Blog · ISO 9001 Made Simple

What Does "Quality Culture" Actually Mean in a Business With Six People?

Published 23 October 2026 · 6 min read

Of all the new phrases in ISO 9001:2026, "quality culture" is the one most likely to make a small business owner sigh. It sounds like something a large company hires a consultant to run workshops about. Values posters. Engagement surveys. A culture committee.

If you employ six people, you do not need any of that. You already have a culture. The question the 2026 version is asking is whether that culture helps the work get done properly, and whether you, as the owner, are doing anything to make sure it does.

This article explains what the standard actually asks for, what it does not, and what an auditor is likely to want to see in a business your size.

What the 2026 version actually says

Quality culture and ethical behaviour turn up in two main places in ISO 9001:2026.

Clause 5.1.1, Leadership and commitment. This is the list of things top management has to do. The 2026 version adds a new one: promoting quality culture and ethical behaviour. In a small business, "top management" means you, and anyone else who makes the big calls.

Clause 7.3, Awareness. This covers what the people doing the work need to understand. The 2026 version adds that they should be aware of the organisation's quality culture and ethical behaviour. That includes contractors and casuals working under your direction, not just permanent staff.

A note in Clause 5.1.1 gives the most useful plain-English hint: quality culture and ethical behaviour show up in an organisation's shared values, attitudes, practices and actions. In other words, culture is what people actually do, not what is written on the wall.

If you have read our earlier articles on what leadership means when you are the owner and what awareness means when everyone is too busy to read a policy, this will feel familiar. The 2026 version builds on both of those clauses rather than adding a new section.

What it does not ask for

This is the part worth getting clear, because it is where a lot of unnecessary work gets sold.

• No culture policy. The standard does not require a separate culture or ethics document. Your existing quality policy can carry it.
• No survey. Nothing requires you to measure culture with a questionnaire or a score.
• No training program. There is no requirement for a culture course, a module or a certificate of attendance.

The key word in Clause 5.1.1 is "promoting". That is something you do, not something you file. A values statement on its own does not show that you are promoting anything. What you do when something goes wrong does.

What quality culture looks like in a small business

Forget the abstract definition for a moment. In a business with six people, quality culture mostly comes down to three questions.

Do people tell you when something has gone wrong?

Picture a small electrical contractor in Penrith. An apprentice notices that a circuit he tested last week was labelled wrong on the switchboard. Does he mention it at smoko, or does he keep quiet because the last person who owned up to a mistake copped a serve in front of the client?

That is quality culture. If people hide problems, your quality system only ever sees the problems customers find. If people raise them early, you fix them while they are still cheap.

Does "do it properly" survive a deadline?

Every small business has a moment where the checklist feels like a luxury. The truck is waiting, the client is ringing, and the final inspection gets skipped "just this once". What happens then is a better measure of your culture than anything you write down. Who is allowed to say "this is not ready to go"? Do they actually say it?

Do you report the truth to yourself?

This is the ethical behaviour part, and in a small business it is mostly about honesty in your own records. A complaint gets logged even when it is embarrassing. A failed test is recorded, not quietly re-run until it passes. A job that went over time is written down as over time. An auditor has seen plenty of records that look too clean, and they know what it usually means.

What an auditor is likely to ask

Auditors cannot audit a feeling, so they look for evidence that culture shows up in practice. In a small business, expect questions like these:

• "Tell me about the last time someone raised a problem. What happened next?"
• "If one of your team thought a job was not ready to hand over, what would they do?"
• "How do you know your complaint records are complete?"
• "What have you, as the owner, done in the last year to make it easier for people to do the job properly?"

They may also ask your staff directly. The question will not be "what is your quality culture?" It will be closer to "what would you do if you spotted a mistake?" Consistent, specific answers from different people are strong evidence. Blank looks are not.

How to show it without building a bureaucracy

You probably already do some of this. The work is mostly making it visible. Here is a practical starting point for a small business.

• Add one or two lines to your quality policy. Say plainly that you expect problems to be raised early, that nobody gets punished for honestly reporting a mistake, and that work is not handed over until it is right. Keep it in your own words.
• Say it out loud, then write down that you did. Cover it in a toolbox talk or team meeting, and when a new starter or contractor joins. A one-line note in your meeting record is enough evidence for Clause 7.3.
• Keep a short record of decisions that show it. When you change something because of what culture is telling you, note the date, what prompted it and what you changed. For example: "Agreed any team member can hold a job back from handover if they are not satisfied. Briefed at Monday meeting." Two or three entries a year is a real record.
• Look at your nonconformity and complaint records with fresh eyes. If there are almost none, ask yourself whether that is because nothing goes wrong, or because nothing gets written down. The honest answer is useful either way.
• Raise it at management review. Ask one question once a year: "Is anything stopping people from doing the job properly or telling us when it goes wrong?" Record the answer and what you will do about it.

None of this needs a new document set. It slots into records you should already have for leadership, awareness, nonconformities and management review.

If you are already certified

This is one of the changes you will need to address before your transition audit. For most small businesses the job is small: update the quality policy wording, make sure culture and ethical behaviour are covered in how you brief people, and have a few dated examples ready. Our guide to which documents change for the 2026 version shows where this fits alongside the other updates.

If you are still working toward certification, build it in now. As we covered in whether to certify to 2015 or 2026, adding the 2026 expectations while you are writing your system costs very little, and it means you will not have to revisit it later.

The short version

• Quality culture in ISO 9001:2026 means the way people actually behave around quality: raising problems, not cutting corners under pressure, and keeping honest records.
• The owner has to actively promote it (Clause 5.1.1), and everyone doing the work needs to be aware of it (Clause 7.3).
• No separate policy, survey or training program is required.
• The best evidence is what you do: a few dated decisions, briefings that cover it, and complaint and nonconformity records that are honest and complete.

Not sure how your current leadership and awareness records stack up against the 2026 version? Run a free gap analysis in the Lead Comply portal and it will show you which parts of Clauses 5 and 7 still need attention.