Certification bodies grade them as major or minor. A major nonconformity, such as a mandatory process that is missing altogether, has to be closed before a certificate can be issued or kept. Each one needs a corrective action with its root cause recorded.
See internal audit and surveillance audit.
Read more
Related terms
- Internal audit
- An internal audit is an organization's own planned review of whether its management system or controls conform to its requirements and work as intended.
- Surveillance audit
- A surveillance audit is the yearly audit a certification body performs between ISO certification audits to confirm the management system is still maintained.
- ISO 27001
- ISO/IEC 27001 is the international standard for an information security management system, certified by an accredited body on a three-year cycle.