
Written by Policy Pros, UK Policy Writing Specialists at Policy Pros
Last reviewed:
Quality Control Policy Writers
Quality control (QC) is a critical function in any organisation that produces goods or delivers services. A well-drafted quality control policy sets out how your organisation monitors, inspects, tests, and maintains the quality of its outputs, ensuring consistency, compliance with applicable standards, and customer satisfaction. For UK businesses, quality control policies are not merely a matter of good practice; they are often a regulatory requirement and a commercial necessity for winning and retaining contracts.
This guide explains what quality control policies should contain, the difference between quality assurance and quality control, the key standards that apply, and the sector-specific requirements that UK businesses need to be aware of.
Quality Assurance vs Quality Control: Understanding the Difference
The terms quality assurance (QA) and quality control (QC) are often used interchangeably, but they refer to distinct activities within a quality management system.
Quality Assurance (QA) is a proactive, process-oriented approach. It focuses on preventing defects by establishing and maintaining the processes, systems, and standards that govern how work is carried out. QA asks the question: "Are we doing things the right way?" It encompasses the design of quality management systems, the development of procedures and work instructions, staff training, and process audits.
Quality Control (QC) is a reactive, product-oriented approach. It focuses on identifying defects in finished products or completed services through inspection, testing, and measurement. QC asks the question: "Does this output meet the required standard?" It encompasses inspection procedures, testing protocols, sampling plans, and the handling of non-conforming items.
Both QA and QC are essential components of a comprehensive quality management system. A robust quality control policy should sit within the broader quality assurance framework, ensuring that when processes do produce outputs that fall short of the required standard, there are clear procedures for identifying, recording, and correcting those non-conformances.
Key Standards and Regulations
ISO 9001:2015
ISO 9001:2015 is the internationally recognised standard for quality management systems (QMS). Published by the International Organization for Standardization, it provides a framework that organisations of any size and sector can use to ensure they consistently meet customer and regulatory requirements. ISO 9001:2015 is based on several quality management principles, including customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making, and relationship management.
For UK businesses, ISO 9001:2015 certification is often a prerequisite for tendering for public sector contracts, entering supply chains, or demonstrating credibility to clients. The standard requires organisations to document their quality policy, establish quality objectives, maintain documented procedures, and conduct regular internal audits and management reviews.
The ISO 9000 Family
ISO 9001 sits within the broader ISO 9000 family of standards, which includes ISO 9000:2015 (fundamentals and vocabulary), ISO 9004:2018 (managing for sustained success), and ISO 19011:2018 (guidelines for auditing management systems). Together, these standards provide a comprehensive framework for establishing, implementing, maintaining, and improving a quality management system.
BSI Standards
The British Standards Institution (BSI) is the UK's national standards body and plays a key role in developing and publishing quality-related standards. BSI publishes the UK versions of ISO standards (as BS EN ISO 9001:2015, for example) and also produces sector-specific standards that supplement the ISO framework. BSI certification, often indicated by the BSI Kitemark, provides external validation that an organisation's products or systems meet defined standards of quality and safety.
Good Manufacturing Practice (GMP)
In sectors such as food production and pharmaceuticals, Good Manufacturing Practice (GMP) regulations set out the minimum requirements for quality control in manufacturing processes. In the UK, GMP for food businesses is enforced through the Food Safety Act 1990 and associated regulations, whilst pharmaceutical GMP is governed by the Medicines and Healthcare products Regulatory Agency (MHRA) under the Human Medicines Regulations 2012. GMP requires documented quality control procedures, batch testing, environmental monitoring, and full traceability of raw materials and finished products.
What Must a Quality Control Policy Contain?
A comprehensive quality control policy should be tailored to your organisation's size, sector, and risk profile. However, there are core elements that every effective QC policy should address:
Policy Statement and Objectives
The policy should open with a clear statement of the organisation's commitment to maintaining high standards of quality. It should define the scope of the policy, the quality objectives the organisation is working towards, and the senior manager or director with overall responsibility for quality.
Inspection and Testing Procedures
The policy must set out the specific inspection and testing procedures used to verify that products, services, or processes meet the required specifications. This should include:
- The types of inspection carried out (incoming materials inspection, in-process inspection, final inspection)
- Testing methods and equipment used, including calibration requirements
- Sampling plans and acceptance criteria
- The frequency of inspections and tests
- Who is responsible for carrying out inspections and their required competencies
Non-Conformance Handling
One of the most important elements of any QC policy is the procedure for dealing with non-conforming products, services, or processes. The policy should specify:
- How non-conformances are identified, recorded, and classified (critical, major, minor)
- Immediate containment actions to prevent non-conforming items reaching the customer
- Root cause analysis procedures to identify why the non-conformance occurred
- Corrective and preventive actions (CAPA) to address the root cause and prevent recurrence
- Responsibilities for authorising the disposition of non-conforming items (rework, scrap, concession, return to supplier)
- Links to your organisation's non-conformance policy for detailed procedures
Audit Trail Requirements
A quality control policy must establish clear requirements for record keeping and documentation. Under ISO 9001:2015, organisations are required to retain documented information as evidence that monitoring and measurement activities have been carried out. This includes:
- Inspection and test records, including results, dates, and the identity of the inspector
- Non-conformance reports and corrective action records
- Calibration records for measuring and testing equipment
- Customer complaint records and the actions taken in response
- Internal audit reports and management review minutes
- Supplier quality records, including incoming inspection results and approved supplier lists
These records must be legible, identifiable, retrievable, and stored securely. ISO 9001:2015 requires that documented information is retained for a defined period and protected against loss, damage, or unauthorised alteration.
Continuous Improvement
An effective QC policy should incorporate mechanisms for continuous improvement. This includes regular analysis of inspection data, non-conformance trends, customer feedback, and audit findings to identify opportunities for improving processes and preventing defects. The Plan-Do-Check-Act (PDCA) cycle, which is central to ISO 9001:2015, provides a structured approach to driving continuous improvement.
Sector-Specific Quality Control Requirements
Manufacturing
Manufacturing businesses must implement rigorous quality control procedures to ensure that products meet design specifications, safety requirements, and customer expectations. This includes statistical process control (SPC), first article inspection (FAI), in-process checks, and final product testing. For manufacturers supplying the aerospace, automotive, or defence sectors, additional standards such as AS9100 or IATF 16949 may apply alongside ISO 9001:2015.
Food Production
Food businesses in the UK must comply with the Food Safety Act 1990 and the Food Standards Agency's requirements. Quality control in food production encompasses hazard analysis and critical control point (HACCP) principles, microbiological testing, allergen management, temperature monitoring, and traceability systems. Many food businesses also seek certification to BRCGS Global Standard for Food Safety or equivalent schemes, which impose detailed QC requirements.
Healthcare and Pharmaceuticals
Quality control in healthcare settings is governed by the Care Quality Commission (CQC) in England, and by the MHRA for pharmaceutical manufacturers. QC policies in these sectors must address clinical audit, incident reporting, medicines management, infection control, and patient safety. Pharmaceutical manufacturers must comply with GMP requirements, including batch testing, environmental monitoring, stability testing, and validation of manufacturing processes.
Professional Services
Professional services firms, including consultancies, legal practices, and accountancy firms, also benefit from robust quality control policies. In these settings, QC may focus on peer review of deliverables, client feedback mechanisms, file audit procedures, and compliance with professional body standards. ISO 9001:2015 is increasingly adopted by professional services firms as a means of demonstrating their commitment to quality and winning competitive tenders.
Construction
Quality control in the construction sector encompasses inspection and testing plans (ITPs), materials testing, workmanship inspections, and compliance with building regulations and project specifications. Construction firms working on public sector projects are typically required to hold ISO 9001:2015 certification and to demonstrate effective QC procedures as part of the pre-qualification process.
How Policy Pros Can Help
Policy Pros provides expert quality control policy writing services for UK businesses across all sectors. Whether you need a standalone QC policy, a complete suite of quality policies and procedures, or a gap analysis of your existing documentation against ISO 9001:2015, our experienced writers can help. We produce clear, practical policies that reflect your organisation's operations, comply with relevant standards and regulations, and are ready for implementation. Contact us to discuss your quality control policy requirements.