Process confidence, result evidence and a specific evaluation
Quality Assurance
Evaluate and improve the processes, practices and system used to produce quality.
Quality Control
Inspect, measure and analyze actual deliverables or results against defined criteria.
Testing
Execute planned conditions to reveal behavior, defects or performance evidence.
PMP exam clue
Audit or improve how work is performed points to assurance. Compare an output with a requirement or tolerance points to control. Run cases under defined conditions points to testing.
These activities reinforce one another. Assurance can improve the testing process; testing supplies evidence; control interprets evidence and decides whether the output conforms. Do not choose a label only because the word “quality” appears.
Quality assurance: prevent and improve
Quality assurance gives stakeholders confidence that appropriate processes and practices can consistently produce conforming results. It looks at the system of work rather than waiting for a finished deliverable to expose defects.
- Review whether the quality approach is appropriate for the product, risk and regulatory context.
- Use process audits, retrospectives, peer reviews and root-cause analysis to identify improvement opportunities.
- Confirm that standards, responsibilities, measurement methods and escalation paths are understood.
- Improve prevention through automation, training, reusable checklists, clearer entry criteria or safer engineering practices.
- Share learning across teams so recurring causes are removed rather than repeatedly inspected out.
Exam mindset: assurance is not a separate department that owns all quality. The team remains responsible for building quality into work; specialists and audits support that responsibility.
Quality control: evaluate actual results
Quality control examines a deliverable, service result or process output and compares the evidence with requirements, acceptance criteria, the Definition of Done, quality metrics or other tolerances. The work happens throughout delivery, not only before handover.
Control data should lead to action. If a result misses a threshold, make the nonconformance visible, protect users, determine impact and correct the work. A repeated pattern also signals a process problem that assurance and improvement activities should address.
Testing: one family of quality-control techniques
A test defines an objective, preconditions, inputs, execution steps and an expected result. The team compares actual behavior with that expected result and records evidence. Testing can target function, integration, security, usability, accessibility, recovery, load or another quality characteristic.
- Trace the test objective to a requirement, risk, acceptance criterion or quality metric.
- Define the environment and data so results are repeatable and meaningful.
- Include positive, negative and boundary conditions based on impact and uncertainty.
- Record actual results and defects without changing the expected answer after execution.
- Retest corrections and relevant regression paths before declaring conformance.
Testing alone cannot prove the process is capable, the customer need is correct or every possible defect is absent. It provides bounded evidence for a decision.
Verification vs validation: right specification vs right outcome
Both matter. A team can build a conforming result that solves the wrong problem, or a desirable concept that fails mandatory requirements. In situational questions, first determine whether the issue is conformance, intended value or both.
Worked scenario: healthcare appointment release
A team prepares an online appointment service for release. Functional tests pass, but a late audit finds that teams use different methods to anonymize test data.
- The passed functional tests are testing evidence, but they do not cover every quality or compliance risk.
- The audit finding concerns the process and control environment, so the project manager facilitates an assurance and compliance review rather than ignoring it because the feature works.
- The team contains exposure, confirms applicable privacy requirements and checks whether any real data was used.
- It standardizes anonymization, assigns ownership, updates the quality approach and automates a guardrail.
- Quality control then evaluates affected builds and evidence against the corrected criteria.
- Relevant tests are rerun; only conforming work proceeds through the agreed release decision.
The strongest answer protects users first, uses evidence, involves the right specialists and improves the process so the failure is less likely to recur.
What to do when quality evidence fails
- Stop unsafe progression: do not trade a material quality, security or regulatory failure for schedule appearance.
- Confirm the criterion and evidence: distinguish an actual nonconformance from a faulty measurement or unclear requirement.
- Assess impact: identify affected users, deliverables, integrations and releases.
- Find root cause collaboratively: look beyond the person who detected or introduced the visible defect.
- Correct and verify: repair the result, retest it and check regression or downstream effects.
- Improve prevention: update the process, automation, training or quality standard when the cause is systemic.
- Communicate transparently: update defect, risk, issue and stakeholder information through the chosen delivery approach.
PMP practice checks with explanations
A team repeatedly finds the same defect during final inspection. What should the project manager do next?
Best answer: facilitate root-cause analysis and improve the process that creates the defect, while correcting affected deliverables. Adding more final inspection treats detection, not prevention.
An auditor checks whether teams follow the approved review and change practices. What activity is this closest to?
Best answer: quality assurance because the auditor is evaluating the process and its implementation.
A technician measures a component and compares it with a ±0.2 mm tolerance. What activity is this?
Best answer: quality control because an actual output is being measured against a defined tolerance.
All specified tests pass, but users cannot complete their real workflow. What was missed?
Best answer: validation of intended use and stakeholder need. Passing verification evidence does not guarantee the right outcome.
Common PMP exam mistakes
- Calling every test “quality assurance.”
- Inspecting only at the end instead of building quality into delivery.
- Assuming a passed test proves every quality characteristic.
- Accepting a defect to protect the schedule without impact analysis and authorization.
- Blaming the tester or developer instead of examining the system and root cause.
- Confusing verification of specifications with validation of intended value.
- Collecting quality data without thresholds or decisions tied to it.
- Making the project manager or quality specialist solely responsible for quality.
Frequently asked questions
What is the difference between quality assurance and quality control?
Quality assurance focuses on whether the processes and practices used to create a result are suitable and followed, with an emphasis on prevention and improvement. Quality control evaluates actual deliverables or results against defined requirements, metrics and tolerances to detect nonconformance and support corrective decisions.
Is testing the same as quality control?
No. Testing is a planned technique for evaluating behavior or characteristics. It can provide evidence for quality control, verification and validation, but quality control may also use inspection, measurement, review, sampling, checklists and statistical analysis.
What is the difference between verification and validation?
Verification asks whether the deliverable conforms to specified requirements and quality criteria. Validation asks whether the completed result satisfies its intended use and stakeholder need. A deliverable can pass technical checks yet still fail to solve the right problem.
Should a project manager inspect quality only at the end?
No. Quality is planned and built into delivery. Teams prevent defects through capable processes, evaluate work throughout development, make failures visible, analyze root causes and improve the system instead of relying on final inspection alone.
Official PMI references
Use the July 2026 PMP Examination Content Outline for current exam scope. PMI's learning library also explains quality planning, assurance, control and improvement, practical quality-management tools and continuous inspection, measurement and testing. Adapt practices to the product, delivery approach, regulation and organizational context; ITCertPath does not reproduce confidential exam questions.