A certificate on the wall proves nothing. It proves that, on a specific date, an auditor reviewed a document management system that was functioning properly on that day. What happens the next day—whether a customer asks about the origin of a batch or a nonconformity goes unnoticed through three shifts before anyone notices it—is not mentioned on any certificate.
This is precisely where two types of quality management systems diverge. One type exists simply to pass an audit. The other exists so that production knows exactly where it stands every day. Both comply with ISO 9001. But only one of them prevents the next product recall.
THE MOST IMPORTANT POINTS IN A NUTSHELL
|
This article explains what a quality management system in discrete manufacturing must actually achieve, which standards underpin it, why implementation often fails in practice, and how a document-based system can be transformed into a data-driven system.
What Is a Quality Management System?
A quality management system, or QMS for short, is the structure consisting of processes, responsibilities, resources, and records that an organization uses to establish, achieve, and demonstrate its quality objectives. The ISO 9001 standard defines it as the part of the management system that relates to quality.
It is important to distinguish it from three terms that are often used interchangeably in everyday language but have different meanings.
Quality management (QM) is the overarching management task: the planning, control, and continuous improvement of quality as a leadership responsibility. Quality assurance (QA) is the operational component that verifies compliance with requirements during production, for example through measurements, test plans, and approvals. The quality management system is the formal framework that translates QM and QA into processes, roles, and documentation. QM software, in turn, is the tool used to operate a QMS in practice; it does not replace the system, but rather supports it.
This distinction is more than just semantic precision. Anyone who purchases QM software and believes they thereby own a QMS is confusing the tool with the structure. A QMS is created through defined processes and active accountability; the software makes these processes manageable and analyzable.
Why a QMS Works Differently in Manufacturing Than in an Office
A quality management system in a service company and one in a manufacturing facility are subject to the same standard but operate under completely different realities. In discrete manufacturing, quality data isn’t generated in meetings but at the machine—every second—and often simultaneously at multiple stations.
Three distinctive features characterize a QMS in manufacturing.
First, the cycle time. An inspection step that may take five minutes in an office blocks an entire line on the assembly line if it takes five minutes. Quality inspection must fit into the existing cycle time—not the other way around.
Second, the source of data. Inspection values come from measuring instruments, screwdriving systems, scales, and sensors—not from people filling out forms. A QMS based on manual data entry loses its value the moment manufacturing is digitized and the machines have long since begun to provide data automatically.
Third, the obligation to provide documentation spanning decades. According to Section 823 of the German Civil Code (BGB) and the Product Liability Act, a manufacturer remains liable for product defects even years after delivery. Anyone who cannot provide a complete process history at that point bears the burden of proof alone in the worst-case scenario.
These three points explain why generic QM software from other industries often fails in manufacturing. It is designed for document control, not for real-time machine data.
The Seven Principles of Quality Management According to ISO 9001
ISO 9001:2015 identifies seven principles upon which every standard-compliant quality management system is based. In manufacturing, these principles are put into concrete practice.
In practice, customer focus means that inspection criteria are derived from customer specifications, not from internal convenience. Leadership means that quality objectives are supported by top management and do not rest solely with the quality department. In manufacturing, employee involvement translates into a worker-led approach that empowers employees to report deviations immediately rather than overlooking them.
The process-oriented approach requires viewing manufacturing as a chain of interconnected processes with documented interfaces. Improvement means that deviations are systematically analyzed, not merely checked off a list. Fact-based decision-making requires that decisions be based on validated measurement data and not on experience alone. Finally, relationship management involves suppliers in the quality chain, for example through incoming goods inspections and supplier evaluations.
These seven principles are not a checklist; they are a way of thinking. An auditor does not check whether the principles are listed as text in the manual, but rather whether they are reflected in processes and decisions.
QUALITY MANAGEMENT IN NUMBERS |
| IATF 16949 Traceability required throughout the entire supply chain Source: IATF 16949:2016, Section 8.5.2 |
| several years Liability period for product defects under German law Source: BGB, ProdHaftG |
| A and B Risk classes for safety-critical bolted joints Source: VDI/VDE 2862 |
| Hours to minutes Time savings in batch traceability with end-to-end data collection Source: CSP project experience |
Structure: The Core Elements of a Quality Management System
A complete QMS consists of five core elements that build upon one another.
The process map depicts all relevant business processes and illustrates their interfaces. It serves as the foundation upon which responsibilities and documentation are based.
The documentation includes procedure manuals, work instructions, and records. ISO 9001 does not specify a particular scope here, but rather requires that the documentation be appropriate. A document that no one reads does not serve its purpose, regardless of how correctly it is written.
Key performance indicators and metrics make quality objectively comparable. These include classic process capability values such as Cpk, scrap rates, first-pass yields, and complaint rates. Without key performance indicators, quality management remains a matter of opinion.
Action management closes the loop between nonconformity and improvement. A nonconformity that is recorded but never translated into a corrective action will inevitably recur.
Finally, internal and external audits regularly verify whether the system still aligns with actual practice. A QMS that is updated only during the certification phase will drift out of alignment unnoticed in the interim.
For quality managers who need to consolidate audit reports from various sources, it is worth taking a look at a structured approach to handling quality data for audit reports, which addresses precisely this core element.
An Overview of Standards and Regulations
Which standard applies to a quality management system depends on the industry. The following overview categorizes the most important standards according to their areas of application.
| Standard / Regulatory Framework | Industry | Core Requirement |
|---|---|---|
| ISO 9001:2015 | Cross-Industry | Basic standard for QMS, process orientation |
| IATF 16949:2016 | Automotive Industry | Based on ISO 9001, with enhanced traceability and error prevention |
| ISO 13485 | Medical Technology | Risk management throughout the entire product lifecycle |
| EN 9100 | Aerospace | Configuration management, traceability back to raw materials |
| VDI/VDE 2862 | Manufacturing of safety-critical bolted joints | Risk Classes A and B, Verification Requirements |
| VDA Volume 6.3 | Automotive Industry (German-speaking) | Process Audit Methodology |
| DIN EN ISO 19011 | Cross-Industry | Guidance on Auditing Management Systems |
A company that manufactures for multiple industries—such as the automotive and mechanical engineering sectors—often must comply with several sets of standards simultaneously. In practice, this does not mean having multiple separate systems, but rather a QMS that is based on the most stringent applicable requirement in each case.
From Paper to Process: Where QMS Systems Fail in Practice
Five common pitfalls keep cropping up in practice, regardless of industry or company size.
The first is the disconnect between testing equipment and documentation. A measurement is read from the device and transferred by hand to a form. Every manual transfer is a source of error and a waste of time.
The second is the data silo. ERP, MES, and test equipment systems store information separately from one another. In the event of a complaint, employees must manually consolidate data from three systems, often under time pressure and with incomplete results. The article on MES and ERP integration in quality management describes how these silos can be eliminated through technical means.
The third bottleneck is delayed response. If a deviation is not noticed until the end of the shift—or even during the final inspection—the defective product has long since been produced.
The fourth issue is the inconsistency between target and actual. Procedural instructions describe an ideal process that no longer aligns with actual practice on the shop floor. Auditors often recognize this through contradictory statements between the document and the worker.
The fifth is the special project undertaken before every audit. If “audit readiness” means that data must be gathered over the course of weeks, the system is not audit-ready in day-to-day operations—it requires extraordinary effort to prepare for an audit.
A quality management system that only works for the audit is not a system. It is a charade.
The Data Foundation: Why a QMS Without Process Data Remains Just a Piece of Paper
A quality management system may be complete on paper but still fail when it really counts if the underlying process data is missing or scattered. This is exactly where the CSP Manufacturing OS comes in.
The CSP Manufacturing OS integrates the data sources relevant to a QMS onto a common platform. The IPM module consistently captures process and machine data, making it analyzable across the entire manufacturing chain. The QST module digitally maps inspection plans, inspection results, and approvals and links them directly to the respective batch or serial number. This eliminates the need for an additional documentation system separate from production, instead creating a data foundation generated by the production process itself.
The benefit is most evident in the event of a customer complaint. Instead of manually consolidating data from ERP, MES, and inspection systems, the complete process history of a batch is available at the push of a button. This not only shortens response times but also more precisely defines the scope of a potential recall, since it is possible to trace exactly which units were manufactured under which conditions.
Digital quality assurance in manufacturing—as described in a separate article on digital quality assurance —is therefore not a separate initiative alongside the QMS, but rather its technical foundation.
Implementing a Quality Management System: A Six-Phase Approach
In practice, the implementation of a quality management system follows six phases, regardless of whether it is a new implementation or a fundamental overhaul.
In the first phase—the current state analysis—the current status of all quality-related processes is assessed. Experience shows that this phase takes four to six weeks and already identifies a large portion of the weaknesses that will be addressed later.
In the second phase, the process definition, target processes are defined and responsibilities are assigned. This is where the process map—which underpins the entire system—is created.
The third phase, documentation, translates the defined processes into procedural and work instructions. It is important here to keep the documentation as concise as possible so that it is actually used in day-to-day operations.
In the fourth phase—training—employees at all levels are instructed on the new processes. A QMS that is known only to the quality department does not work.
The fifth phase is the trial run. The system runs in parallel with the previous procedures; deviations are recorded and corrected before the trial run transitions to regular operation.
The sixth phase is the internal audit prior to the actual certification. It identifies any remaining gaps before an external certification body conducts its review.
Overall, the implementation time for a complete QMS ranges from six to twelve months, depending on the size of the company. Companies that already have digital process data can significantly shorten the first and third phases in particular, since they do not need to create the database from scratch.
Certification: Process, Effort, Pitfalls
Certification to ISO 9001 or an industry-specific standard takes place in two stages. The Stage 1 audit reviews the documentation for completeness and compliance with the standard; it is usually conducted as a preparatory audit with no immediate consequences. The Stage 2 audit assesses actual implementation on-site, involving interviews, process observation, and random samples from production.
Following successful certification, annual surveillance audits are conducted, which randomly review individual areas of the system. Full recertification is required after three years.
The most common pitfall in practice is the gap between what was documented in the Level 1 audit and what is actually observed in the Level 2 audit. Auditors specifically inquire whether a process actually runs as described, often directly at the workstation. The article “Maintaining Audit Trails Correctly” describes how to maintain audit trails so that they withstand this scrutiny.
A second pitfall concerns preparation time. Companies that only achieve audit readiness every three years in time for recertification repeatedly invest weeks in compiling data. A consistently maintained system, on the other hand, makes audit readiness a byproduct of day-to-day operations, as described in the article “Achieving Audit Readiness in Manufacturing in 30 Days.”
Key Metrics: How to Measure the Effectiveness of Your QMS
A quality management system without key performance indicators cannot be managed—only administered. Key performance indicators include the first-pass rate—that is, the percentage of units that pass quality inspection without rework—the scrap rate, the complaint rate relative to units shipped, and process capability metrics such as Cpk.
What matters most is not the individual metric, but its trend over time and its connection to specific process steps. A declining first-pass rate at a specific station provides a more precise indication than a company-wide average. The article “KPI Design for Quality Managers” discusses how to design key performance indicators so that they effectively support management decisions.
In addition, the predictive analysis of process data is gaining importance. Instead of merely evaluating past deviations, a sufficient data set allows trends to be identified before a threshold is exceeded—an approach explored in greater depth in the article “What Is Predictive Quality?”
Tool Selection: When Software Is Necessary—and When It Isn’t
Not every company needs dedicated QMS software from day one. For small manufacturing companies with a manageable number of product variants and few inspection steps, well-maintained documentation may be sufficient at first.
The point at which software becomes necessary can be determined by three questions. Is the number of inspection steps or product variants increasing to the point where manual documentation becomes error-prone? Is traceability required across multiple production sites or suppliers? And does a customer or a certification require evidence that must be available more quickly than manual compilation allows? As soon as at least two of these questions are answered with “yes,” the effort required without software outweighs the effort required with software.
The criteria that play a role in the specific selection of QMS software—from integrability to scalability—are the subject of a separate selection guide for QMS software in manufacturing. This article deliberately avoids comparing specific software products, as selecting the right tool only makes sense after the process and structure have been clarified.
THE MANUFACTURING OSCSP’s Manufacturing OS integrates process data (IPM), inspection data (QST), operator guidance (PGX), and audit-proof archiving (CHRONOS) into a single database. For a quality management system, this means that traceability and audit readiness arise from day-to-day operations, not from “additional documentation efforts.” |
Frequently Asked Questions
What is the difference between quality management and a quality management system?
Quality management is the overarching leadership task; a quality management system is the formal framework of processes, responsibilities, and documentation used to implement this task.
Is ISO 9001 mandatory for every manufacturing company?
No, ISO 9001 is generally voluntary, but it is effectively required by many customers and in many supply chains. Industry-specific standards such as IATF 16949 or ISO 13485 are based on ISO 9001 and are often contractually binding within their respective industries.
How long does it take to implement a quality management system?
Depending on the size of the company and the existing data infrastructure, it takes between six and twelve months from the baseline analysis to certification.
Which standard applies to the automotive industry?
IATF 16949 builds upon ISO 9001 and supplements it with industry-specific requirements for traceability and error prevention.
What happens if an audit is not passed?
In the case of serious nonconformities, certification is denied or suspended; in the case of minor nonconformities, a deadline is set for corrective action, the implementation of which is verified in a follow-up audit.
Is an Excel spreadsheet sufficient as a quality management system?
For an initial analysis and very small businesses, Excel may be sufficient; however, for a continuous system involving multiple inspection steps, variants, or locations, manual maintenance quickly becomes error-prone and lacks transparency.
How often does a quality management system need to be recertified?
Initial certification is followed by annual surveillance audits; full recertification is required after three years.