Quality Planning & Control

Chapter 14
Digital Quality, AI and Future Developments

Advance Diploma in Total Quality Management
Quality Planning & Control   •   Advance Diploma

Digital Quality, AI and Future Developments

Introduction

Quality management is increasingly conducted through connected digital systems rather than through isolated paper records, periodic inspections and retrospective reports. An electronic quality management system (e-QMS) can connect procedures, training, nonconformities, audits, corrective actions, suppliers and management review. Internet of Things (IoT) devices can provide continuous information about machines and environmental conditions. Automated inspection and machine vision can detect defects at production speed, while artificial intelligence (AI) can identify patterns that are difficult for humans to observe.

These technologies do not eliminate the principles of quality planning and control. They change how evidence is collected, analysed and acted upon. A digital quality system is valuable only when it supports valid measurement, process understanding, risk-based decision-making and accountable human judgement. Poorly designed automation can merely accelerate inaccurate measurement, create false alarms or conceal systematic bias.

This chapter evaluates the principal technologies of digital quality and considers their benefits, limitations and governance requirements. Particular attention is given to cybersecurity, privacy, explainability, validation and human oversight.

Learning objectives

By the end of this chapter, the learner should be able to:

  1. Explain the architecture and value of an e-QMS and real-time quality dashboard.
  2. Evaluate IoT sensing, automated inspection and machine-vision applications.
  3. Distinguish predictive quality from descriptive and diagnostic analytics.
  4. Explain the purpose and limitations of digital twins.
  5. Assess AI-assisted analytics using quality, risk, validation and governance criteria.
  6. Recommend controls for cybersecurity, privacy, explainability and human oversight.
  7. Design an implementation approach that preserves measurement integrity and regulatory compliance.

1. From traditional quality control to digital quality

Traditional quality control commonly relies on sampling, manual records, end-of-shift reports and specialist interpretation. Digital quality extends this model in four ways:

  • Greater frequency: data may be collected continuously rather than periodically.
  • Greater integration: quality data can be linked to production, maintenance, laboratory, supply-chain and customer systems.
  • Faster response: alerts can be generated while a process is operating.
  • Greater analytical capability: historical data can be used for pattern recognition, prediction and optimisation.

The transformation has a critical implication: data becomes part of the quality infrastructure. A temperature reading, inspection image or AI prediction is not automatically evidence of conformity. Its meaning depends on sensor calibration, sampling design, data lineage, model performance, operating context and authorised interpretation.

A useful digital-quality information chain is:

process → sensor or record → data acquisition → storage and integration → analysis → decision → action → verification

A failure at any stage can compromise the final decision. For example, a highly accurate algorithm cannot compensate for a drifting sensor, incorrectly labelled training data or an uncontrolled software change.

2. Electronic quality management systems

An e-QMS is a controlled information system used to manage quality processes and records. Typical modules include document control, training and competence, change control, deviations or nonconformities, complaints, supplier quality, audits, corrective and preventive action (CAPA), risk management and management review.

2.1 Core design principles

An effective e-QMS should provide:

  • Controlled workflows: responsibilities, approvals and escalation rules are explicit.
  • Traceability: each record has an identifiable author, date, revision and history.
  • Access control: users can access only the functions and information required for their role.
  • Record integrity: completed records cannot be silently altered or deleted.
  • Searchability: evidence can be retrieved efficiently for audits and investigations.
  • Interoperability: relevant data can move reliably between enterprise resource planning, manufacturing execution, laboratory and maintenance systems.
  • Risk-based configuration: controls are stronger for records affecting product safety, legal compliance or release decisions.

An e-QMS is not simply a document repository. If it reproduces inefficient paper approvals, creates duplicate data entry or measures activity rather than effectiveness, digitisation may increase administrative burden without improving quality.

2.2 Electronic records and signatures

Electronic records should have clear ownership, retention rules, version control and audit trails. Electronic signatures should be attributable to one individual, protected against unauthorised use and linked to the signed record. Organisations operating in regulated sectors must map their controls to applicable legislation, contractual obligations and industry standards. The exact requirements vary by jurisdiction and sector; therefore, “paperless” does not mean “uncontrolled.”

2.3 Implementation sequence

A practical implementation sequence is:

  1. Map the current quality processes and identify risks.
  2. Define the required records, decisions, approvals and retention periods.
  3. Standardise terminology, identifiers and master data.
  4. Configure the system rather than digitising unnecessary complexity.
  5. Validate critical functions and interfaces.
  6. Train users and establish support ownership.
  7. Monitor adoption, data quality and process outcomes.
  8. Review the system after organisational or regulatory change.

3. Real-time dashboards and quality metrics

A dashboard converts selected data into visual information for a defined decision-maker. A production operator, quality engineer and executive manager require different levels of detail. A dashboard should therefore answer a decision question, not merely display every available measure.

Useful dashboard categories include:

CategoryExample measuresTypical decision
ConformanceDefect rate, first-pass yield, reworkIs product acceptable and where is loss occurring?
Process stabilityControl-chart signals, variation, capabilityIs the process predictable?
ResponsivenessCAPA age, complaint response time, overdue actionsAre quality problems being closed effectively?
Supplier performanceRejection rate, delivery conformity, audit findingsWhich suppliers require intervention?
Risk and complianceOpen high-risk deviations, training status, audit findingsWhere is exposure increasing?

For a batch or production period, the defect proportion may be calculated as:

p = d / n

where d is the number of defective units and n is the number inspected. Both quantities must refer to the same defined population. If the number of defects rather than defective units is counted, the numerator may exceed the number of units and the measure is a defect rate, not a defective-unit proportion.

First-pass yield (FPY) is commonly expressed as:

FPY = (units passing without rework) / (units entering the process) × 100%

FPY is meaningful only when the numerator and denominator are defined consistently. It should not be used alone: a high FPY can coexist with late failures, excessive inspection or customer complaints.

Real-time does not necessarily mean instantaneous. It means that information is made available within a time interval appropriate to the decision. A safety interlock may require milliseconds; a supplier trend may require weekly aggregation. Excessive alerts create alarm fatigue, so thresholds, ownership and escalation rules must be designed together.

4. IoT sensing and data integrity

IoT quality systems use connected sensors, controllers and gateways to observe physical or operational conditions. Examples include temperature, humidity, vibration, pressure, torque, flow, energy consumption, position and cycle time.

A reliable sensing arrangement requires consideration of:

  • measurement range and resolution;
  • accuracy, repeatability and response time;
  • calibration and traceability;
  • sensor placement and environmental exposure;
  • sampling frequency and synchronisation;
  • missing, duplicated or implausible values;
  • network availability and time stamping;
  • cybersecurity and access to devices;
  • maintenance and replacement intervals.

Sampling too slowly may miss a short-duration excursion. Sampling too quickly may generate storage and processing costs without additional decision value. The required sampling interval should follow the dynamics of the process and the consequence of missing an event.

Data-quality controls should include range checks, unit checks, timestamp validation, duplicate detection, calibration status and reason codes for manual overrides. A dashboard should distinguish measured values from estimated or imputed values. Silent imputation can create misleading evidence.

5. Automated inspection and machine vision

Automated inspection may use dimensional probes, weighing systems, spectroscopy, barcode verification, acoustic analysis or machine vision. Machine vision typically includes image acquisition, lighting, preprocessing, feature extraction or representation, classification and decision logic.

Its performance depends on the whole inspection system, not only on the algorithm. Lighting, camera focus, product orientation, surface cleanliness and background conditions can strongly affect results. A model trained on ideal images may fail when a new material supplier changes colour or texture.

Important measures include:

  • True positive: a defect correctly detected.
  • False positive: a conforming item incorrectly rejected.
  • True negative: a conforming item correctly accepted.
  • False negative: a defect incorrectly accepted.

For a defined test set:

Precision = TP / (TP + FP)
Recall = TP / (TP + FN)

where TP, FP and FN denote true positives, false positives and false negatives. Precision describes the proportion of flagged items that are truly defective; recall describes the proportion of actual defects detected. Neither measure is universally superior. In a safety-critical application, missing a defect may be much more costly than performing a secondary inspection on a conforming item.

A confusion matrix should be evaluated on representative, independently collected data. Class imbalance can make accuracy misleading. If defects are rare, a system can achieve high accuracy by accepting almost everything while detecting very few defects.

Automated inspection should include a defined disposition for uncertain cases. A reject, accept or “human review” output is often safer than forcing every borderline image into a binary category.

6. Predictive quality and AI-assisted analytics

Quality analytics can be classified as follows:

TypeQuestionExample
DescriptiveWhat happened?Defects by line and shift
DiagnosticWhy did it happen?Association between defect and tool temperature
PredictiveWhat is likely to happen?Probability of nonconformance in the next batch
PrescriptiveWhat action may improve the outcome?Recommended inspection or process adjustment

A predictive model estimates an outcome from available features. For example, a model might estimate the probability of nonconformance, P(Y = 1 \mid X), given process variables X. The output is not a fact or a causal explanation. It is a conditional estimate whose reliability depends on data quality, population similarity and validation.

A simple binary classification model may use a threshold: investigate when the predicted probability is at least t. Changing t changes false positives and false negatives. The threshold should be selected using process risk, capacity for investigation, customer requirements and the cost of error—not merely because it gives the highest overall accuracy.

Predictive quality applications include early detection of tool wear, prediction of batch failure, prioritisation of supplier audits and identification of conditions associated with complaints. A model can support, but should not automatically replace, process knowledge and formal release authority.

Validation of analytical models

Model validation should be planned before deployment. It should address:

  1. Intended use: What decision will the model support, and what decisions are outside its scope?
  2. Data provenance: Are labels accurate, complete and representative?
  3. Data separation: Were training, validation and test data separated appropriately, especially across time, product lots and machines?
  4. Performance: Are recall, precision, calibration, false-alarm rate and subgroup performance acceptable?
  5. Robustness: Does performance remain acceptable under realistic variation, missing data and changed operating conditions?
  6. Human factors: Can users understand, challenge and appropriately act on the output?
  7. Change control: What triggers retraining, revalidation or withdrawal?

Data leakage occurs when information unavailable at the time of prediction enters model development, producing an unrealistically strong result. Temporal leakage is especially common when future process information is mixed with past observations.

7. Digital twins

A digital twin is a digital representation of a physical asset, process or system that is connected to relevant data and used to understand, monitor, simulate or improve the physical counterpart. A static computer-aided design file is not necessarily a digital twin; the concept generally implies an ongoing relationship between physical and digital states.

Digital twins may support:

  • virtual commissioning of equipment;
  • simulation of process changes;
  • monitoring of asset condition;
  • root-cause investigation;
  • optimisation of maintenance and production parameters;
  • training and scenario analysis.

A twin is only as credible as its model assumptions and input data. A detailed visualisation can create false confidence if material properties, degradation mechanisms or boundary conditions are wrong. Verification asks whether the digital model has been implemented correctly; validation asks whether it represents the intended physical behaviour sufficiently for its use. Both should be proportionate to risk.

8. Cybersecurity, privacy and resilience

Digitisation enlarges the attack surface. Connected sensors, cloud services, mobile devices, application interfaces and remote maintenance channels may provide routes for unauthorised access. A cyber incident can affect not only confidentiality but also product conformity, production continuity and safety.

Quality-relevant cybersecurity controls include:

  • asset inventories and network segmentation;
  • least-privilege access and multi-factor authentication;
  • secure configuration and timely patching;
  • encryption in transit and at rest where appropriate;
  • backups with restoration testing;
  • logging, monitoring and incident response;
  • supplier and cloud-service assurance;
  • controlled remote access;
  • offline or independent recovery arrangements for critical systems.

Privacy must be considered when quality data includes employee identifiers, biometric information, video, location or performance records. Organisations should define purpose, lawful basis, retention, access rights and deletion or anonymisation rules according to applicable data-protection law. Collecting personal data merely because technology permits it is poor governance.

Resilience requires more than preventing attacks. Organisations should determine how quality decisions will continue if a network, database or model is unavailable. Manual fallback procedures should be tested, not merely documented.

9. Explainability, fairness and human oversight

Explainability concerns the ability to communicate how an output was produced at a level appropriate to the user and decision. A quality engineer may require feature importance, confidence, comparable cases and limitations; an operator may need a simple reason code and a clear escalation instruction.

There is no single universal definition of an “explainable AI” model. A transparent rules-based system, a statistical model with interpretable coefficients and a complex model supplemented by post-hoc explanations have different strengths and risks. A post-hoc explanation is an approximation and should not be treated as proof of causation.

Fairness matters when algorithms affect people, such as worker performance assessment, recruitment, promotion or allocation of investigations. Models may reproduce historical bias or use proxy variables for protected characteristics. Performance should therefore be examined across relevant groups, subject to privacy and legal constraints.

Human oversight should be designed, not assumed. A responsible control structure specifies:

  • who may rely on the output;
  • who can override it;
  • what evidence is required for override;
  • when escalation is mandatory;
  • how disagreements are recorded;
  • who reviews performance and drift;
  • who has authority to suspend the system.

Human involvement is ineffective if users are pressured to accept automated recommendations, cannot see uncertainty or lack the competence to challenge the system.

10. Governance and assurance framework

A mature digital-quality governance framework links technology controls to the quality management system. A practical model has six layers:

  1. Purpose and risk: define the quality problem, intended benefit and potential harm.
  2. Data governance: establish ownership, definitions, lineage, quality checks and retention.
  3. Technical assurance: validate software, sensors, interfaces, models and cybersecurity controls.
  4. Operational control: define procedures, training, permissions, escalation and fallback.
  5. Performance monitoring: review quality outcomes, drift, false alarms, incidents and user feedback.
  6. Accountability: maintain approval, change control, audit evidence and management review.

Common governance artefacts include a system inventory, data dictionary, risk assessment, validation plan, test evidence, model card, cybersecurity assessment, privacy assessment, standard operating procedure and periodic review record.

Model drift can arise because the process, equipment, materials, customer mix or measurement system changes. A monitoring plan should identify drift indicators and action thresholds. Retraining is not automatically a solution; it may hide a process change that requires engineering investigation.

11. Illustrative case: machine vision for a packaging line

Background

A food-packaging plant manually inspected printed date codes and seal alignment. The line produced 180 packs per minute. Customer complaints showed occasional unreadable codes, while inspectors reported fatigue during long shifts.

Problem

Management proposed a camera-based inspection system. Initial vendor testing reported 99% accuracy, but the test set contained mostly conforming samples and images were taken under stable lighting. Quality engineers identified a risk of false acceptance when film colour, condensation or print contrast changed.

Analysis

The team defined two critical outcomes: unreadable or incorrect code detection and seal misalignment detection. They collected images across shifts, products, lighting conditions, printer settings and deliberately introduced representative defects. Human inspectors independently labelled the images, with disagreements adjudicated by a quality specialist.

The system was evaluated using precision and recall rather than accuracy alone. Because missed defects could reach customers, recall was prioritised. Borderline images were routed to a trained inspector. The camera, lighting and software were treated as one validated inspection system.

Approach and solution

The plant installed controlled lighting, a camera enclosure and a reject verification sensor. Each image was linked to product, line, time and software version. The system recorded accepted, rejected and human-review outcomes. A daily challenge test used known samples, and a change-control procedure required revalidation after camera relocation, lighting replacement, product artwork change or model update.

The dashboard displayed false rejects, confirmed defects, review workload and inspection availability. Operators could stop the line under defined conditions but could not silently disable the inspection. A fallback procedure required documented manual inspection during system downtime.

Outcome

The system reduced routine inspection workload and improved detection consistency. It also revealed that many apparent print defects originated from printer-temperature variation. The most important benefit was not automation alone but the combined improvement in process control, traceability and escalation. The plant retained human authority for borderline cases and periodically compared automated performance with independent audit samples.

Learning points

  1. Vendor accuracy claims are not a substitute for site-specific validation.
  2. Inspection performance depends on the measurement environment as well as the model.
  3. False negatives and false positives have different operational consequences.
  4. Digital inspection can expose upstream causes rather than merely sort defects.
  5. Change control, fallback operation and human review are essential parts of the system.

12. Best-practice implementation roadmap

An organisation considering digital quality should begin with a significant quality problem, not with a technology purchase. The following roadmap is suitable for an advanced-diploma project or organisational programme:

  • establish a cross-functional team involving quality, operations, engineering, IT, cybersecurity, legal or privacy specialists and end users;
  • define the decision, critical-to-quality characteristics and acceptable risk;
  • map current data flows and measurement-system limitations;
  • run a small pilot with representative conditions and independent evaluation;
  • define acceptance criteria before viewing results;
  • validate the complete sociotechnical system, including procedures and people;
  • integrate alerts with existing CAPA and escalation processes;
  • monitor both technical metrics and business outcomes;
  • review unintended effects, workload and equity;
  • scale only when ownership, funding, support and governance are sustainable.

Technology should be retired or redesigned when it produces unreliable evidence, unacceptable bias, excessive nuisance alerts or disproportionate maintenance cost.

13. Future developments

Future quality systems are likely to combine edge computing, cloud platforms, increasingly capable foundation models, synthetic data, autonomous inspection and simulation. Edge processing may reduce latency and limit transfer of sensitive images. Generative AI may assist with investigation summaries, procedure search and analysis of unstructured complaints, but generated text must be checked against controlled evidence.

The direction of development is likely to be toward more autonomous quality decisions. This increases, rather than reduces, the importance of validation, traceability and human authority. Organisations will need competence in data engineering, statistics, process capability, cybersecurity, software assurance and ethical governance. Quality professionals will increasingly act as translators between operational expertise, digital technology and organisational risk.

Chapter Summary

Digital quality connects measurement, records, analytics and action across the quality system. An e-QMS improves workflow control and traceability when it is built around defined processes and validated records. Real-time dashboards support decisions when metrics, thresholds, ownership and escalation are explicit. IoT sensing expands visibility but requires calibration, synchronisation, data-quality checks and resilience.

Automated inspection and machine vision must be evaluated using representative data and measures such as precision, recall, false-positive and false-negative rates. Predictive and AI-assisted analytics can identify risk earlier, but predictions are conditional estimates rather than causal proof. Digital twins support simulation and monitoring only when their assumptions and data are credible.

Cybersecurity, privacy, explainability, fairness, validation, change control and human oversight are essential quality controls. The most effective digital transformation is risk-based and sociotechnical: it improves processes and decisions while retaining accountable people, independent evidence and tested fallback arrangements.

Key Terms

Artificial intelligence: Computational methods that perform tasks requiring capabilities such as prediction, classification or language analysis.

Audit trail: A record of actions, changes, users and times associated with an electronic record or system.

CAPA: Corrective and preventive action used to address causes of actual or potential nonconformity.

Digital twin: A connected digital representation of a physical asset, process or system.

Drift: A change in data, process conditions or model performance over time.

e-QMS: An electronic quality management system for controlled quality processes and records.

Explainability: The ability to communicate the basis, limitations and significance of an analytical output.

False negative: A defective condition incorrectly classified as acceptable.

False positive: An acceptable condition incorrectly classified as defective.

First-pass yield: The percentage of units passing a process without rework.

IoT: A network of connected physical devices that collect, exchange or act on data.

Machine vision: Automated interpretation of images for inspection or process control.

Model validation: Evidence that a model is suitable and performs acceptably for its intended use.

Predictive quality: Use of data and models to estimate future quality outcomes or risk.

Precision: The proportion of positive classifications that are true positives.

Recall: The proportion of actual positive conditions detected by a system.

Sensor calibration: Comparison and adjustment of measurement performance against a reference.

Traceability: The ability to reconstruct the history, application or location of an item, record or decision.

Human oversight: Defined human authority to review, challenge, approve, override or suspend an automated system.

Review Questions

Short Answer Questions

  1. What are the principal functions of an e-QMS?
  2. Distinguish a false positive from a false negative in automated inspection.
  3. Why is sensor calibration important in an IoT quality system?
  4. What is meant by model drift?
  5. State two cybersecurity controls relevant to digital quality.

Long Answer Questions

  1. Explain how an organisation should implement an e-QMS without merely reproducing inefficient paper processes.
  2. Compare descriptive, diagnostic, predictive and prescriptive quality analytics.
  3. Discuss the validation requirements for a machine-vision inspection system.
  4. Explain how privacy, explainability and human oversight affect AI-assisted quality decisions.
  5. Evaluate the benefits and limitations of digital twins in quality planning and control.

Analytical / Application Questions

  1. A vision system reports high overall accuracy but misses several rare safety-critical defects. Which additional measures and validation activities should the quality team use before deployment?
  2. Design a dashboard for a pharmaceutical or automotive production line. Specify the users, metrics, alert thresholds, data sources and escalation actions.
  3. An AI model’s performance declines after a new raw-material supplier is introduced. Analyse possible causes and propose a controlled response, including data review, process investigation and model governance.

Multiple Choice Questions with Answers

Question 1

Which feature most directly distinguishes an e-QMS from a simple electronic document repository?

A. It stores files in digital format.

B. It provides controlled workflows, traceability and quality-process records.

C. It eliminates the need for user training.

D. It guarantees that all quality decisions are correct.

Correct Answer: B. It provides controlled workflows, traceability and quality-process records.

Question 2

A process inspects 500 units and identifies 15 defective units. What is the defective-unit proportion?

A. 0.3%

B. 3%

C. 15%

D. 33.3%

Correct Answer: B. 3%

Question 3

In machine vision, a defective product incorrectly accepted as conforming is a:

A. True positive

B. False positive

C. True negative

D. False negative

Correct Answer: D. False negative

Question 4

Recall is calculated as:

A. TP ÷ (TP + FP)

B. TP ÷ (TP + FN)

C. TN ÷ (TN + FP)

D. (TP + TN) ÷ total observations

Correct Answer: B. TP ÷ (TP + FN)

Question 5

Which activity is an example of predictive quality analytics?

A. Reporting last month’s defects by department

B. Investigating why a completed batch failed

C. Estimating the probability that the next batch will fail

D. Recording an operator’s completed inspection

Correct Answer: C. Estimating the probability that the next batch will fail

Question 6

Why should a digital twin be validated?

A. To confirm that its digital representation is sufficiently accurate for its intended use

B. To ensure that it has the most attractive graphical interface

C. To remove the need for physical measurements

D. To guarantee that every future process change is optimal

Correct Answer: A. To confirm that its digital representation is sufficiently accurate for its intended use

Question 7

Which control best reduces the risk of unauthorised access to a quality system?

A. Using one shared password for all operators

B. Disabling audit trails

C. Applying least-privilege access and multi-factor authentication

D. Allowing unrestricted remote access

Correct Answer: C. Applying least-privilege access and multi-factor authentication

Question 8

Why can overall accuracy be misleading for a rare-defect inspection problem?

A. Accuracy cannot be calculated for image data.

B. A system can appear accurate by accepting most units while missing rare defects.

C. Accuracy always equals recall.

D. Rare defects automatically produce false positives only.

Correct Answer: B. A system can appear accurate by accepting most units while missing rare defects.

Question 9

Which statement best describes human oversight?

A. Humans must approve every data point manually.

B. Users should accept automated recommendations without challenge.

C. Defined people have authority and competence to review, override or suspend the system.

D. Human oversight is unnecessary after software validation.

Correct Answer: C. Defined people have authority and competence to review, override or suspend the system.

Question 10

A model performs well during development but poorly after a major material change. This is most consistent with:

A. Model or process drift

B. Improved calibration

C. A true negative

D. Electronic signature control

Correct Answer: A. Model or process drift

Quality Planning & Control
Chapter 14 of 15