Download one of our supply chain, EUDR, CSRD/VSME & whistleblower compliance guides now Learn more →
Test now Personal demo
Compliance 17. March 2026 · 16 Min read

Quality management: definition, objectives, systems & trends

Quality management (QM) is the system a company uses to ensure that its products and services consistently meet requirements. How well it works only becomes apparent when something goes wrong: a complaint, a recall, or the loss of a major customer. Companies with effective QM systems then identify the cause and resolve it. With the ISO 9001:2026 standard, published on September 16, 2026, the requirements for leadership, risk management, and quality culture have also increased. In this article, you’ll learn exactly what quality management means, what tasks and standards are involved, and how to implement a QM system step by step.

Matthias Klein

Matthias Klein

ESG compliance expert - lawcode GmbH

Share:
Quality management: definition, objectives, systems & trends
Table of Contents

Important facts

What is quality management (QM)?
All measures a company takes to plan, control, and improve the quality of its products, services, and processes.
What are the responsibilities of QM?
Set goals, establish processes, check quality, correct errors, document everything, and have it reviewed.
What is the basis of quality management?
Based on the seven principles of ISO 9000. These include customer focus, leadership, and continuous improvement.
Which standard applies?
ISO 9001. The new 2026 version has been in effect since September. Certificates must be updated by September 2029.
Is quality management mandatory?
Only in a few industries, such as healthcare. In B2B business, however, customers often demand it.

Abstract

Quality management is more than just an inspection at the end of the production process. It is a system that encompasses the entire company. It defines the quality standards you want to achieve, who is responsible for them, and how deviations are identified. Errors are not merely corrected; their root causes are addressed. This reduces costs, increases customer satisfaction, and makes processes more stable.

The foundation is based on seven principles from ISO 9000. These include customer focus, leadership, process orientation, and fact-based decision-making. In day-to-day operations, quality management manifests itself in four types of tasks: setting goals, managing processes, measuring results, and documenting knowledge. Responsibility for these tasks always lies with senior management. A quality management representative can support them, but cannot replace them.

ISO 9001 provides the framework. The 2026 edition brings new topics to the forefront: leadership and quality culture, climate issues, planned changes, and key performance indicators. Certified companies have until September 2029 to make the transition. Those who start early with a gap analysis can incorporate the transition into their regular audits. In industries such as automotive, medical technology, or food, additional industry-specific standards apply, such as IATF 16949 or ISO 13485.

A step-by-step approach has proven effective for implementation. Instead of overhauling everything at once, many companies start with one area, such as customer complaints. Early successes help build acceptance within the team. Methods such as the PDCA cycle, the 5 Whys method, or the Ishikawa diagram help solve problems in a structured way.

For decision-makers, this means that anyone who views QM merely as a certificate is squandering potential. When done right, QM provides the data needed to identify risks early on. This applies to processes as well as to the supply chain. As a result, QM is increasingly becoming a cornerstone of compliance, for example with regard to the due diligence obligations under the LkSG and EUDR.

Quality control identifies defects. Quality assurance prevents them. Quality management organizes both.

Never miss an update on compliance again.

New specialist articles, regulatory updates and practical tips, straight to your inbox. Once a week, no spam.

No spam Unsubscribe at any time GDPR-compliant

What Is Quality Management? The Definition

Quality management encompasses all activities through which a company plans, controls, ensures, and improves the quality of its products, services, and processes.

But what is quality? ISO 9000 provides a clear answer: Quality is the degree to which a product meets requirements. Quality is therefore not a fixed value. It is always the comparison between what is required and what is delivered.

What is QM in practice? An example makes it easier to understand: A customer complains about a defective part. Without QM, the part is replaced, and the matter is closed. With QM, that’s when the real work begins. Where did the defect come from? Was it due to the material, the machine, or a missed inspection? And how do we prevent it from happening again? These questions almost always involve multiple areas, from development to purchasing to production. That’s why QM isn’t the responsibility of a single department, but of the entire company.

QM consists of four parts:

  • Quality Planning: You define which requirements apply and which goals you want to achieve.
  • Quality Management: You manage the processes to ensure that goals are achieved on a day-to-day basis.
  • Quality Assurance: They take preventive measures to ensure that errors don't occur in the first place.
  • Quality Improvement: They are constantly refining their products and processes.

What is a quality management system?

A quality management system (QMS or QM system) provides the framework for all these tasks. It defines who is responsible for what. It describes processes, documents, and key performance indicators. QM is therefore the task, and the QM system is the tool used to accomplish it. It is always the system that is certified, never the product.

What is the difference between quality assurance and quality control?

These three terms are often confused. However, they refer to different things:

  • Quality control inspects the finished product, for example, through random sampling or tests at the end of the production process.
  • Quality assurance starts earlier. It prevents errors, for example, through training or maintenance.
  • Quality management is the umbrella term. It encompasses both and complements planning, leadership, and improvement.

What are the objectives of quality management?

The most important goal is to maintain a consistently high level of quality. This quality should meet—and ideally exceed—customer expectations. This gives rise to both external and internal goals.

External Goals:

  • Satisfied customers: They buy more often, recommend your business to others, and stay loyal even in difficult times.
  • Building Trust with Partners: A quality management system is often the key to establishing new supplier relationships.
  • Ensuring Compliance: Laws, standards, and contracts are reliably followed.

Internal Goals:

  • Lower error costs: Scrap, rework, and recalls cost money and damage a company's reputation.
  • Streamlined processes: Duplication of work and wait times are eliminated.
  • Identify risks early: Errors are caught before they reach the customer.
  • Motivated Teams: Clear processes and an open culture of accountability foster a sense of responsibility.

The auto industry illustrates just how closely these factors are linked. A supplier carefully inspects its parts and immediately adjusts the process if defects are found. Its costs go down. At the same time, the manufacturer’s confidence in the supplier grows. When the next order comes in, the supplier has the edge.

Good quality management doesn't just save costs—it also ensures you get the next order.

Goals-quality-management
Quality management objectives

Advantages and Limitations of Quality Management

A good quality management system pays off in many ways:

  • Lower error costs: Scrap, rework, and customer complaints are on the decline.
  • More Satisfied Customers: Consistent Quality Builds Trust.
  • More Contracts: A certificate opens the door to bids and new markets.
  • Consistent Processes: Knowledge is no longer tied to individual people.
  • Better Decisions: Data Shows Where Problems Really Arise.
  • A Strong Employer Brand: Clear Processes and an Open Culture Attract Skilled Workers.

However, there are also limits:

  • Initial effort: Setup, training, and documentation take time.
  • The Danger of Bureaucracy: If quality management becomes a mere formality, it leads to paperwork instead of progress.
  • Ongoing costs: Audits and maintenance incur ongoing expenses.
  • It depends on the culture: No system works without leadership and support within the team.

The benefits outweigh the drawbacks if you start small and tailor the system to your actual risks.

What are the responsibilities of quality management?

Quality management tasks range from strategy to day-to-day inspections. At their core, they revolve around two questions: How good does our offering need to be? And how do we ensure that it remains that way over the long term? The answers are spread across four levels that build on one another.

Strategic Responsibilities: Setting the Direction

The first step is to ask what your company wants to stand for in terms of quality. This responsibility lies with senior management. It cannot be passed off to the quality management department.

Strategic tasks include:

What are the expectations of customers, government agencies, suppliers, and employees? ISO 9001 refers to this as the “context of the organization” and “interested parties.”

A brief mission statement that outlines your standards for quality.

The goals must be measurable. “Better quality” isn’t enough. “A complaint rate below 0.5 percent” is.

What could compromise quality? Where are the opportunities for improvement?

Here's an example: A manufacturer of electronic components loses two major customers due to late deliveries. Management then sets a new quality goal: on-time delivery of at least 98 percent. This goal now shapes all subsequent tasks, from planning to supplier selection.

Operational Responsibilities: Ensuring Quality in Day-to-Day Operations

The operational level puts the strategy into action. This is where quality is created anew every day. Typical tasks include:

  • Managing processes: Workflows are documented, assigned to responsible parties, and linked to key performance indicators.
  • Planning Tests: A test schedule specifies what will be tested, when, how often, and with what materials.
  • Monitoring test equipment: Measuring instruments must be calibrated regularly. Otherwise, the results will be inaccurate.
  • Managing Suppliers: New suppliers are selected, and existing ones are evaluated on a regular basis.
  • Handling Complaints: Every complaint is recorded, investigated to determine its cause, and resolved with an appropriate action.

This last point, in particular, highlights the difference between good and poor quality management. Poor quality management simply replaces the defective part. Good quality management asks why it was defective and eliminates the root cause. Experts refer to these as corrective and preventive actions.

Monitoring Tasks: Measuring Impact

Without measurement, quality remains a matter of perception. That is why Quality Management continuously monitors whether the goals are being met. There are three tools for this purpose.

The first are key metrics. Commonly used ones include:

  • Complaint Rate
  • Rejection rate
  • First-pass yield, which is the percentage of parts that are acceptable without rework
  • On-time delivery
  • Customer Satisfaction Based on Surveys
  • Number of Open Actions from Audits

The second is internal audits. Trained employees review other departments. They check whether the guidelines are being followed and whether they are effective. An audit is not a review of individuals; it is an outside perspective on the system.

The third is the management review. At least once a year, management reviews the entire quality management system. It examines key performance indicators, audits, customer feedback, and risks. This process culminates in decisions: new goals, additional resources, or process changes.

Documentation: Preserving Knowledge

Documentation has a bad reputation in quality management. Unfairly so, if it is done well. It ensures that knowledge isn't tied to individual people and provides evidence for customers and auditors.

ISO 9001 refers to documented information. Since 2015, it no longer requires a traditional quality management manual. However, it does require, among other things:

  • the scope of the quality management system
  • The Quality Policy and Quality Objectives
  • Proof of Competence and Training
  • Results of Inspections, Audits, and Management Reviews
  • Evidence of errors and the measures taken

You decide for yourself how extensive the documentation should be. The rule of thumb is: as much as necessary, as little as possible.

Training and Competence

Quality depends on the people who do the work. That is why the quality management system ensures that everyone knows what is expected of them. It plans training sessions, evaluates their effectiveness, and documents the results. New employees undergo a systematic onboarding process. In this way, a shared understanding of quality gradually develops.

In practice, the roles are usually divided up as follows:

Who is responsible for quality management?

It sets goals, allocates resources, and conducts management reviews.

He manages the quality management system on a day-to-day basis. He reports to management, coordinates audits, and drives initiatives forward.

He heads the quality management department at larger companies. He is responsible for methods, key performance indicators, and the team.

You are responsible for a process, such as purchasing. You ensure that it achieves its goals.

You are responsible for a process, such as purchasing. You ensure that it achieves its goals.

They implement the guidelines and report problems and ideas.

Since 2015, ISO 9001 no longer requires a QMB. However, every quality management system needs clearly defined responsibilities.

Small and medium-sized businesses rarely have a dedicated quality management (QM) department. In most cases, one person takes on the role of QM manager in addition to their regular job, such as in production or work planning. For this to work, three things are needed: a written definition of responsibilities, dedicated time set aside for quality management tasks, and a direct line of communication to senior management. If any one of these elements is missing, quality management quickly becomes an afterthought that gets lost in the day-to-day operations.

The 7 Principles of Quality Management

ISO 9000 identifies seven principles that form the foundation of every quality management system. They apply to all organizations, regardless of size or industry. No single principle is more important than another. Only together do they make a quality management system effective.

The 7 principles are not a checklist. Auditors use them to assess the maturity of your quality management system.

1. Customer Focus

Everything is based on what customers need today and tomorrow. In practice, this means:

  • Survey customers regularly and evaluate their feedback
  • respond quickly to complaints
  • Developing Products Based on Real-World Needs

2. Guided Tour

Managers create the framework for high quality by setting goals, allocating resources, and leading by example. ISO 9001:2026 reinforces this role. Management is now explicitly responsible for fostering a culture of quality and ethical conduct.

3. Involvement of Individuals

Quality is created where the work is done—not in the quality management department. That’s why we need employees who have the skills, the authority, and a say in the matter. This is achieved through training, quality circles, and an open culture of error acceptance. Anyone who reports a problem should not have to fear any negative consequences.

4. Process-Oriented Approach

Good results come from managing processes as a whole. This includes:

  • Clearly defined processes with clearly defined responsibilities
  • a process map that shows how everything is connected
  • Key Metrics for Each Process
  • smooth handoffs between departments

5. Improvement

Quality isn’t a state you achieve once and then check off your list. Customer needs change, competitors are catching up, and what’s good enough today may not be enough tomorrow. That’s why quality management (QM) relies on the continuous improvement process, or CIP for short. Instead of waiting for a major breakthrough, products and processes are improved through many small steps. The ideas for these improvements often come directly from employees who work with the processes on a daily basis. The PDCA cycle, described in the chapter on implementation, shows how such improvements can be implemented in a structured way.

6. Fact-Based Decisions

Many decisions within a company are based on experience and judgment. That’s not wrong, but it’s often inaccurate. Here’s an example: The production department is convinced that a certain supplier is responsible for most of the defects. Only after analyzing the complaint data does it become clear that the cause lies with one of their own machines. The principle of fact-based decision-making therefore requires that decisions be based on data and analysis. This presupposes that quality data is complete, up-to-date, and accessible to those responsible. Digital solutions make this considerably easier because they consolidate data from various departments in one place.

7. Relationship Management

No company delivers quality on its own. A large portion of it is purchased—as raw materials, components, or services. If a partner delivers defective products or is late, your customer will ultimately feel the impact. The principle of relationship management therefore requires that you actively shape relationships with suppliers and other partners. This includes a structured selection process for new suppliers, regular evaluations, and clear quality agreements. Equally important is open communication when problems arise. Laws such as the Supply Chain Due Diligence Act (LkSG) or the EU Deforestation Regulation (EUDR) broaden this perspective: In addition to quality, companies must also identify and manage human rights and environmental risks in their supply chain.

Systems-standards-quality-management
Standards and systems in QM

What standards apply to quality management?

The most important standard is DIN EN ISO 9001. It specifies what a quality management system must achieve. It applies worldwide and across all industries. The abbreviation indicates who issued it: DIN for Germany, EN for Europe, and ISO for the world. In terms of content, it is the same standard.

ISO 9001 is part of the ISO 9000 series of standards. Each standard in the series serves a specific purpose:

  • ISO 9000: It explains the basics and terminology. The seven principles are also listed here.
  • ISO 9001: It specifies the requirements for a quality management system. You can only obtain certification in accordance with this standard.
  • ISO 9004: It shows you how to achieve lasting success beyond the minimum requirements.
  • ISO 19011: It provides guidance on audits. Internal auditors often follow it.

How is ISO 9001 structured?

ISO 9001 has ten chapters. The first three explain the scope, references, and terms. The actual requirements are found in chapters 4 through 10:

  • Chapter 4 - Organizational Context: Environment, Interested Parties, and Scope of the Quality Management System
  • Chapter 5 - Leadership: Management Responsibilities, Quality Policy, Roles
  • Chapter 6 - Planning: Risks, Opportunities, Quality Objectives, and Planned Changes
  • Chapter 7 - Support: Resources, Expertise, Communication, and Documentation
  • Chapter 8 - Operations: Planning and Managing Production or Service Delivery, Including Suppliers
  • Chapter 9 - Performance Evaluation: Measurement, Customer Satisfaction, Internal Audits, Management Review
  • Chapter 10 - Improvement: Handling Errors, Corrective Actions, Continuous Improvement

The structure follows the PDCA cycle. Chapters 4 through 6 focus on planning, Chapters 7 and 8 on implementation, Chapter 9 on review, and Chapter 10 on improvement. Anyone familiar with this overarching theme will understand the standard much more quickly.

Important: ISO 9001 specifies what you must achieve. How you do that is up to you. A small business with 20 employees needs a different system than a large corporation.

ISO 9001:2026: What's Changing?

ISO 9001:2026 was published on September 16, 2026. It replaces the 2015 edition. The good news is that this isn’t a complete overhaul, as the structure and principles remain the same. However, there are some new areas of focus:

  • Risks: Risk-based thinking is reinforced and defined more clearly.
  • Climate: Climate change is one of the environmental factors you must assess. This topic has been addressed since an amendment to the standard in 2024. It is now an integral part of the standard’s text.
  • Leadership: Management bears greater responsibility for fostering a culture of quality and ethical conduct.
  • Changes: A new chapter explains how to plan changes in a structured way.
  • Key Metrics: Metrics and improvement are becoming more closely linked.

Existing ISO 9001:2015 certificates remain valid until September 2029. After that, they will expire.

What does this mean for you? Three years may sound like a long time. However, certifications follow a three-year cycle, and audits are scheduled well in advance. If you wait until the last minute to recertify, you’ll find yourself under pressure. Here’s how to approach the transition:

  1. Obtain and read the standard: Determine which chapters apply to you.
  2. Conduct a gap analysis: Compare your system with the new requirements. What is missing?
  3. Plan actions: Determine who will address each gap and by when.
  4. Train the team: Primarily managers, quality management representatives, and internal auditors.
  5. Conduct an internal audit: An internal audit based on the new standard will show whether you are ready.
  6. Coordinate the transition with the certification body: In most cases, it can be combined with a regular audit.

Integrated Management Systems

In addition to quality management, many companies have other management systems. All modern ISO standards follow the same basic structure, known as the Harmonized Structure. It used to be called the High Level Structure. This ensures that the systems fit together well:

  • ISO 14001 - Environmental Management: This standard specifies how to manage energy, raw materials, and waste. It, too, was revised in 2026. The transition period runs through the end of April 2029.
  • ISO 45001 - Occupational Health and Safety: It helps prevent accidents and create healthy workplaces.
  • ISO 27001 - Information Security: It protects data and IT systems.
  • ISO 50001 - Energy Management: It systematically reduces energy consumption.

If you have multiple systems, you should consolidate them into an Integrated Management System (IMS). This allows for a unified document control process, a single management review, and combined audits. This saves time and money and prevents inconsistencies between the systems.

For industries with specific risks, there are separate standards that typically supplement ISO 9001:

Industry Standards in Quality Management

It supplements ISO 9001 with requirements from automakers. These include the so-called Core Tools, such as APQP, PPAP, FMEA, MSA, and SPC. It is mandatory for many suppliers.

It places particular emphasis on product safety, configuration management, and protection against counterfeit parts.

It focuses on regulatory requirements and traceability. It is closely linked to the European Medical Device Regulation.

It governs the manufacture, testing, and release of drugs. It is required by law.

They ensure food safety at every stage. Retailers often require their suppliers to be IFS or BRCGS certified.

It governs the management of IT services, often supplemented by ITIL.

A dedicated process for the healthcare sector. Alternatively, many organizations use a customized version of ISO 9001.

Quality Management in Various Industries

Quality management is important in every industry. However, its role varies greatly. What is mandatory in the pharmaceutical industry is a matter of choice in the retail sector.

  • Industry: Quality management is closely linked to product safety and liability. Suppliers are often required to provide a certificate. No quality management, no contract.
  • Pharmaceuticals and Medical Devices: Processes and documentation are regulated down to the last detail. Violations can result in product recalls and the loss of approval.
  • Food: This is about consumer protection. The LkSG and EUDR extend quality management to suppliers and raw materials.
  • Services and IT: Quality is harder to measure. Customer satisfaction is the most important metric.
  • Health Care: Hospitals and nursing homes are legally required to implement quality management. This directly contributes to patient safety.

How does the ISO 9001 certification process work?

During the certification process, an independent body will audit your quality management system. Make sure the body is accredited. In Germany, the German Accreditation Body (DAkkS) is responsible for this. Only then will your certificate be recognized everywhere.

The process:

They establish the quality management system, document it, and conduct internal audits and a management review.

The certification body calculates the cost based on size, locations, and industry.

The auditor reviews your documents and assesses your readiness. He or she will point out any gaps that still exist.

The auditor checks on site to see if the system works in everyday practice. He talks to employees and observes work processes.

If the auditor finds any nonconformities, you must correct them within a specified time frame. Serious nonconformities will prevent you from obtaining certification until they are corrected.

It is valid for three years.

A surveillance audit is conducted every year. Recertification is due after three years.

Be sure to allow sufficient time for implementation and certification. Depending on the size and starting point of your organization, this usually takes several months. Certification is not mandatory in most industries. However, it is often required in B2B business and for government contracts.

How Do You Implement Quality Management? Methods and Implementation

The standard specifies what a quality management system must achieve. How you achieve that is up to you. In this chapter, you’ll learn which methods have proven effective, how to implement quality management step by step, and why projects often fail.

Total Quality Management (TQM) and EFQM

TQM is more of an attitude than a method, because it aligns the entire company with a focus on quality—not just production, but also sales, human resources, and administration. Quality is everyone’s responsibility, and leadership sets the example.

The EFQM model makes this approach measurable. It was developed by the European Foundation for Quality Management. Companies use it to evaluate three questions: Why do we do what we do? How do we implement it? And what do we achieve? Unlike ISO 9001, EFQM does not lead to a certificate. It is a model for excellence. Many companies use it once their ISO system is in place and they want to take the next step.

Six Sigma and Lean Management

Both are pursuing the same goal, just by different means.

Six Sigma relies on statistics. The name describes a goal: no more than 3.4 defects per million opportunities. Projects follow the DMAIC cycle:

  • Define: Clearly describe the problem and the goal
  • Measure: Capture the current state using data
  • Analyze: Identify the Causes
  • Improve: Develop and Test Solutions
  • Control: Ensuring the Improvement Is Sustainable

Six Sigma is suitable for stable processes with a large amount of data. For example, in mass production.

Lean management emphasizes simplicity. It asks: What benefits the customer? Everything else is considered waste. Typical examples include wait times, unnecessary travel, oversized inventories, rework, and duplication of effort. Lean is particularly well-suited when processes are slow or cumbersome.

Many companies combine the two into Lean Six Sigma. This makes processes both lean and stable.

The PDCA Cycle

The PDCA cycle is the basic model for improvement. It was developed by quality pioneer W. Edwards Deming. ISO 9001 also follows this logic:

  1. Plan: Understand the problem, define the goal and the action to be taken.
  2. Do: Test the measure on a small scale, such as on a single machine or within a team.
  3. Check: Verify whether the measure is effective. Ideally, use numbers.
  4. Action: Make good solutions the standard. Otherwise, make adjustments.

Then the cycle starts all over again. Here’s an example: A logistics manager has too many incorrect deliveries. He plans to implement a double-check during packaging. He tests the process for four weeks in one warehouse. Errors are cut in half. So he rolls out the check to all warehouses. And then he looks for the next area to improve.

Plan, Do, Check, Act: With the PDCA cycle, improvement becomes a routine process rather than a one-off project.

Methods-quality-management
Methods and tools in quality management

FMEA, Ishikawa, and Other Tools

There are tried-and-true tools for everyday use. Each one has its own purpose:

  • FMEA: This method identifies potential failures before they occur. It is used in product development or process planning. Each potential failure is evaluated based on severity, frequency, and detectability. The greatest risks are addressed first.
  • Ishikawa Diagram: This is helpful when a problem has many possible causes. The team organizes them in a fishbone diagram—for example, by people, machines, materials, methods, measurement, and environment.
  • The 5 Whys Method: This method is simple and quick because it asks “Why?” five times. This helps you move from the effect to the true cause.
  • 8D Report: It is the standard for handling complaints, especially in the automotive industry. Eight defined steps guide the team from immediate action to a permanent solution.
  • Statistical Process Control (SPC): It continuously analyzes measurement data. If a process gets out of control, it sounds the alarm—even before defective parts are produced.

You don't need to be familiar with every tool. To get started, the 5 Whys, the Ishikawa diagram, and the PDCA cycle are usually enough.

You can set up a quality management system in eight steps.

Implementing Quality Management: In 8 Steps

Virtually no company starts from scratch. There are audits, checklists, and well-established processes. Take stock of what’s already in place. And identify where errors and complaints are occurring today. This analysis of the current state will show you where to start.

Without support from the top, every quality management project is doomed to fail. Senior management must approve the goals, budget, and timeline, and must visibly stand behind the project.

Appoint a QMB or a person with clearly defined responsibilities. For larger companies, form a small project team made up of members from several departments. Train internal auditors early on.

Formulate the quality policy and derive measurable goals. Good goals are specific, realistic, and have a deadline.

Create a process map. It typically distinguishes between three types: management processes such as strategy, core processes such as sales and production, and support processes such as IT or human resources. Each core process is assigned a person in charge, clear interfaces, and key performance indicators.

Store everything in one central location, with version numbers and clear approval status. That way, everyone works with the most up-to-date version. Brief flowcharts are often better than long texts.

Explain why you are implementing QM and how everyone benefits from it. Train people in the most important methods and listen: The best suggestions often come from those who do the work.

Conduct an initial internal audit, followed by a management review. Address any gaps identified. Only then should you schedule the certification audit, if necessary.

A quality management manual that no one reads only complies with the standard on paper. What really matters is whether the system is actually put into practice on a daily basis.

Practical Example: Getting Started with a Pilot Area

A medium-sized mechanical engineering company wants to implement a quality management system. However, the team is concerned that this will lead to more bureaucracy. That’s why the company is starting small: by handling customer complaints.

Every complaint is now recorded according to a set procedure. The root cause is identified using the 5 Whys method. The process always concludes with a corrective action, including a deadline and a designated person responsible. After six months, it becomes clear which errors are recurring and where they originate, as the majority can be traced back to two suppliers.

This visible success has even won over the skeptics. In the next step, the company is establishing a supplier evaluation system, followed by production and purchasing. After about a year, a quality management system is in place that everyone knows and uses.

Quality Management in SMEs

For small and medium-sized companies, the initial effort involved is the biggest hurdle. Often, they don't have their own quality management department. However, quality management can be easily adapted to the size of the company. Proven ways to get started include:

  • Complaints: This immediately boosts customer satisfaction. And you gain data that can help you make improvements.
  • Supplier evaluation: It ensures the quality of purchased parts.
  • A critical process: Here, you'll see measurable results quickly.

You don’t have to throw anything away in the process. Existing audits and checklists often provide a good foundation, and it may be helpful to bring in an external consultant who has experience and can help you avoid common mistakes. Just make sure that the knowledge stays within the company afterward.

Quality Management Software: When Is It Worth It?

Many companies start out using folders, Excel, and email. That works for a while. But with every process, every audit, and every complaint, the chaos grows. That’s when QM software becomes worthwhile. It brings all the most important tasks together in one place:

  • Document Control: Everyone works with the latest, approved version.
  • Action Management: Every action has a person in charge and a deadline. Nothing gets lost.
  • Audits: Planning, execution, and reporting are all handled within a single system.
  • Complaints: Cases are consistently recorded and analyzed.
  • Supplier Evaluation: Evaluations are available at any time.
  • Training Records: You can immediately see who needs which training.

The biggest advantage: The data is all in one place, which provides the foundation for fact-based decisions.

Common Pitfalls

Many quality management projects fail not because of the standard itself, but because of how it is implemented. The most common mistakes:

  • Resistance within the team: Many fear being micromanaged and having to take on extra work. Involve the team early on and communicate openly.
  • Paper as an end in itself: More documents do not mean higher quality.
  • Lack of Leadership: If management completely relinquishes control of quality management, it loses its influence.
  • Too much at once: If you try to tackle everything at the same time, you'll overwhelm the team. Start with one area.
  • A Break After the Certification: Short quality review sessions of about 15 minutes each month are helpful for the team. This often works better than large annual projects.

Where is quality management headed?

Quality management is evolving. In the past, the focus was on reviewing what had already happened. Today, the approach is proactive. Three trends are driving this change:

  • Digitization: Sensors, automated inspections, and quality management software capture data comprehensively. When integrated with the ERP system, the administrative burden associated with documents is reduced. Errors become immediately apparent.
  • Artificial Intelligence: AI identifies patterns in large amounts of data. This allows errors and waste to be detected early on. However, humans still make the final decision.
  • Sustainability and the Supply Chain: With ISO 9001:2026, climate considerations become part of quality management. At the same time, the LkSG and EUDR require evidence extending deep into the supply chain.

This brings quality management and compliance closely together. Companies that already assess suppliers for quality can use the same processes to fulfill their due diligence obligations.

Impact-quality-management
Influence of quality management on customer satisfaction and competitiveness

Quality management and compliance are converging. Those who assess suppliers for quality can use the same processes for the LkSG and the EUDR.

Conclusion

Quality management is much more than just an inspection at the end of the production process or a certificate for bidding on contracts. It is a management system that combines clear objectives, controlled processes, and measurable results. The seven principles of ISO 9000 provide the direction, while ISO 9001 provides the mandatory framework. The key difference from mere quality control is that effective quality management not only identifies defects but also eliminates their root causes and prevents them from recurring.

With ISO 9001:2026, the focus is shifting. Leadership, quality culture, risks, and managing change are gaining importance. Certified companies have until September 2029 to make the transition. Those who start early with a gap analysis can incorporate the adjustments into their regular audits and avoid time pressure as the deadline approaches.

In practice, a quality management system doesn’t have to be perfect from the start, but it must be actively implemented. A streamlined approach—starting with an area such as customer complaints or supplier evaluation—yields quick results and builds acceptance within the team. At the same time, quality management and compliance are becoming increasingly intertwined. Supplier evaluations, documented processes, and an open reporting culture are essential for both. Lawcode’s compliance solutions help you establish these structures and consolidate the necessary data in one place.

Frequently asked questions

Quality management encompasses all measures a company takes to ensure and improve the quality of its products, services, and processes. It affects the entire company, from management down to every employee.

QM sets goals, regulates processes, and monitors quality. It addresses errors, conducts internal audits, documents the system, and trains employees.

Quality assurance is a component of quality management. It prevents errors. Quality management is the umbrella term. It also encompasses planning, steering, monitoring, and improvement.

Only in certain sectors, such as healthcare, medical devices, or the pharmaceutical industry. Otherwise, it is voluntary. In B2B business, however, customers often require it in the contract.

The new version emphasizes a risk-based approach. Leadership bears greater responsibility for culture and ethics. New additions include a chapter on planning for change and a focus on climate change. Certifications must be updated by September 2029.

No, ISO 9001 does not require a Quality Management Representative (QMR). However, it does require clear lines of responsibility. That is why most companies continue to designate a person in charge.

Matthias Klein

Matthias Klein

LinkedIn

ESG compliance expert - lawcode GmbH

Matthias Klein advises companies on the implementation of supply chain laws such as the CSDDD and supports the implementation of digital solutions for legally compliant supply chains. His specialist articles on the lawcode blog combine regulatory depth with practical recommendations for action.

Supply Chain / CSDDD EUDR HinSchG ESG compliance CSRD / VSME
Previous Post

PPWR 2026: An Overview of Obligations, Deadlines, and Roles

Next Post

What Is Benchmarking? Definition, Types, and a 5-Step Process

y

More articles on Compliance