Quality management system (QMS) design is the work of setting up the documented system an organization uses to plan, control, check and improve its work, built to a quality standard such as ISO 9001:2026 or to an accreditor's QMS requirements. It is for healthcare organizations building a QMS to support accreditation, certification or regulatory compliance. Integral Healthcare Solutions (IHS) designs the system and drafts its policy, manual, procedures and forms; your leadership adopts them and your process owners run them.
Last reviewed: October 2026.
What is a quality management system?
The main governing text for this build is ISO 9001:2026, Quality management systems — Requirements, Edition 6, which ISO lists with a publication date of September 2026. ISO describes the standard this way: "Its requirements define how to establish, implement, maintain, and continually improve a quality management system (QMS)" (ISO 9001:2026). ISO's page states: "The sixth and current edition of the world's leading quality management standard builds on the framework trusted by more than one million organizations worldwide, with targeted updates to improve usability and ensure continued relevance" (same page).
The previous edition is no longer current. ISO's page for ISO 9001:2015 shows the status "Withdrawn" and states: "This current edition has now been withdrawn and replaced by ISO 9001:2026, which builds on this strong foundation, refining how the standard is understood and applied" (ISO 9001:2015). IHS maps new designs to the 2026 edition unless your certification body or accreditor names another.
Certification is a choice. ISO states: "Within the ISO 9000 family, which defines seven quality management principles including a strong customer focus and continual improvement, ISO 9001 is the only standard that can be certified to (though certification is not mandatory)" (ISO 9001:2026).
For hospitals, a QMS also has to carry the Medicare quality program requirement. Under the hospital condition of participation for quality assessment and performance improvement, "The hospital must measure, analyze, and track quality indicators, including adverse patient events, and other aspects of performance that assess processes of care, hospital service and operations" (42 CFR 482.21(a)(2)).
The clause text of ISO 9001:2026 is in the purchased standard. Your organization's copy is the governing text for the build, and IHS maps to it clause by clause.
Who needs it and what triggers it
The buyers are organizations building a QMS to support accreditation, certification or regulatory compliance. Common triggers:
- An organization certified to ISO 9001:2015 has to move to the 2026 edition. ISO's guidance: "Organizations certified to ISO 9001:2015 should consult their certification body regarding transition arrangements to the new edition" (ISO 9001:2015).
- A hospital is pursuing or holds DNV accreditation. DNV states: "Our NIAHO® Accreditation Standards & Requirements are a framework to guide your organization to compliance with the Conditions of Participation (CoPs) from CMS, and to exceed them," and "Hospitals accredited by DNV achieve ISO 9001 certification at the end of their 4th annual survey" (DNV NIAHO).
- An organization wants to build to ISO 9001 without certifying, which ISO's page states is not mandatory (ISO 9001:2026).
- An organization answers to several standards and wants one quality system behind them instead of a separate set of documents for each.
How IHS helps
IHS works through a fixed process against the edition and requirements your organization chooses:
- Gap assessment of your current quality documents and practice against ISO 9001:2026 or your accreditor's QMS requirements, supported by questionnaires for your operating facts.
- Document and evidence mapping: a crosswalk from each clause of the chosen standard to the document or record that meets it.
- Drafting. IHS drafts a QMS scope and process map; a quality policy and measurable quality objectives for leadership to adopt; the quality manual or equivalent top-level description; procedures for document and record control, risk and opportunity management, internal audit, nonconformity and corrective action, supplier and contractor control, complaints, and management review; forms and records such as audit plans, corrective action reports and management review minutes; a work plan; and training material for process owners and internal auditors. IHS drafts the program, policies and clinical content for your clinicians to review and approve.
- Mock review of the drafted system against the chosen standard, clause by clause.
- Readiness support: marked open items for every decision only your organization can make, and a work plan to launch the system.
What your organization supplies: scope decisions, current policies, named process owners, quality data, your copy of the standard, and your certification body's or accreditor's requirements.
The limit: IHS is not a certification body and does not certify. Certification and accreditation decisions belong to your certification body or accreditor. Leadership adopts the quality policy and objectives and runs management review; process owners approve their own procedures.
For DNV hospital accreditation and ISO 9001 certification support, see DNV and ISO 9001 consulting. For a quality improvement program description, work plan and annual evaluation, see Quality Improvement Program Build. Related: Program Development and Accreditation Consulting.
What to have ready
Each item below ties to ISO 9001:2026 (Edition 6, September 2026), ISO's transition guidance, DNV's NIAHO page or 42 CFR 482.21, as linked.
- Your organization's purchased copy of ISO 9001:2026, or your accreditor's QMS requirements, as the governing text (ISO 9001:2026).
- A first decision on the scope of the QMS: which sites, services and processes it will cover, since the standard defines how to "establish, implement, maintain, and continually improve" the system (ISO 9001:2026).
- Your current quality policy, quality objectives and any quality manual.
- Your current certificate and certification body's correspondence, if you hold ISO 9001:2015 certification, for the transition ISO tells you to discuss with that body (ISO 9001:2015).
- Whether you intend to certify, since ISO states certification is not mandatory (ISO 9001:2026).
- Your DNV survey reports and NIAHO requirements, if you are a DNV-accredited hospital (DNV NIAHO).
- For hospitals, your list of quality indicators, including adverse patient events, that you measure, analyze and track (42 CFR 482.21(a)(2)).
- Existing procedures for document control, internal audit, corrective action, complaints and supplier control.
- Recent internal audit reports, corrective action records and management review minutes.
- A list of process owners for each major process.
When the list is together, the introductory call is the place to start.
How it compares
Organizations building a QMS usually weigh these routes. They can be combined.
| Route | What the sources say |
|---|---|
| Build to ISO 9001:2026 and certify | ISO 9001 is the only standard in the ISO 9000 family that can be certified to (ISO). Certification decisions are the certification body's. |
| Build to ISO 9001:2026 without certifying | ISO states that certification is not mandatory (ISO). |
| DNV NIAHO hospital accreditation | DNV describes NIAHO as a framework for compliance with the CMS Conditions of Participation and states that DNV-accredited hospitals achieve ISO 9001 certification at the end of their fourth annual survey (DNV). The DNV page we read does not state which ISO 9001 edition applies. |
| Design in-house | Your quality staff design and document the system themselves against the purchased standard. |
| IHS QMS design | Gap assessment, crosswalk, drafted policy, manual, procedures and forms, training material and mock review. IHS does not certify or accredit. |
What it costs
ISO and DNV do not publish certification or accreditation fees on the pages we reviewed; fees depend on scope and on the certification body or accreditor you choose. IHS scopes each engagement after a free introductory call.
What this is not
- IHS is not a certification body or an accreditor and does not grant or influence a certification or accreditation decision.
- This is not a certification audit. Designing the system and passing an audit by your certification body are separate steps.
- This page is not legal advice, and IHS does not submit anything to a certification body or accreditor on your behalf. Your organization's named contact submits; IHS drafts the text.
Frequently asked questions
What is a quality management system, and how is it different from a QI program?
ISO describes ISO 9001's requirements as defining how to establish, implement, maintain and continually improve a quality management system. A quality improvement program, such as a hospital's program under 42 CFR 482.21, measures, analyzes and tracks quality indicators. In IHS's reading (October 2026), the QMS is the wider system of policy, procedures, audit and review that a QI program runs inside.
What changed between ISO 9001:2015 and ISO 9001:2026?
ISO describes the 2026 edition as the sixth edition, built with targeted updates to improve usability and keep the standard relevant, and states that it refines how the standard is understood and applied. ISO's page says the 2026 edition focuses on improving clarity, emphasizes quality culture and leadership, and separates risk and opportunities. The clause-level text is in the purchased standard, which IHS maps clause by clause.
We are certified to ISO 9001:2015; how long do we have to move to the 2026 edition?
ISO's page for the 2015 edition states that it has been withdrawn and that certified organizations should consult their certification body about transition arrangements. The ISO pages we reviewed do not state a transition deadline, so the date comes from your certification body.
Do we need ISO 9001 certification, or can we build to the standard without certifying?
ISO states that ISO 9001 is the only standard in the ISO 9000 family that can be certified to, and that certification is not mandatory. Whether you need it depends on what your contracts, customers or accreditor require.
How does ISO 9001 fit with DNV NIAHO hospital accreditation?
DNV describes its NIAHO standards as a framework for compliance with the CMS Conditions of Participation. DNV also states that hospitals it accredits achieve ISO 9001 certification at the end of their fourth annual survey. The DNV page we read does not name the ISO 9001 edition.
How do we set up document control, internal audit, management review and corrective action?
IHS drafts a procedure for each, with the forms and records they produce: audit plans, corrective action reports and management review minutes. Each procedure is mapped to the clause of the standard you choose, and your process owners approve it.
Can one QMS support accreditation, certification and regulatory compliance at the same time?
IHS's reading (October 2026) is that it can, when the crosswalk maps each requirement from each text to the document that meets it. For hospitals, DNV's NIAHO page ties its standards to the CMS Conditions of Participation and to ISO 9001 certification, which is one example of a single system serving more than one text.
Who in the organization owns the QMS?
Leadership adopts the quality policy and quality objectives and runs management review. Process owners approve the procedures for their own processes. IHS drafts; your organization decides and runs the system.
What is the difference between designing the QMS and passing a certification audit?
Design produces the documented system: scope, policy, objectives, manual, procedures and records. A certification audit is performed by a certification body, which makes the certification decision. IHS designs the system and runs a mock review; it is not a certification body.