What is a quality management system (QMS)? Contents, ISO 9001 and how it works

Updated 9 October 2026
A quality management system (QMS) is the set of processes, procedures and responsibilities an organization uses to ensure that its products and services are of consistent quality and meet customer and regulatory requirements. The most widely used standard for quality management systems is ISO 9001.

A quality management system is one type of management system. Read what a management system is to see how quality relates to environment, occupational health and safety and information security. Here we focus on what a QMS contains and how it is used in everyday work.

The seven quality management principles

ISO 9001 and related standards are built on seven quality management principles, described in ISO 9000:

1. Customer focus – meeting and ideally exceeding customer requirements.
2. Leadership – management creates a shared direction.
3. Engagement of people – competent and involved people at all levels.
4. Process approach – seeing the organization as interrelated processes.
5. Improvement – continual improvement as an ongoing way of working.
6. Evidence-based decision making – decisions based on analysis of data.
7. Relationship management – managing relationships with suppliers and other interested parties.

What does a QMS include?

The contents vary between organizations, but most quality management systems include the following elements:

A QMS in practice

An example shows how the elements fit together. An employee discovers that a delivery has gone out with incorrect labeling:

1. The employee registers a non-conformance.
2. The owner investigates the cause and finds that the labeling instruction is unclear.
3. The instruction is revised, reviewed and approved through document control.
4. Affected employees are informed of the new version, and competence is ensured.
5. The risk of mislabeling is updated in the risk assessment.
6. At the next internal audit, the effectiveness of the action is checked.
7. The number of labeling errors is tracked as a quality objective in the management review.

When the elements live in separate places – non-conformances in a spreadsheet, procedures in a folder and risks in another document – it is hard to see the connections. That is why many organizations bring their quality work together in one digital system.

Quality management systems in different industries

• Healthcare and social care: Systematic quality work with a focus on patient safety and incident reporting. In Sweden, a management system for systematic quality work is required by the National Board of Health and Welfare's regulations.
• Life science and medical devices: ISO 13485 sets strict requirements on documentation, traceability and risk management.
• Food: Quality work is often combined with food safety based on HACCP principles.
• Manufacturing: ISO 9001 is often required by customers and in public procurement.
• Public sector: Process-oriented ways of working and traceability in case handling.

Common mistakes

• Building the system for the auditor rather than the organization. It becomes a binder nobody uses between audits.
• Too many documents. More procedures do not mean better quality. Document what is needed to get the work right.
• Objectives that are not measured. A quality objective without follow-up is just an ambition.
• Management not involved. ISO 9001 explicitly places responsibility for the system on top management.

Summary

A quality management system is an organization's structured way of assuring and improving quality. It includes controlled documents, processes, non-conformance management, risk management, internal audit and follow-up of objectives. It only creates value when it is used in everyday work and the parts are connected.

Next step: See how Centuri works as a digital quality management system →