“That’s how we’ve always done it.”
Four words that can quietly undermine an otherwise compliant quality management system.

In quality management, consistency matters. Organizations need defined processes, documented information, trained employees, and controls that help ensure work is performed as intended.

But consistency should not mean doing something the same way forever.

Businesses change. Customers change. Technology changes. Suppliers change. Employees change. Risks change.

When processes remain untouched simply because “that’s how we’ve always done it,” an organization can miss opportunities to improve—and sometimes fail to recognize new risks until they become problems.

When Familiar Becomes a Risk

A process can work well for years and still become outdated.

Perhaps a procedure was created when the company had 20 employees and now has 200. Maybe a manual approval process was never updated after new technology became available. Or perhaps employees have developed their own way of completing a task because the documented procedure no longer reflects what actually happens.

None of these situations necessarily mean the quality management system is failing.

But they are signals that the process deserves another look.

An effective quality management system should evolve with the organization. Processes should be reviewed based on performance, risks, customer expectations, changes in the business environment, and opportunities for improvement—not simply because a scheduled review date has arrived.

The Problem Isn’t Always the Process. It’s the Lack of Review.

There is nothing inherently wrong with keeping a process that works.

The problem is assuming it works because it has always worked.

That mindset can make it difficult for teams to question established practices. Employees may stop identifying opportunities for improvement because the existing process has become accepted as “the way things are done.”

Over time, this can create a gap between the documented quality management system and the way work is actually performed.

And that gap matters.

Your procedures should support your people—not force them to work around the system.

Five Signs Your QMS May Be Stuck in the Past

Take a closer look at your quality management system if you recognize any of these situations:

1. Your procedures don’t match reality.
Employees are completing tasks differently from what your documented procedures describe.

2. Your team relies on tribal knowledge.
Important information lives in someone’s experience rather than in a process that others can consistently follow.

3. The same problems keep coming back.
Corrective actions are being closed, but similar nonconformities continue to appear.

4. Internal audits identify findings, but little changes afterward.
The audit becomes an exercise in identifying problems rather than an opportunity to improve the system.

5. Processes haven’t been challenged in years.
When asked why something is done a certain way, the answer is simply: “That’s how we’ve always done it.”

These signs don’t automatically mean your QMS is ineffective. They do mean it may be time to ask better questions.

 

Compliance Isn’t the Finish Line

Achieving and maintaining ISO 9001 conformity is important. But compliance should not be the only objective of a quality management system.

A strong QMS should help an organization consistently deliver products and services that meet requirements while supporting better processes, informed decision-making, and continual improvement.

In other words:

A quality management system should not simply document what your organization does. It should help your organization do it better.

This distinction becomes particularly relevant as organizations prepare for the transition to ISO 9001:2026. 

The new edition places continued emphasis on areas such as leadership, quality culture, risks and opportunities, and the relationship between quality management and an organization’s broader business environment.

That means organizations have an opportunity to look beyond individual procedures and ask a bigger question:

Is our quality management system helping us respond effectively to the way our business operates today?

Ask Better Questions

The next time someone says, “That’s how we’ve always done it,” don’t automatically change the process.

Instead, pause and ask:

– Does this process still meet customer needs?
– Does the documented procedure reflect what actually happens?
– Have the risks associated with this process changed?
– Could the process be simpler, more efficient, or more effective?
– What evidence tells us that the process is working?
– What have we learned from recent nonconformities, complaints, or internal audits?

These questions shift the conversation from “Are we following the procedure?” to “Is this still the right procedure?”

That is where continual improvement begins.

Don’t Let Familiarity Become a Quality Risk

Continuous improvement doesn’t always mean changing everything.

Sometimes, it means taking a second look at something everyone has stopped questioning.

The best quality management systems are not static. They evolve as organizations learn, grow, face new risks, and respond to changing customer and business needs.

So the next time you hear:

“That’s how we’ve always done it.”

Consider asking one more question:

“Is it still the best way to do it?”

That simple question could uncover your next opportunity for improvement.

Need help evaluating the effectiveness of your quality management system?
The ISO 9001 Group can help your organization identify gaps, strengthen processes, and build a QMS that supports more than just compliance.

 

About The Author

Oscar Combs is the President of The ISO 9001 Group, a consulting, auditing and training company headquartered in Houston, Texas. With over 31 years of experience in the field, he is recognized as an expert in the implementation of management systems that help organizations manage risk and improve operational efficiency.

The ISO 9001 Group

The ISO 9001 Group is a business and management systems consulting, auditing and training firm headquartered in Houston, Texas with regional resources in Atlanta, Chicago, Denver, New York, and Portland.  Contact us at info@iso9001group.com for more information or www.iso9001group.com.