2. Quality Management Principles and Process-Based Systems

Introduction and Context

Quality management is not limited to inspection, certification, or the correction of defective products. It is a managerial system through which an organization understands requirements, designs reliable processes, controls variation, learns from evidence, and creates value for customers and other relevant interested parties. In contemporary organizations, quality is therefore both an operational discipline and a strategic capability.

ISO 9000 quality management standards provide a common language for this discipline. Their principles are not a checklist to be applied mechanically. They are interconnected ideas that guide decisions about customers, people, processes, data, suppliers, risks, and improvement. ISO 9001, in particular, requires organizations to establish, implement, maintain, and continually improve a quality management system (QMS). The effectiveness of that system depends less on the existence of documents than on whether work is understood as a network of managed processes that consistently produces intended results.

This chapter examines the quality management principles and the process-based approach that gives them practical form. It also explains the PDCA cycle, systems thinking, evidence-based decision-making, relationship management, and the implications of these ideas for auditing and organizational leadership.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain the meaning and strategic significance of the seven ISO quality management principles.

2. Distinguish a process-based QMS from a functionally isolated management system.

3. Apply PDCA, risk-based thinking, and systems thinking to organizational processes.

4. Identify appropriate evidence for evaluating process effectiveness.

5. Analyse how leadership, people, customers, suppliers, and other interested parties influence quality performance.

6. Recognize common implementation failures and propose practical improvements.

7. Interpret the role of digital technologies and analytics in process-based quality management.

From Quality Control to Quality Management

Traditional quality control concentrates on detecting nonconformity after work has been performed. Although inspection remains useful in some contexts, inspection alone cannot create quality. If a process is poorly designed, inspection merely separates acceptable outputs from unacceptable ones after resources have already been consumed. Quality management adopts a broader view: quality is designed into processes, supported by competent people, measured through meaningful indicators, and improved through organizational learning.

A QMS is the coordinated set of policies, objectives, processes, responsibilities, resources, and methods used to direct and control an organization with regard to quality. It should connect strategic intentions with daily work. For example, a stated objective of improving customer retention must be translated into processes for understanding customer needs, delivering products or services, handling complaints, analysing causes, and reviewing results.

The quality management principles provide the logic for these connections. The current ISO formulation identifies seven principles:

• customer focus;
• leadership;
• engagement of people;
• process approach;
• improvement;
• evidence-based decision-making; and
• relationship management.

These principles should not be treated as independent categories. Customer focus shapes objectives; leadership establishes direction; engaged people operate and improve processes; evidence supports decisions; relationships influence supply and value networks; and improvement sustains performance over time.

The Seven Principles as a Coherent Management Philosophy

Customer focus

Customer focus means understanding present and future customer needs, meeting requirements, and striving to exceed expectations where appropriate. It is more than responding politely to complaints. It requires the organization to identify explicit requirements, implicit expectations, legal obligations, accessibility needs, and factors that influence perceived value.

Customer focus has both external and internal dimensions. An external customer purchases or uses the organization’s output, while an internal customer receives an output from another process. A delay in procurement, for example, may impair production; poor production information may impair distribution; and incomplete service records may impair after-sales support.

Effective customer focus involves monitoring satisfaction, analysing complaints and returns, studying customer behaviour, validating requirements, and communicating changes. A potential weakness is the assumption that stated satisfaction alone proves quality. Customers may report satisfaction while tolerating defects because alternatives are limited. Consequently, satisfaction data should be interpreted alongside objective performance information.

Leadership

Leadership establishes unity of purpose, direction, and conditions in which people can achieve quality objectives. Senior leaders are responsible not only for approving a quality policy but also for demonstrating that quality influences resource allocation, performance reviews, investment, and operational priorities.

A common implementation failure occurs when quality is delegated entirely to a quality department. Quality professionals may coordinate the QMS, but process owners and senior managers remain accountable for results. Leadership is visible when managers investigate systemic causes rather than blame individuals, protect the integrity of reported data, provide resources for corrective action, and review whether objectives remain relevant.

Leadership also involves managing tensions. Delivery speed, cost reduction, innovation, and quality may conflict in the short term. A mature leader does not assume that one dimension can always be maximized independently. Instead, decisions are made with awareness of risk, customer impact, regulatory obligations, and long-term organizational capability.

Engagement of people

People at all levels are essential to an organization’s ability to create and deliver value. Engagement includes competence, awareness, participation, empowerment, communication, and recognition. Employees are more likely to identify process weaknesses when reporting problems does not expose them to unfair blame.

Competence should be established through education, training, experience, coaching, or other appropriate means, and its effectiveness should be evaluated. Merely attending training is not evidence that competence has been achieved. Evidence may include observed performance, validated work samples, examination results, reduced errors, or supervisor assessment.

Engagement also has a design dimension. Operators, service staff, technicians, and support personnel often possess practical knowledge about process variation that is not visible in management reports. Methods such as improvement teams, structured problem-solving, suggestion systems, and daily management meetings can convert that knowledge into organizational learning.

Process approach

The process approach treats activities as interrelated processes that transform inputs into outputs. A process has a purpose, inputs, outputs, sequence, criteria, resources, responsibilities, risks, and methods of monitoring. The approach shifts attention from isolated departments to the flow of value across organizational boundaries.

A department is an organizational unit; a process is a chain of activities that produces an intended result. One department may own several processes, and one process may cross several departments. For example, order fulfilment may involve sales, credit, planning, procurement, production, warehousing, and logistics. If each department optimizes only its own performance, the overall customer experience may deteriorate.

Process management requires defining process interactions and determining how performance will be evaluated. Useful measures include cycle time, first-pass yield, complaint rate, on-time delivery, rework, process capability, and cost of poor quality. Measures should be linked to process purpose; measuring activity volume alone can create misleading incentives.

Improvement

Improvement is a permanent organizational objective rather than an occasional project. It includes breakthrough change, corrective action, incremental improvement, innovation, and adaptation to changing conditions. Effective improvement depends on identifying opportunities, understanding causes, implementing controlled changes, and verifying results.

Improvement should not be confused with simply doing more. A process that produces more output while generating more defects has not necessarily improved. Improvement is evaluated against relevant outcomes such as effectiveness, efficiency, risk reduction, customer value, resilience, and sustainability.

Corrective action addresses the cause of a detected nonconformity to prevent recurrence. Correction addresses the immediate problem. For example, replacing a defective component is correction; identifying why the component escaped controls and changing the process is corrective action. Weak corrective action often results from accepting symptoms as causes or selecting actions without checking whether recurrence has been prevented.

Evidence-based decision-making

Decisions are more reliable when based on analysis and evaluation of data and information. Evidence may include operational measures, audit findings, customer feedback, process observations, financial data, risk assessments, and supplier performance. Evidence-based management does not mean that managerial judgement is unnecessary. It means judgement is disciplined by credible information and explicit assumptions.

The quality of evidence depends on its validity, reliability, timeliness, completeness, and relevance. A dashboard may display precise numbers that are nevertheless misleading if definitions differ between departments or if data excludes inconvenient cases. Organizations should therefore define indicators, data sources, responsibilities, sampling methods, and review frequency.

Useful analysis may involve trend charts, Pareto analysis, stratification, control charts, capability analysis, correlation studies, or structured root-cause methods. Statistical significance is not the only consideration: a small change may be operationally important, while a statistically detectable change may have little practical value.

Relationship management

Organizations do not create value alone. Suppliers, contractors, regulators, distributors, technology providers, partners, employees, owners, and communities may influence quality performance. Relationship management involves identifying relevant interested parties, understanding mutual dependencies, communicating requirements, monitoring performance, and developing appropriate forms of cooperation.

Supplier management should extend beyond price comparison. Selection and evaluation may consider competence, capacity, process capability, continuity, ethical conduct, cybersecurity, regulatory compliance, and responsiveness. Controls should be proportionate to the risk posed by the externally provided process, product, or service.

Relationship management does not mean accepting supplier performance without accountability. Collaborative relationships require clear requirements, transparent performance information, agreed escalation arrangements, and fair treatment. The same principle applies to internal relationships between departments.

Process-Based Systems: Architecture and Operation

A process-based QMS begins by identifying the organization’s context, interested parties, and intended outcomes. It then determines the processes required to deliver those outcomes. These normally include leadership and strategic processes, operational processes, support processes, and evaluation or improvement processes.

A process can be represented using the following logic:

Inputs → activities and controls → outputs → feedback and measures

Inputs may include customer requirements, materials, information, resources, or previous outputs. Activities transform those inputs. Controls establish conditions under which the process is expected to operate. Outputs may be products, services, decisions, records, or information. Feedback indicates whether the output met requirements and whether the process remains suitable.

Process mapping can be performed at different levels. A high-level map shows major processes and their interactions. A detailed flowchart shows tasks, decisions, handoffs, and controls. A SIPOC model identifies suppliers, inputs, process steps, outputs, and customers. A turtle diagram may describe inputs, outputs, methods, resources, measures, and responsibilities. These tools are aids to understanding, not substitutes for understanding.

Process ownership is particularly important. A process owner is accountable for ensuring that the process is defined, resourced, monitored, and improved, even when activities are performed by several departments. Ownership should be supported by authority; assigning accountability without the ability to influence resources or interfaces creates a nominal rather than effective system.

Risk-based thinking and process control

Risk-based thinking asks what could prevent a process from achieving its intended results and what opportunities could improve those results. It is not restricted to formal risk registers. It appears in design reviews, maintenance planning, supplier qualification, contingency arrangements, competence management, change control, and internal audits.

Controls should be selected according to the nature and significance of risk. A high-risk process may require validation, redundant controls, traceability, independent verification, or tighter monitoring. A low-risk administrative process may require simpler controls. Excessive controls can create bureaucracy and obscure critical risks, while inadequate controls expose the organization to avoidable failure.

PDCA as the operating rhythm

The Plan–Do–Check–Act cycle gives process management a practical rhythm. In the planning stage, the organization establishes objectives, requirements, resources, responsibilities, risks, and methods. In doing, it implements the planned process. Checking involves monitoring, measurement, analysis, evaluation, audits, and review. Acting involves correction, corrective action, standardization, redesign, or further planning.

PDCA is not necessarily a linear annual sequence. It operates at multiple levels: an organization may use it for strategic planning, a department for a monthly improvement project, and an operator for an individual task. The cycle also overlaps with risk-based thinking and management review. Its value lies in closing the learning loop rather than merely performing activities.

Auditing a Process-Based QMS

An audit of a process-based QMS should examine whether processes are defined, implemented, controlled, effective, and improving. Auditors should not restrict themselves to asking whether a procedure exists. They should follow process trails from requirements to outputs and from outputs back to evidence of control.

For an order fulfilment process, an auditor might examine customer requirements, order review, planning, resource availability, production or service records, release controls, delivery performance, complaints, and improvement actions. Interviews, observation, document review, sampling, and data analysis are combined to form audit evidence.

A useful audit question is: “How do you know this process is effective?” The answer should connect objectives, measures, results, risks, and actions. Another useful question is: “What happens when the process does not achieve its intended result?” This reveals whether nonconformity is contained, causes are analysed, and learning is shared.

Auditors should distinguish conformity from effectiveness. A process may follow its documented procedure and still fail to meet customer requirements. Conversely, a process may produce acceptable results while relying on uncontrolled individual knowledge, creating a fragile system. Audit conclusions should therefore consider both compliance and performance.

Practical and Managerial Applications

A manufacturing organization may use process thinking to connect product design, purchasing, production, inspection, maintenance, and customer service. A hospital may map patient admission, diagnosis, treatment, discharge, and follow-up, identifying risks at handoffs. A university may examine admissions, curriculum design, teaching delivery, assessment, student support, and graduate feedback. A software company may manage requirements, development, testing, release, incident response, and customer support as linked processes.

At the managerial level, the principles influence decisions about objectives, investment, organizational structure, performance reviews, and supplier contracts. At the operational level, they influence standard work, escalation rules, competence, equipment maintenance, and data collection. At the audit level, they determine what evidence is relevant and how findings should be interpreted.

Technology can strengthen these applications. Business process management platforms can model workflows; electronic QMS platforms can control documents, nonconformities, audits, and corrective actions; sensors can provide real-time process data; and analytics can identify trends or unusual patterns. Artificial intelligence may assist classification of complaints, prediction of equipment failure, or analysis of recurring defects. However, automated outputs require validation, appropriate data governance, human oversight, cybersecurity controls, and protection of confidential information. Automation can accelerate a poor process just as easily as a good one.

Illustrative Case: A Regional Food Manufacturer Redesigns Its QMS

Background

The following is a fictional illustrative case. FreshVale Foods, a regional manufacturer of chilled ready-to-eat meals, had experienced growth in retail contracts. Its QMS contained documented procedures and inspection records, but customer complaints about damaged packaging and inconsistent delivery increased.

Situation and problem

Management initially attributed the problem to careless warehouse employees. An audit, however, found that the issue crossed several processes. Sales accepted promotional orders without confirming production capacity. Planning issued frequent schedule changes. Packaging materials from different suppliers varied in strength. Warehouse staff received incomplete dispatch priorities, and delivery performance was measured only at month-end.

Analysis

A cross-functional team mapped the order-to-delivery process. It identified unclear customer requirements, weak communication at handoffs, inadequate supplier evaluation, and delayed performance information. Complaint data were stratified by product, shift, packaging supplier, and route. The analysis showed that damage was concentrated in particular packaging batches and that late deliveries were associated with last-minute schedule changes rather than warehouse speed alone.

Approach and solution

Leadership appointed a process owner for order fulfilment and established a cross-functional review involving sales, planning, procurement, production, warehouse, and logistics. The organization introduced an order review gate for promotional commitments, defined packaging specifications, revised supplier evaluation criteria, and added an incoming verification step based on supplier risk. A daily dashboard displayed order changes, packaging defects, dispatch readiness, and on-time delivery.

Employees were trained in escalation procedures and invited to report process obstacles without blame. The team used PDCA: it piloted the new controls on two product lines, checked results for four weeks, adjusted the packaging acceptance criteria, and then extended the controls. Customer complaints were reviewed alongside internal data rather than treated as separate issues.

Outcome

The organization achieved more stable delivery performance and reduced packaging-related complaints during the pilot period. More importantly, management changed its interpretation of quality problems. The issue was no longer viewed as an isolated warehouse failure; it was understood as a system problem involving requirements, suppliers, planning, information flow, and measurement.

Learning points

The case demonstrates that customer focus requires reliable fulfilment, not merely complaint handling. It shows why process ownership must cross departmental boundaries, why evidence should be stratified before conclusions are drawn, and why corrective action must address systemic causes. It also illustrates that employee engagement and leadership behaviour determine whether process information becomes useful improvement knowledge.

Challenges, Risks, and Common Mistakes

Organizations frequently reduce quality management to document production. This creates a compliance-oriented system in which employees follow forms without understanding purpose. Another mistake is excessive reliance on lagging indicators such as complaints or warranty costs, with insufficient attention to leading indicators such as process capability, training effectiveness, maintenance condition, and supplier risk.

Functional silos create another danger. Departments may meet local targets while the end-to-end process deteriorates. Poorly designed objectives can produce this behaviour; for example, purchasing may reduce price while increasing defects, or production may maximize output while increasing rework.

Data can also be misused. Inconsistent definitions, selective reporting, small samples, and inappropriate comparisons can lead to false conclusions. Auditors and managers should ask how data were generated and what they exclude.

Other risks include weak corrective action, unclear process ownership, inadequate change control, supplier dependence, loss of tacit knowledge, and treating certification as the objective of the QMS. A certificate may indicate that an external assessment has been completed, but it does not guarantee sustained process effectiveness or superior customer value.

Governance, Ethics, and Professional Responsibility

Quality decisions affect safety, fairness, privacy, employment, and public trust. Organizations must not suppress unfavorable data, manipulate performance indicators, or pressure auditors to soften valid findings. Records should be accurate, traceable, and protected from unauthorized alteration.

Ethical quality management requires escalation of serious risks even when doing so threatens short-term targets. It also requires fair treatment of employees during investigations. A culture that assigns blame for every failure discourages reporting and hides systemic weaknesses. Confidential customer and employee information used in feedback or analytics must be handled according to applicable legal and organizational requirements.

Professional auditors should maintain impartiality, competence, confidentiality, and evidence-based judgement. They should report significant limitations in audit evidence and avoid conclusions that exceed what the sample supports.

Current Developments and Best Practices

Contemporary QMS practice is increasingly concerned with resilience, climate-related disruption, cybersecurity, supply-chain visibility, product traceability, and the responsible use of artificial intelligence. These developments reinforce rather than replace the quality principles. Organizations must understand how external conditions affect processes and how process changes affect interested parties.

Strong practice generally includes the following:

• define processes around intended outcomes and customer value;
• assign accountable owners with adequate authority;
• align objectives, risks, measures, and resources;
• combine operational data with employee and customer knowledge;
• audit process effectiveness, not documentation alone;
• investigate systemic causes of nonconformity;
• evaluate the effectiveness of training and corrective action;
• control externally provided processes proportionately to risk;
• review changes before implementation and verify their effects; and
• use technology with human oversight and reliable data governance.

Chapter Summary

Quality management principles provide a coherent basis for designing and governing an effective QMS. Customer focus establishes the purpose of quality; leadership creates direction and resources; engagement of people converts competence and experience into performance; the process approach links activities and departments; improvement sustains learning; evidence-based decision-making strengthens judgement; and relationship management recognizes organizational interdependence.

A process-based system defines inputs, activities, outputs, controls, responsibilities, risks, and measures. PDCA creates a recurring learning cycle, while risk-based thinking helps determine the intensity of controls. Auditing such a system requires attention to process interactions, objective evidence, conformity, and effectiveness. Digital technologies can improve visibility and analysis, but they do not replace sound process design, ethical governance, or professional judgement.

Key Terms

Customer focus: Directing organizational efforts toward understanding and fulfilling customer requirements and expectations.

Leadership: Establishing purpose, direction, accountability, and conditions for achieving quality objectives.

Engagement of people: The meaningful participation, competence, empowerment, and awareness of people involved in organizational work.

Process: A set of interrelated activities that transforms inputs into outputs.

Process approach: Managing activities as an interconnected system of processes rather than as isolated departmental tasks.

Process owner: The person accountable for the performance, control, and improvement of a process.

Quality management system: Coordinated policies, objectives, processes, resources, and methods used to direct and control an organization regarding quality.

PDCA: The Plan–Do–Check–Act cycle used to control, evaluate, and improve processes.

Risk-based thinking: Considering risks and opportunities that may affect intended process results.

Evidence-based decision-making: Making decisions through the analysis and evaluation of reliable, relevant information.

Relationship management: Managing interactions and dependencies with suppliers and other interested parties.

Interested party: A person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity.

Correction: Action taken to eliminate a detected nonconformity or immediate problem.

Corrective action: Action taken to eliminate the cause of a nonconformity and prevent recurrence.

Process effectiveness: The extent to which a process achieves its intended results.

Process efficiency: The relationship between results achieved and resources used.

Objective evidence: Verifiable information supporting an audit finding or conclusion.

Continual improvement: Repeated activity undertaken to enhance performance over time.

Externally provided process: A process, product, or service supplied by an external provider and controlled by the organization.

Quality objective: A result or target established in relation to quality performance.

Review Questions

Short Answer Questions

1. Why is inspection alone insufficient for quality management?

2. What distinguishes a process owner from a departmental manager?

3. Define risk-based thinking in the context of a QMS.

4. Why should customer satisfaction data be combined with objective performance data?

5. Differentiate correction from corrective action.

Long Answer Questions

1. Explain how the seven quality management principles operate as an interconnected management philosophy.

2. Describe the elements of a process-based QMS and explain how process interactions should be managed.

3. Discuss the role of PDCA in continual improvement and process control.

4. Explain how leadership and engagement of people influence the effectiveness of a QMS.

5. Discuss the evidence an auditor should examine when evaluating process effectiveness.

Analytical / Application Questions

1. A purchasing department reduces supplier prices, but production defects and customer complaints increase. Analyse the situation using the process approach and relationship management principle.

2. An organization has excellent audit completion rates but recurring nonconformities. Diagnose possible weaknesses in its use of evidence, corrective action, and improvement.

3. Design a process-based control strategy for a service organization whose customer complaints concern delays, inconsistent information, and poor complaint follow-up.

22. Multiple Choice Questions with Answers

Question 1

Which statement best reflects the process approach to quality management?

A. Each department should optimize its own activities independently.

B. Activities should be managed as interrelated processes that produce intended results.

C. Quality should be verified primarily through final inspection.

D. Only operational departments need defined performance measures.

Correct Answer: B. Activities should be managed as interrelated processes that produce intended results.

Question 2

A company replaces defective products but does not investigate why defects recur. This is primarily an example of:

A. Corrective action

B. Risk-based thinking

C. Correction

D. Relationship management

Correct Answer: C. Correction

Question 3

Which evidence would most directly demonstrate the effectiveness of employee training?

A. A list of employees who attended the training

B. A training brochure approved by management

C. Observed competent performance after training

D. The number of hours spent in the classroom

Correct Answer: C. Observed competent performance after training

Question 4

A process owner is most appropriately responsible for:

A. Managing only the employees in one department

B. Ensuring that the process is defined, controlled, measured, and improved

C. Approving every organizational purchase

D. Replacing the internal audit function

Correct Answer: B. Ensuring that the process is defined, controlled, measured, and improved

Question 5

Which situation best demonstrates evidence-based decision-making?

A. Selecting a supplier solely because of a personal recommendation

B. Changing a process because one employee dislikes it

C. Using stratified complaint and process data to identify the main cause of failure

D. Accepting a long-standing practice without reviewing its results

Correct Answer: C. Using stratified complaint and process data to identify the main cause of failure

Question 6

In the PDCA cycle, evaluating whether implemented changes achieved intended results belongs primarily to:

A. Plan

B. Do

C. Check

D. Act

Correct Answer: C. Check

Question 7

Why can a certificate alone not guarantee an effective QMS?

A. Certification applies only to financial performance.

B. Certification does not necessarily prove sustained process effectiveness or superior customer value.

C. Certification eliminates the need for internal audits.

D. Certification is unrelated to documented processes.

Correct Answer: B. Certification does not necessarily prove sustained process effectiveness or superior customer value.

Question 8

Which action best illustrates relationship management with a high-risk supplier?

A. Selecting the lowest-priced supplier without further evaluation

B. Using proportionate controls, performance monitoring, and agreed escalation arrangements

C. Allowing the supplier to define all customer requirements

D. Avoiding communication to preserve supplier independence

Correct Answer: B. Using proportionate controls, performance monitoring, and agreed escalation arrangements

Question 9

An organization measures only the number of units produced and ignores rework and complaints. What is the principal quality management concern?

A. The measure may encourage local output optimization while overlooking process effectiveness.

B. The organization is applying too much systems thinking.

C. The organization has excessive customer focus.

D. The measure is necessarily a leading indicator.

Correct Answer: A. The measure may encourage local output optimization while overlooking process effectiveness.

Question 10

Which audit question most directly tests process effectiveness?

A. Is the procedure printed in colour?

B. How many pages are in the quality manual?

C. How do you know this process achieves its intended results?

D. Who originally created the department?

Correct Answer: C. How do you know this process achieves its intended results?