←

QMS in Manufacturing: ISO 9001, IATF 16949 and MES Data

By Christian Fieg · Last updated: March 2026

What Is a Quality Management System (QMS)?

A Quality Management System (QMS) is a formalized framework of processes, procedures, responsibilities, and documentation that an organization uses to ensure its products and services consistently meet customer requirements and regulatory standards. A QMS defines how quality is planned, controlled, assured, and improved across all organizational activities.

In manufacturing, a QMS is not a software tool or a single document. It is the entire system by which a company manages quality: from incoming material inspection through production process control to final product release and customer complaint handling. International standards like ISO 9001 and IATF 16949 define what a QMS must contain, but every company implements its QMS differently based on its products, processes, and customer requirements.

The effectiveness of a manufacturing QMS depends on the quality of the data it uses. A QMS that relies on manual data collection, paper-based inspection records, and monthly quality reports operates with a significant time delay. By the time a quality problem is visible in the QMS reports, thousands of defective parts may already have been produced or shipped. This is where the connection between QMS and real-time production data from an MES (Manufacturing Execution System) becomes critical.

QMS Standards Relevant to Manufacturing

Standard	Scope	Who needs it	Key manufacturing requirements
ISO 9001:2015	Generic quality management standard applicable to any organization in any industry.	Any manufacturing company that wants to demonstrate consistent quality and customer focus. Often required by customers as a minimum qualification.	Process approach, risk-based thinking, documented information, monitoring and measurement, internal audits, management review, corrective actions, continuous improvement (PDCA).
IATF 16949:2016	Automotive-specific QMS standard. Builds on ISO 9001 and adds automotive-specific requirements.	Automotive suppliers (Tier 1, Tier 2, Tier X) who supply production parts or service parts to OEMs. Required by virtually all automotive OEMs worldwide.	All ISO 9001 requirements plus: APQP, PPAP, FMEA (DFMEA + PFMEA), Control Plans, MSA (Measurement System Analysis), SPC, traceability, customer-specific requirements, escalation management.
ISO 13485:2016	QMS for medical device manufacturers. Focuses on regulatory compliance and product safety.	Medical device manufacturers and their suppliers. Required for CE marking (EU) and FDA clearance (US).	Design controls, risk management (ISO 14971), validation of production processes, traceability, sterility requirements, complaint handling, post-market surveillance.
ISO 22000 / FSSC 22000	Food safety management system. Combines QMS principles with HACCP (Hazard Analysis and Critical Control Points).	Food and beverage manufacturers, packaging suppliers, and food logistics companies.	HACCP plan, prerequisite programs, traceability (one step forward, one step back), allergen management, cleaning validation, temperature monitoring.
GMP (Good Manufacturing Practice)	Pharmaceutical and cosmetics manufacturing standards. Focus on process validation and product safety.	Pharmaceutical manufacturers, contract manufacturers (CMOs), and cosmetics producers.	Process validation, equipment qualification (IQ/OQ/PQ), batch records, clean room requirements, deviation management, change control, data integrity (ALCOA+).

The 7 Quality Management Principles (ISO 9001)

ISO 9001:2015 is built on seven quality management principles. These principles provide the foundation for every QMS, regardless of industry.

Principle	What it means	Manufacturing implication
1. Customer focus	The primary focus of quality management is to meet customer requirements and strive to exceed customer expectations.	Quality targets (scrap rate, first-pass yield, on-time delivery) are defined from the customer's perspective. Customer complaints trigger systematic corrective actions.
2. Leadership	Leaders at all levels establish unity of purpose and direction, creating conditions in which people are engaged in achieving quality objectives.	Plant managers and production leaders actively review quality KPIs. Quality is not delegated to the quality department alone. Shopfloor meetings include quality data review.
3. Engagement of people	Competent, empowered, and engaged people at all levels are essential to enhance the organization's capability to create and deliver value.	Operators are trained on quality requirements. They can stop production when they detect a defect. They participate in problem-solving activities (8D, Kaizen).
4. Process approach	Consistent and predictable results are achieved more effectively when activities are understood and managed as interrelated processes.	Every production step is defined as a process with inputs, outputs, controls, and resources. Process parameters are monitored. Deviations trigger corrective actions.
5. Improvement	Successful organizations have an ongoing focus on improvement.	Scrap rates, rework rates, and downtime are tracked over time. Trends are analyzed. Improvement actions are implemented and their effectiveness is verified with data.
6. Evidence-based decision making	Decisions based on the analysis and evaluation of data and information are more likely to produce desired results.	Quality decisions are based on production data (scrap Pareto, SPC charts, process data trends), not on opinions or estimates. This is where MES data is essential.
7. Relationship management	For sustained success, an organization manages its relationships with interested parties, such as suppliers and partners.	Supplier quality performance is tracked. Incoming material quality is correlated with production quality. Supplier corrective actions are documented and verified.

The PDCA Cycle in QMS

Every QMS is structured around the PDCA (Plan-Do-Check-Act) cycle, also known as the Deming cycle. PDCA is the engine of continuous improvement within the QMS.

PDCA phase	QMS activities	Production data needed
Plan	Define quality objectives. Identify risks and opportunities. Create control plans. Define inspection criteria. Plan resources for quality assurance.	Historical quality data: scrap rates by product and machine, recurring defect types, process capability indices (Cp, Cpk). This data informs where controls are needed and what targets are realistic.
Do	Execute production according to defined processes. Perform inspections. Record quality data. Follow work instructions. Implement planned controls.	Real-time production data: parts produced, scrap count, rework count, process parameters (temperature, pressure, torque), operator assignments, batch/serial traceability.
Check	Monitor and measure results against quality objectives. Analyze quality trends. Conduct internal audits. Review customer complaints. Evaluate process performance.	Quality KPIs: first-pass yield, scrap rate, rework rate, customer complaint rate, SPC control chart data, OEE quality factor. Comparison of actual vs. planned performance.
Act	Take corrective actions for nonconformities. Implement preventive actions. Update processes, control plans, and FMEA. Standardize improvements.	Before/after data to verify that corrective actions actually worked. Updated process parameters. Revised control limits. Evidence for management review.

How MES Data Supports QMS Requirements

A QMS defines what must be controlled and documented. An MES provides the production-level data that serves as evidence for QMS compliance. Without automated production data, QMS documentation relies on manual records that are incomplete, delayed, and error-prone.

QMS requirement	What the standard demands	How MES provides the evidence
Process monitoring (ISO 9001 §8.5.1)	Organizations must implement production under controlled conditions, including monitoring and measurement at appropriate stages.	MES captures process data (cycle times, process parameters, machine states) automatically at every production step. No manual recording needed. Data is timestamped, traceable, and tamper-proof.
Traceability (ISO 9001 §8.5.2, IATF 16949 §8.5.2.1)	Organizations must identify outputs by suitable means and control the unique identification of outputs when traceability is a requirement.	MES provides serial-level and batch-level traceability: which material batch was used, which machine processed the part, which operator was assigned, what process parameters were applied. Full production history per part.
Nonconforming output (ISO 9001 §8.7)	Organizations must ensure that outputs not conforming to requirements are identified and controlled to prevent unintended use or delivery.	MES scrap and rework tracking captures every nonconforming part with defect type, defect location, and disposition (scrap, rework, concession). Automatic blocking of defective parts in the process flow (poka-yoke).
SPC (IATF 16949 §9.1.1.1)	Statistical process control must be applied to production processes as identified in the control plan.	MES supports SPC-based inspections with automatic data collection, control chart visualization, and out-of-control alerts. Process capability indices (Cp, Cpk) are calculated from actual production data.
Documented information (ISO 9001 §7.5)	The QMS must include documented information required by the standard and determined by the organization as necessary for QMS effectiveness.	MES automatically creates production records: order completions, quality inspection results, downtime logs, alarm histories, process data logs. These records are digital, searchable, and available for audits without manual compilation.
Continual improvement (ISO 9001 §10.3)	Organizations must continually improve the suitability, adequacy, and effectiveness of the QMS.	MES provides the trend data needed for improvement: scrap rate over time, downtime Pareto, OEE trends, alarm frequency analysis. Before/after comparisons prove whether corrective actions were effective.

At Meleghy Automotive, SYMESTIC integrates bidirectionally with CASQ-it (Bohme & Weihs quality management software) to trigger sample inspections automatically based on production events. This is a direct MES-QMS interface: the MES signals when an inspection is due based on the control plan, the quality system records the inspection result, and both systems share the data. At Neoperl, SPS-based alarm detection correlated with quality defects provides the evidence base for root cause analysis and corrective actions. At Klocke, SYMESTIC operates in a GMP-regulated environment, providing automated production records that meet pharmaceutical data integrity requirements.

QMS vs. QMS Software vs. MES Quality Functions

Dimension	QMS (management system)	QMS software (e.g., CASQ-it, Babtec, CAQ AG)	MES quality functions
Scope	The entire organizational framework for quality: policies, objectives, processes, responsibilities, documentation, audits, management review.	Software that supports QMS processes: document control, CAPA management, audit management, complaint handling, supplier management, inspection planning.	Quality data collection and process control on the shop floor: scrap/rework tracking, SPC, inline inspection, poka-yoke, process data recording, traceability.
Data source	Aggregated from multiple sources: production, customer feedback, supplier data, audit results, management decisions.	Manual entry by quality engineers plus data imports from production systems. Inspection results, audit findings, complaint records.	Automatic data collection from machines and production processes. Real-time, high-frequency, machine-generated data.
Time horizon	Strategic and tactical. Annual quality objectives, quarterly management reviews, monthly quality meetings.	Operational to tactical. Daily inspection management, weekly CAPA reviews, monthly quality reporting.	Real-time to operational. Immediate scrap detection, live SPC monitoring, instant alarm notification, shift-level quality KPIs.
Integration point	QMS software provides the management layer. MES provides the production data layer. Both are needed for a complete quality system.	Receives production quality data from MES. Sends inspection triggers and quality specifications to MES.	Sends production quality data (scrap, rework, process data, traceability) to QMS software. Receives inspection plans and quality requirements from QMS software.

Frequently Asked Questions About QMS

What is the difference between ISO 9001 and IATF 16949?

ISO 9001 is the generic quality management standard applicable to any industry. IATF 16949 is the automotive-specific QMS standard that includes all ISO 9001 requirements plus additional automotive requirements: APQP (Advanced Product Quality Planning), PPAP (Production Part Approval Process), FMEA, Control Plans, MSA (Measurement System Analysis), SPC, and customer-specific requirements from individual OEMs. Every IATF 16949 certified company is automatically ISO 9001 compliant, but not vice versa.

Is a QMS required for manufacturing companies?

Legally, no. Practically, yes. Most manufacturing customers (especially automotive OEMs, medical device companies, and food retailers) require their suppliers to hold ISO 9001 certification as a minimum. Automotive Tier 1 and Tier 2 suppliers typically need IATF 16949. Medical device manufacturers need ISO 13485. Food manufacturers need FSSC 22000 or similar. Without these certifications, a manufacturer cannot sell to most major customers.

How does an MES help with QMS audits?

During a QMS audit (e.g., ISO 9001 or IATF 16949 certification audit), auditors request evidence that the organization controls its processes, monitors quality, traces products, and implements corrective actions. An MES provides this evidence automatically: production records with timestamps, quality inspection results, scrap and rework data with defect classifications, traceability reports linking finished products to raw materials, and trend analysis showing continuous improvement. Without MES, this evidence must be compiled manually from paper records, spreadsheets, and operator logbooks, which is time-consuming and often incomplete.

What is the role of SPC in a QMS?

SPC (Statistical Process Control) is a method for monitoring process parameters using control charts to detect process drift before it produces defective parts. In a QMS, SPC is a preventive control: it catches problems during production, not after. IATF 16949 requires SPC for processes identified in the control plan. An MES with SPC capability collects measurement data automatically, calculates control limits, and alerts operators when a process goes out of control, providing real-time quality assurance.

What is the connection between FMEA and QMS?

FMEA (Failure Mode and Effects Analysis) is a risk analysis tool required by IATF 16949 and recommended by ISO 9001's risk-based thinking approach. The PFMEA identifies potential failure modes in the production process and defines controls to prevent or detect them. These controls are documented in the Control Plan, which governs how production is monitored. The MES executes these controls (inspections, process monitoring, poka-yoke) and provides the data to verify that they work. FMEA, Control Plan, and MES form a connected chain within the QMS.