Machine shop & quality glossary

Air-gapped: An air-gapped system has no network connection to the internet or to any outside network, so data can only move in or out through physical media or a person.
AS9100: AS9100 is the quality management system standard for aviation, space, and defense organizations, built on ISO 9001 with additional industry-specific requirements.
AS9102: AS9102 is the aerospace standard that defines the requirements and standard forms for first article inspection, used across the aviation, space, and defense supply chain.
Bar stock and drops: Bar stock is material bought in standard lengths of round, square, or hex bar, and a drop is the leftover piece after the parts have been cut from it.
CAPA (corrective and preventive action): CAPA is the process of finding the root cause of a problem, fixing it so it doesn't recur (corrective action), and addressing potential problems before they happen (preventive action).
Certificate of conformance (CoC): A certificate of conformance is a signed statement from a supplier that the parts shipped meet the requirements of the purchase order and drawing.
CMMC: CMMC, the Cybersecurity Maturity Model Certification, is the Department of Defense program that verifies contractors protect Federal Contract Information and Controlled Unclassified Information to a required level.
CUI (Controlled Unclassified Information): CUI, or Controlled Unclassified Information, is government information that isn't classified but still has to be safeguarded and shared only under controls set by law, regulation, or policy.
DFARS 252.204-7012: DFARS 252.204-7012 is the Defense Department contract clause that requires contractors handling covered defense information to protect it with NIST SP 800-171 controls and to report cyber incidents.
DFARS specialty metals: The DFARS specialty metals clause requires that certain metals in items delivered to the Department of Defense be melted or produced in the United States or a qualifying country, with limited exceptions.
External service provider (ESP): In CMMC scoping, an external service provider is an outside company that runs IT or security services for a contractor and stores, processes, or transmits its CUI or security data in doing so.
FedRAMP Moderate equivalency: FedRAMP Moderate equivalency is the DoD requirement that any cloud service storing covered defense information meet the FedRAMP Moderate baseline, proven by a third-party assessment.
First article inspection (FAI): First article inspection is a complete, documented verification that the first part produced by a new or changed process meets every requirement on the drawing and purchase order.
ISO 9001: ISO 9001 is the international standard for quality management systems, setting requirements a company must meet to show it consistently delivers products that meet customer and regulatory requirements.
ITAR: ITAR, the International Traffic in Arms Regulations, are US State Department rules controlling the export of defense articles, defense services, and related technical data listed on the US Munitions List.
Job costing: Job costing is tracking the actual labor, material, and outside processing costs of each individual job and comparing them to what was quoted.
Job traveler (router): A job traveler, also called a router or shop traveler, is the document that moves with a job through the shop, listing every operation, the material, and where each step gets signed off.
Material certs / mill test report (MTR): A mill test report, often called a material cert, is the document from the mill or supplier certifying a material's heat or lot, chemical composition, mechanical properties, and the specification it meets.
NCR (non-conformance report) and MRB: A non-conformance report documents a product or process that doesn't meet requirements, what was found, how it was dispositioned, and what was done about it.
NIST SP 800-171: NIST SP 800-171 is the federal standard that sets the security requirements for protecting Controlled Unclassified Information on contractor systems.
OTD (on-time delivery): On-time delivery is the percentage of orders or line items shipped by the date promised to the customer.
Perpetual license: A perpetual license is a one-time purchase that lets you use a version of software indefinitely, usually with an optional annual fee for updates and support.
PPAP (Production Part Approval Process): PPAP is the automotive industry's process, defined by AIAG, for a supplier to prove to a customer that its production process consistently makes parts meeting all requirements.
Quantity breaks: Quantity breaks are the set of quantities on a quote, such as 25, 50, and 100, each with its own unit price reflecting setup spread over more parts and any volume material savings.
Routing: A routing is the ordered list of operations needed to make a part, with the work center, setup time, and run time for each step.
Setup time vs cycle time: Setup time is the one-time effort to get a machine ready to run a job, and cycle time is the time to make each part once the setup is done.
Shop rate / burden rate: A shop rate is the hourly rate a shop charges or costs for machine and labor time, and the burden rate is the overhead portion of that rate that covers costs beyond direct wages.
SPRS score: SPRS, the Supplier Performance Risk System, is the DoD database where contractors post their NIST SP 800-171 self-assessment score, which primes and contracting officers can check.
WIP (work in process): WIP, or work in process, is every job that has been released to the shop but isn't finished yet, along with the material and labor already invested in it.
Work order: A work order is the internal authorization to make a specific quantity of a part, usually created when a customer PO arrives, that ties together the routing, material, due date, and costs for that run.