Quality Assurance (QA): Definition, ISO 9001 & MES

What is Quality Assurance (QA)?

Quality Assurance (QA) is the set of planned, systematic activities a manufacturer implements to provide confidence that a product or service will satisfy defined quality requirements. DIN EN ISO 9000:2015 defines it as "part of quality management focused on providing confidence that quality requirements will be fulfilled". QA is process-oriented, preventive and built into the way a plant operates, long before a defect can reach a customer.

In practice, QA shows up in five concrete places on a shop floor: documented procedures and work instructions, process validation and control plans, supplier qualification, internal and external audits, and structured corrective and preventive action (CAPA). It answers the question "is our process capable of producing conforming parts?", not "is this one part good?"

That distinction matters. Quality Control (QC) inspects output. QA engineers the process so bad output becomes unlikely in the first place. In modern manufacturing, both rely on the same data stream: counts, scrap reasons, process values, operator feedback, batch genealogy. A cloud MES is what turns that stream from paper logs into a live QA system.

QA vs. QC vs. Quality Management

The three terms are used loosely in day-to-day conversation, but ISO 9000 gives them precise, distinct meanings. Mixing them up costs audits and, worse, clouds root-cause discussions.

A plant can have strong QC and weak QA. The tell-tale sign is a high PPM sorted out in final inspection, low first-pass yield, and recurring 8D reports pointing to the same causes. The fix is never more inspectors. The fix lives upstream, in QA.

The ISO 9001 framework behind QA

ISO 9001:2015 is the world's reference for QA systems, used by over a million certified organizations. It prescribes no specific inspection method; it prescribes a structure. That structure is built on seven quality management principles and the Plan-Do-Check-Act cycle.

Industry-specific QA standards build on the same spine. IATF 16949 (automotive) adds APQP, PPAP, FMEA, MSA and SPC. ISO 13485 (medical devices) adds design controls and risk management per ISO 14971. AS9100 (aerospace) adds configuration management and counterfeit parts prevention. IFS and BRCGS (food) add HACCP. All of them assume the same plant-floor reality: if you can't prove it with data, it didn't happen.

The core QA toolkit on the shop floor

QA lives or dies on the methods it uses. The toolkit below is what a manufacturing QA organization actually runs, day to day, whether the product is a stamped bracket or a filled blister pack.

How an MES makes QA work in practice

Every QA tool above needs data. On paper-driven shop floors, that data is filled in by hand, aggregated on Mondays, and analyzed on Fridays. By then the bad parts are boxed and on a truck. A cloud MES changes the clock from weekly to real time, and it does five specific things for QA:

The effects show up in the numbers. Neoperl connected SPS-based alarms and scrap capture to SYMESTIC and reduced scrap by 15 % while raising machine availability by 8 %. Meleghy feeds machine-cycle data back into SAP via IDoc, closing the loop between production and the quality system across six plants. Klocke runs the same platform in a GMP-regulated packaging environment, where every stoppage and count is automatically tied to a production order.

The four QA failure modes we see most often

After 25+ years of MES rollouts across automotive, electronics and FMCG plants, the same QA pitfalls keep appearing. Recognizing them early is worth more than any new tool.

FAQ

What is the difference between QA and QC?
QA is process-focused and preventive: procedures, audits, process capability, supplier qualification, CAPA. QC is product-focused and detective: incoming, in-process and final inspection. QA makes good parts likely; QC confirms individual parts are good. A mature plant invests heavily in QA so it needs less QC. The opposite ratio is a symptom of a weak quality system.

Is ISO 9001 certification mandatory?
Legally, no. Commercially, in most B2B manufacturing it is effectively required. Automotive tier suppliers need IATF 16949, which sits on top of ISO 9001. Medical device manufacturers need ISO 13485. Aerospace needs AS9100. Food needs IFS or BRCGS. Even where no certificate is contractually required, major OEMs audit against ISO 9001 clauses during supplier approval. Running a QA system per the ISO 9001 structure is the baseline; the certificate is just the evidence.

How does an MES support a regulated QA environment?
A cloud MES supplies the three things auditors always ask for: timestamped, tamper-proof records of what was produced, under which parameters, by whom. In a GMP environment like Klocke's packaging operations, SYMESTIC captures counts and downtime per production order and ties them to the batch record in Navision ERP. The MES itself is not a validated GMP system for electronic batch records, but it provides the same kind of objective data backbone under ISA-95 Level 3 that any QA investigation depends on.

Can you do SPC without an MES?
Technically yes, with manual sampling, hand-entered data and offline tools. In practice, SPC only creates value when the operator sees a rule violation while the process is still running. Real-time SPC needs automated process-data capture (via OPC UA or digital signals) and a visualization layer operators actually use. That is what a modern MES delivers. Paper-based SPC usually degenerates into a compliance ritual within 12 months.

Where should a QA team start if everything is on paper today?
Start with one pain point, not a master plan. Pick the defect or scrap category that costs you the most money, capture that reason code automatically at the source, and put the live KPI on a shop-floor monitor. Once the first loop works, widen the scope. Neoperl, Brita and Klocke all started with one line or one workshop and scaled from there. The risk of a boil-the-ocean QA project is the same as for any MES project: it dies in the scoping phase.

Related: Quality Control · SPC · Six Sigma · Root Cause Analysis · PPM · Poka-Yoke · PDCA

About the author

Christian Fieg

Head of Sales at SYMESTIC. Six Sigma Black Belt, 25+ years in automotive manufacturing including global QA and MES programs at Johnson Controls (900+ machines, IATF 16949 environments) and Visteon. Author of "OEE: Eine Zahl, viele Lügen". · LinkedIn