ASQ Certified Quality Engineer ASQ Certified Quality Technician Quality Consulting Since 1993

+1 (401) 252-9653 mweeden@qesisbest.com

A modern conference room

The Team

Two Practices. One Standard of Evidence.

Quality Excellence Services brings Marcia Weeden's quality and regulatory practice together with a senior consulting partner in enterprise risk, cybersecurity, and IT audit. Every client gets one engagement lead, and the specialists the problem actually needs.

The Partners

Who Does the Work

Quality and risk fail in the same places: undocumented procedures, controls nobody tests, suppliers nobody checks. Each partner brings a discipline; both bring the same way of proving it.

PHOTOGRAPH TO FOLLOW

Quality Systems & Regulatory Compliance

Marcia M. Weeden, MS

Founder and Principal Consultant

Marcia Weeden has worked in quality and regulatory compliance for more than three decades — across Defense, automotive, consumer products, medical devices, and pharmaceuticals. She began as a quality assurance representative for the Defense Contract Administration Services, directed quality assurance at Duro Industries and at Eden Toys, and has since built quality systems and regulatory documentation for Pfizer, DePuy (Johnson & Johnson), Huestis Medical, Aidance Scientific, and CertainTeed.

She led the investigation that overturned a $7 million Defense rejection, qualified three in-house laboratories for the Defense Personnel Support Center's Qualified Laboratory List, and wrote Failure Mode and Effects Analysis for Small Business Owners and Non-Engineers for ASQ Quality Press.

Focus

  • ISO 9001, ISO 13485, and FDA QMSR Quality Systems
  • EU MDR 2017/745 Technical Documentation
  • CAPA, Root Cause, and FMEA
  • Auditing to ISO 19011; Laboratories to ISO/IEC 17025
  • SOPs, Technical Writing, and Training

MS, University of Rhode Island · ASQ Certified Quality Engineer · ASQ Certified Quality Technician

PHOTOGRAPH TO FOLLOW

Enterprise Risk, Cybersecurity & IT Audit

Conner Davidson

Senior Consulting Partner

Conner Davidson leads the QES risk, cybersecurity, and IT audit practice. [Number] years in [enterprise risk management, IT audit, and security leadership], most recently as [role] at [organization].

[Two or three sentences of verifiable career highlights: programs built, audits led, sectors served.]

Focus

  • Enterprise Risk Management (COSO ERM, ISO 31000)
  • Cybersecurity Programs to NIST CSF 2.0 and ISO/IEC 27001
  • IT General Controls and IT Audit
  • CMMC Level 2 Readiness for Defense Suppliers
  • Supply Chain Security (NIST SP 800-161)

Critical Minerals Supply Chain & African Security SME

Where the Practices Meet

Three Areas, Two Practices, One Method

Each circle is a partner's practice. Where the circles overlap, the partners share the work. Select any area to see what it covers.

Both Practices

Supplier & Supply-Chain Assurance

  • Supplier Qualification and Audits That Cover Quality and Cybersecurity in One Visit
  • Defense-Supplier Readiness: First Article, Quality System, and CMMC Together
  • Document Control, Records, and Data Integrity
  • Internal Audit Programs to ISO 19011
  • Findings Backed by Objective Evidence — Never by Assertion
Every area, in words

Marcia M. Weeden

Quality Systems & Regulatory

  • ISO 9001, ISO 13485, and FDA QMSR Quality Systems
  • EU MDR 2017/745 Technical Documentation
  • CAPA, Root Cause, and FMEA — The Subject of Her ASQ Quality Press Book
  • Calibration and Laboratories to ISO/IEC 17025
  • SOPs, Technical Writing, and Training

Conner Davidson — Senior Consulting Partner

Enterprise Risk & Cybersecurity

  • Enterprise Risk Management to COSO ERM and ISO 31000
  • Cybersecurity Programs to NIST CSF 2.0 and ISO/IEC 27001
  • IT General Controls and IT Audit
  • CMMC Level 2 Readiness for Defense Suppliers
  • Supply Chain Security to NIST SP 800-161

Both Practices

Supplier & Supply-Chain Assurance

  • Supplier Qualification and Audits That Cover Quality and Cybersecurity in One Visit
  • Defense-Supplier Readiness: First Article, Quality System, and CMMC Together
  • Document Control, Records, and Data Integrity
  • Internal Audit Programs to ISO 19011
  • Findings Backed by Objective Evidence — Never by Assertion

How an Engagement Is Staffed

One Lead, the Right Specialists, No Hand-Offs

The partner whose practice owns the problem leads the engagement and signs the engagement letter. When the work crosses into the other practice — a supplier audit that is also a cybersecurity review — the second partner joins for that part and reports through the same lead.

You see one plan, one set of findings graded the same way, and one invoice. Nobody re-learns your business halfway through.

  1. Call. A first conversation with the partner closest to your problem.
  2. Scope. An engagement letter naming the lead, the team, the deliverables, and a fixed fee.
  3. Assess. Fieldwork against the standard or regulation that applies, with the evidence recorded.
  4. Deliver. Findings, a prioritized plan, and a briefing — yours to keep whatever you decide next.

On This Page. Marcia Weeden's experience is drawn from her employment record and is available in full on her résumé. Conner Davidson's photograph, biography, and credentials are placeholders and are marked as such; they will be published once he confirms them. Checked September 30, 2026.