9.1 Quality Management Principles, ISO Standards & TQM
Key Takeaways
- Quality definitions vary by theoretical framework: Crosby defines quality as conformance to requirements/specifications, Juran as fitness for intended use, Deming as exceeding customer expectations through continuous system improvement and variation reduction, and Feigenbaum as total cross-functional excellence.
- Foundational quality philosophies establish modern Total Quality Management (TQM): Deming's 14 Points and the PDCA (Plan-Do-Check-Act) Shewhart cycle, Juran's Quality Trilogy (Planning, Control, Improvement) and the 80/20 Pareto principle, Crosby's Zero Defects and 4 Absolutes of Quality Management, and Feigenbaum's Total Quality Control (TQC).
- The Cost of Quality (COQ) PAF Model categorizes costs into Prevention, Appraisal, Internal Failure, and External Failure; the 1-10-100 Rule demonstrates that $1 invested in upstream prevention averts $10 in internal appraisal/rework and $100+ in catastrophic field warranty and recall liabilities.
- International quality standards provide structured assurance frameworks: ISO 9001 (Quality Management Systems), ISO 14001 (Environmental), ISO 27001 (Information Security), ISO 22301 (Business Continuity), IATF 16949 (Automotive), and AS9100 (Aerospace), maintained through third-party registrar audits and mandatory surveillance cycles.
- Supply management drives quality by shifting focus from reactive end-of-line appraisal inspection to proactive supplier capability verification, early supplier involvement (ESI), and contractual quality assurance clauses.
9.1 Quality Management Principles, ISO Standards & TQM
In modern global supply management, quality is not merely an operational inspection checkpoint; it is a critical strategic determinant of brand equity, customer retention, total cost structure, and supply chain resilience. Historically, organizations treated quality as a downstream filtering mechanism, using armies of inspectors to separate good parts from defective scrap at the receiving dock or shipping bay. Modern supply management completely inverts this paradigm, embracing Total Quality Management (TQM), upstream prevention, and deep collaborative integration across the multi-tier supplier network.
Procurement professionals must master foundational quality philosophies, quantitative Cost of Quality (COQ) models, international standards (ISO/sector-specific), and audit governance to ensure suppliers consistently deliver zero-defect inputs.
1. Defining Quality in Supply Management
Quality is multifaceted. Depending on organizational context, technical complexity, and customer expectations, leading quality theorists have formulated distinct definitions of quality:
+-----------------------------------------------------------------------------+
| FOUR PERSPECTIVES ON QUALITY DEFINITION |
| |
| THEORIST DEFINITION STRATEGIC FOCUS |
| ----------------- --------------------------- ----------------------- |
| Philip B. Crosby "Conformance to Eliminating ambiguity via |
| requirements" rigorous specifications |
| |
| Joseph M. Juran "Fitness for intended use" Meeting customer operational
| needs & field application |
| |
| W. Edwards Deming "Predictable uniformity & Continuous system improve-|
| dependability at low cost, ment; exceeding customer |
| meeting market needs" expectations |
| |
| Armand Feigenbaum "Total composite product/ End-to-end organizational |
| service characteristics excellence across all |
| satisfying customer needs" functional departments |
+-----------------------------------------------------------------------------+
Crosby: Conformance to Requirements
Philip B. Crosby asserted that quality must be defined strictly as conformance to requirements (specifications). In Crosby's view, describing quality as "goodness," "luxury," or "high-tier elegance" creates subjective ambiguity. A high-tolerance aerospace titanium fastener and an inexpensive plastic drywall anchor are both "high quality" if they 100% conform to their respective engineering blueprints and purchase order specifications.
Juran: Fitness for Intended Use
Joseph M. Juran defined quality as fitness for intended use. Juran recognized that a product could technically conform to an engineering blueprint yet still fail in the customer's hands if the initial design was flawed or unsuited to field operating conditions. Fitness for use encompasses five key quality dimensions:
- Quality of Design: Grade of materials, engineered tolerances, and functional capability.
- Quality of Conformance: Fidelity of the manufacturing process to the specified design.
- Availability: Product reliability (Mean Time Between Failures / MTBF) and maintainability (Mean Time to Repair / MTTR).
- Safety: Freedom from hazardous failures or operational risks during product lifecycle.
- Field Service: Promptness, competence, and integrity of customer technical support and warranty fulfillment.
Deming: Exceeding Expectations through Systemic Uniformity
W. Edwards Deming defined quality as a predictable degree of uniformity and dependability at low cost, suited to the market. Deming emphasized that customer expectations are dynamic, requiring organizations to continuously improve production systems, minimize variation, and innovate ahead of customer demands.
2. Foundational Quality Philosophies & Theorists
Modern supply management quality frameworks rest on the theoretical foundations established by four pioneering quality masters:
+-----------------------------------------------------------------------------+
| FOUNDATIONAL QUALITY MASTERS & CONTRIBUTIONS |
| |
| DEMING JURAN CROSBY FEIGENBAUM |
| ------------------ ------------------ ---------------- ----------- |
| • 14 Points for Mgt • Quality Trilogy: • Zero Defects • Total |
| • PDCA Shewhart Cycle - Planning • 4 Absolutes of Quality |
| • Eliminate Quotas - Control Quality Mgt Control |
| • Systemic Variation - Improvement • "Quality is (TQC) |
| • Drive out fear • Pareto 80/20 Rule Free" • Cross-dept |
| • "Vital Few" vs. • Price of Non- ownership |
| "Useful Many" conformance • Total COQ |
+-----------------------------------------------------------------------------+
W. Edwards Deming: Systemic Transformation & The 14 Points
Deming argued that over 85% of quality failures stem from system and process deficiencies governed by management, while less than 15% are attributable to worker negligence. In his seminal work Out of the Crisis (1986), Deming presented his 14 Points for Management:
- Create constancy of purpose toward improvement of product and service.
- Adopt the new philosophy of quality across the entire enterprise.
- Cease dependence on mass inspection to achieve quality; build quality into the product in the first place.
- End the practice of awarding business on the basis of price tag alone; instead, minimize total cost by moving toward single suppliers for each item on a long-term relationship of loyalty and trust.
- Improve constantly and forever the system of production and service.
- Institute training on the job.
- Institute leadership focused on helping people and machines do a better job.
- Drive out fear, so that everyone may work effectively for the company.
- Break down barriers between departments (silos) so research, design, sales, and production work cross-functionally.
- Eliminate slogans, exhortations, and targets for the workforce asking for zero defects without providing improved methods.
- Eliminate numerical quotas for the workforce and numerical goals for management.
- Remove barriers that rob workers of their pride of workmanship.
- Institute a vigorous program of education and self-improvement.
- Put everybody in the company to work to accomplish the transformation.
The Deming / Shewhart PDCA Cycle
Deming popularized Walter Shewhart's four-stage iterative management method for continuous process improvement:
- Plan (P): Identify an operational problem, analyze root causes, collect baseline data, and formulate a targeted hypothesis and corrective action plan.
- Do (D): Execute the plan on a small, controlled trial or pilot scale to test effectiveness while minimizing operational risk.
- Check / Study (C/S): Measure pilot outcomes against baseline metrics, evaluate variances, and assess whether the hypothesis was validated.
- Act (A): Standardize the successful process enterprise-wide, document new Standard Operating Procedures (SOPs), or revise the plan if results were unsatisfactory, initiating the next PDCA cycle.
Joseph M. Juran: The Quality Trilogy & The Pareto Principle
Joseph M. Juran introduced managerial discipline to quality, formulating the Juran Quality Trilogy:
+-----------------------------------------------------------------------------+
| THE JURAN QUALITY TRILOGY |
| |
| 1. QUALITY PLANNING |
| - Identify internal/external customers and determine their needs. |
| - Develop product features responding to customer needs. |
| - Design robust processes capable of meeting product specifications. |
| │ |
| v |
| 2. QUALITY CONTROL |
| - Measure actual operating performance against quality goals. |
| - Compare performance to standards and identify gaps. |
| - Act on the differences (corrective action for special causes). |
| │ |
| v |
| 3. QUALITY IMPROVEMENT |
| - Establish infrastructure for annual quality improvement projects. |
| - Identify specific project teams and provide resources. |
| - Diagnose chronic root causes and establish permanent controls. |
+-----------------------------------------------------------------------------+
The Pareto Principle in Quality Management
Juran adapted Vilfredo Pareto's sociological wealth distribution model to quality control, establishing that roughly 80% of process defects, downtime, and quality costs are generated by 20% of the root causes. Juran coined the phrase the "vital few versus the useful many" (originally the "trivial many"), directing supply managers to deploy Pareto analysis to prioritize high-impact supplier quality interventions.
Philip B. Crosby: Zero Defects & The Four Absolutes
In his classic text Quality is Free (1979), Crosby countered the prevailing myth that higher quality inevitably demands higher manufacturing costs. He demonstrated that the expense of doing things wrong—rework, scrap, warranty claims, and field repairs—far exceeds the investment required to do things right the first time.
Crosby codified the Four Absolutes of Quality Management:
- The definition of quality is conformance to requirements, not elegance or goodness.
- The system for causing quality is prevention, not appraisal/inspection.
- The performance standard must be Zero Defects, not "acceptable quality levels" (AQL). Setting an allowance for defects inevitably guarantees defects will occur.
- The measurement of quality is the Price of Nonconformance (PONC), not indexes or arbitrary scores. PONC represents the total financial cost of doing things incorrectly.
Armand V. Feigenbaum: Total Quality Control (TQC)
Feigenbaum introduced the concept of Total Quality Control (TQC) in 1951, which served as the precursor to modern Total Quality Management (TQM). Feigenbaum argued that quality cannot be confined to the manufacturing shop floor or the quality assurance department. Instead, genuine quality requires an integrated, cross-functional organizational commitment spanning marketing, product development, procurement, manufacturing, shipping, customer service, and finance.
3. Cost of Quality (COQ) — The PAF Model
The Cost of Quality (COQ) is a quantitative accounting framework used to evaluate, measure, and manage the financial impact of quality-related activities. COQ is not the cost of creating a quality item; it is the sum of costs incurred because quality might not exist or fails to exist.
The universally recognized PAF Model divides Cost of Quality into three primary categories (Prevention, Appraisal, and Failure), with Failure further divided into Internal and External:
+-----------------------------------------------------------------------------+
| THE COST OF QUALITY (COQ) PAF FRAMEWORK |
| |
| TOTAL COST OF QUALITY (COQ) |
| │ |
| +-------------------+-------------------+ |
| │ │ |
| v v |
| COST OF CONFORMANCE COST OF NONCONFORMANCE |
| (Proactive Investments in Quality) (Financial Penalties of Defects) |
| │ │ │ │ |
| v v v v |
| PREVENTION APPRAISAL INTERNAL EXTERNAL |
| COSTS COSTS FAILURE COSTS FAILURE COSTS |
| • Design reviews • Receiving • Scrap • Warranty |
| • Supplier audits inspection • Rework claims |
| • DFM engineering • Lab testing • Re-testing • Recalls |
| • Quality training • Calibration • Downtime • Liability |
| • Poka-Yoke fixtures • Source audits • Engineering scrap • Defection |
+-----------------------------------------------------------------------------+
Detailed PAF Cost Categorization
| Cost Category | Nature & Strategic Purpose | Typical Supply Management Examples |
|---|---|---|
| 1. Prevention Costs | Upstream investments made before production to design out defects and ensure processes are incapable of generating errors. | - Advanced Product Quality Planning (APQP)<br>- Supplier capability audits and pre-qualification<br>- Design for Manufacturability (DFM) reviews<br>- Supplier quality engineering consulting<br>- Operator and buyer quality training<br>- Mistake-proofing (Poka-Yoke) tooling fixtures |
| 2. Appraisal Costs | Expenses associated with inspecting, measuring, testing, and auditing products and materials to ensure conformance with standards. | - Receiving dock inspection of incoming supplier lots<br>- Destructive and non-destructive laboratory testing<br>- In-process quality inspections<br>- Calibration and maintenance of measurement gauges<br>- Third-party source inspections at supplier facilities<br>- Finished goods functional testing |
| 3. Internal Failure Costs | Costs resulting from nonconforming products or services detected before shipment or transfer of ownership to the external customer. | - Scrap (unusable scrapped raw material and sub-assemblies)<br>- Rework labor and re-machining expenses<br>- Re-inspection and re-testing of reworked lots<br>- Production line downtime and bottleneck delays<br>- Material Review Board (MRB) administrative labor<br>- Disposal fees for hazardous defective material |
| 4. External Failure Costs | Catastrophic costs incurred when defective products or services escape detection and reach the external customer. | - Customer warranty claims and field repair labor<br>- Product recalls and reverse logistics handling<br>- Product liability lawsuits and legal defense<br>- Regulatory fines and environmental penalties<br>- Contractual SLA penalties and chargebacks<br>- Customer defection, negative brand reputation, and lost future revenue |
The 1-10-100 Rule of Quality Costs
The 1-10-100 Rule (also known as the Quality Cost Escalation Rule) geometrically demonstrates the exponential cost penalty of catching defects late in the product lifecycle:
+-----------------------------------------------------------------------------+
| THE 1-10-100 QUALITY RULE |
| |
| $100+ : EXTERNAL FAILURE (Customer Field / Recall / Legal Liability) |
| ▲ |
| │ (10x Cost Multiplier) |
| $10 : INTERNAL FAILURE / APPRAISAL (Production Scrap & Rework) |
| ▲ |
| │ (10x Cost Multiplier) |
| $1 : PREVENTION (Design, DFM, Supplier Quality Engineering) |
+-----------------------------------------------------------------------------+
- $1 Prevention Cost: Spending $1 during initial product design, supplier qualification, or tooling development eliminates defect causes at the source.
- $10 Appraisal / Internal Failure Cost: If the defect is missed in design and generated during manufacturing, detecting and reworking or scrapping the defective sub-assembly costs $10.
- $100+ External Failure Cost: If the defective component slips past internal inspection and reaches the customer, warranty replacement, field recalls, litigation, and brand destruction cost $100, $1,000, or more.
[!NOTE] Economic Optimal Quality Level: Classical economic models suggested an optimum quality level where prevention + appraisal costs balanced failure costs. Crosby and modern Six Sigma practitioners reject this tradeoff, demonstrating that because external failure costs are often fatal and prevention costs yield compounding process efficiencies, the true economic target is Zero Defects.
4. International Quality & Management Standards
To establish objective, auditable baselines of operational capability across global supply networks, organizations rely on the International Organization for Standardization (ISO) and sector-specific quality frameworks.
+-----------------------------------------------------------------------------+
| INTERNATIONAL MANAGEMENT SYSTEM STANDARDS |
| |
| STANDARD DISCIPLINE & SCOPE TARGET SUPPLY DOMAIN |
| ------------ ---------------------------- -------------------------- |
| ISO 9001 Quality Management Systems Generic / All Industries |
| ISO 14001 Environmental Management Sustainability & Emissions |
| ISO 27001 Information Security (ISMS) Cybersecurity & IP Data |
| ISO 22301 Business Continuity (BCMS) Disruption Resilience |
| IATF 16949 Automotive Quality (APQP/PPAP) Automotive Tier Supply Chain|
| AS9100 Aerospace & Defense Quality Aviation / Space / Defense |
| ISO 13485 Medical Device Quality (QMS) Medical Technology |
+-----------------------------------------------------------------------------+
ISO 9001: Quality Management Systems (QMS)
ISO 9001:2015 is the world's most widely recognized quality management standard. It is process-oriented, non-prescriptive (it specifies what requirements a QMS must fulfill, not how a company must run its business), and structured around Annex SL (High-Level Structure common to all modern ISO standards).
The 7 Quality Management Principles of ISO 9001
- Customer Focus: Understanding current and future customer needs and exceeding expectations.
- Leadership: Establishing unity of purpose and creating conditions for employee engagement.
- Engagement of People: Empowering competent, valued personnel at all levels.
- Process Approach: Managing activities as interrelated, coherent processes that function as an integrated system.
- Improvement: Maintaining an ongoing focus on continuous improvement.
- Evidence-Based Decision Making: Ensuring decisions are based on the rigorous analysis and evaluation of data.
- Relationship Management: Managing relationships with interested parties, particularly suppliers, to optimize long-term value creation.
Risk-Based Thinking
ISO 9001:2015 explicitly mandates risk-based thinking, requiring organizations to proactively identify internal and external risks, assess potential supply chain failure modes, and institute preventive controls rather than relying solely on reactive corrective actions.
Complementary ISO Standards in Supply Management
- ISO 14001 (Environmental Management Systems - EMS): Establishes frameworks for managing environmental impacts, waste reduction, resource efficiency, regulatory compliance, and Scope 1-3 greenhouse gas emissions across product life cycles.
- ISO 27001 (Information Security Management Systems - ISMS): Governs data security, cryptographic controls, cloud access, and cyber risk across supply chain digital networks and electronic data interchange (EDI) connections.
- ISO 22301 (Business Continuity Management Systems - BCMS): Mandates disaster recovery, crisis management, supply disruption mitigation, and business impact analysis (BIA) protocols.
Sector-Specific Quality Standards
Certain high-consequence industries mandate rigorous extensions to ISO 9001:
- IATF 16949 (Automotive): Developed by the International Automotive Task Force. Mandates stringent automotive core tools:
- APQP: Advanced Product Quality Planning.
- PPAP: Production Part Approval Process (18 required submission elements verifying supplier production line capability at design speed).
- FMEA: Failure Mode and Effects Analysis (Design DFMEA and Process PFMEA).
- MSA: Measurement System Analysis (Gage R&R <= 10%).
- SPC: Statistical Process Control (C_pk >= 1.67).
- AS9100 (Aerospace & Defense): Incorporates ISO 9001 with severe aerospace requirements, including complete lot and serial traceability, counterfeit parts prevention protocols, Foreign Object Debris (FOD) elimination programs, and strict configuration management.
- ISO 13485 (Medical Devices): Mandates design controls, biocompatibility documentation, sterile packaging validation, clinical risk management (ISO 14971), and medical device reporting (MDR) trace systems.
Third-Party Registrar Audits & Surveillance Cycles
ISO certifications are not granted by ISO itself. Organizations engage accredited independent Third-Party Registrars (such as BSI, TÜV, DNV, or SGS) to perform comprehensive conformity assessments.
+-----------------------------------------------------------------------------+
| THE ISO 3-YEAR AUDIT CYCLE |
| |
| YEAR 0: INITIAL CERTIFICATION AUDIT |
| ├── Stage 1 Audit: Documentation review & readiness assessment. |
| └── Stage 2 Audit: On-site operational verification & implementation test.|
| │ |
| ▼ (Pass -> 3-Year Certificate Issued) |
| YEAR 1: SURVEILLANCE AUDIT 1 (Sample key processes & corrective actions) |
| │ |
| ▼ |
| YEAR 2: SURVEILLANCE AUDIT 2 (Sample remaining functional processes) |
| │ |
| ▼ |
| YEAR 3: RE-CERTIFICATION AUDIT (Comprehensive end-to-end full QMS audit) |
+-----------------------------------------------------------------------------+
- Stage 1 Audit (Readiness Review): The registrar examines the supplier's documented QMS policies, scope, manual, internal audit records, and management reviews to assess audit readiness.
- Stage 2 Audit (Certification Audit): Lead auditors conduct extensive on-site inspections, interviewing personnel, reviewing objective evidence, verifying process controls, and inspecting equipment calibration.
- Audit Findings:
- Major Nonconformance: Absence or total breakdown of a required system element; certification cannot be granted until a Corrective Action Request (CAR) is resolved and verified.
- Minor Nonconformance: An isolated single lapse that does not indicate systemic failure; certified conditionally upon submitting a formal CAP (Corrective Action Plan).
- Opportunity for Improvement (OFI): Suggestion for enhancement with no formal CAR required.
- Surveillance Audits: Conducted annually (or semi-annually) during the 3-year certification validity window to verify ongoing compliance before a full Re-certification Audit at Year 3.
A newly appointed Chief Procurement Officer (CPO) notices that the organization spends millions of dollars annually on third-party receiving dock inspections, laboratory assay testing of raw materials, and factory rework of defective assemblies. According to Philip B. Crosby's Four Absolutes of Quality Management and the 1-10-100 Rule, how should the CPO re-architect the supplier quality management strategy?
An industrial manufacturing company conducts a Cost of Quality (COQ) audit across its operations and identifies the following annual expenditures:
How should these expenses be categorized under the PAF model, and what is the total Cost of Nonconformance (Failure Costs)?
A tier-1 automotive supplier is preparing for an annual review of its quality management system. The company holds ISO 9001 and IATF 16949 certifications. During an audit, an independent third-party registrar discovers that the supplier failed to conduct annual gage repeatability and reproducibility (Gage R&R) studies and has no record of PPAP submissions for two recent engineering change notices (ECNs). What type of audit finding is this, and what is the required governance procedure?