Quality culture has become one of the more visible themes surrounding the revision of ISO 9001, but the underlying idea is not new. ISO published ISO 10010 in 2022 specifically to provide guidance on understanding, evaluating and improving organizational quality culture. The concept is also reflected in ISO 9000:2026, the revised fundamentals and vocabulary standard supporting the ISO 9000 family.
In practical terms, quality culture is the combination of shared values, assumptions, habits and behaviours that influences the way people approach quality. A useful way to think about it is this: quality culture is what people do when no auditor is present and nobody is asking them to show a procedure.
It becomes visible in ordinary decisions. Do employees raise concerns when they see a problem? Do managers genuinely want to hear bad news? What happens when a defect threatens a delivery date? Are quality objectives still taken seriously when commercial pressure increases? These questions often reveal more about the maturity of a QMS than the wording of a policy statement.
That is why quality culture cannot be reduced to a presentation, a training course or an extra section in the quality manual. It is reflected in how the management system operates every day.
A certified QMS does not automatically mean a strong quality culture
Consider two organizations with very similar formal management systems. Both are ISO 9001 certified. Both have documented processes, quality objectives, internal audits, arrangements for managing nonconformities and regular management reviews.
In the first organization, an employee who identifies a potential problem reports it immediately. The issue is assessed, the appropriate people are involved and, where necessary, the process or shipment is put on hold until an informed decision can be made.
In the second organization, employees know that reporting a problem is likely to trigger questions such as “Why are you holding up production?” or “Why are you delaying the customer?” Minor issues are therefore quietly corrected, passed to another team or left in the hope that no one notices.
On paper, the two QMSs may look remarkably similar. In practice, their quality cultures are very different.
This distinction is important because certification demonstrates that a management system has been assessed against applicable requirements; it does not prove that every incentive, management decision and everyday behaviour within the organization supports quality equally well. ISO 9001 Auditing Practices Group guidance has also recognised that a QMS may demonstrate conformity while the organization’s broader quality culture remains less mature.
Quality culture is not another set of documents
A common reaction when a concept becomes more visible in an ISO standard is to turn it into a new document. Once “quality culture” enters the conversation, someone may decide that the organization needs a Quality Culture Policy, a Quality Culture Procedure or even a Quality Culture Register.
That is usually the wrong place to start.
A company can publish an excellent statement saying that quality comes first while still telling production to ship at almost any cost at the end of the month. It can encourage employees to report problems while publicly blaming the individual involved whenever a serious nonconformity appears. It can declare customer satisfaction a strategic priority while rewarding its service team almost entirely for the number of tickets closed each day.
In each case, the practical signals from management are stronger than the written statement. The better question is therefore not simply “What does our procedure say?” but “What behaviour does our organization actually encourage, tolerate and reward?”
A document can support quality culture, but it cannot substitute for it.
Leadership sets the tone through decisions
Top management plays a central role because employees quickly learn the difference between the priorities leaders talk about and the priorities leaders act on. If senior management repeatedly says that quality matters but responds to a major deviation with “ship it now and deal with it later”, employees soon understand which priority really wins when there is a conflict.
The opposite is equally true. If a production manager supports an operator who stops a potentially nonconforming batch even though the decision threatens the monthly output target, that action sends a powerful message throughout the organization.
Leadership influences quality culture through much more than speeches or policies. It can be seen in:
how resources are allocated;
which issues receive attention in management meetings;
which KPIs are treated as most important;
how leaders react to negative information;
whether recurring problems are genuinely escalated and resolved;
what happens when quality conflicts with cost, schedule or output.
This is also consistent with ISO 9001 Auditing Practices Group guidance on top management. Evidence of leadership should not come from an interview with the CEO alone. It can be found across the organization in objectives, resource decisions, communications, management review outputs and the actual operation of processes.
Where quality culture becomes visible in everyday work
Quality culture is often easiest to see when everything is not going according to plan. A documented procedure matters, but the real test comes when following it becomes inconvenient.
Manufacturing: ship the batch or stop it?
An operator identifies a deviation shortly before shipment. The organization has a documented process for controlling nonconforming outputs, but the shipment is also needed to achieve the monthly production target.
In a strong quality culture, the operator knows that raising the issue is expected. The deviation can be recorded, assessed and escalated without treating the employee as the person who “caused” the delivery problem. The commercial consequences may still need to be managed, but the information itself is not suppressed.
In a weak culture, there may be an unwritten rule: do not create a problem on the last day of the month. The procedure exists, but employees understand that using it at the wrong time can carry personal consequences.
The real question is therefore not whether the organization has a nonconformity procedure. It is whether people can actually use it when doing so threatens an important business target.
Customer service: close the ticket or solve the problem?
A support employee notices that customers keep reporting the same issue. The organization collects complaints and has a process for dealing with them, but the employee’s performance is measured mainly by average handling time and the number of cases closed.
A deeper investigation may therefore make the employee’s own performance statistics look worse. The formal QMS says, “identify and address recurring problems”, while the incentive system effectively says, “close the ticket quickly”.
A stronger quality culture allows recurring issues to be escalated beyond the individual case, even when doing so temporarily makes departmental statistics less attractive. This does not mean speed is unimportant. It means the measurement system should not unintentionally reward behaviour that prevents the organization from learning.
Software and IT: release on time or disclose the defect?
A development team knows that a product contains a significant defect, but the release date has already been promised to the customer. A weak culture may quickly shift the discussion towards whether the team can release the product anyway and “fix it afterwards”.
A more mature organization makes the defect visible. The relevant people assess the consequences, customer impact and available options, and the release decision is made with an accurate understanding of the situation.
The final decision may still be commercially difficult. What matters is that inconvenient information is not hidden in order to make that decision easier.
The same formal QMS could exist in both organizations. The difference is whether people can genuinely use the system when quality conflicts with commercial or operational pressure.
What happens when people report mistakes?
The first reaction to a mistake often reveals more about quality culture than a policy statement ever could. There is a significant difference between an organization that immediately asks “Who caused this?” and one that first asks “How did our process allow this to happen?”
Individual responsibility can certainly matter, and a mature QMS does not remove accountability. However, if employees believe that reporting an error will primarily result in blame or punishment, the predictable response is to minimise, delay or hide bad news.
Management may then see very reassuring statistics:
few internal nonconformities;
very few reported process problems;
limited escalation;
almost no employee concerns.
Those numbers do not necessarily demonstrate excellent quality performance. They may indicate that the management system is poor at discovering its own problems.
For the same reason, an unusually low number of reported nonconformities should not automatically be treated as evidence of a highly mature QMS. A healthier culture allows employees to raise issues early, record them accurately, contribute to understanding the causes and see that reporting a legitimate problem can lead to improvement.
The objective is not to remove accountability. It is to ensure that accountability does not make people afraid to provide accurate information.
KPIs can strengthen quality culture — or quietly undermine it
Management behaviour is only one part of the picture. Performance measures and incentives can be just as influential.
Imagine an organization where:
manufacturing is measured almost entirely on output;
customer service is measured mainly on response time;
procurement is rewarded primarily for reducing purchase price;
project managers are assessed almost exclusively on schedule performance.
None of these measures is inherently wrong. Production matters, service speed matters, cost matters and delivery dates matter. Problems arise when one indicator becomes so dominant that employees learn that achieving it is more important than the wider consequences.
A production team can be measured on output while also considering scrap, rework, recurring nonconformities and customer complaints. A customer service team can track response time alongside repeat contacts, escalation rates and customer satisfaction. Procurement can consider price together with supplier quality and delivery performance.
A useful management question is therefore: What decision do our KPIs encourage a reasonable employee to make when priorities conflict?
If hiding a problem makes it easier to achieve a bonus, the measurement system is working against the stated quality policy. If stopping and escalating a legitimate problem damages an employee’s performance rating, management should not be surprised when problems remain hidden.
Competence and awareness still matter
A positive attitude towards quality is not enough. Employees must understand what is expected from their work, which requirements matter, what could happen if those requirements are not met and what authority they have when something goes wrong.
In practical terms, people should understand:
how their work affects the customer and the final product or service;
which requirements are critical;
when an issue must be escalated;
what decisions they are authorised to make;
what they should do when a situation falls outside normal conditions.
This is why quality culture is closely connected with competence, awareness, leadership and engagement. ISO 10010:2022 specifically addresses the role of leadership and people in understanding and improving organizational quality culture.
However, competence should not be judged simply by the number of completed training courses. An employee can finish every required module and still be uncertain about whether they are genuinely allowed to stop a process or escalate a serious concern.
A more useful question is: Does the person understand what good performance looks like, how their work affects the customer, and what they are expected to do when something goes wrong?
How to assess quality culture in your organization
Quality culture cannot easily be reduced to one metric, but that does not make it impossible to assess. A useful evaluation combines several sources of evidence rather than relying on a single survey or management interview.
Relevant evidence may include:
interviews with employees at different levels;
observation of actual work;
internal nonconformities and corrective actions;
customer complaints and recurring issues;
internal and external audit findings;
employee suggestions and escalation records;
operational and quality KPIs;
management decisions;
examples of situations where quality, delivery and cost were in conflict.
One particularly useful technique is to compare perceptions at different levels of the organization. Senior management may confidently say, “Every employee is authorised to stop the process if there is a serious quality concern.” An operator may respond, “Technically, yes, but in practice you would always ask the supervisor first because nobody wants to be the person who stops the line.”
That gap between formal authority and practical reality is exactly the kind of evidence worth exploring.
ISO 10010 provides guidance for understanding, evaluating and improving organizational quality culture, including self-assessment. Organizations therefore do not need to wait for a certification audit before examining the issue themselves.
What might an internal or certification auditor look for?
An auditor is unlikely to learn much by simply asking, “Do you have a quality culture?” Almost every organization would answer yes. A more meaningful approach is to compare management statements with evidence from actual operations.
If top management says customer focus is a core priority, relevant evidence might include:
how significant complaints are handled;
whether recurring complaints are analysed;
what actions follow;
whether adequate resources are made available to address persistent problems.
If management says employees are encouraged to raise concerns, the auditor may speak with people performing the work and examine real examples of reported issues. If the organization says quality takes priority over production pressure, an auditor may follow a real case involving a delayed shipment, process interruption or defect and examine how the decision was made.
Different evidence sources can also be compared. Management may say that people freely report problems, and employees may repeat the same message during interviews. But if internal nonconformities have almost disappeared, corrective actions are rare, complaint trends keep repeating and nobody can remember the last time a process was stopped because of a quality concern, there is a legitimate reason to look deeper.
This does not automatically prove that the organization has a weak quality culture. Nor should auditing quality culture become a subjective judgement about whether an auditor personally likes the atmosphere in a company. Conclusions still need to be based on objective evidence and connected to the conformity and effectiveness of the management system.
Do you need a separate Quality Culture Policy?
Not necessarily.
There is no basis at the time of writing for treating a stand-alone Quality Culture Policy, Quality Culture Procedure or Quality Culture Register as a mandatory ISO 9001 document. An organization may choose to create one if it genuinely supports the way the business manages quality, but producing a document simply because the phrase “quality culture” has become more prominent is unlikely to improve the QMS by itself.
In many organizations, stronger evidence of quality culture will already exist within normal management processes, including:
leadership and management review;
quality objectives;
competence and awareness;
internal communication;
management of nonconformities;
corrective action;
internal audit;
employee involvement;
operational decision-making.
A healthy quality culture should therefore be visible in the way the management system operates. It should not depend on the existence of a document bearing that title.
13 questions for a practical quality culture self-assessment
The questions below are intended as a practical starting point, not as an ISO 9001 conformity checklist. A “no” answer does not automatically mean that the organization has a nonconformity.
Can employees report a quality concern without fearing a negative reaction simply for raising it?
When a serious mistake occurs, is the first response mainly to identify who is responsible, or to understand what happened and why?
Can employees stop or escalate a process when they believe a nonconforming product or service may be released?
What happens when quality requirements conflict with delivery dates or production targets?
Do any KPIs make it personally advantageous for employees to under-report problems?
Does top management discuss quality as part of running the business, rather than mainly before audits?
Are resources actually provided to resolve recurring or systemic problems?
Are repeated complaints and nonconformities analysed even when each individual case appears relatively minor?
Do employees understand how their work affects customers and final product or service quality?
Does bad news reach senior management quickly, or is it softened as it moves through the organization?
Do stated company values match the behaviour that is actually rewarded?
Can employees see evidence that reporting problems or suggesting improvements leads to action?
Can the organization identify real examples from the past year where it chose quality even though doing so created additional cost, delay or operational inconvenience?
If several of these questions are difficult to answer, that does not automatically indicate an ISO 9001 nonconformity. It does suggest that the organization should look beyond documented processes and examine the behaviour surrounding them.
Key takeaway
Quality culture is not another layer of documentation to add to ISO 9001. It is reflected in how leaders and employees make decisions every day: whether problems are raised or hidden, whether bad news is welcomed or discouraged, how mistakes are handled, and what happens when quality conflicts with schedule, cost or production targets.
That is why two organizations with similar procedures — and even the same type of ISO 9001 certificate — can achieve very different results. The difference may not be visible in the document structure at all. It becomes visible in the decisions people make when the system is under pressure.
For organizations preparing to transition from ISO 9001:2015 to the new edition, this is a useful time to look beyond procedures and documented information. Ask what the management system actually encourages people to do.
Ultimately, quality culture becomes clearest when following the QMS is inconvenient — and the organization chooses to follow it anyway.
This article is part of Audit Advisor’s dedicated resource on the new edition of ISO 9001 and the transition from ISO 9001:2015: