Quality Culture and Ethical Behavior

For the first time in the history of the standard, ISO 9001 requires quality culture and ethical behavior. Clause 5.1.1 obliges top management to promote them. Clause 7.3 obliges everyone else to be aware of them. This page explains what that means in practice, what an auditor can actually examine, and what evidence looks like.

Why this is in the standard at all

Every auditor has seen the same pattern: a company with immaculate procedures, a full set of records and a quality system that quietly stops working the moment a big order is late. The documents describe one organization; the shop floor operates as another. ISO 9001:2015 had no direct way to address that gap, because everything it required could be satisfied on paper.

The 2026 edition pushes on the gap directly. It does not ask you to have a good culture in the abstract. It asks top management to promote quality culture and ethical behavior, and it asks whether your people understand what is expected of them.

"Culture is unauditable" — why that is not true

An auditor cannot measure culture. What they can do is ask questions whose answers only come out one way in a healthy organization:

• Can an inspector record a failed result without anyone pressing them to reconsider it?
• When did someone last stop a shipment they were unsure about, and what happened to them afterwards?
• What happens to quality objectives in the last week of a bad quarter?
• How does management review discuss bad news — as a problem to solve, or as a number to explain away?
• If a customer complaint arrives that nobody wants to log, does it get logged?

None of these requires a judgement about your character. They are questions with observable answers, found in nonconformity records, complaint logs, management review minutes and in what your people say when the auditor talks to them without a manager in the room.

What auditors will actually examine

Where they look	What tells the story
Nonconformity records	A system with very few internal nonconformities is usually not a clean system — it is a system where people have learned not to raise them.
Management review minutes	Whether adverse trends are recorded and acted on, or smoothed over.
Internal audit reports	Whether internal audits ever find anything uncomfortable.
Staff interviews	Whether people can describe what to do when something looks wrong — and whether they believe it is safe to do it.
Objectives and incentives	Whether throughput targets quietly conflict with quality objectives.
Concession and deviation records	Frequency and pattern. Routine concessions are a culture finding, not a paperwork finding.

What not to do

The instinctive response to a new requirement is to write a procedure for it. Resist it. A document called "Quality Culture Procedure" that states the company is committed to a culture of quality is exactly the kind of paper conformity this clause exists to defeat, and an experienced auditor will read it as a warning sign rather than as evidence.

Equally, do not reach straight for a poster campaign. Slogans on a wall are not the requirement, and a workforce that has seen a quality slogan appear a month before an audit draws its own conclusions.

What good evidence looks like

Evidence for this clause is usually already in your business; it just needs to be visible and connected.

1. A stated expectation people can repeat. Not a slogan — a rule. "If you are not sure it conforms, stop and ask. Nobody is penalised for stopping." Say it at induction, say it at toolbox talks, and put it where work happens.
2. A worked example, documented. The most persuasive evidence in a culture audit is a real incident where someone raised a problem at an inconvenient moment and the organization backed them. Record it. Reference it in management review.
3. Top management visible in the record. Clause 5.1.1 is a requirement on top management specifically. Their presence in quality communications, in review minutes and in the resolution of significant nonconformities is the evidence.
4. Awareness that is checked, not just delivered. Clause 7.3 is about awareness, not attendance. Two questions asked of three people on the floor is a more meaningful check than a signed training register.
5. Ethical behavior with a concrete edge. In a quality context this mostly means integrity of records: no post-dating, no adjusting a measurement to pass, no signing for an inspection that was not performed. Say so explicitly, and make the route for raising a concern known.

How this connects to the rest of the transition

Clause 5.1.1 does not sit on its own. It links to clause 7.3 awareness, to clause 9.3 management review where leadership engagement becomes visible, and to the separated opportunity requirement in clause 6.1.3 — because an organization where people do not feel able to raise problems is also an organization where nobody proposes improvements.

In our experience this is the requirement that separates a straightforward transition from a difficult one. The documentation changes elsewhere in ISO 9001:2026 are a few weeks of work. This one asks whether the system you documented is the system you run.

See also: all changes from ISO 9001:2015 and the transition gap checklist.

Frequently Asked Questions