Quality Management

Definition

Quality Management is the integrated set of policies, processes, and activities by which a project ensures its deliverables meet defined requirements. It rests on three pillars: Quality Planning (what good looks like and how it will be achieved), Quality Assurance (the process-focused activity that confirms the right things are being done), and Quality Control (the product-focused activity that confirms the things produced conform). All three are necessary; a project that controls without planning, or assures without controlling, is theatrical.

History

Modern quality management traces back to Walter Shewhart's statistical control work at Bell Labs in the 1920s and W. Edwards Deming's post-war work in Japan, which produced the Deming Cycle (Plan-Do-Check-Act). Juran's quality trilogy (planning, control, improvement), Crosby's "Quality is Free" emphasis on prevention, and the Toyota Production System collectively built the foundation. ISO 9001 (first published 1987) codified a generic management-system standard; ISO 9001:2015 added risk-based thinking. Construction and EPC industries layered on discipline-specific standards (ISO 19443, ASME, API, IEC) for nuclear, oil and gas, and electrical infrastructure.

Principles

• Prevention is cheaper than detection. Crosby's first law. Catching a welding defect at the joint costs hundreds; catching it after hydro-test costs millions.
• Conformance to requirements. Quality is not "as good as we can make it" — it is "what the contract, code, and customer agreed."
• The customer defines quality. Internal opinions of quality are interesting; the customer's specification is binding.
• Continuous improvement. A quality system that does not learn is decaying.
• Quality is everyone's job. A standalone QA/QC department cannot deliver quality on a project where the trades and engineers do not own it.

QA vs QC vs QM

The terms are often used interchangeably and shouldn't be. QA (Quality Assurance) is process-focused: are we following the documented procedure? It is preventive. QC (Quality Control) is product-focused: does the deliverable conform to the specification? It is detective. QM (Quality Management) is the umbrella: the policies, governance, and improvement loop that integrate QA and QC into a working system. A project with strong QC and weak QA repeats the same defects; a project with strong QA and weak QC ships beautiful-on-paper deliverables that fail in the field.

Real-World Construction Example

On a desalination plant project, the contractor's QC inspections caught 142 weld defects in the high-pressure RO racks during fabrication. The QA audit revealed why: three welders had certification papers but had not actually passed the prequalification weld test under the project's procedure — a clerical defect in the contractor's onboarding. Quality control caught the symptoms; quality assurance found the cause. The corrective action — re-certification, supervisor sign-off, and a third-party witness during the first ten production welds per welder — drove the defect rate from 4.3% to 0.6% in eight weeks. Cost of the fix: roughly USD 80,000. Cost avoided: an estimated USD 4–6 million in rework had the defect rate continued through the 11,000 welds on the project.

Real-World IT / Agile Example

A SaaS payments product had strong QC — automated tests, code review, security scanning — but weak QA: requirements were captured verbally, acceptance criteria were inconsistent across teams, and definition-of-done varied by squad. Escaped defects clustered in the integration layer between two services owned by different teams with different DoDs. The remediation was QA work, not QC work: a shared definition-of-done, a common acceptance-criteria template, and a quarterly process audit. Defect escape rate halved in two quarters. The lesson was structural: tests do not substitute for process.

The Cost of Quality

A useful taxonomy separates four costs:

• Prevention costs — planning, training, procedure development.
• Appraisal costs — inspection, testing, audit.
• Internal failure costs — rework, scrap, defect investigation found before handover.
• External failure costs — warranty claims, recalls, reputation damage found after handover.

Mature industries spend 1–4% on prevention and 1–3% on appraisal to keep failure costs below 1%. Immature industries spend 0.5% on prevention and find themselves spending 10–25% on failure costs. The arithmetic is brutal and consistent across sectors.

Project Controls Perspective

From a controls standpoint, quality is the most under-instrumented of the triple-constraint dimensions. Cost and schedule have weekly KPIs; quality often has only NCR counts and audit pass/fail. Mature controls teams add: defect-density per discipline (defects per 1,000 welds, per 1,000 lines of code, per square metre of finished surface), first-pass yield, audit-finding ageing, and corrective-action-effectiveness rate. These metrics are leading indicators of cost and schedule variance — a rising NCR rate predicts a CPI decline by about six weeks on most EPC work.

Common Mistakes

• Treating quality as a department instead of a system.
• QC without QA — finding defects but never the causes.
• QA without QC — beautiful procedures, no inspection of output.
• Underspending on prevention; overspending on rework.
• Closing NCRs without root-cause analysis.
• Audit reports that are filed but never produce corrective actions.
• Confusing quality with grade — a low-grade product can still be high-quality if it conforms.

Expert Tips

• Run a quality plan before the schedule is baselined. Quality activities (ITPs, inspections, hold points) drive durations.
• Define hold and witness points in the contract, not afterwards. Late-added hold points are commercial battles.
• Track first-pass yield by discipline weekly. First-pass yield is the leading indicator of rework cost.
• Root-cause every NCR using "five whys." Symptom-level closure invites repetition.
• Make the quality system risk-based. ISO 9001:2015 demands it — and it concentrates effort where defects hurt most.

Key Takeaways

• Quality has three pillars: planning, assurance, control. All three are needed.
• Prevention is cheaper than detection by an order of magnitude.
• Conformance to requirements is the definition; opinion is not.
• The cost-of-quality arithmetic is brutal: 1–4% prevention saves 10–25% rework.
• Defect-density, first-pass yield, and audit-finding ageing are leading indicators of cost and schedule.

Related Concepts

Quality Management interlocks with Risk Management, Lessons Learned, X-Bar Control Charts, Change Control, and KPIs. ISO 9001 templates and discipline-specific ITPs are available at PMMilestone.org.