
A company uses this kind of system to deliver a product or service the same way from one order to the next, and to correct the work when it fails. The system is the policies that state intent, the processes people follow, and the records that show what happened. It is not a single manual, and it is not a software product, though software often stores the records.
Policies, Processes, and Records
The three layers answer different questions: what the company intends, how people do the work, and whether that work was done. A policy with no process leaves people to invent the steps. A process with no records leaves no evidence that the steps ran.
- Policy: States the scope, the quality intent, and who is accountable when a result misses the requirement.
- Process: Describes the steps for designing, producing, checking, delivering, and correcting the product or service.
- Records: Keep the evidence that a step ran, that a failure was found, and that the correction was finished.
Requirements Across Industries
The International Standards Organization (ISO) publishes ISO 9001, the widely used requirements standard for this kind of system. The standard says what the system must include. It does not dictate one industry’s product design or how a company assigns roles. Manufacturers, service firms, and public organizations apply the same requirements to their own work. A company can run the system without seeking a certificate. When a certificate is issued, it is the outcome of an audit against those requirements. It does not replace the policies, processes, and records.
What an Audit Checks
An audit compares the documented system with the work. It does not score the prose of a manual. The comparison below pairs what a system of this kind typically documents with the evidence an auditor looks for.
| Layer | What the System Documents | What an Audit Checks |
| Policy | Scope, quality intent, and who is accountable for results that miss a requirement. | That the stated intent matches how work is assigned, reviewed, and owned. |
| Process | Steps used to design, produce, check, deliver, and correct the product or service. | That people follow those steps and that the steps can produce a consistent result. |
| Records | Evidence that work happened and that a failure was found and corrected. | That the records exist, are complete, and show the correction was carried out. |