Finding and Resolving ISO 9001 Non-Conformance Issues


Digging deep to discover the root cause of a non-conformity is not about blaming other people, individuals or specific departments. The main point you should take from this is to learn about your organisation’s weaknesses and use procedures to mitigate or remove them completely.

More importantly, it’s also a vital part of compliance with the ISO 9001 Standard. Clause 10.2 of the Standard refers to non-conformity and corrective action and requires your company to evaluate the need for actions to be taken to prevent non-conformities from reoccurring.

Clause 8.7 refers to non-conforming outputs, prompting you to create processes that stop you from delivering products or services that aren’t compliant with conformities.

Having an effective quality management system benefits your business by taking ownership of any non-conformities. To help you, we’ve created this handy guide, which will help you to implement corrective actions that prevent the recurrence of non-conformities.


Identify the issue

This process begins by identifying when something doesn’t happen as expected. It could be a customer complaint about bad service, or the identification of faulty packaging during an internal inspection. These errors can be picked up in several ways, from staff logging their observations on a spreadsheet through to internal audits and management reviews.

Once spotted, it needs to be recorded in a Non-Conformity Report or Corrective Action Report. Within this report, you must identify the impact of the non-conformity and who will be affected by it.

Here’s an example of a typical non-conformity log entry:









When a non-conformance has been highlighted, it’s important to focus on facts and ask yourself the following questions:

  • What is the problem and what is its history?
  • Where did it occur?
  • When did it happen and when was it reported?
  • How big is the problem, how frequent is it and how is it being measured?

Once identified you may also need to kick-start a containment process or interim response. This could range from stopping deliveries to rebooking appointments. The key is to stop the problem from reaching your customer. This will also give you time to investigate the root cause of the issue and put a more permanent corrective action in place.

Before you do, you need to be sure that this containment or interim action will stop the problem. You should therefore test the new action and review its effectiveness.


How to highlight ISO 9001 non-conformance examples

As part of the initial stages of identifying issues, you need to be competent at highlighting issues of ISO 9001 non-conformance. To help you with this, we’ve made a list of common examples of non-conformance with ISO 9001 Training .

  • Mistakes by personnel
  • Failure to record training documents properly
  • Ineffective risk assessment and management
  • Inability to consistently meet client requirements and product specifications
  • Falling standards of quality
  • Not documenting corrective actions

The consequences of non-conformity with ISO 9001 can have negative consequences for your business. If you repeatedly fail to highlight the same issues or fail to implement processes that negate non-conformances, this can damage your business reputation and lead to a loss in revenue and trust in your brand.


Gather a response crew

Your next step is to gather together an experienced team who can help to determine the root cause of the problem and implement corrective action appropriately. This will likely involve personnel at the top of your company, but you will also need to include anyone who carries out the actual function.

Your team can be any size – it depends on the size and complexity of your problem. If you’re a sole trader, you may be the only member. If you do have more personnel, just be aware that a very large team can be tricky to manage..

To make your team as effective as possible, they need to have the right knowledge about the process or problem involved. You’ll also need to give them enough time and resources to complete an investigation as well as the authority to enact corrective action. A team of several people means that a team leader will be necessary too.

Your team will need to be comfortable carrying out a comparative analysis that assesses the following impact:

  • What is different and unusual about the non-conformity, and what may have changed?
  • How is the non-conformity linked to people, processes, machines, materials or the environment of the business?
  • What are the facts surrounding the possible cause?


Finding the root cause

There are lots of different problem-solving techniques that can help you effectively resolve non-conformance. You should use the one that you are most comfortable with. One of the best formulas is the ‘five whys’ formula. Let’s explore this in greater detail.

The ‘five whys’ formula

You don’t need any advanced maths skills to adopt this approach, but it still helps you to identify causation. It’s also suitable for sole traders or those with a team behind them.

The first ‘why’ focuses on why the problem is occurring. Starta fact-finding mission to answer this question. Don’t make an educated guess – instead use actual evidence to determine exactly what happened.

Asking this question may reveal one answer or several. For each answer, ask the question ‘why’ again. Keep doing this until you have asked a total of five ‘whys’, each one relating to the answers you have supplied to the previous question.

By this stage, an appropriate countermeasure or corrective action should be evident. If not, continue to ask ‘why’ until you can’t go any further.

Using the example from the non-conformity log, the ‘whys’ would run as follows.

  • First why: A delivery note had not been signed because a member of staff had released the product without following the release and dispatch procedure.
  • Second why: It was released without following the procedure because the staff member was new.
  • Third why: The new staff member did this because they had not had the relevant training.
  • Fourth why: They did not receive the right training because there is not an adequate training programme in place.
  • Fifth why: There isn’t adequate training because the training procedure is out of date.


Taking corrective action

Whatever problem-solving tool you’ve used, you should now have a fairly good idea of what permanent corrective action could be taken. A permanent corrective action means that it should stop the non-conformity from happening again. This means you will probably have to change some aspect of your processes, policies or procedures.

Before implementing, you should also consider whether there are any other opportunities for something similar to happen. You should assess the potential effectiveness of your proposed action to ensure that you really are picking the best course of action.

Once you are confident with your choice, you can implement the permanent corrective change and remove the interim or containment action you initiated at the beginning of the process. Make sure work procedures, instructions and plans are updated to reflect the alteration and the change is communicated to the relevant people within your business too.


Monitoring and measuring

Once your corrective actions are in place, you can kick-start the monitoring and reviewing process.

This should involve the owner of each corrective action as well as your customers, if necessary.

Monitor the corrective action until it is evident that it is working as expected. You may want to schedule some extra internal audits to keep an eye on its effectiveness. This may be a good time to share your learning with other parts of the business too so that they can follow the same action.

The corrective action and its effectiveness should all be documented to boost your management system. Here’s an example of what evidence you can gather to support you:

  • Updated procedures, plans, instructions or training
  • SPC (Statistical Process Control) data
  • Inspection records
  • Internal audit records
  • A register containing a summary of the non-conformity, the results of your analysis and your actions and decisions


Effective management system support with Citation ISO Certification

We know that running a management system can be a little challenging for some businesses while keeping up with other business demands.

You can get in touch with us for more support and guidance. Call us on 0333 344 3646 or email [email protected] to find out more about how we can help you stay on top of your management system.

Sign up to get the latest in your inbox

    • Email address

About the author

  • Name:

    Claire Price

  • Company:

    Content Marketing Executive

  • Bio:

    Claire worked for Citation ISO Certification between 2020 and 2022 writing creative and informative content on ISO certification and consultation to help businesses reach their potential.


QMS International use cookies to provide you with a better site experience, enable features and to help us understand how our website is being used.

By continuing, you consent to the use of cookies in accordance with our Cookie Policy

Allow All Cookies

Allow Strictly Necessary Cookies Only