Quality culture and ethical behaviour under ISO 9001:2026: evidence that passes the audit (5.1.1 i, 7.3 e)
Gap assessment, documentation update, training, internal audit and support through your transition audit, delivered end to end by our expert, experienced, professional and friendly local Filipino lead auditors.
Evidence of quality culture and ethical behaviour under ISO 9001:2026 is not a document. It is a pattern: the decisions top management took when quality or ethics cost time or money, the way those decisions reached the floor, the training that followed, the incidents that tested them, and what people at every level say when an auditor asks an open question. Clause 5.1.1 i) makes promoting quality culture and ethical behaviour a duty of top management; 7.3 e) makes awareness of it a requirement for the people doing the work. The auditor checks the two against each other and against the months of records before the visit.
What ISO 9001:2026 asks for, and what it does not
The sixth edition adds one item to the leadership list and one to the awareness list. Under 5.1.1 i), top management must promote quality culture and ethical behaviour; NOTE 2 adds that these are seen in shared values, attitudes, practices and actions. Under 7.3 e), people must be aware of the organisation’s quality culture and ethical behaviour. Neither item calls for a new document or record.
| Clause | What it asks (paraphrased) | Whose evidence is sampled |
|---|---|---|
| 5.1.1 i) and NOTE 2 | Promotion by top management of quality culture and ethical behaviour, visible (says NOTE 2) in shared values, attitudes, practices and actions | Top management: decisions, communications |
| 5.1.1 k) | Top management promotes risk-based and opportunity-based thinking | Managers: how choices are reasoned |
| 5.2.2 d) | The quality policy is implemented, understood and applied | Everyone: the policy in action |
| 7.1.4 NOTE | New informative NOTE referring to culture in the working environment; no new requirement | Supervisors |
| 7.3 e) | People are aware of the organisational quality culture and ethical behaviour | Front line: interview answers |
No mandatory document cuts both ways: you need not write a code of ethics or run a culture survey, but you must show behaviour, and behaviour leaves traces only if the organisation records what it did. Use the standard’s own phrase in policy, training and briefings so that documents and interviews match; clause-level detail is at ISO 9001:2026 quality culture and ethics.
Why this is the one ISO 9001:2026 change that needs elapsed time
Every other 2026 change can be closed with a rewrite. Culture cannot be produced in the fortnight before the audit, and an auditor can date evidence. The transition audit reviews the changed requirements of the 2026 edition, 5.1.1 i) and 7.3 e) among them, so the question is how many months of genuine evidence you will hold when the auditor arrives.
The timetable was fixed on 16 September 2026, when Global ACI published Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026: the transition runs three years to 30 September 2029; certification bodies gain accreditation to the 2026 edition one by one during 2027, so the first accredited ISO 9001:2026 certificates appear that year; and from 31 March 2028 no new ISO 9001:2015 certificates may be issued. If your transition audit falls in 2027 or 2028, the evidence window is the twelve months before it and has already opened. Our local Filipino lead auditors look for one full cycle: a management review that discussed culture and ethics and produced actions, an internal audit that tested 7.3 e) by interview, and one incident handled in the open. The free ISO 9001:2026 gap check shows in ten minutes whether that cycle has started.
What counts as evidence: five categories an auditor will accept
An auditor accepts evidence from five categories and expects them to agree: decisions taken by top management, the communications that carried them, training and awareness activity, incidents in which the culture was tested, and interview answers. One category alone rarely passes; a policy poster with no incident record, or training records beside blank interview answers, reads as paper.
| Category | What passes | What is usually offered instead |
|---|---|---|
| Decisions | A held shipment, a refused rush order, a supplier delisted for falsified test certificates, each minuted with the reason | A policy sentence saying quality comes first |
| Communications | Town-hall notes, shift briefings, a gift memo issued before the Christmas season, the policy restated in the Filipino, Cebuano or English spoken on the floor | A laminated policy in the lobby |
| Training and awareness | Onboarding that names quality culture and ethical behaviour, refreshers, toolbox talks with a check of understanding | A code of conduct signed at hiring and filed |
| Incidents handled | Nonconforming output reported by the operator who produced it, closed without penalty; a complaint traced to root cause (the 10.2.1 NOTE treats complaints as a source of nonconformities); a gift declined and recorded | Disciplinary records only |
| Interview answers | Specific, consistent, in the person’s own words, at three levels | Recited slogans, or silence |
Auditor interview questions by level
Auditors ask open questions and compare the answers vertically: top management is asked what it did, supervisors what they permit, operators what they would do. Answers should agree across levels without matching word for word. These questions are the kind asked in a Sterling pre-assessment; they are a mirror for the gaps, not a script.
| Level | Typical questions | What a passing answer contains |
|---|---|---|
| Top management (5.1.1 i)) | Give me one decision this year where quality or ethics cost you money. How did people hear about it? What happens to a manager who hits targets by skipping checks? | A dated example, a named consequence, a communication trail |
| Supervisors | What happens when the line is behind and inspection is the bottleneck? Has anyone reported their own nonconformity this quarter, and what did you do? | A described case, no blame, the record it created |
| Operators, technicians, agents (7.3 e)) | What does quality culture mean on your shift? A supplier’s driver offers you a Christmas basket; what do you do? You spot defective output at the end of overtime; what do you do? | Specific, unhesitating, consistent with the supervisor |
| Internal auditors (9.2) | Which criteria cover 5.1.1 i) and 7.3 e)? Show me the evidence or the finding. | A checklist re-based on the 2026 standard, sampled interviews |
Philippine workplace examples where the auditor looks for culture
Culture shows where quality, ethics and convenience collide. On Philippine sites the recurring moments are shift handovers, supplier gifts, overtime pressure and the reporting of nonconforming output. Each has a version that passes and a version that fails, and each leaves a record if the organisation allows it to.
Shift handovers. In a Laguna plant or on a Cebu BPO floor, the handover is where a defect found at 5.50 am is written down or inherited. Passes: a log in which the outgoing shift enters problems and the incoming shift countersigns, with entries that are uncomfortable to read. Fails: a log that has never recorded a problem.
Supplier gifts. The last months of the year bring hampers, gift certificates and invitations. Passes: a gift rule communicated before September, a register of gifts declined or pooled, purchasing staff who state the rule unprompted. Fails: a rule that exists only in the code of conduct, or a purchaser who answers “it depends on the amount” with no threshold.
Overtime pressure. Month-end shipments and rush orders test whether final inspection is a step or a formality. Passes: a minuted decision to delay a shipment rather than skip inspection, overtime approvals that check inspection capacity, supervisors who can name the escalation route. Fails: holds always released by the same manager late at night.
Reporting of nonconforming output. Reluctance to embarrass a colleague or supervisor is real on Philippine sites; hiya is not a defect, but it shapes what gets reported. Passes: self-reported nonconformities closed without penalty, a stop-the-line authority that has been used, recognition for people who report. Fails: a log filled only by QC, never by production.
What fails: the patterns auditors write up
Three patterns account for most findings. The single-source file, a policy, code of conduct or survey with nothing behind it, fails 7.3 e) because awareness is asserted rather than demonstrated. Contradiction between levels, a CEO describing zero tolerance while a supervisor describes “we manage it”, fails 5.1.1 i) because the promotion has not worked. Evidence dated entirely within the month before the audit earns an observation now and a nonconformity at the next surveillance if nothing changes.
Building the evidence trail in twelve months
Twelve months is enough for a credible trail if you begin with decisions rather than documents. The sequence below is used in Sterling Revise™ engagements; it spreads dated evidence across the year so that nothing looks staged, and it ends with a pre-assessment so that the transition audit is not the first test.
| Months | Actions | Evidence produced |
|---|---|---|
| 1–2 | Top management fixes three behaviours it will enforce (stop-the-line authority, a gift rule, no unrecorded rework), revises the policy under 5.2.1 e), briefs every site | Minutes, policy revision, briefings |
| 3–4 | Awareness sessions at all levels (7.3 e)); supervisors trained to receive reports without blame | Training records with checks of understanding |
| 5–7 | Handle the incidents that arrive: self-reports, gifts, holds; record each decision | Nonconformity log, gift register, hold decisions |
| 8–9 | Internal audit re-based on the 2026 standard, interviews sampled against 7.3 e) | Audit report and interview sample |
| 10–11 | Management review with culture and ethics as inputs beside the new 9.3.2 c) input | Minutes and actions |
| 12 | Sterling pre-assessment; gaps closed before the transition audit | Pre-assessment report |
Effivity clients keep these records in one place, in date order.
Train the people who will be interviewed
The auditor interviews your operators, supervisors and managers, not your consultant. Sterling’s awareness sessions give every level the vocabulary of 5.1.1 i) and 7.3 e) in the words already used at work; the internal auditor course teaches your auditors to test culture and ethics through open questions and sampled interviews. Courses run in Makati, Cebu and Davao, in-house or online, with local Filipino lead auditors: see ISO 9001, ISO 14001 and ISO 45001 internal auditor and lead auditor training in the Philippines.
How ISO and GRC certification fits the Sterling system
Sterling delivers ISO and GRC certification through Sterling OS™ — our delivery operating system: Design™ (guided) or Drive™ (fully managed), then Sustain™, Automate™ and Revise™. It connects into the Sterling Business Excellence Framework™, one integrated system across quality, environment, safety, energy and continuity. Not sure which standard is right for you? Use our free Select the Standard™ tool, or request a free gap analysis.
Certified to ISO 9001:2015? Take the free ten-minute ISO 9001:2026 gap check, then let a local Sterling lead auditor turn your result into your transition plan.
Transition training for your people, online. The ISO 9001:2026 Awareness course on Sterling Academy (12 modules) takes every employee through the sixth edition in their own time, with practice checkpoints, a final exam and a numbered Certificate of Completion, verifiable online. Sterling consulting clients benefit from preferential course access and special pricing through their Sterling consultant, including complimentary ISO 9001 awareness training as part of a transition engagement, so the awareness evidence for clause 7.3 is in place before the transition audit.
What clients say about working with Sterling
Our proof is our clients. Read verbatim feedback from organisations Sterling has taken through ISO and GRC programmes across the Philippines and beyond — named signatories, real letters.
Frequently asked questions
Does ISO 9001:2026 require a written code of ethics or a quality culture statement? No. The 2026 edition adds no mandatory documents or records; 5.1.1 i) and 7.3 e) concern what top management promotes and what people are aware of. A written code helps only if decisions, training and incident handling refer to it; a revised policy, briefing records and a handled-incident log satisfy both items.
Can a culture or engagement survey serve as evidence? Partly. A survey shows what people say anonymously, not what management did. An auditor will accept survey results as one input, provided they reached management review and produced actions. Good scores with no follow-up are weaker than one uncomfortable result that was acted on.
Will the auditor raise a nonconformity on culture alone? Rarely at the transition audit, unless top management’s account contradicts the floor’s or there is no evidence at all. More often the outcome is an observation or an opportunity for improvement, with evidence expected at the next surveillance. Repeated absence becomes a nonconformity against 5.1.1 i) or 7.3 e).
How much elapsed time do we need before the transition audit? One full cycle: a management review, an internal audit and at least one handled incident, spread across the months before the audit. Six months of genuine records is defensible; four weeks is not. Choose the audit date, surveillance or recertification, that gives the longer trail.
Do agency staff and outsourced workers on our site count under 7.3 e)? Yes. Clause 7.3 addresses people doing work under the organisation’s control, as it did in the 2015 edition, so agency operators, long-term contractors and outsourced security or cleaning staff on site need the same awareness. Auditors often pick them for interview because they are the least briefed.
We are a 25-person company; what does evidence look like for us? Smaller and more direct. The owner’s own decisions, a monthly meeting record, a short onboarding briefing, a nonconformity log with self-reports and a one-page gift rule are enough, provided the interviews agree with the records. Small organisations pass this well because top management and the floor are close.
Read next
Read the clause-level detail at ISO 9001:2026 quality culture and ethics and leadership and the quality policy under ISO 9001:2026; then see what changed in ISO 9001:2026 for a certified Philippine company, rebuilding the internal audit checklist and briefing your auditors, ISO 9001:2026 training courses in the Philippines and the Sterling Revise™ transition service.
Sources
- ISO 9001:2026, Quality management systems — Requirements, sixth edition, published 16 September 2026: clauses 5.1.1 i) and NOTE 2, 5.1.1 k), 5.2.1 e), 5.2.2 d), 7.1.4 NOTE, 7.3 e), 9.2, 9.3.2 c), 10.2.1 NOTE, Annex A.2 e). https://www.iso.org/standard/9001
- Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, version 1.0, issued 4 September 2026, published 16 September 2026.
- No Philippine regulation is relied on in this page.