QMS Architecture And Certification Readiness

The following discussion illustrates a project that is well suited to the capabilities of an independent consultant in the Umbrex Shipbuilding & marine systems Practice. This is an illustrative example. Umbrex consultants adapt their methodology, timeline, and deliverables to the specific needs of each client.

1) Client Situation

The client operated a multi-yard shipbuilding program within the Aerospace & Defense sector, supplying naval and commercial customers under NAVSEA contracts and classification society rules (ABS and DNV). The organization sought to establish a formal Quality Management System (QMS) aligned to ISO 9001:2015 and to demonstrate certification readiness to meet customer and regulator expectations. The current-state environment reflected the realities of a complex shipyard: modular construction, heavy reliance on subcontractors, rigorous welding and NDE controls, and an evolving digital thread across ERP, MES, PLM, and document control systems. The need for a cohesive QMS architecture and certification readiness plan was prompted by the following pain points:

• Fragmented process ownership and inconsistent procedures across hull block fabrication, outfitting, and test & trials. KPIs such as first-time quality (FTQ) fell below target (e.g., FTQ trending low in hull erection and piping fit-up), with nonconformance report (NCR) rates per 1,000 labor hours elevated in critical areas (welding and coating).
• Gaps in document control and configuration management that created revision mismatches between drawings, travelers, inspection and test plans (ITPs), and work packages. Document change cycle times exceeded program needs, and uncontrolled use of legacy specifications resulted in audit findings.
• Inadequate integration of supplier quality management. On-time delivery with full quality conformance (OTD-Q) from critical vendors was variable, and incoming inspection coverage lacked risk-based prioritization. CARs (Corrective Action Requests) to suppliers showed aging beyond internal SLA thresholds.
• Limited internal audit planning and execution capacity. Audit schedules were irregular, clause coverage under ISO 9001:2015 was incomplete, and root cause analysis methods for audit findings were inconsistently applied. Closure of major/minor findings trended longer than management targets.
• Incomplete management review cadence and inputs. Management review materials lacked trend analytics on cost of quality (CoQ), NCR aging, CAPA effectiveness, calibration status, and training completion. Action item closure from management review lagged behind expectations.
• Mixed readiness for NAVSEA, ABS, and DNV quality clauses. The QMS did not systematically map customer contract quality requirements (e.g., NAVSEA Standard Items, ABS Rules, DNV class notation requirements) to internal procedures and ITP checkpoints, resulting in ambiguity during surveillance visits.
• Manual and paper-based quality records in several shops with limited data integrity controls. MES capture of inspection results was partial; M&TE calibration records were maintained across disparate systems. KPI visualization was limited, hindering proactive risk-based decision-making.
• Training and certification currency risks for critical special processes. Welder performance qualifications (WPQ), WPS/PQR management, NDE Level II/III oversight, and coating inspector qualification tracking required stronger systemization to withstand external audits.
• Nonconforming output controls and disposition workflows varied by facility. Use of MRB (Material Review Board), quarantine areas, defect coding taxonomy, and authority levels for use-as-is and repair dispositions were not consistently enforced, impacting cycle time and rework hours.
• Limited alignment of production planning and quality assurance. Quality gates in the build sequence were not uniformly embedded in shop floor control logic; inspection hold points and witness points for classification society surveyors were sometimes scheduled ad hoc, affecting schedule adherence.

The baseline performance profile reinforced the need for an ISO 9001-compliant QMS blueprint and disciplined certification readiness path. Management prioritized improvements in FTQ, NCR closure lead time, audit closure lead time, supplier OTD-Q, doc control cycle time, calibration past-due rates, and training completion rates, alongside readiness for NAVSEA, ABS, and DNV oversight.

2) Project Objective

Primary objective: We designed and implemented a shipbuilding QMS architecture compliant with ISO 9001:2015 and prepared the organization for certification readiness and customer approvals (NAVSEA, ABS, DNV) by establishing process maps, tiered procedures, document control, an internal audit program, and management review governance aligned to the shipyard’s modular build strategy.

Secondary objectives:

• Codified end-to-end quality processes across engineering, procurement, fabrication, outfitting, and test & trials, linking them to the production plan and classification society hold/witness points.
• Reduced risk of nonconforming outputs by standardizing NCR, MRB, and CAPA processes with robust root cause analysis and effectiveness verification.
• Accelerated time-to-value for certification by conducting gap assessments, remediation sprints, and pre-assessment audits against ISO 9001 and customer quality clauses.
• Increased data integrity and visibility by defining a quality data model, eQMS workflows, and dashboards for FTQ, CoQ, supplier performance, calibration, training, and audit status.
• Strengthened supplier quality management through risk-based incoming inspection, approved supplier list (ASL) governance, and supplier audit protocols aligned with 8.4 controls.
• Embedded risk-based thinking and PDCA across the QMS, with management review inputs and outputs tied to decision gates, resource allocation, and corrective action priorities.
• Built internal capability via training, role-based certifications, internal auditor development, and a self-sustaining governance model for continual improvement.

3) Methodology and Approach

Workstream 1: Baseline Assessment and Clause-Level Gap Analysis

We conducted a comprehensive diagnostic against ISO 9001:2015 and mapped NAVSEA, ABS, and DNV quality clauses to the current system. The assessment covered clause 4–10 coverage, maturity of documented information (7.5), operational planning and control (8.1), design and development (8.3), control of externally provided processes (8.4), production and service provision (8.5), release (8.6), and control of nonconforming outputs (8.7).

• Activities performed:
  • Reviewed quality manuals, procedures, work instructions, and forms across yards, shops, and projects.
  • Executed a clause-by-clause audit using checklists tailored to shipbuilding processes, including block assembly, panel line, pipe shop, electrical integration, and test & trials.
  • Benchmarked against customer quality requirements and classification society surveillance expectations, including hold/witness point protocols in ITPs.
• Tools and frameworks:
  • ISO 9001:2015 clause mapping matrices, turtle diagrams, SIPOC, and maturity scoring (0–5 scale) by process area.
  • Risk heat maps highlighting high-likelihood/high-consequence nonconformance risks (e.g., WPS adherence, NDE coverage, coating cure documentation).
• Stakeholders engaged:
  • Quality leadership, program management, production superintendents, engineering, supplier quality, NDE Level III, coatings QA, and document control.
• Designed enablement:
  • Prioritized remediation sprints to reduce audit risk, improve FTQ, and accelerate certification readiness with focus on clauses 7.5, 8.4, 8.5, 8.6, 8.7, 9.2, and 9.3.

Workstream 2: QMS Architecture, Process Maps, and Tiered Documentation

We architected a tiered QMS structure integrating Quality Policy, Quality Manual, core processes, supporting procedures, and work instructions. We built end-to-end process maps covering engineering change, procurement, fabrication, outfitting, inspection, testing, and commissioning.

• Activities performed:
  • Developed SIPOC and value stream maps for major value streams: hull block fabrication, pipe spool fabrication, outfit module assembly, integration, and test & trials.
  • Established turtle diagrams for critical processes (e.g., welding, NDE, coating, equipment calibration, document control, supplier qualification).
  • Standardized templates for ITPs, control plans, traveler records, and quality plans for each block/module and system.
• Tools and frameworks:
  • PDCA and risk-based thinking integrated at process level.
  • Configuration management principles (e.g., CMII) embedded in engineering change (ECN/ECO) workflows and document control.
• Stakeholders engaged:
  • Engineering, production planning, MES/ERP owners, document control, classification society coordinators, and QA leads for each shop.
• Designed enablement:
  • Enabled consistent execution and auditability, reduced process variation, and improved linkage of quality gates to the production schedule and surveyor touchpoints.

Workstream 3: Document Control and Configuration Management

We redesigned the documented information lifecycle to meet ISO 9001:7.5, ensure correct revision at point of use, and align with NAVSEA, ABS, and DNV documentation expectations. The effort covered procedures, drawings, specifications, WPS/PQR/WPQ records, and quality records.

• Activities performed:
  • Defined master lists, metadata standards, and numbering schemes for controlled documents and records.
  • Configured electronic workflows for document creation, review, approval, issuance, supersession, and archival across PLM and document repositories.
  • Deployed point-of-use controls on the shop floor (e.g., QR-coded travelers, visual revision status, read-and-understand acknowledgments).
• Tools and frameworks:
  • PLM integration to ERP/MES for bill of material (BOM) and routing changes, with traceability to affected ITPs and travelers.
  • Change control protocols for ECN/ECO with impact assessment on in-process work, suppliers, and surveyor approvals.
• Stakeholders engaged:
  • Document control, PLM administrators, engineering, production planning, QA leadership, and program management.
• Designed enablement:
  • Reduced risk of wrong-revision build, accelerated document cycle time, and strengthened audit trail integrity for certification and customer oversight.

Workstream 4: Supplier Quality Management and Incoming Inspection

We established risk-based controls for externally provided processes, products, and services under ISO 9001:8.4. The approach aligned ASL governance, supplier qualification, and incoming inspection to NAVSEA and class society quality expectations.

• Activities performed:
  • Risk segmented suppliers (criticality, complexity, history) and defined corresponding controls, including first article inspections, source inspection, and dockside oversight.
  • Created supplier quality requirements, QA clauses in PO terms, and standard source inspection checklists aligned to ITPs.
  • Stood up a supplier audit program and CAR management cadence with effectiveness verification criteria.
• Tools and frameworks:
  • Supplier scorecards (OTD-Q, defect PPM, CAR aging), FMEA for high-risk components, and PPAP-like control for special processes where appropriate.
  • Digital receiving inspection records integrated with ERP lot/serial traceability and MRB workflows.
• Stakeholders engaged:
  • Procurement, supplier quality engineers, logistics/receiving, engineering, and QA leadership.
• Designed enablement:
  • Improved supplier conformance, reduced incoming defects, and created clear compliance evidence for customer audits and surveillance.

Workstream 5: Production Quality Controls, Special Processes, and ITP Library

We operationalized quality gates into the build plan and standardized ITPs for hull, piping, electrical, HVAC, and systems integration. We reinforced control of special processes (welding, NDE, and coatings) with rigorous procedures and competence management.

• Activities performed:
  • Developed standardized ITP templates with hold points, witness points, and surveyor notification protocols for ABS/DNV and NAVSEA representatives.
  • Aligned WPS/PQR/WPQ libraries to current specifications, refreshed welder continuity records, and set up periodic performance reviews.
  • Created NDE plans by method (VT, MT, PT, UT, RT) with sampling plans tied to risk and contract requirements, and defined Level III oversight routines.
  • Codified coating process controls (surface preparation, environmental conditions, DFT measurements, holiday testing) aligned with specification requirements.
• Tools and frameworks:
  • Control plans linked to routing steps in MES; traveler checklists with pass/fail criteria and evidence capture.
  • Calibration program rebase for M&TE with recall, past-due prevention, and as-found/as-left records.
• Stakeholders engaged:
  • Production superintendents, welding engineering, NDE Level III, coating specialists, calibration lab, and surveyor liaisons.
• Designed enablement:
  • Reduced rework and defects through disciplined gatekeeping, with clear evidence packages to support release (8.6) and acceptance by customers and classification societies.

Workstream 6: Internal Audit Program and CAPA System

We instituted an internal audit program per ISO 9001:9.2 and a robust CAPA system with defined root cause analysis methods and effectiveness checks. The program covered process, product, and system audits.

• Activities performed:
  • Built a three-line audit schedule covering all clauses annually, with focus audits for high-risk processes and suppliers.
  • Developed auditor training, qualification criteria, and a competency matrix; executed pilot audits to calibrate scoring and reporting.
  • Standardized 8D, 5-Why, and fishbone analysis templates and defined criteria for containment, corrective, and preventive actions with verification and validation steps.
• Tools and frameworks:
  • eQMS workflows for audit planning, findings, CAR issuance, action tracking, and effectiveness review with SLA timers.
  • Risk-based prioritization of findings and automated escalation to management review for overdue actions.
• Stakeholders engaged:
  • Quality auditors, process owners, production leadership, supplier quality, and management review participants.
• Designed enablement:
  • Improved governance, reduced repeat findings, and enhanced audit readiness for registrar and customer assessments.

Workstream 7: Management Review and QMS Governance

We formalized the management review process (9.3) and linked it to governance routines that drive resource allocation, risk management, and continual improvement. The cadence aligned with program milestones and surveillance schedules.

• Activities performed:
  • Defined inputs (audit results, customer feedback, process KPIs, CoQ, supplier performance, risk/opportunity register, resource adequacy) and outputs (actions, resourcing decisions, policy/target updates).
  • Established a tiered governance model: daily shop tier meetings, weekly operational reviews, monthly quality council, and quarterly management review.
  • Integrated risk register and change portfolio with decision gates requiring executive signoff.
• Tools and frameworks:
  • Balanced KPI scorecards, risk heat maps, and action trackers with owner/due date/verification fields.
  • Standardized management review pack with traceable closure of decisions and communication plan to stakeholders.
• Stakeholders engaged:
  • Executive leadership, program directors, QA/QC leadership, operations, engineering, supply chain, and finance.
• Designed enablement:
  • Increased decision velocity, aligned priorities, and created a clear evidence trail for registrar and customer reviews.

Workstream 8: Digital Enablement and Quality Data Architecture

We defined the data model and systems architecture for a digital QMS, integrating ERP, MES, PLM, and eQMS to ensure traceability, data integrity, and analytics. The solution emphasized shop floor usability and auditability.

• Activities performed:
  • Mapped quality master data and transactions: part/serial/heat lot, WPS/PQR/WPQ, ITP steps, NCRs, CARs, calibration records, training records, and supplier performance data.
  • Designed interfaces and data validation rules to prevent wrong-revision use and to ensure complete and accurate inspection evidence capture.
  • Built KPI dashboards and reporting packs for FTQ, NCR aging, CAPA effectiveness, supplier OTD-Q, calibration status, and audit program execution.
• Tools and frameworks:
  • Data dictionary, entity-relationship mapping, and data quality controls (completeness, uniqueness, consistency, timeliness, validity).
  • Role-based access controls and electronic signature protocols to satisfy ISO 9001 and customer expectations.
• Stakeholders engaged:
  • IT architects, ERP/MES/PLM admins, QA analysts, operations leadership, and document control.
• Designed enablement:
  • Improved data integrity, accelerated analytics, and streamlined evidence packages for certification and customer inspections.

Workstream 9: Certification Readiness and Pre-Assessment

We executed a certification readiness campaign, including registrar selection support, readiness audits, and coached remediation to prepare for formal ISO 9001 assessment and customer approvals (NAVSEA, ABS, DNV).

• Activities performed:
  • Prepared a registrar RFP package, compared ABS QE and other accredited bodies, and aligned scope statements with shipbuilding operations and sites.
  • Conducted pre-assessment audits, compiled evidence binders, and trained process owners on audit protocols and interview readiness.
  • Facilitated corrective action sprints focused on major/minor findings and high-risk clause gaps.
• Tools and frameworks:
  • Certification readiness checklist by clause and by process area, evidence index, and audit trail traceability maps.
  • Customer-specific requirement mappings (NAVSEA quality clauses, ABS/DNV rule references) cross-linked to procedures and records.
• Stakeholders engaged:
  • Quality leadership, site leaders, process owners, registrar interface, and customer quality representatives where applicable.
• Designed enablement:
  • De-risked certification events and improved confidence in demonstrating compliance to registrars and customer surveyors.

4) Data Request

To execute the QMS architecture and certification readiness project, we requested the following data sets. We specified time horizons, granularity, and common data quality pitfalls to streamline intake and validation.

• Commercial and contractual:
  • Active contracts and SOWs with quality clauses (NAVSEA Standard Items, ABS/DNV survey requirements), by program and hull.
  • Customer audit reports, corrective actions, and surveillance schedules for the past 24–36 months.
  • Supplier framework agreements with QA terms and inspection/test requirements.
  • Granularity: contract line-item level; clause-level requirements; CAR-level detail.
  • Pitfalls: unstructured clause language, outdated revisions, absence of traceability to internal procedures.
• Operational:
  • Process maps, routings, travelers, and ITPs by area (hull, piping, electrical, outfitting, test & trials) for representative projects over the last 12–18 months.
  • NCR logs, MRB dispositions, defect taxonomy, rework hours, and scrap/write-off data with timestamps and responsible functions.
  • Calibration records (inventory of M&TE, recall dates, as-found/as-left results), training matrices, welder WPQ continuity logs, NDE Level II/III certifications.
  • Granularity: block/module level, operation-level inspection points, NCR per part/serial/lot, calibration per asset.
  • Pitfalls: paper-based records without metadata, missing timestamps, inconsistent coding of defect categories and dispositions.
• Financial:
  • Cost of quality (prevention, appraisal, internal failure, external failure) by program and by shop for the last 24 months.
  • Budgeted vs. actual labor hours for rework; impact of NCRs on schedule adherence; warranty/repair claims for delivered vessels.
  • Granularity: monthly by site and shop; NCR-linked rework hours at the work order level.
  • Pitfalls: incomplete allocation of rework hours, lack of standardized CoQ taxonomy, miscoded costs in ERP.
• Technical/engineering:
  • Drawing sets, BoMs, ECN/ECO history, WPS/PQR library, and specification index (including NAVSEA and class society references).
  • Configuration management procedures, change impact assessments, and affected document lists.
  • Granularity: drawing revision history with effectivity; ECN-level artifacts with impacted parts and documents.
  • Pitfalls: inconsistent revision control, legacy specs in use, missing linkage between ECNs and shop travelers/ITPs.
• Regulatory/ESG:
  • Compliance registers (ISO 9001, NAVSEA, ABS, DNV), environmental controls relevant to coatings, and special process approvals.
  • Surveyor visit logs, hold/witness point records, and port/state inspector findings where applicable.
  • Granularity: clause-level mapping to procedures and records; surveyor report detail with timestamps.
  • Pitfalls: scattered evidence, unstructured notes, lack of cross-reference to QMS documents.
• People and governance:
  • Org charts, RACI matrices, competency requirements by role, internal auditor qualifications, training completion records.
  • Management review agendas, minutes, action logs, and performance dashboards for the last 12–24 months.
  • Granularity: role-level competencies; action item status with owner/due date; training per individual with recert cycles.
  • Pitfalls: decentralized tracking, inconsistent role definitions, lack of effectiveness assessments post-training.
• Systems and integrations:
  • ERP, MES, PLM, eQMS, calibration, and LMS system inventories with data models, interface maps, and master data governance policies.
  • Data extracts for NCRs, CARs, inspection results, calibration, training, supplier performance, and document lifecycle events.
  • Granularity: record-level transaction logs; timestamped status changes; user and e-signature metadata.
  • Pitfalls: duplicates across systems, incomplete fields, mismatched keys between applications, timezone and timestamp inconsistencies.

5) Questions for Client

• What certification scope do you intend to place under ISO 9001 (sites, functions, and programs), and what are the timing constraints driven by NAVSEA/ABS/DNV commitments?
• Which customer quality clauses and classification society requirements have historically driven findings, and how do you prioritize them for near-term remediation?
• What is your acceptable risk tolerance for manual records during the transition to eQMS, and where are electronic signatures required by customers?
• How do you define critical processes in shipbuilding (e.g., welding, NDE, coatings, test & trials), and what performance targets are considered minimum acceptable levels?
• What authority and resources can be committed to document control and configuration management to enforce point-of-use revision control across all shops?
• Which suppliers represent the highest risk to quality and schedule, and what oversight (source inspection, first article) are you prepared to implement?
• What management review cadence and decision rights will you support to drive CAPA closure, resource allocation, and risk mitigation?
• How do you prefer to balance speed to certification with depth of process standardization across sites (phased by site vs. big-bang scope)?
• What constraints exist within ERP/MES/PLM that limit integration of quality data, and what IT change windows and cybersecurity requirements must be respected?
• Where do union agreements, work rules, or contractor arrangements shape how procedures and work instructions can be deployed on the shop floor?
• What is your current baseline for CoQ, FTQ, NCR aging, calibration past-due, and audit closure time, and what targets would management endorse for the next two governance cycles?
• What level of registrar involvement and pre-assessment are you comfortable with, and do you have a registrar preference (e.g., ABS QE) due to customer signaling?
• How should the QMS interface with EHS and security requirements (e.g., coatings environmental controls, CMMC considerations for controlled unclassified information)?
• What training bandwidth exists for internal auditors, weld/NDE/coating qualifications, and document control, and what external support are you open to?
• Which program milestones (keel laying, launch, sea trials) must be protected from audit disruptions, and how should we sequence readiness activities around them?

6) Interview Guide for Subject Matter Experts

Quality Director / QA Manager

• How do you currently prioritize process areas for audits, and what criteria trigger unplanned audits?
• Where do repeat findings occur, and what barriers have you encountered in achieving sustained CAPA effectiveness?
• How do you structure management review inputs and what data are you missing to enable robust decisions?
• What policies govern control of nonconforming outputs and MRB authority, and where are gray areas causing delays?
• How do you measure cost of quality, and what categories are underrepresented or misallocated?
• Which NAVSEA/ABS/DNV interactions have proven most challenging, and what evidence packages have been most persuasive?

Production Superintendent (Hull/Outfitting)

• Where in the build sequence do you see the highest rate of rework, and what are the commonly recurring defect modes?
• How are quality gates embedded in your production plan, and how do inspection hold points affect schedule adherence?
• What is the current process for reacting to engineering changes mid-build, and how do you validate point-of-use revision status?
• How do you balance throughput and inspection coverage, and where would risk-based sampling provide better control?
• What information and tooling (checklists, visuals) do supervisors and craft need to execute ITP steps consistently?
• How do surveyor visits (ABS/DNV, NAVSEA) integrate into your daily plan, and what causes last-minute reschedules?

Engineering and Configuration Management Lead

• What is the end-to-end process for ECN/ECO, and how are impacts to ITPs, travelers, and suppliers assessed?
• How do you manage specification libraries (NAVSEA, ABS, DNV) and ensure superseded documents are removed from use?
• Which data fields in PLM are authoritative for quality-critical attributes, and how are they interfaced to ERP/MES?
• How do you control WPS/PQR/WPQ and welding consumable specifications, and what triggers periodic review?
• Where do you see the greatest risk of mismatch between engineering intent and shop execution, and what controls are effective?
• What configuration baselines are applied at major milestones (e.g., block handover) and how are variances handled?

Supplier Quality Manager / Procurement

• How is supplier risk classified, and how do those classifications drive inspection and audit plans?
• What are the most common supplier-related NCRs, and what has been effective in reducing recurrence?
• How do you govern ASL updates, and what evidence is required to add or downgrade suppliers?
• Which materials/components require source inspection or first article, and how do you track these obligations?
• How do you integrate supplier quality data into internal dashboards, and where are data integrity gaps?
• What expectations do customers or classification societies have for oversight of key suppliers (e.g., critical castings, pressure vessels)?

NDE Level III / Welding Engineering / Coatings QA

• What procedures are in place for NDE method qualification and personnel certification, and where are gaps in continuity tracking?
• How do you select NDE method and sampling plans by risk and specification, and how is this documented in ITPs?
• Where do weld repair rates exceed targets, and what are the root causes by joint type, position, or material?
• How do you ensure coatings environmental controls and DFT measurements are captured and retained as quality records?
• What are common failure modes in special processes, and what preventive controls are most effective?
• How do external surveyors interact with your special process oversight, and what documentation do they expect to see?

Document Control / eQMS / IT Systems Owner

• What document types and records are controlled and how, and where do you see leakage or uncontrolled copies?
• How are user roles and approvals configured in PLM/eQMS, and what segregation of duties is enforced?
• What integrations exist between ERP, MES, PLM, and eQMS, and where are manual handoffs introducing risk?
• How are e-signatures managed, and what customer or regulatory requirements govern their use?
• What are the most common data quality issues in NCR/CAR modules, and how do you validate completeness and accuracy?
• How do you provision shop floor access to controlled documents, and what offline contingencies are in place?

Program Manager (NAVSEA / Classification Society Interface)

• What quality milestones are customer-critical, and how do they map to program schedule gates?
• What is your process for managing customer findings and surveillance actions, and how do you prevent repeat issues?
• How do you communicate contract quality requirements to internal teams and suppliers, and what gaps exist?
• What level of risk are you prepared to accept regarding schedule vs. inspection coverage during peak build periods?
• How do you coordinate surveyor availability and ensure readiness of evidence packages for visits?
• What contingency plans do you use when late design changes or supplier delays impact quality gates?

7) Timeline

We executed a 12-week plan structured around discovery, diagnostics, design, pilot execution, and readiness validation. Critical path items focused on clause 7.5 documented information, 8.4 supplier controls, 8.5 production controls, 9.2 internal audit, and 9.3 management review, aligned to program milestones and customer surveillance windows.

Weeks 1–2: Discovery and Gap Diagnostics

• Completed site walkthroughs, interviews, and clause-level document reviews.
• Assessed process coverage for hull, piping, outfitting, and trials; mapped class society touchpoints.
• Issued gap assessment with prioritized remediation backlog and owners.
• Decision gate: Executive confirmation of scope, target registrar, and remediation sprint priorities.

Weeks 3–4: QMS Architecture and Process Mapping

• Drafted Quality Manual, policy, and tiered documentation structure with process maps and SIPOCs.
• Designed document control workflows, metadata standards, and revision controls.
• Built standard ITP templates and control plans for high-risk processes.
• Decision gate: Approval of QMS architecture, document hierarchy, and change control plan.

Weeks 5–6: Procedure Development and Digital Enablement

• Authored procedures and work instructions for document control, NCR/MRB, CAPA, calibration, internal audit, supplier quality, and management review.
• Defined quality data model and eQMS configuration requirements; scoped integrations to ERP/MES/PLM.
• Launched controlled pilots in select shops (e.g., pipe and hull) for traveler/ITP execution.
• Decision gate: Signoff on procedures and system configuration specs; training plan release.

Weeks 6–8: Internal Audit Program and Supplier Controls

• Trained internal auditors; executed pilot audits on clauses 7.5, 8.4, 8.5, and 8.7.
• Implemented supplier segmentation and incoming inspection updates; issued initial supplier CARs where needed.
• Validated calibration recall process and resolved high-risk past-due items.
• Decision gate: Acceptance of audit program schedule, CAR effectiveness criteria, and supplier oversight plan.

Weeks 8–10: CAPA Sprints and Management Review Setup

• Closed priority corrective actions from pilot audits; verified implementation and effectiveness.
• Stood up management review cadence with defined inputs, KPI dashboards, and action trackers.
• Conducted readiness reviews with process owners and assembled evidence binders.
• Decision gate: Greenlight for pre-assessment audit and registrar engagement package.

Weeks 10–12: Pre-Assessment and Readiness Validation

• Performed pre-assessment audits against ISO 9001 scope; captured minor/major findings for rapid remediation.
• Validated NAVSEA/ABS/DNV mappings in procedures and ITPs; rehearsed audit interviews and shop floor demonstrations.
• Refined evidence indices, records retention, and eQMS reporting; finalized registrar RFP and schedule alignment.
• Decision gate: Executive go/no-go for formal certification audit timing and customer notification plan.

8) Deliverables

• Quality Management System Architecture Pack:
  • Quality Policy, Quality Manual, tiered documentation framework, process maps, and SIPOCs. Used to communicate scope and structure to staff, registrar, and customers.
• Document Control and Configuration Management Procedure Set:
  • Procedures for document lifecycle, ECN/ECO, master lists, metadata standards, and point-of-use controls. Enables compliance to ISO 9001:7.5 and mitigates wrong-revision risk.
• Inspection and Test Plan (ITP) Library and Control Plans:
  • Standardized templates and pre-populated plans by process area with hold/witness points and acceptance criteria. Supports consistent execution and clear surveyor interfaces.
• Supplier Quality Management Toolkit:
  • ASL governance, supplier segmentation model, audit checklists, incoming inspection plans, and supplier scorecards. Used by procurement and SQE to manage 8.4 controls.
• Internal Audit Program and Auditor Training Materials:
  • Annual audit schedule, clause and process checklists, reporting templates, competency framework, and training modules. Builds internal capability to sustain 9.2.
• CAPA Playbook and RCA Templates:
  • Standardized 8D, 5-Why, fishbone templates, effectiveness criteria, and escalation thresholds. Ensures consistent resolution of findings and reduction of recurrence.
• Calibration and M&TE Control Package:
  • Inventory standards, recall procedures, as-found/as-left record templates, and dashboard for past-due risk. Supports compliance for inspection equipment under 7.1.5.
• Management Review Governance Pack:
  • Agenda, input/output definitions, KPI dashboards, risk register, and action logs. Guides leadership decision-making and evidence for 9.3.
• Quality Data Model and eQMS Configuration Specification:
  • Data dictionary, entity models, interface maps, and form/workflow specifications for NCR, CAR, audit, calibration, training, and document control. Accelerates digital enablement.
• Certification Readiness Checklist and Evidence Index:
  • Clause-level checklist, cross-reference matrix to procedures and records, and curated evidence binders. Facilitates pre-assessment and certification audit logistics.
• Training Plan and Role-Based Curricula:
  • Training matrices, read-and-understand schedules, and competency assessment tools for QA, production, document control, and auditors. Builds capability for sustainment.
• Customer and Classification Society Compliance Matrix:
  • Mapping of NAVSEA, ABS, and DNV requirements to QMS documents, ITPs, and records. Used during customer meetings and surveyor visits to demonstrate coverage.

9) Industry Insights

Quality management in Shipbuilding & marine systems reflects a convergence of Aerospace & Defense rigor with the practical realities of large-scale, modular manufacturing. ISO 9001:2015 remains the baseline credential for quality system maturity, while customers and classification societies impose additional expectations that must be embedded in the QMS architecture. Several dynamics shaped our approach to QMS architecture and certification readiness:

• Complexity and modular construction: Modern shipyards operate as integrated ecosystems involving block fabrication, pre-outfitting, grand block erection, and progressive system activation. Each stage introduces unique defect modes and inspection requirements. High first-time quality at interfaces (e.g., block-to-block fit, pipe flange alignments) drives schedule performance. A QMS must articulate quality gates that align tightly with the production plan and surveyor presence.
• Customer and regulator convergence: NAVSEA quality clauses, ABS Rules for Building and Classing, and DNV standards converge on robust control of special processes, traceability, and documentation. Successful QMS architectures provide a clear mapping from customer clauses and rules to procedures, ITPs, and records, minimizing surprises during surveillance.
• Risk-based thinking and PDCA: ISO 9001’s emphasis on risk and opportunities formalizes what shipyards already intuit: not all processes carry equal risk. Welding, NDE, coatings, and pressure testing warrant heightened scrutiny. Embedding FMEA-style thinking and tiered controls in the QMS sustains performance and auditability.
• Digital shipyard and the quality data thread: ERP, MES, PLM, and eQMS systems create opportunities for a digital thread of quality. However, integration gaps frequently produce data integrity issues, especially around revision control, NCR coding, and inspection evidence. A pragmatic data model and governance policy avoids overengineering while delivering traceable, auditable records.
• Supplier ecosystem risk: Shipbuilders depend on a global supply chain for castings, pipe fittings, electrical components, coatings, and complex assemblies. ISO 9001:8.4 requires demonstrable control of externally provided processes. Risk-based supplier segmentation, robust incoming inspection, and clear CAR management are central to de-risking schedule and cost.
• Special processes and competence management: Welding qualifies as a special process requiring WPS/PQR/WPQ rigor. NDE personnel certifications and coatings inspector credentials are frequent audit focal points. A QMS that ties competency management to process approvals reduces findings and raises confidence among surveyors and customers.
• Evidence culture and audit readiness: Registrars and customer representatives look for two things: conformance by design and conformance in execution. Evidence must be complete, current, and easily retrievable. The most successful shipyards develop a culture of disciplined record-keeping, supported by eQMS workflows and clear ownership.
• What good looks like: Best-in-class shipyards maintain FTQ above industry norms at key interfaces, weld repair rates in a low single-digit percentage, NCR closure within defined SLAs, audit finding closure within governance cycles, and minimal calibration past-due. They also demonstrate strong supplier OTD-Q and consistent management review discipline with trend analytics and action effectiveness tracking.
• Near-term disruptions and inflections:
  • Digital NDE and advanced analytics: Migration to phased-array UT and digital RT elevates data storage and interpretation requirements; QMS procedures must evolve to manage digital evidence and Level III oversight.
  • Advanced materials and joining processes: Adoption of new alloys and joining techniques requires rapid updates to WPS/PQR frameworks and training.
  • Cybersecurity and controlled information: While primarily an IT domain, CMMC expectations indirectly affect QMS records management and access control for technical data packages.
  • Environmental controls: Coatings specifications and environmental regulations drive stricter controls and documentation for application, curing, and emissions monitoring.
• Ecosystem and partnering: Collaboration with registrars (ABS QE), classification societies (ABS, DNV), and testing labs expands capability. Clear interfaces and shared expectations reduce friction and clarify what evidence is necessary at each phase.

In this context, a tailored QMS architecture and certification readiness program provided a practical path to demonstrate ISO 9001 conformance while meeting NAVSEA, ABS, and DNV expectations. The emphasis on process mapping, document control, internal audit rigor, management review discipline, and digital enablement positioned the organization to manage complexity, reduce risk, and present a coherent quality story to external stakeholders. Our approach centered on operational realism, clear trade-offs, and a governance model that sustained momentum beyond the certification event.