I have conducted and participated in hundreds of quality audits over twenty years — IATF 16949, ISO 9001, VDA 6.3, customer-specific, process audits, system audits. Different countries, different industries, different languages. And in every single one, at some point during the opening tour, I ask the same question.
It is not on any checklist. It is not required by any standard. But the answer tells me more about the health of the quality system than any document review ever could.
The question is: "Show me the last time something went wrong."
Why this question works
Every quality system has failures. Every plant has nonconformances, customer complaints, internal rejects, missed deliveries. The question is not whether problems exist — it is what the organisation does with them.
When I ask "show me the last time something went wrong," I am testing three things simultaneously:
1. Transparency. Does the person immediately know of a recent problem, or do they have to think hard, check a system, or call someone? In healthy organisations, problems are visible and recent. People know about them because they are discussed openly. In unhealthy organisations, problems are hidden, minimised, or forgotten.
2. Response quality. Once the problem is identified, what happened next? Was there a genuine root cause analysis, or was the corrective action "retrain operator"? Was the fix systemic, or was it a bandage? Did the organisation learn, or did it just close the finding?
3. Cultural comfort. Watch the body language when you ask the question. Does the quality manager tense up? Does the operations lead look at the floor? Does the plant manager jump in with a carefully worded explanation? The amount of anxiety the question produces is inversely proportional to the maturity of the quality culture.
The organisations that talk about their failures most openly are usually the ones with the fewest failures to hide.
The three answers I get
Over hundreds of audits, the answers fall into three categories that tell me everything I need to know:
The healthy answer: "Two weeks ago, we had a spike in PPM on line three. Here is the data. We ran a 8D, found the root cause was a worn fixture, replaced it across all lines, and verified the fix with a week of capability data. Here is the closure report." This answer is specific, recent, and focused on system improvement. The person telling it is calm and factual. I can almost stop the audit here — this organisation has its act together.
The mediocre answer: "Let me check the system. I think we had something last month. Here it is — a customer return. We investigated, determined it was operator error, retrained the operator, and closed it." This answer is vague, old, and attributes the problem to the person rather than the system. The corrective action is the laziest possible response — retraining does not fix a system that allowed the error. This organisation is going through the motions.
The dangerous answer: "We have not really had any significant problems recently. Quality is good." This answer is either a lie or a failure of visibility. No manufacturing process is problem-free. If the person cannot name a single recent issue, either the reporting system is broken, the problems are being suppressed, or the person is not close enough to the process to know. Any of these is a red flag that warrants a deeper audit.
What I am actually auditing
The question works because it bypasses the documentation and goes straight to behaviour. You can fake a procedure. You can fake a training record. You can fake a management review minute. You cannot fake the way an organisation talks about its failures.
In my experience, the single strongest predictor of quality performance is not the sophistication of the QMS, the number of procedures, or the credentials of the quality team. It is the speed and honesty with which the organisation confronts its own problems. Organisations that face reality quickly fix things quickly. Organisations that hide reality spend all their energy maintaining the illusion while the problems compound in the background.
ISO 9001:2026 will add more requirements for risk thinking, for organisational knowledge, for digital integration. These are good additions. But none of them matter if the organisation cannot answer one simple question honestly.
Show me the last time something went wrong. If you can answer that question quickly, specifically, and without fear — you are already ahead of most of the plants I audit. If you cannot, no standard in the world will save you.
That is why I ask it. Every time.