It's 3:47 on a Friday afternoon when the owner sticks his head into your office.
"Hey — good news. That new customer I've been chasing? They asked who our quality manager is. I told them that's you. They want a Teams call Monday to talk about our quality system. This is a big one. They said they love what we do and they're willing to work with us on getting certified."
And then he's gone, and you're sitting there with two new facts. One: you are apparently the quality manager. Two: you have a weekend to figure out what a quality system is.
Take a breath. This exact scene plays out in small manufacturers, distributors, and machine shops every week. The company gets good enough at what it does that bigger customers notice, and bigger customers come with a procurement process that asks questions nobody in the building has had to answer before. You are not behind. You are exactly where every quality manager in this industry started — most of us got the title the same way you just did.
Here is what you actually need to know before Monday.
What they mean by "quality system"
A quality management system — QMS, and you'll be saying that acronym a lot now — is not a binder, a poster, or a person. It is the set of defined ways your company makes sure the product going out the door is what the customer ordered. How orders get reviewed. How work instructions get to the floor and stay current. How you inspect, and who's allowed to say "ship it." What happens when a part is wrong. How you pick and keep an eye on your suppliers. Who was trained on what.
You already do most of this. Every functioning shop does — otherwise you'd have been buried in returns years ago. What you likely don't have is the part the customer is asking about: the system written down, followed consistently, and generating records that prove it happened.
The international reference point for all of this is ISO 9001 — the standard that defines what a quality management system has to cover. When a customer asks about your quality system, they are usually asking one of two things: are you certified to ISO 9001 (or an industry version of it, like AS9100 for aerospace or ISO 13485 for medical devices), or if not, how close are you.
What Monday's meeting will actually be
Nobody is going to make you recite clause numbers. A supplier-qualification conversation with an OEM almost always walks through the same short list:
- Are you certified? (You're not. That's survivable — keep reading.)
- How do you control your documents? Meaning: when a drawing or work instruction changes, how do you make sure the floor is building to the new revision and not the old one?
- How do you handle nonconforming product? When a part is out of spec, what stops it from shipping? Who decides what happens to it?
- What do you do when something goes wrong? They may say "corrective action" — they mean: do you fix the cause, or just sort the bad parts and hope?
- Can you trace material? If they recall a lot, can you tell them which of their parts it went into?
- How do you know your people are trained? Not "are they good" — can you show who is qualified to do what?
Notice what that list is: it's the stuff you already manage every day as a production manager, asked in a more formal dialect. You speak this language. You just learned it with different words.
What to say when you're not certified
Do not bluff. The person on the other end of that call has heard every bluff, and supplier-quality people talk to each other.
The honest answer is also the strong one: "We're not certified today. We have controls in place for [the things you genuinely do — incoming inspection, final inspection, order review, whatever is true], and we're formalizing our system against ISO 9001 with certification as the goal." Then — and this matters — ask them questions. What do they require of suppliers at your tier? Do they accept "compliant, certification in progress"? Many OEMs do, especially when they've told your owner they're "willing to work with you." That phrase is real: it usually means their supplier-quality group will audit you themselves, give you a findings list, and treat your progress against it as the qualification path.
A customer who wants to help you get certified is handing you a paid apprenticeship in quality management. Take it.
Your weekend, if you want one
You don't need to build a QMS by Monday, and you shouldn't try. Do three things:
- Write down what actually happens. One page: how an order moves from quote to shipment in your shop, and where anything gets checked. Not what should happen — what does. This is the seed of everything that comes later, and it makes you fluent in Monday's meeting.
- Inventory what exists. Old inspection sheets, a calibration folder, the training matrix someone started in 2019, supplier certs in an email folder. Whatever's real, know where it is. Don't invent anything — a fabricated record is the one unforgivable sin in this profession, and auditors are unreasonably good at spotting them.
- Read the questions list above out loud and draft one honest sentence for each. Where the answer is "we don't really have that" — that's fine. Say "that's on our roadmap." It will be true by Tuesday.
What comes after Monday
Assuming the call goes the way these calls usually go, you'll come out with a supplier questionnaire, maybe a customer audit date, and a quiet understanding that certification is now a company goal. From there, the road is well-traveled: figure out the gap between what you do and what ISO 9001 asks for, close it, run the system long enough to generate real records, then bring in a certification body. We've written about how long that actually takes — spoiler: the records are the slow part, not the paperwork.
Two more things, from everyone who's held your new title:
You'll need help carrying both hats. Production manager and quality manager is a workable combination in a small shop right up until it isn't — there are places the two jobs genuinely conflict, and it's worth knowing where the line is before an auditor finds it for you.
The tools have gotten better. A generation ago this meant binders, then it meant a shared drive full of spreadsheets with names like FINAL_rev3_ACTUAL.xlsx. It doesn't have to mean that anymore — this is exactly the problem Norma is being built for.
Monday is going to be fine. Congratulations on the promotion you didn't ask for — it's a good profession, and you're going to be better at it than you think.