The ISO 9000 Family and the Seven Principles
Chapter Ninety-Four
Syllabus topic Module 2, "Software Quality Assurance: ... ISO 9000 Quality Standards"
Pages 548 to 551 of 622
In one line
The ISO 9000 family is the set of international standards for quality management: ISO 9000 gives its fundamentals and vocabulary, ISO 9001 its requirements (the only standard of the family an organisation can be certified to), ISO 9004 guidance for sustained success, ISO 19011 guidance for auditing, and sector standards such as ISO/IEC/IEEE 90003 adapt it to software; all of them rest on seven quality management principles.
In the wording a student can write in an examination: the ISO 9000 family is ISO's family of quality management standards, now in 2026 editions for its two core members. ISO 9000:2026 "provides the fundamentals and vocabulary for quality management systems (QMS)"; ISO 9001:2026's "requirements define how to establish, implement, maintain, and continually improve a quality management system (QMS)", and it "is the only standard that can be certified to" (ISO). The seven quality management principles are customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making and relationship management; "ISO 9000, ISO 9001 and related ISO quality management standards are based on these seven QMPs."
The family
| Standard | Edition now current | What it is |
|---|---|---|
| ISO 9000 | ISO 9000:2026 (May 2026) | Quality management: fundamentals and vocabulary; the principles and terms, including the definition of quality |
| ISO 9001 | ISO 9001:2026 (16 September 2026) | Quality management systems: requirements; what a QMS must do; the only member that can be certified to |
| ISO 9004 | ISO 9004:2018 (confirmed 2023) | Guidance "for enhancing an organization's ability to achieve sustained success", with a self-assessment tool |
| ISO 19011 | ISO 19011:2026 (May 2026) | "Guidelines for auditing management systems", including quality management systems |
| Sector standards | Several | ISO 9001 adapted to a sector; for software, ISO/IEC/IEEE 90003 |
The table gives ISO's titles with a colon in place of their dash. ISO's page for ISO 9001:2026 lists the sector adaptations: ISO 13485 on medical devices, ISO 22163 on railways, ISO 29001 on petroleum and gas, ISO 18091 on local government, ISO/TS 54001 on elections, and "ISO/IEC/IEEE 90003 on computer software". Chapter Ninety-Five, on ISO 9001, certification and software, takes up ISO 9001's requirements and ISO/IEC/IEEE 90003.
A currency warning. The textbooks MU lists were written against ISO 9001:2008 or ISO 9001:2015. Both are withdrawn. ISO's page records that the 2026 edition "focuses on improving clarity", "emphasizes the importance of quality culture and leadership and separates risk and opportunities", and that certified organisations "will have to transition to the new version within the timeframe set by their certification cycle." ISO 19011 also has a 2026 edition, which replaced the 2018 one this year. An answer that names the 2015 edition as current is out of date.
How the family grew
ASQ's history of quality dates the first edition: "The ISO 9000 series of quality-management standards, for example, were published in 1987", the same year the Baldrige award was established. It records two revisions of emphasis: "In 2000, the ISO 9000 series of quality management standards was revised to increase emphasis on customer satisfaction", and "in 2015, the ISO 9001 standard was revised to increase emphasis on risk management." ISO's own page records the 2026 revision, which followed "global consultation in 2023" and "a consensus confirmed that revising the standard would enhance its value". Chapter Eighty-Three, on Feigenbaum, Ishikawa, Crosby and TQM, placed the family in the quality movement: ASQ notes that TQM's principles now live on in quality management systems and standards such as the ISO 9000 series.
The ISO 9000 Family and the Seven Principles
The seven quality management principles
ISO's brochure explains what a principle is here: "a basic belief, theory or rule that has a major influence on the way in which something is done", and it stresses that "These principles are not listed in priority order." For each it gives a statement.
| Principle | ISO's statement |
|---|---|
| 1. Customer focus | "The primary focus of quality management is to meet customer requirements and to strive to exceed customer expectations." |
| 2. Leadership | "Leaders at all levels establish unity of purpose and direction and create conditions in which people are engaged in achieving the organization's quality objectives." |
| 3. Engagement of people | "Competent, empowered and engaged people at all levels throughout the organization are essential to enhance its capability to create and deliver value." |
| 4. Process approach | "Consistent and predictable results are achieved more effectively and efficiently when activities are understood and managed as interrelated processes that function as a coherent system." |
| 5. Improvement | "Successful organizations have an ongoing focus on improvement." |
| 6. Evidence-based decision making | "Decisions based on the analysis and evaluation of data and information are more likely to produce desired results." |
| 7. Relationship management | "For sustained success, an organization manages its relationships with interested parties, such as suppliers." |
The principles gather ideas this module has met separately. Customer focus is Juran's fitness for use; leadership and engagement are Deming's points about management and fear (Chapter Eighty-Two, on Shewhart, Deming and Juran); the process approach is the premise of all quality assurance; improvement is the PDSA cycle and causal analysis; evidence-based decision making is statistical quality assurance; relationship management extends quality to suppliers and partners, the concern of Deming's fourth point.
Worked example: ExamReg's project against the seven principles
ISO 9004 offers organisations a self-assessment of how far they have adopted its concepts. A simple version asks, for each principle, what evidence the organisation can show. For ExamReg's software house, the evidence is what this book's earlier chapters recorded.
| Principle | Evidence from ExamReg's project | What is missing |
|---|---|---|
| Customer focus | The exam cell's ruling on invalid input; its part in reviews and acceptance testing (Chapter Forty-Two, on acceptance testing) | A measure of student satisfaction after each registration season |
| Leadership | The head of delivery acted on the escalated noncompliance NC-10 (Chapter Eighty-Six, on SQA activities) | Quality objectives set by leadership, not only by the project |
| Engagement of people | A requirements checklist and test templates built by the team after causal analysis (Chapter Eighty, on using defect data) | Training records; a regular retrospective |
| Process approach | An SQA plan whose audits cover every standard the project follows (Chapter Eighty-Seven, on the quality assurance plan) | Process measures watched with control charts across releases |
| Improvement | Causal analysis of input validation; release 2.1's rate fell from 2.90 to 1.12 per KLOC | The same loop for the next largest cause |
| Evidence-based decision making | The Pareto of defect causes (Chapter Eighty-Nine, on statistical SQA); the release decision from a reliability model (Chapter Ninety-Two, on measuring reliability) | Data kept consistently from release to release |
| Relationship management | The payment gateway's provider, whose wait caused the 72-hour repair (Chapter Ninety-One, on statistical process control) | An agreement with the provider on response times |
The ISO 9000 Family and the Seven Principles
The table shows two things the principles are for. First, they are practical: every principle already has evidence in a small college portal's project. Second, they find gaps. The weakest row is relationship management: the one repair that fell outside the process's limits depended on a supplier with whom no agreement existed.
What it does not mean
ISO 9000 is not the standard organisations are certified to. ISO 9000 is the vocabulary and fundamentals; certification is to ISO 9001, and only to ISO 9001.
The principles are not a ranking. ISO says they are not in priority order, and their relative importance varies between organisations and over time.
The 2015 edition is not current. ISO 9001:2026 replaced it on 16 September 2026, and ISO 9000:2026 replaced ISO 9000:2015 in May.
A family standard is not a software method. ISO 9001 says what a quality management system must achieve, not how to write or test software; ISO/IEC/IEEE 90003 gives the software guidance.
Quick revision
- The family: ISO 9000:2026 (fundamentals and vocabulary); ISO 9001:2026 (requirements; the only certifiable one); ISO 9004:2018 (sustained success; self-assessment); ISO 19011:2026 (auditing); sector standards, including ISO/IEC/IEEE 90003:2018 for software.
- History (ASQ; ISO): first published 1987; revised 2000 (customer satisfaction) and 2015 (risk); 2026 editions (clarity, quality culture and leadership, risk separated from opportunities).
- Seven principles: customer focus; leadership; engagement of people; process approach; improvement; evidence-based decision making; relationship management. Not in priority order.
- Worked example: ExamReg's project shows evidence for every principle, and its weakest is relationship management (the 72-hour repair that waited for the payment gateway's provider).
The ISO 9000 Family and the Seven Principles
Test yourself
1. What is the ISO 9000 family? Name its main members. ISO's family of international standards for quality management. ISO 9000 gives the fundamentals and vocabulary; ISO 9001 the requirements for a quality management system, and it is the only one that can be certified to; ISO 9004 guidance for sustained success; ISO 19011 guidelines for auditing management systems; and sector standards adapt ISO 9001, such as ISO/IEC/IEEE 90003 for computer software.
2. Which editions are current, and why does it matter? ISO 9000:2026 (May 2026) and ISO 9001:2026 (16 September 2026) replaced the 2015 editions; ISO 19011:2026 replaced the 2018 edition; ISO 9004:2018 remains current. It matters because certified organisations must transition to the new edition, and an answer that treats the 2015 edition as current is out of date.
3. State the seven quality management principles. Customer focus; leadership; engagement of people; process approach; improvement; evidence-based decision making; relationship management.
4. Explain the process approach, with a software example. Consistent and predictable results come more effectively when activities are understood and managed as interrelated processes working as a coherent system. In software, requirements, design, coding, review and testing are managed as linked processes with defined inputs and outputs; for example, ExamReg's SQA plan audits each process against its standard.
5. Explain evidence-based decision making, with a software example. Decisions based on the analysis and evaluation of data are more likely to produce the desired results. For ExamReg, the improvement effort was directed by a Pareto analysis of defect causes, and the release decision by a reliability model's prediction of the testing still needed.
6. How did ExamReg's project show a gap in relationship management? One repair took 72 hours, far beyond the process's usual variation, because it waited for the payment gateway's provider; the principle calls for managing such supplier relationships, for example with an agreement on response times.
The rest of this subject
These notes are cut from the University's printed syllabus. Open the syllabus itself, or the past papers, for the same subject.