1.3 The Seven Quality Management Principles
Key Takeaways
- The seven principles are customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making, and relationship management
- The principles are not directly auditable clauses; they explain the intent behind ISO 9001's requirement clauses
- Every principle maps to specific clauses: e.g., process approach maps to clause 4.4, improvement maps to clause 10
- A nonconformity must always cite a specific clause or documented requirement, never a principle by name
- Evidence-based decision making is also the definition of sound auditing itself: conclusions must rest on objective evidence, not opinion
The Seven Quality Management Principles
Quick answer: ISO 9001:2015 is built on seven quality management principles: customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making, and relationship management. They are not audit criteria themselves, but every substantive requirement clause exists to operationalize one or more of them — recognizing which principle a clause serves helps you interpret intent, not just wording.
The seven principles come from ISO 9000, and they explain why ISO 9001 is structured the way it is. You will not find a clause that says "comply with customer focus" — instead, the principles are woven throughout clauses 4 to 10. A Lead Auditor who understands the principles can reason about the intent behind a clause when a scenario doesn't map neatly onto its literal wording.
The Seven Principles, One by One
-
Customer focus — the primary focus of quality management is meeting customer requirements and striving to exceed customer expectations. Sustained success comes from attracting and retaining the confidence of customers and other interested parties. Where it surfaces: clause 5.1.2 (customer focus as a top-management leadership duty) and clause 9.1.2 (monitoring customer satisfaction).
-
Leadership — leaders at all levels establish unity of purpose and direction and create conditions in which people are engaged in achieving the organization's quality objectives. Where it surfaces: clause 5.1.1 (leadership and commitment), clause 5.2 (policy).
-
Engagement of people — competent, empowered, and engaged people at all levels are essential to enhance the organization's capability to create and deliver value. Where it surfaces: clause 7.2 (competence), clause 7.3 (awareness), clause 5.3 (organizational roles).
-
Process approach — consistent and predictable results are achieved more effectively and efficiently when activities are understood and managed as interrelated processes that function as a coherent system. Where it surfaces: clause 4.4, which requires the organization to determine its processes and their interactions — the subject of the next section, 1.4.
-
Improvement — successful organizations maintain an ongoing focus on improvement. Where it surfaces: clause 10 in its entirety (nonconformity/corrective action, continual improvement).
-
Evidence-based decision making — decisions based on the analysis and evaluation of data and information are more likely to produce desired results. Where it surfaces: clause 9.1 (monitoring, measurement, analysis, evaluation) and, for the auditor personally, this principle is the definition of an audit — conclusions must rest on objective evidence, never opinion.
-
Relationship management — for sustained success, organizations manage their relationships with relevant interested parties, such as suppliers. Where it surfaces: clause 8.4 (control of externally provided processes, products, and services) and clause 4.2 (understanding interested-party needs and expectations).
Why This Matters for an Auditor, Not Just a Consultant
The seven principles are not directly auditable — you cannot write a nonconformity that says "the organization failed customer focus." But they are the single best tool for interpreting intent when evidence sits in a gray area. Consider a scenario: an organization has a documented quality policy, but front-line staff on the shop floor cannot explain how their work contributes to it. Is this a nonconformity? Clause 7.3 (awareness) requires people to be aware of the quality policy and how they contribute to the QMS's effectiveness — and the underlying principle is engagement of people: policy that lives only on a wall, disconnected from the people doing the work, has not achieved its purpose. Recognizing the principle behind the clause helps you frame why a finding matters, not just that it technically breaches a clause number.
A Common Exam Trap: Principles vs. Requirements
A frequent exam distractor lists one of the seven principles as if it were a standalone clause requirement ("the organization shall demonstrate relationship management"). No such clause exists. The seven principles inform the design of ISO 9001's requirements; the requirements themselves are what you audit against. If a question asks you to identify audit criteria, the answer is always a specific clause of ISO 9001 (or the organization's own procedure), never a principle by name.
Quick-Reference Table
| # | Principle | Primary clause(s) where it surfaces |
|---|---|---|
| 1 | Customer focus | 5.1.2, 9.1.2 |
| 2 | Leadership | 5.1.1, 5.2 |
| 3 | Engagement of people | 7.2, 7.3, 5.3 |
| 4 | Process approach | 4.4 |
| 5 | Improvement | 10.1–10.3 |
| 6 | Evidence-based decision making | 9.1, and the audit process itself |
| 7 | Relationship management | 8.4, 4.2 |
Memorizing this mapping pays off directly: exam scenarios in the "Concepts & principles of management standards and systems" section often describe a workplace situation and ask which principle it best illustrates, or ask you to connect a principle to the clause that operationalizes it.
During an audit, shop-floor staff cannot explain how their daily work contributes to the organization's quality objectives, even though the quality policy is posted on the wall. Which quality management principle is most directly under-realized here?
An auditor is drafting a finding and considers writing: "The organization failed to demonstrate the principle of relationship management." Why is this an incorrect way to frame a nonconformity?