Quality / Reliability Engineering — Good-to-Know Rules of Thumb

Quality / Reliability Engineering — Good-to-Know Rules of Thumb

The ASQ alphabet soup exists because quality is a team sport with specialized positions. This guide maps the rest of the roster, the standards you'll actually be audited against, and the judgment the exams can't test.

1. The niche and standard-practice credentials (no standalone guides — this is their home)

• CMQ/OE (Certified Manager of Quality / Organizational Excellence) — the leadership credential: quality management systems at the enterprise level, strategic planning, Baldrige. Take it when you're moving from doing quality to running quality (director/VP track). The CQE proves you can analyze; CMQ/OE proves you can lead.
• CSSGB / CSSBB (ASQ Six Sigma belts) — the statistical project credentials; see the shared guide: ../shared/six-sigma-green-black-belt-study-guide.md. Pair a Black Belt with a CQE and you're employable in any manufacturing sector on earth.
• IASSC ICBB — exam-only Black Belt alternative; no experience requirement. Faster to earn, lighter signal than ASQ's.
• CQI/IRCA QMS Lead Auditor grades — the international route for third-party certification-body auditors (the people who audit for registrars). If you want to work for BSI/TÜV/SGS as an auditor, this is the credential, not the CQA.
• Exemplar Global auditor grades (QMS Auditor → Lead → Master) — the RABQSA-descended equivalent; recognized in the same certification-body market. Pick IRCA or Exemplar Global based on which your target employers list.
• IATF 16949 Internal Auditor — not a certification at all: it's a competence requirement (clause 7.2.3). There is no official "IATF internal auditor certificate" — anyone selling you one is selling training. What matters is documented competence: training records + supervised audits + knowledge of the standard, core tools, and customer-specific requirements.

2. Standards and regulations mastery

ISO 9001:2026

The current edition per our catalogue (superseding 2015 — confirm transition timelines with your registrar). Know cold: Annex SL structure, the process approach, risk-based thinking (6.1), operational planning and control (8.1), design and development controls (8.3), control of externally provided processes (8.4), nonconforming outputs (8.7), and the improvement clause (10.2 — nonconformity and corrective action, two distinct steps). Compliance demonstrated by: a lived process approach (turtle diagrams/SIPOCs that match reality), internal audits that find real issues, and management reviews with outputs (not minutes filed unread). Common violations: corrective actions that never verify effectiveness; "risk-based thinking" as a spreadsheet nobody uses; document control that collapses the week after the audit.

IATF 16949:2016

The automotive overlay on 9001 — know what it adds: APQP timing and PPAP approval, control plans (prototype/pre-launch/production phases), MSA and SPC as requirements not suggestions, embedded software assessment, second-party auditor competence, and customer-specific requirements (the exam and the audit both test that you flowed down Ford/GM/Stellantis CSRs). Common violations: control plans that don't match the floor; PPAP submitted without the supporting MSA/SPC evidence; ignoring CSRs.

AS9100D (SAE AS9100:2016)

Aerospace overlay: counterfeit-parts prevention (8.1.4 — know the control types: testing, traceability, supplier controls), configuration management rigor, risk management throughout (not just 6.1), human factors in nonconformity (10.2 — consider human factors in corrective action), and awareness requirements. Common violations: FOD (foreign object debris) programs that exist on paper; counterfeit avoidance without testing capability.

ISO 13485:2016

Medical-device QMS: design and development files (DHF), risk management file (ISO 14971) integrated through design, complaint handling feeding CAPA, sterile-device and implantable-device extras, and the key difference from 9001 — 13485 prescribes documentation where 9001 allows flexibility, and continual improvement is replaced by maintaining effectiveness. Regulators (FDA, EU notified bodies) read it as law-adjacent.

ISO/IEC 17025:2017

Lab competence: method validation/verification, measurement uncertainty budgets, metrological traceability, proficiency testing, and impartiality/confidentiality requirements. Know the difference between calibration and testing lab requirements, and that a 17025-accredited calibration certificate is what makes your torque wrenches audit-proof.

AIAG Core Tools (APQP, PPAP, FMEA, MSA, SPC, Control Plan)

The automotive quality operating system. Know cold: APQP's 5 phases and gate deliverables; PPAP's 18 elements and submission levels (1–5); the AIAG-VDA FMEA 7-step method (it's the current edition — the old RPN-only approach is obsolete); MSA acceptance (%GRR <10%, ndc ≥5); SPC reaction plans in the control plan. These are tested on CQE-adjacent exams and demanded in every automotive supplier audit.

ISO 19011

The auditing guideline: audit principles (integrity, fair presentation, due professional care, confidentiality, independence, evidence-based approach), managing the audit program, auditor competence evaluation. The CQA's home standard — see the CQA guide.

TL 9000

The telecom/ICT overlay (QuEST Forum): adds performance measurements (field defect rates, outage metrics) reported into a central repository for benchmarking. Know it exists and its measurements-driven character; niche outside telecom.

ASME NQA-1

Nuclear QA: the most prescriptive QA standard in industry — 18 criteria paralleling 10 CFR 50 Appendix B, graded approach, commercial-grade dedication (the exam-worthy topic: how a commercial item becomes safety-related through dedication). If you touch nuclear, this is your bible.

3. Regulations that bite

• FDA QMSR (21 CFR Part 820) — the device quality regulation, now aligned to ISO 13485. Know: design controls (820.30), CAPA (820.100), complaint files (820.198), process validation. FDA inspects against it; warning letters are public.
• EU MDR 2017/745 — QMS requirements enforced via notified bodies; clinical evaluation, PMS/PMCF, UDI, and the person responsible for regulatory compliance (PRRC). Nonconformity can mean product withdrawal from the EU market.
• FAA 14 CFR Part 21 Subpart G / EASA Part 21 Subpart G — production certificates/approvals: the quality system that lets you manufacture aircraft parts. FAA conformity inspections and EASA POA audits are the enforcement arms.
• NRC 10 CFR Part 50 Appendix B — 18 QA criteria for nuclear plants; NQA-1 is the implementation standard. Violations are federal enforcement actions.
• FAR Part 46 / DFARS — government contract quality: higher-level contract quality requirements (52.246-11) flow QMS obligations into defense contracts; counterfeit-electronic-parts rules (DFARS 246.870) bite suppliers hard.

4. Rules of thumb

• Cp/Cpk: 1.33 is the conventional minimum for capable (4σ); 1.67 for critical/safety (5σ); 2.0 is Six-Sigma territory. Cpk < Cp always means off-center.
• %GRR: <10% good, 10–30% conditional, >30% fix the gage before anything else. ndc ≥ 5.
• AQL sampling: AQL is the producer's point; doubling sample size roughly halves consumer's risk — quote inspection cost against it.
• MTBF vs. life: at one MTBF (exponential), only 37% survive. Never promise "average life = MTBF" to a customer.
• Weibull β: <1 infant mortality (burn-in helps), =1 random (leave it alone), >1 wear-out (PM helps).
• RPN: ranks only; severity 9–10 always gets action. Anyone quoting an RPN threshold as a standard is wrong.
• Audit evidence: one source is a hint; two independent sources are evidence; three is a finding nobody can dispute.
• CoQ: external failures cost ~10× internal detection. Prevention is the cheapest quality money.
• Control chart sample sizes: n=4–5 for X-bar/R (classic); rational subgrouping matters more than n — subgroup so that within-subgroup variation is only common cause.
• Unit reflexes: dB is logarithmic — 3 dB doubles power; ppm = % × 10,000; Cpk 1.0 ≈ 2,700 ppm (two-sided, centered).

5. Veteran knowledge

• Exams don't test: how to tell a plant manager his process isn't capable without getting thrown out, how to write a finding that survives the auditee's appeal, or how to run an FMEA that isn't a paperwork exercise. The credential opens the door; diplomacy and evidence do the work.
• Costly beginner mistakes: (1) Computing capability on an out-of-control process — the number is fiction. (2) Auditing the procedure instead of the practice — read the work instruction, then watch the operator; the gap is the finding. (3) Treating the registrar audit as the goal — the certificate is a byproduct of a working system; optimizing for the audit produces a Potemkin QMS that collapses between audits. (4) Confusing precision with accuracy in MSA — a gage can repeat beautifully around the wrong value.
• When to call a specialist: legal interpretation of FDA/EU regulatory exposure (regulatory counsel), complex DOE or reliability-growth modeling beyond 2^k factorials (a statistician), metallurgical failure analysis (a materials lab — your fishbone is a hypothesis until the SEM says so), and calibration of reference standards (an accredited lab — don't self-certify your masters).
• The one career accelerant: learn to translate quality findings into money. "Clause 8.7 nonconformity" gets filed; "$240k annual scrap exposure with a 6-month payback on the fix" gets funded. Every senior quality role is a business role wearing a technical costume.

Credential map for this discipline

Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.