ISO 9001 Transition Is Starting — Get a Professional Quick Check for US$19 Start Quick Check →

How to Handle ISO 9001 Nonconformities and Corrective Actions

A nonconformity isn't a failure — a poorly closed one is. Here's the difference between a quick fix and an actual corrective action.

Reviewed by: RASOO Certification Consulting Team · Last reviewed: September 2026
Quick Answer: A nonconformity is a specific instance where a requirement wasn't met. ISO 9001 expects you to correct the immediate problem, investigate its root cause, take action to prevent recurrence, and verify that action actually worked — not just patch the symptom and move on.

The Five Steps

  • Nonconformity — the specific instance where a requirement wasn't met
  • Correction — the immediate fix to the specific problem found
  • Root cause — the underlying reason the nonconformity happened at all
  • Corrective action — the change made to prevent it from happening again
  • Verification — confirming the corrective action actually worked, with evidence

A Simple Worked Example

StepExample
ProblemA shipment went out with the wrong label
Immediate correctionRecall and correctly relabel the shipment
Root causeThe labeling checklist step was skipped under time pressure
Corrective actionAdd a mandatory label verification step before dispatch, with sign-off
EvidenceUpdated procedure, training record, and a sample of dispatch records showing the new step being followed

Notice that "correction" (relabeling that one shipment) and "corrective action" (changing the process so it doesn't happen again) are two different things — a common source of confusion, and a common audit finding when only the correction is documented.

Effectiveness Check

Closing a corrective action isn't just completing the action — it's confirming, usually after some time has passed, that the problem hasn't recurred. Closing it too early, before there's been a chance to observe whether it worked, is one of the more common shortcuts we see.

Practical Consultant Note

Certification bodies don't all use identical nonconformity report (NCR) formats or severity classifications — some distinguish "major" and "minor," others use different terms. Don't assume your previous certification body's format is universal; confirm the specifics with whichever body you're working with.

Have a Nonconformity You're Unsure How to Close?

Send us your specific corrective action question and get a focused, professional read — US$19, one-time.

Start a $19 Quick Check

Frequently Asked Questions

Does one nonconformity mean I'll fail certification?

A: Not necessarily — nonconformities are a normal part of most audits. What matters is how effectively and promptly they're addressed within the timeframe your certification body sets.

What's the difference between a major and minor nonconformity?

A: Definitions vary by certification body, but generally a major nonconformity indicates a systemic failure or total absence of a required element, while a minor one is an isolated lapse. Confirm exact definitions with your certification body.

Do I need root cause analysis for every small issue?

A: Formal root cause analysis should be proportionate to the issue's significance — but skipping it entirely for recurring "small" issues is often how they end up recurring indefinitely.