Oklahoma City in August 2026 with more than 80 jobs. The company already holds ISO 9001, which makes it a scope extension and multi-site question rather than a first certification — a real and specific kind of work. No investment figure was disclosed, so we are not printing one.
On medical devices: roughly 18 FDA-registered establishments across the metro. That is genuinely thin, and ISO 13485 is not a market we would tell you is large here. Comparable metros we serve carry three times as many.
How we work with companies here
We are based in the Kansas City metro and run Oklahoma City engagements remotely, with on-site work at the points where being in the building changes the outcome — the gap analysis walkthrough, the first internal audit cycle, and the certification audits.
For a first-time certification at a shop of thirty or fifty people, the risk is never the standard. It is building more system than the business can carry. Scoping tightly is most of the job.
The consultant who scopes the engagement does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- ISO 9001 system build A first quality management system sized for a shop that does not have a quality department. See ISO 9001.
- Aerospace boundary triage Whether your customer requires AS9100 or ISO 9001 is a contract question, not an industry question. We establish it before quoting, and tell you when we are the wrong firm.
- Scope extension and multi-site Adding a new plant to an existing certificate is a different project from a first certification, with its own transfer, scope and audit-day consequences.
- ISO/IEC 17025 for laboratories Scope-first accreditation work, including dual-discipline scopes where a regulator requires accreditation across both chemistry and biology. See ISO/IEC 17025.
- ISO 45001 under federal OSHA One regulator, which is simpler here than in the state-plan markets nearby. See ISO 45001.
- Gap analysis and roadmap Two to four weeks, fixed scope and price, with a clear go or no-go before real money is committed.
- Internal audit and management review Auditor-grade internal audits and a facilitated management review producing recorded decisions.
Questions we get from companies in this market
We do aerospace work in Oklahoma City. Is it AS9100 or ISO 9001?
It is a contract question rather than an industry question, and this metro is a good place to make that point because the assumption runs so strongly the other way. The FAA Logistics Center at the Mike Monroney Aeronautical Center is described on the FAA's own site as an ISO 9001:2015-certified organisation, and AS9100 does not appear on the page. The air logistics complex's official fact sheet names no quality standard at all — organic depot work runs on military technical orders. Where AS9100 genuinely lives here is in the private supplier and independent maintenance firms feeding that chain, and we do not offer AS9100 or the special-process accreditations that go with it. Read the quality clause on your own purchase order.
Does ISO 9001 help us qualify for the Quality Jobs Program?
No, and the name is genuinely misleading. The programme's guidelines turn on a basic-industry classification, a new annualised payroll threshold reached within twelve quarters, basic health insurance for employees working thirty or more hours, and county-specific wage requirements. ISO 9001 and quality management systems are never mentioned. The word “quality” there refers to job quality — wages and benefits. If you are pursuing the incentive, read the eligibility criteria directly rather than through any summary, ours included.
Is the medical device market here big enough to justify ISO 13485?
Honestly, it is thin. There are roughly 18 FDA-registered device establishments across the seven counties, and comparable metros we serve carry three times as many. If you are one of those 18, the FDA's Quality Management System Regulation now incorporates ISO 13485:2016 into 21 CFR Part 820 and the standard matters to you a great deal. But we are not going to tell you Oklahoma City is a device cluster, because it is not, and you would find that out.
We run a testing laboratory. What does Oklahoma actually require?
Accreditation to ISO/IEC 17025 from one of several named bodies, or a pending application for it — and critically, in both chemistry and biology or cannabis, not just one. You may only report results from methods within your accredited scope. Later rulemaking added round-robin testing for statistical comparison alongside tighter instrumentation, calibration, method validation and training requirements. The practical difficulty in Oklahoma is less about whether the mandate exists and more about scope: what your accreditation actually covers, and whether it covers everything you are being asked to report.
Nobody is requiring ISO 45001 of us. Should we still do it?
Probably not yet, and we would rather say so than sell you a project. Oklahoma has no state OSHA plan, so there is no state programme criteria to point at and no regulatory deadline driving you. That means the justification has to come from somewhere real — a customer questionnaire, a contract clause, an insurer, or an incident history you are trying not to repeat. If one of those applies, the project has a defined scope and a deadline and it is worth doing properly. If none does, fix the two or three hazards you already know about and revisit certification when something external asks for it.
Does Oklahoma have its own OSHA plan or environmental recognition programme?
No state OSHA plan — federal OSHA covers most private-sector workers here, which makes an ISO 45001 obligations register simpler than in Kansas's and Missouri's neighbours that do run their own plans. On the environmental side, we looked for a state recognition programme comparable to those elsewhere and did not find one. We put that the way we found it: a search can show that we could not locate a programme, not that none exists. If you know of one, tell us and we will correct this page.