A quality-management system (QMS) is an organization’s framework of responsibilities, processes, records, and reviews for consistently meeting requirements and managing risk. It can define who approves changes, how problems are handled, what evidence is retained, and how controls are checked.
In cybersecurity and AI governance, a QMS helps turn legal and security obligations into repeatable practices, such as documenting system changes, assigning oversight roles, and reviewing incidents or control failures. In an AI Act context, it can support governance of high-risk AI systems, but it is not itself a product certification or proof that a system is secure or compliant. Organizations should map QMS controls to applicable requirements and verify the legal status of any standard they rely on.