An organization can have excellent procedures, impressive certificates and hundreds of quality records. But what happens when nobody is watching?
At 8:00 in the morning, everything looks perfect.
The Quality Management System is documented.
The procedures have been approved.
The inspection checklists are available.
The internal audit has been completed.
The corrective actions have been recorded.
And somewhere on the wall, there is an ISO 9001 certificate.
Then a problem occurs.
A production worker discovers a defect.
A project engineer realizes that a specification has not been followed.
A supplier delivers material that does not meet the expected requirement.
The team is under pressure to meet a deadline.
Nobody from the Quality Department is there.
What happens next?
That moment may tell us more about an organization's quality culture than a shelf full of procedures.
This is one reason the publication of ISO 9001:2026 is attracting attention among quality professionals.
The new edition, published on 16 September 2026, retains the established foundations of ISO 9001 but places greater emphasis on leadership, quality culture, ethical behaviour and accountability.
The message is significant:
Quality is not created only by procedures. It is also created by what people actually do when they face real decisions.
A procedure can tell people what to do
Imagine a company with a 100-page Quality Management System manual.
It contains procedures for:
document control;
purchasing;
inspection;
testing;
nonconformity;
corrective action;
internal audit;
management review;
training;
supplier evaluation.
On paper, the organization appears highly structured.
But procedures have a limitation.
They describe expected behaviour.
They cannot completely determine what a person will do when circumstances become difficult.
Consider a simple example.
A worker discovers a defect shortly before an important delivery.
The procedure says:
Report the nonconformity.
But the project manager is under pressure.
The customer is waiting.
The team is behind schedule.
The defect appears relatively small.
The worker now faces a decision.
Does the worker report it?
Or does the worker remain silent?
The answer may depend less on the procedure and more on the organization's culture.
What is quality culture?
Quality culture can be understood as the shared attitudes, behaviours and values that influence how people approach quality in an organization.
ISO already has a dedicated standard on this subject: ISO 10010:2022 — Quality management — Guidance to understand, evaluate and improve organizational quality culture.
ISO 10010 provides guidance for evaluating and developing organizational quality culture, with particular attention to leadership and people engagement. It also includes approaches for self-assessing quality-culture maturity.
In simple terms:
Quality culture is what people actually do about quality.
Not what the manual says.
Not what the presentation says.
Not what the auditor is told.
But what happens during real work.
Why ISO 9001:2026 puts culture in the spotlight
ISO 9001 has always recognized the importance of leadership and people.
But ISO 9001:2026 makes the emphasis more visible.
ISO identifies stronger leadership, quality culture and ethical behaviour among the significant changes in the new edition. The standard also strengthens awareness related to quality culture and ethical behaviour.
This changes the conversation.
Quality is not simply:
Quality Department → Inspection → Audit → Report
It becomes:
Leadership → Culture → People → Process → Behaviour → Performance
That is a much broader system.
The Quality Department cannot create quality alone
This is perhaps one of the most important misunderstandings in organizational quality management.
A company may have:
Quality Manager
QA/QC Engineers
Quality Inspectors
Internal Auditors
Document Controllers
But quality is produced by the entire organization.
Consider a construction project.
The Quality Department may inspect concrete placement.
But quality is also influenced by:
the Project Manager's decisions;
the Construction Manager's planning;
the Site Engineer's supervision;
the procurement team's supplier selection;
the subcontractor's workmanship;
the laboratory's testing;
the workforce's competence;
the commercial team's decisions;
the client's requirements.
A Quality Manager can identify a problem.
But the organization determines whether that problem is prevented from happening again.
This is why ISO says quality is a leadership responsibility and emphasizes creating an environment where people contribute to the effectiveness of the QMS.
The hidden test of a quality culture
There is a useful thought experiment.
Imagine two organizations.
Both have:
ISO 9001 certification;
identical procedures;
similar organizational structures;
trained auditors;
documented corrective actions.
Now remove the auditors.
What happens?
In Organization A, employees continue to report problems.
In Organization B, employees begin hiding problems.
The difference is not the procedure.
The difference is the culture.
This illustrates why culture can be difficult to measure.
A procedure can be inspected.
A document can be reviewed.
A training record can be checked.
Culture is more visible through behaviour.
What happens when bad news is punished?
Consider another example.
A project engineer identifies a recurring defect.
If the engineer reports it, management reacts angrily:
"Why did you let this happen?"
The next time the engineer discovers a similar problem, what might happen?
The organization may still have a perfect NCR procedure.
But employees may become reluctant to use it.
Over time, the organization can develop an unintended culture:
Good news is rewarded.
Bad news is hidden.
That is dangerous for quality.
A healthy quality culture requires organizations to be capable of identifying problems without automatically turning every problem into a search for someone to blame.
The purpose of identifying a defect should include understanding:
What happened?
Why did it happen?
What allowed it to happen?
How can recurrence be reduced?
That is the logic behind continual improvement.
Quality culture and psychological safety
This creates an important connection between quality management and organizational behaviour.
If employees are afraid to report problems, the organization may receive less accurate information.
If employees feel able to report problems, the organization may discover problems earlier.
This does not mean that accountability disappears.
There is an important distinction between:
honest human error,
systemic process failure,
and
deliberate misconduct.
A mature organization needs to distinguish among them.
That is where ethical behaviour becomes relevant.
ISO 9001:2026 specifically increases the visibility of ethical behaviour within its approach to quality culture and leadership.
The difference between "quality is someone's job" and "quality is everyone's responsibility"
These two statements sound similar.
They are not.
"Quality is someone's job"
Usually means:
The Quality Department is responsible for checking whether other departments have produced quality.
"Quality is everyone's responsibility"
Means:
Every function has responsibility for controlling the quality of its own work.
For example:
Procurement is responsible for supplier and material quality.
Engineering is responsible for design quality.
Construction is responsible for execution quality.
Quality is responsible for assurance, verification and system effectiveness.
Management is responsible for creating the environment in which quality can succeed.
This creates a much stronger organizational model.
When productivity and quality collide
Quality culture becomes particularly visible when two objectives conflict.
Imagine a project where the team has two targets:
Complete the work this week.
and
Ensure the work meets all quality requirements.
Most of the time, these objectives support each other.
But sometimes they conflict.
The organization then has to make a decision.
If employees repeatedly receive the message:
"Finish first; we will fix the quality later."
the organization may gradually create a culture of rework.
The result can be:
Work → Defect → Rework → Additional Cost → Delay
A stronger quality culture attempts to prevent the defect rather than normalize the rework.
Quality culture is not the same as perfection
There is another important point.
A strong quality culture does not mean that an organization never makes mistakes.
No complex organization operates without errors.
Instead, a quality culture can be understood through how the organization responds.
When a problem occurs, does the organization:
hide it?
blame someone?
fix it temporarily?
or
learn from it?
The last approach connects directly with continual improvement, which remains one of the foundations of ISO 9001.
How can quality culture be measured?
This is where quality professionals face a difficult challenge.
You cannot simply ask:
"Do we have a good quality culture?"
and expect a reliable answer.
Instead, organizations can examine indicators of behaviour.
For example:
Reporting behaviour
How quickly are defects reported?
Are near misses reported?
Are employees willing to raise concerns?
Corrective-action behaviour
Are root causes genuinely investigated?
Are recurring problems accepted as normal?
Do corrective actions prevent recurrence?
Leadership behaviour
Does management discuss quality during business meetings?
Are quality objectives connected to strategic objectives?
Are quality decisions supported when they create short-term inconvenience?
Learning behaviour
Are lessons learned documented?
Are lessons applied to future projects?
Do different projects share quality knowledge?
Ethical behaviour
Are inspection results reported honestly?
Are test results protected from manipulation?
Are deviations transparently communicated?
These indicators can provide a much richer picture than simply counting audit findings.
ISO 10010:2022 specifically provides guidance and self-assessment approaches for evaluating organizational quality culture.
From Quality KPI to Quality Behaviour
This creates an interesting opportunity for modern QMS design.
Traditional quality measurement often focuses on outcomes:
Defect rate
NCR rate
Customer complaints
Rework cost
These remain important.
But organizations can also examine behavioural indicators.
For example:
| Outcome KPI | Behavioural indicator |
|---|---|
| NCR rate | Early reporting of potential nonconformities |
| Rework cost | Participation in preventive improvement |
| Customer complaints | Speed of escalation |
| Audit findings | Response quality and learning |
| Recurring defects | Effectiveness of knowledge sharing |
| Supplier defects | Early supplier risk communication |
The objective is not to replace traditional KPIs.
It is to understand why performance is occurring.
Can AI measure quality culture?
This is where the future becomes particularly interesting.
AI can potentially analyse large amounts of organizational information.
For example:
recurring NCR descriptions;
audit findings;
employee feedback;
customer complaints;
corrective-action records;
project lessons learned;
response times;
recurring process failures.
AI could potentially identify patterns such as:
Which problems are repeatedly reported?
Which problems remain unresolved?
Which departments experience recurring quality issues?
Which corrective actions repeatedly fail?
However, AI should not automatically determine that a department has a "bad culture."
Culture is complex.
Data can reveal patterns, but interpretation requires context, appropriate governance and human judgement.
The role of leadership
Culture ultimately reflects what an organization consistently rewards, tolerates and prioritizes.
Leadership therefore has a central role.
If management says:
"Quality is important."
but consistently rewards only speed and short-term output, employees receive another message.
If management says:
"Report problems early."
and then uses every report to punish the person who discovered the problem, employees learn another lesson.
Culture is created through repeated signals.
That is why ISO 9001:2026 places stronger emphasis on leadership and the environment in which people contribute to the effectiveness of the QMS.
The 100-page procedure problem
There is nothing inherently wrong with a 100-page procedure.
Some processes genuinely require detailed documentation.
The problem occurs when documentation becomes a substitute for management.
An organization may respond to every quality problem by creating another:
procedure,
form,
checklist,
approval step,
or
signature requirement.
Eventually, the QMS becomes heavier.
But the underlying behaviour may not change.
A better question after a quality failure might be:
"Do we need another document—or do we need a different behaviour?"
Sometimes the answer will be a new procedure.
Sometimes it will be better training.
Sometimes it will be better supervision.
Sometimes it will be a leadership decision.
And sometimes the process itself needs to be redesigned.
Quality culture in construction
Construction provides a particularly clear example.
A project can have hundreds of method statements and inspection checklists.
Yet quality problems may continue because of:
rushed activities;
poor coordination;
inadequate supervision;
weak communication;
late design information;
poor material control;
subcontractor pressure;
insufficient competence.
The response cannot always be:
"Create another checklist."
Sometimes the problem is cultural.
For example:
If workers believe that reporting a defect will delay the project and create blame, defects may be hidden.
If supervisors believe that production is more important than quality, inspections may become formalities.
If management consistently supports early reporting and corrective action, the behaviour can move in a different direction.
The QMS therefore becomes part of the way the project is managed, not simply a separate Quality Department activity.
ISO 9001:2026 does not eliminate procedures
This distinction is important.
The new edition does not say:
"Procedures are no longer important."
It continues to require organizations to establish, implement, maintain and continually improve their quality management systems.
The point is different:
Procedures and culture must work together.
A procedure provides structure.
Competence provides capability.
Leadership provides direction.
Culture influences behaviour.
Data provides evidence.
Improvement creates learning.
Together they form a functioning QMS.
The new quality equation
Perhaps quality culture can be understood through a simple conceptual equation:
Quality Performance = Process × People × Culture × Leadership
If any one component is weak, the overall system can be affected.
A perfect process operated by people who do not follow it will not produce the intended result.
Highly competent people working inside a dysfunctional process will struggle.
A strong procedure without leadership support may become bureaucracy.
And leadership commitment without effective processes may remain only a statement.
Quality requires the elements to work together.
What should organizations do?
Organizations preparing for ISO 9001:2026 can use the transition as an opportunity to examine culture—not simply documentation.
Five questions may be particularly useful:
1. Do employees report problems early?
2. Does management respond constructively to bad news?
3. Are quality decisions protected when they conflict with short-term pressure?
4. Do corrective actions create organizational learning?
5. Do leaders demonstrate the quality behaviours they expect from employees?
The answers may reveal more about the effectiveness of the QMS than another document review alone.
The future of quality management
For many years, the image of quality management has been associated with:
documents, checklists, inspections and audits.
These remain important.
But the future of quality management may increasingly involve:
culture, behaviour, data, leadership, learning and decision-making.
ISO 9001:2026 reflects this broader direction by strengthening the role of leadership, quality culture and ethical behaviour while retaining the established foundations of customer focus, process approach, risk-based thinking and continual improvement.
The result is a more challenging question for organizations.
Not:
"Do we have an ISO 9001 procedure for this?"
But:
"What do our people actually do when the procedure meets reality?"
That is where quality culture begins.
And sometimes, the most important quality improvement is not another 100-page procedure.
It is creating an organization where people are willing to do the right thing even when nobody is watching.
