'Quality’ therefore means different things to different people depending upon the context; this is particularly the case when it is applied to organisations. In manufacturing and production quality is often defined in relation to the number of defects or levels of non-compliance against standards. For service organisation quality is more likely to mean service excellence and customer care, which is measured in terms of meeting customer expectations and customer satisfaction.In providing an internal audit service to your organisations all five of these categories may apply, although some may be assigned more importance than others. This begs the question - who defines quality for you and how is it expressed and measured?
Quality principles
The categories show the range of interpretation that exists around ‘quality’. This has created diversity for the management of quality. Emphasis can be on ‘product’, ‘process’ and ‘people’ forms of quality management or a combination of these depending upon the nature of the organisation. The Chartered Quality Institute (CQI), the professional body dedicated to quality, believes that all forms of quality management can “not only create value for an organisation and its stakeholders but also manage its exposure to risk and can make the difference between success and failure”.
Quality management systems (QMS) - standards, models and tools
Quality is not something that just happens. The management of quality is a management discipline, which seeks to ensure that organisations are as successful as possible. This requires a framework, described as a quality management system (QMS) that contains policies, objectives, structures, resources and procedures. The QMS translates good intentions to working practice and the achievement of quality principles and goals. The Business Links website provides a case study of how a QMS can be established.

The case study shows how some organisations use established standards, models and tools within their QMS.
The diagram and the table below provide a brief introduction to a small selection of the better known standards, models and tools. Others, with more case studies, can be found on the businessballs website.
Quality assurance and control
The terms ‘quality assurance’ and ‘quality control’ are often used interchangeably to refer to ways of ensuring the quality of a service or product. However, the terms have different meanings. Quality assurance is about the ‘prevention’ of defects. It involves planned and systematic activities within the QMS designed to build an awareness of quality. Quality control is about the ‘detection’ of defects and most commonly associated with testing which takes place within the QMS. In practice quality control will form part of quality assurance.
Quality and internal audit
Like other professions internal audit should strive to deliver the best service it can. If we recognise the categories and principles of quality we need to achieve recognised standards, satisfy customer and stakeholder requirements, perform in a reliable and consistent way and be cost effective and efficient. The question is how do you do that?
The head of internal audit should identify the objectives of internal audit then establish processes and systems to achieve them and to report the results. The Definition of Internal Auditing is a good place to start as it sets out the fundamental purpose, nature and scope to aim at while the Code of Ethics explains how we should behave. But it is also important to match this up with customers and stakeholders’ expectations. It is important to remember that the International Standards are principle-based so organisations can tailor internal audit to their specific circumstances, particularly in relation to legal and regulatory requirements. This means internal auditors need to understand what’s best for their organisation.
In effect, by following the guidance in the International Professional Practice Framework (IPPF) and listening to their stakeholders, internal auditors can lay the foundations for delivering a high quality service. Our 2007 guidance entitled Quality Assurance and Improvement Programme provides more detail on how to approach quality and quality assurance.
The International Standards also set out what internal audit can do to perform quality assurance and how to establish a comprehensive programme to underpin day-to-day delivery of a reliable assurance and consulting service. We have prepared a short document that explains the quality assurance requirements of the standards, which includes a Q&A section. In addition there is a self-assessment checklist to help internal audit perform internal assessments, which can be validated externally.
Mark Stock, independent consultant, Integrity2insight Ltd who is involved in delivering external quality assessments (EQA) sets out 10 lessons learnt that may help you prepare for such a review: