Xcellenss — Business excellence and quality

The short answer: three different finishing lines

ISO 9001 certifies a management system, Six Sigma drives defects down to a statistical target, and Baldrige scores an entire organisation — they differ in what is assessed, who assesses it and what you hold at the end.

Ask for ISO 9001 and you get a certificate: an external audit body tests your quality management system against the requirements in clauses 4 to 10 of the standard, and either you pass or you do not. There is no score and no ranking — a small workshop and a multinational hold the same document.

Ask for Six Sigma and you get a number: a process improved until it produces no more than 3.4 defects per million opportunities. Nobody certifies the organisation; project teams run the 5 DMAIC phases and the result is a measured defect rate, not a framed certificate.

Ask for Baldrige and you get a score: examiners rate the whole organisation against 7 criteria worth 1,000 points in total, with Results alone carrying 450. Lean and CMMI sit nearby — Lean is a daily practice with no certificate at all, and CMMI rates capability on a 5-level maturity ladder.

ISO 9001: the one that ends in a certificate

ISO 9001:2015 is built from 10 clauses, its requirements live in clauses 4 to 10, and its certificate survives on a fixed 3-year audit cycle.

The 10 clauses run from context and leadership through planning, support and operation to performance evaluation and improvement — the seven areas an auditor can actually test. The first three clauses set scope and terms, so every testable requirement sits in clauses 4 to 10.

Certification is a cycle, not an event. A Stage 1 audit reviews your documentation; a Stage 2 audit tests the system in operation; surveillance audits return every 12 months; and at 36 months a recertification audit opens the next 3-year cycle. The full procedure, with its failure points, sits on the ISO 9001 Certification Step by Step page.

Audits fail in named ways. A major nonconformity — a requirement that is missing or broken — blocks the certificate until it is corrected and re-checked. Minor nonconformities are logged with corrective-action deadlines, and findings left open at surveillance put the certificate at risk.

Map your processes against clauses 4 to 10 and build the documented system.

Stage 1: documentation review — the auditor checks the system on paper before visiting.

Stage 2: certification audit — the system is tested in operation; a major nonconformity stops here.

Surveillance audit every 12 months — minor nonconformities must be closed on agreed deadlines.

Recertification at 36 months — a full re-audit opens the next 3-year cycle.

The dossier: three ways to finish

Six Sigma: the one that ends in a defect rate

Six Sigma is a project method with a statistical definition: a process performing at no more than 3.4 defects per million opportunities.

Motorola introduced Six Sigma in 1986, and General Electric turned it into a company-wide programme in 1995–1996. It spread as a way to attack defects with data rather than opinion, and the 3.4 DPMO ceiling remains its defining number.

The engine is DMAIC — Define, Measure, Analyze, Improve, Control — 5 phases that take a problem from a vague complaint to a locked-in fix. For smaller, well-understood problems, teams drop to the 4-stage PDCA loop: Plan, Do, Check, Act. The phase-by-phase procedure, with the switch points, sits on the Running a DMAIC Improvement Cycle page.

There is no organisational certificate to hang on the wall. What a Six Sigma programme produces is a measured defect rate per project, so its results are comparable across processes in a way a pass/fail certificate never is.

Define — state the problem and the customer it hurts.
Measure — count current defects per million opportunities.
Analyze — find the root causes behind the numbers.
Improve — remove the causes and verify the gain.
Control — lock the fix so the defect rate stays down.

Baldrige: the one that ends in a score

The Malcolm Baldrige National Quality Award rates a whole organisation against 7 criteria totalling 1,000 points — and Results alone carries 450.

The award was created by a 1987 law and has been presented since 1988. Applicants receive a scored assessment from examiners, which makes Baldrige as much a feedback tool as a trophy.

The 7 criteria cover how the organisation leads, plans, serves customers, manages its people and operations — and what it actually achieves. With 450 of 1,000 points sitting on Results, the scoring pushes hard toward demonstrated outcomes rather than documented intentions.

That is the sharpest contrast with ISO 9001: certification is pass/fail against minimum requirements, while a Baldrige score places you somewhere on a 1,000-point scale. One answer is adequate or not; the other is how good, and exactly where.

Lean and CMMI: the practice system and the maturity ladder

Lean removes waste with no certificate at all, while CMMI rates an organisation on 5 maturity levels from Initial to Optimizing.

Lean began at Toyota with a list of 7 wastes; the modern DOWNTIME mnemonic — defects, overproduction, waiting, non-utilized talent, transportation, inventory, motion, extra-processing — adds underused talent to make 8. There is no Lean certificate: the evidence is the waste that is gone.

CMMI's staged model defines 5 maturity levels, from Level 1 (Initial), where work is unpredictable, to Level 5 (Optimizing), where the organisation improves its own processes continuously. An appraisal assigns the level — a rating of capability, not a pass/fail test.

Between them they cover the two things the big three miss: Lean supplies the daily discipline that keeps processes clean, and CMMI tells you how mature your process management actually is.

Five frameworks, side by side

Five frameworks by structure, scoring and cycle — the numbers that separate them.
Framework	What it is built from	How it is scored or granted	How often it runs
ISO 9001	10 clauses; requirements sit in clauses 4–10	Pass/fail certificate from an external audit body	3-year cycle: Stage 1, Stage 2, surveillance every 12 months, recertification at 36 months
Six Sigma	5 DMAIC phases paired with the 4-stage PDCA loop	No organisational certificate; success is 3.4 defects per million opportunities or fewer	Project by project; no fixed external cycle
Baldrige Award	7 scored criteria	Examiners award points out of 1,000; Results alone is worth 450	Annual award cycle, presented since 1988
Lean	7 classic wastes, 8 under the DOWNTIME mnemonic	No score and no certificate; it is a practice system	Continuous, built into daily work
CMMI	5 maturity levels, from Level 1 Initial to Level 5 Optimizing	A staged appraisal assigns a maturity level	Appraisal-driven; organisations re-appraise to climb levels

Five frameworks by structure, scoring and cycle — the numbers that separate them.

Six frameworks at a glance

Each card states what the framework is built from and what you hold when the work is done.

Four decades of quality frameworks

The key terms of this guide, drawn to one scale