Why Most P&Ls Hide Their Biggest Quality Number
Ask a plant manager what quality costs, and you'll usually get the number for the quality department: salaries, inspection equipment, maybe the cost of the last audit. Ask what poor quality costs, and most companies simply don't have an answer.
The rework. The scrapped batch. The customer complaint that ate three days of an account manager's week. The recall that never made the news but still cost seven figures. None of it lives in a single account code. It's scattered across cost of goods sold, customer service, legal, and shipping—which is exactly why it survives budget reviews that would kill any other expense of comparable size.
Cost of Quality (COQ) is the discipline of pulling those numbers into one place. Joseph Juran laid the groundwork in his 1951 Quality Control Handbook, arguing that quality costs could—and should—be measured with the same rigor as any other cost of doing business. Armand Feigenbaum built on that foundation in his 1956 Harvard Business Review article "Total Quality Control," which introduced the framework most quality professionals still use today: Prevention, Appraisal, and Failure costs. The failure side of that ledger—often called "cost of poor quality" (COPQ) in the quality literature that grew out of Juran's work—is the piece that tends to shock leadership teams once someone finally adds it up.
In my work helping manufacturers and life sciences companies prepare for ISO 9001, GMP, and FDA-regulated audits, I've seen this gap over and over: the company that "doesn't have a quality problem" because the quality department's budget is small, sitting next to a COPQ that's quietly eating margin nobody's tracking. This article walks through the PAF model, how to actually calculate it, what the regulatory frameworks require versus what they merely encourage, and where to start if you've never measured it before.
The Four Categories: Prevention, Appraisal, Internal Failure, External Failure
The PAF model splits quality costs into four buckets. The first two are costs you choose to spend. The last two are costs the business incurs whether it wants to or not.
| Category | Definition | Typical Examples | Who Controls It |
|---|---|---|---|
| Prevention | Costs incurred to keep defects from happening in the first place | Process design, supplier qualification, training, quality planning, preventive maintenance, risk assessments under clause 6.1 | The organization, proactively |
| Appraisal | Costs of checking whether something already went wrong | Incoming inspection, in-process testing, calibration, internal audits, finished-goods testing | The organization, proactively |
| Internal Failure | Costs from defects caught before the product or service reaches the customer | Scrap, rework, re-inspection, downgrading, retesting, production downtime | The organization, reactively |
| External Failure | Costs from defects the customer or regulator finds first | Complaints, returns, warranty claims, recalls, regulatory sanctions, litigation, lost customers | The market and the regulator |
The pattern worth sitting with: money spent in the first two columns is money you decided to spend. Money spent in the last two is money the defect decided to spend for you, usually at a multiple of what prevention would have cost. That's the entire argument for investing in prevention and appraisal—not because quality is virtuous in the abstract, but because it's cheaper than the alternative, and the alternative doesn't ask your permission.
How to Actually Calculate It
Most companies never calculate COQ because it looks like it requires a new accounting system. It doesn't. It requires pulling existing numbers into one worksheet and being honest about where they hide.
Step 1: Pick a period and a boundary. A quarter is usually long enough to smooth out noise, short enough to act on. Decide up front whether you're measuring one product line, one facility, or the whole business—mixing scopes makes the number meaningless.
Step 2: Total each PAF category. Prevention and appraisal costs are usually visible in existing budgets (quality department payroll, calibration contracts, audit fees, training spend). Internal and external failure costs are the hard part—they're buried in scrap accounts, customer service hours, legal fees, shipping costs for returns, and the value of product that got downgraded or destroyed. Talk to operations, customer service, and finance separately; each one holds a piece the others don't see.
Step 3: Express it as a percentage of a stable denominator, typically total sales or total operating cost. A raw dollar figure invites debate about whether it's "a lot." A percentage lets you compare quarter to quarter and against your own targets.
Step 4: Track the ratio between categories, not just the total. The single most useful number in a COQ report isn't the grand total—it's the ratio of failure cost to prevention-plus-appraisal cost. A business that's investing well tends to see failure costs shrink over time as prevention spend rises. A business where failure costs dominate the total, quarter after quarter, is paying for the same mistakes repeatedly rather than engineering them out.
None of this requires new software. A spreadsheet with four columns, updated quarterly and reviewed at the management review meeting required under ISO 9001:2015 clause 9.3, is enough to start changing behavior.
What the Standards Actually Require
Here's where I'll save you some research time, because I get this question constantly from clients preparing for certification: no major standard requires a company to name a "Cost of Quality" program. But several require the underlying data collection that makes COQ possible, and a few make the connection explicit enough that an auditor will expect to see it.
ISO 9001:2015 clause 9.1.3 requires the organization to analyze and evaluate data arising from monitoring and measurement, including data on nonconformities and corrective actions—which is, functionally, your internal and external failure cost data. Clause 10.2 requires you to react to nonconformities, evaluate the need for action to eliminate the cause, and retain documented information on the results—the corrective action record that, priced out, becomes a failure cost line item. Clause 6.1 requires you to plan actions to address risks and opportunities, which is where prevention spending gets justified in audit language.
In FDA-regulated environments, the connection tightens further. 21 CFR 820.100 requires medical device manufacturers to establish procedures for corrective and preventive action (CAPA), and 21 CFR 820.198 requires a complaint-handling system—both of which generate the raw external failure data most device companies already have and simply never total up. On the drug side, 21 CFR 211.192 requires a written record of investigation into any unexplained discrepancy or batch failure, which is internal failure cost sitting in a filing cabinet. None of these regulations say the word "cost." All of them hand you the data.
Why Failure Costs Are Bigger Than They Look
The instinct is to think of a defect's cost as the cost of the unit itself: the scrapped batch, the returned shipment. That's the visible part. The part that doesn't show up on the receiving dock is what it costs to find the defect once it's already left the building—the recall notice, the FDA Form 483 response, the retained counsel, the customer who quietly moves their next contract to a competitor without ever filing a complaint.
The Grocery Manufacturers Association's 2011 report "Capturing Recall Costs" put the average direct cost of a food recall at roughly $10 million, and that figure was direct cost only—it didn't include the brand damage, the lost shelf space, or the customers who don't come back. That number is over a decade old and industry-specific, so don't treat it as a universal constant. Treat it as a floor: the visible cost of a single external failure event, before the invisible costs even start compounding.
This is the argument I make to clients who balk at the cost of a robust internal audit program or a supplier qualification process: you are going to pay for quality one way or another. The only question the business actually controls is which column the money lands in.
A Practical Starting Point
If you've never run a COQ exercise, don't try to build the perfect system on the first pass. Start narrow:
- Pick one product line or one facility with a known quality headache—the one everyone already complains about informally.
- Pull twelve months of nonconformance records, CAPA records, and customer complaints for that scope. This is usually sitting in your QMS already, whether that's a dedicated eQMS or a shared drive full of forms.
- Price each one out: labor hours at loaded cost, materials scrapped, freight for returns, any regulatory response cost.
- Compare that failure total to what you currently spend on prevention and appraisal for the same scope.
- Bring the ratio to the next management review, not as a finished program but as a conversation starter.
Companies that do this once rarely stop. The number tends to be uncomfortable enough on the first pass that it earns its own line in the budget the following year.
Prevention Spend vs. Failure Spend: A Side-by-Side View
| Scenario | Prevention/Appraisal Investment | Typical Failure Outcome | Net Effect |
|---|---|---|---|
| Supplier qualification program in place | Audit and testing cost per supplier, ongoing | Incoming material defects caught before production | Failure cost shifts left, stays internal and cheap |
| No supplier qualification | None | Defective raw material enters production undetected | Failure cost shifts right, becomes external, expensive, and reputational |
| Statistical process control on a critical step | Equipment, training, ongoing monitoring | Drift caught and corrected before batch release | Internal failure cost only, contained |
| No process monitoring | None | Out-of-spec product reaches distribution | External failure cost: complaint, return, possible recall |
| Documented CAPA system per 21 CFR 820.100 | Staff time, investigation process, trending | Root cause addressed, recurrence rate drops | Failure cost curve bends downward over time |
| CAPA exists on paper only, not followed | Minimal | Same defect recurs across multiple batches | Failure cost stays flat or climbs, audit finding likely |
The table isn't meant to prove a fixed ratio—the multiple varies by industry, product complexity, and how far downstream a defect travels before it's caught. What it's meant to show is direction: every one of these pairs has an "before" that costs less and predictably, and an "after" that costs more and unpredictably. That asymmetry is the entire business case for the left-hand column.
Where This Fits Into a Quality Management System
Cost of Quality isn't a separate initiative bolted onto a QMS—it's the financial language that makes a QMS legible to people who don't read audit reports. A quality manager can tell an executive team that the internal audit program found forty nonconformances last year. That statement doesn't move a budget conversation. Telling the same executive team that those forty nonconformances, left unaddressed, could project to something like $400,000 in external failure cost—a hypothetical figure, but one built from the same PAF math this article just walked through—does move the conversation, because now it's using the vocabulary the rest of the business already runs on.
I've built this bridge for clients pursuing ISO 9001 certification who initially saw the standard as a compliance exercise and, once they ran the COQ numbers, started treating clause 9.1.3 data analysis as a genuine management tool rather than an audit checkbox. That shift—from "we track this because the standard says to" to "we track this because it tells us where the money is going"—is usually the difference between a certificate on the wall and a management system that actually runs the business.
If you're building or rebuilding a quality system and want the Cost of Quality data captured correctly from the start rather than reconstructed after a recall, that's a scoping conversation worth having early. Our ISO 9001 consulting engagements build the nonconformance and CAPA data structure so the COQ math is available on demand, not assembled under deadline pressure during an audit. For regulated manufacturers, the same logic applies to GMP certification work—the CAPA and deviation records required for compliance are the same records that make the failure-cost side of the ledger visible.
FAQ
What is Cost of Quality (COQ)? Cost of Quality is the umbrella number for the four categories covered above—prevention, appraisal, internal failure, and external failure. Most companies already generate every input; COQ just pulls them into one place instead of leaving them scattered across cost of goods sold, customer service, legal, and shipping.
What's the difference between Cost of Quality and Cost of Poor Quality (COPQ)? COQ is the full picture—everything spent on prevention and appraisal plus everything lost to failure. COPQ, a term popularized by Joseph Juran, refers only to the failure side: scrap, rework, complaints, recalls, and warranty costs. COPQ is a subset of COQ.
How do you calculate Cost of Quality? Total each of the four PAF categories for a defined period and scope—prevention (planning, training, supplier qualification), appraisal (inspection, testing, audits), internal failure (scrap, rework, downtime), and external failure (complaints, returns, recalls, regulatory action)—then express the sum as a percentage of sales or operating cost for comparison over time.
Does ISO 9001 require you to track Cost of Quality? Not by name. But ISO 9001:2015 clause 9.1.3 requires analysis of nonconformity data, and clause 10.2 requires documented corrective action records—both of which supply the raw failure-cost data a COQ program needs. Auditors increasingly expect to see that data used for something beyond the audit itself.
What's the fastest way to reduce Cost of Poor Quality? Start by pricing out your existing nonconformance and complaint records for one product line or facility, then compare that failure total against current prevention and appraisal spend for the same scope. The ratio usually points directly at where a small increase in prevention spend—supplier qualification, process monitoring, staff training—would produce an outsized reduction in failure cost.
Last updated: 2026-09-13
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.