Quality culture and ethical behavior in ISO 9001:2026: what the requirement is, and what counts as evidence

Where the requirement lives

Culture appeared once in the 2015 edition, as one of the internal issues you might consider when working out your context. In 2026 it appears as a requirement in two places and as context in three more.

What it is not

Most of the transition work I have seen on this clause so far is wasted. Three things it does not ask for:

• A culture program. No survey, no maturity model, no posters. If you run one, fine, but a survey score is not the evidence and an auditor cannot require one.
• A new document. There is no documented-information requirement attached to either clause. The policy can carry a line about expected behavior (Annex A suggests it can), and 5.2.2 now asks that the policy be put into practice, understood and followed, which is the closest the standard comes to asking you to write culture down.
• A definition. The standard does not define quality culture. The note under 5.1.1 tells you where to look for it instead: what people value, how they think about the work, what they habitually do, and the actions they take. That is a list of things that can be observed and asked about, not filed.

What it does ask for is harder: that the way your plant actually behaves when something goes wrong is something top management has shaped on purpose, and that the people on the floor can tell an auditor what that expected behavior is.

The three answers a machinist gives

Ask a machinist what the company expects from him when a part is out of tolerance. Every answer I have ever heard falls into one of three kinds.

1. "I don't know" or "nobody's told me"

A finding against 7.3 e), and probably against 7.3 c) as well. It usually means the awareness training exists as a signed sheet and not as a conversation. The fix is not another sheet.

2. The slogan

"Quality is everyone's responsibility." "Right first time." He has read the wall. An auditor will accept it as awareness of the policy and then ask the follow-up: what did you do the last time a part was out? If the answer is a shrug, the slogan has no culture behind it.

3. What he actually does

"I stop the job, tag the parts, and tell the lead. Last month I flagged a bore that was drifting and they pulled the tool before it made scrap." That is the evidence. It names a practice, an action, and what happened next. An auditor corroborates it in the records: the nonconformity report raised from the floor, the hold tag, the corrective action that went to the tool instead of the operator. The note under 5.1.1 lists exactly these things: practices and actions.

The third answer cannot be trained in a session. It exists when stopping a job has never cost anyone anything, when the last person who raised a problem was thanked in front of the shift, and when the corrective action register shows causes rather than names. Those are leadership behaviors, which is why the requirement sits in 5.1.1 before it sits in 7.3.

What top management has to show under 5.1.1

Promotion is an activity, so the evidence is what leaders did, not what they signed. An auditor looks for it in five places.

1. The last conflict between quality and delivery. Every plant has one each quarter. What was decided, who decided it, and does the floor know? If schedule pressure overrode a hold and nobody wrote down why, the culture the auditor sees is the one that shipped the part.
2. How corrective actions close. The 10.2 register is a culture record. Causes that stop at a person's name, retraining as the standard fix, and effectiveness checks that say "done" tell an auditor what leadership rewards.
3. Management review. Nothing in 9.3 requires a culture agenda item. But minutes that discuss escapes, near misses raised from the floor, and what leadership did about the environment are the easiest 5.1.1 i) evidence there is. Minutes that only show the scorecard are not.
4. Resource decisions. A gauge that stayed broken for a quarter, an inspection step cut to hit rate, an audit program half completed: each is a leadership action that shaped culture, and each is visible in records the auditor already has.
5. Presence. Whether the plant manager has been on the floor when a problem was raised, and what she said. Auditors ask operators this question directly.

The ethics half

Ethical behavior is paired with culture in every place it appears, and it is the half that most quality manuals have never addressed. Annex A frames it as behavior in decisions, actions and interactions that can affect every aspect of quality and the confidence interested parties have in you. On the floor it is specific:

• Inspection records completed without the inspection. The pencil-whipped checklist is an ethics failure before it is a 7.1.5 failure.
• Known nonconforming product shipped on the assumption the customer will not notice, or with a certificate that says something the test did not show.
• Audit findings softened because the auditee is a friend, or internal audits scheduled where the auditor already knows the answer.
• Supplier data accepted because checking it would delay the order.

Every large quality failure on the Lead Time channel has one of these at its center, and in each case the paperwork was in order. That is why the clause exists. An auditor who has read the standard's rationale will ask what your organization expects when the honest record is the inconvenient one, and whether anyone has ever been rewarded for producing it.

How an auditor will test it

Expect the interview walk, not a document request. A typical pattern:

1. Three people in three roles: an operator, a lead or supervisor, and someone in a support function such as purchasing or shipping. Each is asked what the organization expects of them on quality and on honesty, and what happens when something is wrong.
2. The answers are checked against each other. Three different descriptions of the expected behavior is a 5.1.1 i) question: leadership has not promoted one culture.
3. The answers are checked against records: nonconformity reports raised by operators in the last quarter, hold tags, the corrective action register, the last management review, the audit program.
4. Top management is asked the same questions in reverse: what do you expect, how do you promote it, and show me the last time it cost you something to hold to it.
5. The work environment is walked with 7.1.4 in mind. A shop where reporting a defect draws a raised voice is a psychological factor the note now ties to culture.

The finding, when it comes, is rarely "no quality culture." It is 7.3 e) for people who cannot describe what is expected, or 5.1.1 i) for leadership that cannot show it did anything to promote it.

How an auditor assesses quality culture (it is not a document)

The assessment happens on the floor, with no manager present. The auditor stands at a machine and asks one operator one question: if you saw something wrong with a part and your lead told you to run it anyway, what would you do, and when did you last do it? A plant with a quality culture answers with a date and a name. A plant without one answers with the policy.

Nothing in a manual changes that answer. What changes it is whether the last person who stopped a job was thanked or blamed, and everyone on the floor knows which. That is why this is the one place a strong shop can have no finding and a well-documented one can.

Twelve minutes on every 2026 change, from the floor. The transition-audit episode, with the floor conversation above played out hour by hour, follows on October 20.

Closing the gap in a month

1. Write down what you expect, in one page. Not a values statement. Five or six behaviors in plain words: stop the job when in doubt, record what you saw and not what you wished you saw, raise problems to the lead the same shift, never sign for a check you did not do, treat the supplier's data as a claim until verified. Put it in or beside the quality policy so 5.2.2 d) and 7.3 e) are covered by the same document.
2. Brief every person, in person. A ten-minute toolbox talk by the area lead, with the page in hand and one real example from the plant. Keep the attendance record; that is your 7.3 evidence. Do not e-mail it.
3. Fix the one behavior that contradicts it. Every plant has one: the hold that gets overridden, the check that gets signed in advance, the operator who was blamed last time. Fix that one visibly. It is worth more than the other four steps together.
4. Add three interview questions to the internal audit checklist. What does the company expect of you on quality? What do you do when a part is wrong? What happened last time? Your 9.2 audits then generate the evidence before the certification body asks for it. The internal audit checklist ($5+) on this site has a place for them.
5. One visible leadership act. The plant manager closes a corrective action personally, or thanks the person who stopped the job in front of the shift, or reverses a schedule decision in favor of a hold and says why. Then it goes in the management review minutes.

The document sweep for culture and ethics

Short, because the clause adds no documents. The full sweep for the whole standard is on the document control checklist.

Questions