What's changed: Initial version
3.1Quality management
Covers the division of roles among the three quality processes—quality planning, quality assurance, and quality control—and the trade-off among the three cost of quality categories (prevention cost, appraisal cost, and failure cost), together with why preventing defects from being built in the first place minimizes total cost more than relying on inspection to catch them.
Project managers (PMs) often mistake quality management for "catching defects through inspection," but what JIS Q 21500 and the PMBOK actually emphasize is preventive planning and assurance activity that keeps defects from being built in at all. This section organizes the roles of the three processes—quality planning, quality assurance, and quality control—and uses the structure of cost of quality to teach the PM judgment of where to invest to minimize total cost.
3.1.1The roles of quality planning, assurance, and control
- Quality planning defines, before and during the planning phase, which quality standards must be met and how they will be measured. It clarifies quality requirements and acceptance criteria for each deliverable, establishing the basis for later assurance and control.
- Quality assurance audits and reviews, during project execution, whether the defined processes and standards are actually being followed. It focuses not on individual deliverables but on whether the process itself is adequate, driving process improvement (corrective action) to prevent future defects—a largely preventive activity.
- Quality control measures and verifies individual deliverables and outputs to judge whether they meet the defined quality standards (reviews, inspections, tests, etc.). When nonconformance is found it feeds into corrective action, but by nature it is closer to detection (inspection).
- The relationship among the three: quality planning (sets the standard) -> quality assurance (audits process adherence, preventive) -> quality control (inspects deliverables, detective). It is important not to conflate assurance, which is process-oriented and preventive, with control, which is deliverable-oriented and detective.
3.1.2The cost-of-quality trade-off
- Prevention cost is investment aimed at keeping defects from occurring in the first place (training, process standardization, requirements reviews, tooling, etc.). It is spent before defects occur and generally offers the best cost-effectiveness.
- Appraisal cost is the cost of inspecting and measuring whether completed deliverables meet the standard (reviews, inspections, testing, audits). It detects defects rather than preventing them, and tends to cost more per defect caught than prevention.
- Failure cost is incurred after a defect has actually occurred. It splits into internal failure cost (rework/rework found before release) and external failure cost (found by the customer after release—claims handling, maintenance, reputational damage), and the later a defect is found (the further downstream, closer to production), the more the cost escalates, often exponentially.
- The conclusion of the trade-off: the more you invest in prevention, the more appraisal cost and failure cost (especially the expensive external failure cost) tend to fall, minimizing total cost of quality. In many situations a PM should prioritize preventive investment—examining why the process lets defects get built in—over simply "inspecting harder."
Most-tested: "quality assurance is process-oriented and preventive, while quality control is deliverable-oriented and detective," "increased investment in prevention cost reduces the sum of appraisal and failure cost, minimizing total cost of quality," and "the later a defect is discovered (the closer to external failure cost), the more the cost escalates." Do not swap the target (process vs. deliverable) or nature (preventive vs. detective) of quality assurance and quality control.
Suppose a PM is reviewing the quality plan for a business-system development project. Analyzing the last three months of data, the PM finds that effort spent fixing defects caught during testing (appraisal cost) keeps rising, yet the number of incidents reported by customers after release (external failure cost) has not fallen. Simply deciding to "test even harder"—piling on more appraisal cost—risks a vicious cycle: because the source of the defects is never addressed, the rate at which defects get built in does not decrease, and appraisal cost balloons without limit. Given the structure of cost of quality, what the PM should prioritize is fixing the upstream process (requirements definition, design) where the defects are being introduced. Concretely, this means clarifying review criteria at the requirements stage, introducing checklists into design reviews, and training developers on design standards—strengthening investment in prevention cost. If this investment reduces the underlying rate of defects being introduced, the number of defects caught in testing falls, and as a result both appraisal cost (test effort) and external failure cost (customer-response effort, reputational damage) fall together. Conversely, if a system already in production is suffering frequent severe incidents, the PM may need a staged judgment: first make an emergency investment on the appraisal side (strengthened monitoring, regression testing) to stop the bleeding on external failures, while starting root-cause analysis to fix prevention in parallel. The order a PM should apply is: prioritize preventive investment once the source (process) of the defects is identified; in an emergency where the source is not yet identified and damage is spreading, contain it with appraisal investment while proceeding to root-cause analysis.
| Cost-of-quality category | What it covers | Timing |
|---|---|---|
| Prevention cost | Training, process standardization, requirements review, tooling | Before defects occur (best cost-effectiveness) |
| Appraisal cost | Reviews, inspections, testing, audits | After deliverables are built, before release (detection) |
| Internal failure cost | Rework found before release | Before release (after occurrence) |
| External failure cost | Customer response, maintenance, reputational damage | After release (after occurrence, most expensive) |
Trap: "Strengthening testing (appraisal cost) is the most cost-effective way to improve quality" is wrong—appraisal cost only detects defects rather than preventing them from occurring, and prevention cost is generally more cost-effective. Also wrong: "quality assurance and quality control are the same activity"—quality assurance is a preventive activity that audits process adherence, while quality control is a detective activity that inspects deliverables, differing in both target and nature.
3.1.3Section summary
- Distinguish quality assurance (process-oriented, preventive) from quality control (deliverable-oriented, detective)
- Cost of quality splits into prevention, appraisal, internal failure, and external failure; the later a defect is found (closer to external failure), the more cost escalates
- Increasing investment in prevention cost reduces the sum of appraisal and failure cost, minimizing total cost of quality
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. A PM notices that effort spent fixing defects in testing keeps rising, while post-release customer-reported incidents have not decreased. Given the structure of cost of quality, what should the PM prioritize?
Q2. During project execution, auditing whether the defined design-review standard is actually being followed in practice, and prompting corrective action for processes that are not being adhered to, corresponds to which activity?
Q3. A system already in production is suffering frequent severe incidents, and external failure cost is escalating rapidly. The process defect causing this has not yet been identified. What is the most appropriate initial action for the PM?

