Concept 10 of 15

Project quality management

3 questions test this

Quality is the degree to which a set of inherent characteristics fulfils requirements. Read plainly, that makes quality a comparison against something written down, which is why quality management begins in the requirements rather than in the testing.

Practitioners supply a second half of the definition from experience. A deliverable meeting every stated requirement while being useless to the person who has to work with it has satisfied conformance and failed fitness for purpose, so both readings are needed and neither is sufficient alone.

Conformance and fitness for purpose

Conformance to requirements means the product does what the specification said. It is objective, testable and the basis of any acceptance decision, and without it no other quality claim survives a dispute.

Fitness for purpose means the product satisfies the real need. It is the check on whether the requirements were the right ones, and it fails in a distinct way, since a project can meet its specification exactly and still deliver something nobody uses.

Requirements that were never made measurable are where most quality arguments start. A stated need for a fast report generates disagreement forever, whereas a need for a report returning within four seconds at a defined data volume can be tested and settled.

Prevention costs less than inspection

Quality is planned in rather than tested in. Inspection finds defects that already exist and pays for the work that produced them, while prevention keeps them out of the product.

The economics come from how the cost of a defect grows with the delay in finding it. A requirement misunderstood and caught in review costs a conversation. The same misunderstanding caught in testing costs the design, the build and the retest as well. Caught in production it costs all of that plus the incident, the customer relationship, and an emergency change that goes in without the usual care.

The growth is roughly multiplicative at each stage, which is why moving detection one stage earlier is worth more than making later detection more thorough.

The cost of quality

Cost of quality is the total cost of conformance and nonconformance across the life of the deliverable, including the part that lands after handover.

Cost of conformanceCost of nonconformancehandoverPreventionreviews and training£200Appraisaltesting and inspection£800Internal failurerework before delivery£4,000External failuresupport and lost trust£40,000The same defect, costing more at every stage it survives

One defect, priced four times. Left of the dashed line the project is spending its own money on its own schedule, and right of it the spending is unplanned, urgent, and increasingly somebody else's budget.

Conformance costs are prevention and appraisal. Prevention covers training, documented process, tooling and design reviews, meaning everything spent to stop defects existing. Appraisal covers testing, inspection and audit, meaning everything spent to find the defects that do exist.

Nonconformance costs are internal and external failure. Internal failure is rework and scrap found before delivery. External failure is warranty work, support cost, liability and lost business found after it, and it is the expensive category by a wide margin.

CategoryWhat the money buysExample on one payment defectCost
PreventionStops the defect coming into existenceTwo hours of design review on the payment interface, plus the checklist that came out of it£200
AppraisalFinds the defect that already existsThe automated suite, the exploratory session and the release inspection£800
Internal failureRepairs what was found before deliveryRework, retest, the scrapped build and the slipped release date£4,000
External failureRepairs what was found after deliveryEmergency release, support calls, a credit to the customer, the incident review and an account that renews smaller£40,000

The figures rise between fourfold and tenfold at each step, and the step across handover is the steepest of them. That shape is what makes the argument for prevention economic rather than moral, since £200 spent to remove a one in ten chance of the £40,000 outcome buys away £4,000 of expected cost and returns twenty times what it cost.

The reason to model all four is that they trade against each other. Cutting prevention and appraisal reduces cost visibly and immediately, and the saving reappears as external failure later, in a budget that usually belongs to somebody else. That accounting split is why underinvestment in quality is so easy to justify from inside a project.

Assurance looks at the process, control looks at the product

Quality assurance audits whether the processes being followed are capable of producing a conforming deliverable, and it improves those processes where they are not. Its subject is the way the work is done.

Quality control measures deliverables against the requirements and produces verified deliverables along with the measurements themselves. Its subject is the output.

They answer different questions, and the difference is worth being precise about. Control tells you this deliverable is correct. Assurance tells you the next one is likely to be correct as well, because the process that produced it is sound. A project relying only on control finds every defect one at a time and never learns why they keep appearing.

Control also feeds assurance. The measurements control produces are the evidence assurance uses to decide which processes need changing, so the two work as a loop rather than as separate departments.

Grade and quality are different scales

Grade is a category assigned to deliverables with the same functional use but different technical characteristics, meaning how much the thing does. Quality is how well it does whatever it claims to do.

Because the two scales are independent, all four combinations exist, and only half of them are a problem.

QualityLow gradeHigh grade
HighA basic utility that does its limited job reliably every time, which is a perfectly good decisionA capable product that also works as specified, which is what a large budget is supposed to buy
LowA basic utility that fails at even its limited jobA capable product loaded with features that crash, and the most expensive way to fail

Low grade is often perfectly acceptable, because a basic model chosen deliberately and specified as basic is a legitimate decision. Low quality is never acceptable, because it means the deliverable does not meet its own stated requirements.

Confusing the two produces the argument in which somebody defends defects by pointing at the budget. The budget explains which column a deliverable belongs in, and it has no bearing at all on which row.

Common misconceptions

Quality management is testing, so it belongs near the end of the project.

Quality is planned in rather than tested in. Inspection finds defects that already exist and pays for the work that produced them, and the cost of a defect multiplies at every stage it survives, so detection moved one stage earlier is worth more than a more thorough later check.

Quality assurance and quality control are two names for checking the work.

Quality control measures deliverables against requirements and produces verified deliverables, so its subject is the output. Quality assurance audits and improves the processes that make those deliverables, so its subject is the way the work is done.

A cheap deliverable is a low quality deliverable.

Grade is how much the thing does and quality is how well it does it. Low grade specified deliberately is a legitimate decision, and low quality never is, because it means the deliverable does not meet its own stated requirements.

3 questions test this concept

A programme has a fixed sum left in its quality budget. One proposal doubles the length of the system test window at the end. The other funds requirement reviews and static analysis during design and build. Which argument should decide it?

  • AFund the longer test window, because the defects it finds are demonstrable and the value of a review that finds nothing cannot be measured.
  • BIt makes no difference to the cost of quality, since reviews and testing are both conformance costs and the total spent is the same either way.
  • CFund the earlier reviews and analysis, because the cost of a defect multiplies at every stage it survives, so moving detection one stage earlier is worth more than making a later check more thorough.
  • DFund the reviews and remove the test window, because prevention that works removes the need for appraisal.
Check whether it stuck.

One per page, with a worked explanation.

Start the set
Related material
Book
Continuous Delivery, On building the checks into the pipeline rather than into a phase.
Book
The DevOps Handbook, On feedback loops that shorten the distance between defect and detection.