Non-Conformance in Audits: How to Close Corrective Actions

A major non-conformance means the total failure to meet a standard requirement, the absence of a required process, or the accumulation of several related minor non-conformances that indicate a systemic failure. It compromises the management system’s ability to achieve its intended results. A minor non-conformance is a one-off or isolated failure in the implementation of a requirement that exists but is not applied correctly in a specific case. An observation (or improvement opportunity) is not a formal breach of the standard, but flags a potential risk or weakness that should be addressed before it turns into a non-conformance.

A complete corrective action must answer four questions: What exactly changes (a concrete description of the action, not a generic statement like "training will be reinforced"). When it is implemented (start date and expected completion date). Who is responsible (a named individual, not a generic department). What evidence demonstrates that it has been implemented and is effective (a record, signed training, an improved process metric). Without these four elements, the auditor will reject the closure for lack of objective evidence.

The deadline varies by standard and certification body, but the usual range is 30 to 60 calendar days from the audit date for major non-conformances, and up to 90 days for minor ones in some schemes. For major non-conformances in ISO 9001/IATF 16949 certifications, the deadline is usually stricter (30 days) because it compromises the validity of the certificate. Exceeding the deadline without closure can lead to certificate suspension.

Closure verification has two mandatory components: (1) Implementation verification — confirming that the described action has actually been carried out, with documented evidence (a record, photo, signed training, published procedure change). (2) Effectiveness verification — confirming that the problem has not recurred after a reasonable observation period (typically one or two production cycles, or the next internal audit period). Closing an NC based only on implementation evidence, without verifying effectiveness, is a common mistake that leads to recurrence.

The most frequent mistakes are: (1) Confusing correction with corrective action — fixing the immediate symptom (reworking the defective part) without analyzing or eliminating the root cause. (2) Vague actions with no named owner or specific date. (3) Closing without objective evidence, based only on a verbal statement that "it’s already fixed." (4) Not verifying effectiveness after implementation, closing prematurely. (5) Not extending the action to similar processes or lines where the same risk may exist, causing recurrence at another point in the system.

Formal closure is the responsibility of the lead auditor from the certification body (or the internal audit team in the case of internal audits), who reviews the evidence submitted by the organization and decides whether it is sufficient. The organization submits the action plan and evidence; the auditor verifies and approves or rejects. The organization cannot self-declare closure, except in internal audits where the quality team itself performs the effectiveness verification.

If a major non-conformance is not closed within the agreed deadline (usually 30 days), the certification body can suspend the certificate until it is resolved. In cases of repeated non-compliance or lack of response, the certification can ultimately be withdrawn. It is the quality manager’s responsibility to actively track the deadline and escalate internally if the action owner is not making progress.

IgeraIndustria indexes your non-conformance log and corrective action procedures, allowing your team to quickly check the status, deadline and owner of each open NC, and locate historical closure evidence for similar NCs, always citing the source document.