QMS means quality management system. It is the set of rules, roles and records a company uses to make sure its product or service meets customer and legal needs, and it is audited by comparing what the company says it does with the records of what it did. ISO 9001 is the best-known standard for building one.
Last reviewed: 17 October 2026. Facts checked. We searched for QMS and the quality management principles and opened the Wikipedia page on the ISO 9000 family and the ISO Technical Committee 176 news page. The ASQ website did not appear in our results and we did not open it. We have not read the text of ISO 9001, which is a paid document.
What a QMS is, in plain words
Every company has some way of keeping quality under control, even if it is informal. A QMS writes that down and makes it repeatable. It answers:
- What do customers expect from us?
- Which steps produce our product or service?
- Who is responsible for each step?
- How do we catch a mistake, find its cause and stop it coming back?
A QMS is not a quality department. It covers the whole business: sales, purchasing, production, delivery, complaints.
The seven quality management principles
The ISO 9000 family rests on seven principles. The Wikipedia page lists them:
- Customer focus
- Leadership
- Engagement of people
- Process approach
- Improvement
- Evidence-based decision making
- Relationship management
These are guidance, not audit criteria. Auditors test requirements, but the principles explain why the requirements exist. An older 2008 list had eight principles, so ignore any guide that still uses it.
ISO 9001 and the edition question
ISO 9001 is the requirements standard for a QMS. Its editions, per Wikipedia, ran 1987, 1994, 2000, 2008 and 2015. ISO's TC 176 news page now states that ISO 9001:2026 was published on 16 September 2026. The same page lists transition dates, including 30 September 2029 as the last date for organisations certified to ISO 9001:2015 to move across, and notes that this timeline is managed by a third party and not by ISO. Confirm the dates with your certification body.
We could not confirm whether the 2026 clause numbering differs from 2015. The page says the revision builds on the existing framework, with clearer wording, a stronger focus on leadership, quality culture and accountability, and a new Annex A on terms and intent. Read the new text before you audit against it. For the 2015 structure, see our ISO 9001 internal audit checklist.
A company can run a QMS without any certificate. ISO advises that ISO 9001 can be implemented without certification.
How a QMS is audited
| Audit | By whom | Question |
|---|---|---|
| Internal audit | The company's own trained staff | Does our QMS meet the standard and our own procedures? |
| Supplier (second-party) audit | A customer | Does this supplier meet our requirements? |
| Certification audit | An accredited certification body | Should we issue or keep a certificate? |
Per Wikipedia, ISO does not certify companies. Accredited certification bodies do, following ISO/IEC 17021, and they are in turn accredited under ISO/IEC 17011. Certification is pass or fail, with no grades, and certificates are renewed at regular intervals, usually about every three years.
What auditors look for
- Process, not paper. Auditors follow one order or job from start to end and check the record at each step.
- Customer requirements. Were they understood and met? How are complaints handled?
- Control of changes. When a process, supplier or tool changes, was it planned?
- Competence. Do people know their job and the procedures they use?
- Measurement. Are quality data collected and acted on?
- Corrective action. Was the root cause found, and did the fix work?
Our ISO 9001 internal audit checklist gives questions clause by clause. For findings, see major vs minor nonconformities.
Common weak spots
- Procedures that describe how work should be done, not how it is done.
- A quality policy that staff cannot explain.
- Complaints logged but never analysed for patterns.
- Internal audits that check the paperwork and never watch the work.
These are our own practical view, drawn from our published audit checklist, not from a source opened for this article.
A QMS in a CA firm
Audit firms have their own quality system rules. In India, that is the standard on quality management for firms, not ISO 9001. See our India SQM 1 vs ISQM 1 comparison. The two ideas are close in spirit but are different documents.
Where to start
A short self-check helps. Try the ISO management system readiness scorecard, then read our guide to gap assessment before ISO certification.
Frequently Asked Questions
What does QMS stand for?
Quality management system.
Is QMS the same as ISO 9001?
No. The QMS is the system a company runs. ISO 9001 is the standard whose requirements it can be built to meet.
How many quality management principles are there?
Seven in the current ISO 9000 family, per the sources we read.
Does every company need a QMS certificate?
No. Certification is a choice, unless a customer, tender or regulator requires it.
Who audits a QMS?
The company's own internal auditors, its customers, and an accredited certification body for certification.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error