Author
ISO
2 reading cards from 2 books · 2018–2026.
2 cards
ISO 19011:2018 — Guidelines for auditing management systems · 2018
A major nonconformity is closed with a root cause and a demonstrated corrective action, not with a correction.
Findings come on four rungs. An opportunity for improvement is not a departure, it is a suggestion. An observation flags something that still meets the requirement but is heading the wrong way. A minor nonconformity is an isolated lapse against a requirement. A major nonconformity is something else: the complete absence of a requirement, a systemic breakdown, or a failure that casts doubt on the system's ability to achieve its outcomes. The difference is not one of tone but of consequence — an open major blocks the certification decision. The response has four parts, in this order: the correction, meaning the repair of the case found; root-cause analysis; the corrective action, which changes the process so the situation cannot recur; and a committed deadline. Whoever sends only the correction gets the finding back. Every finding rests on objective evidence — a record, a statement of fact or other relevant and verifiable information — not on the auditor's impression.
“Audit evidence: records, statements of fact or other information which are relevant to the audit criteria and verifiable.”
ISO 19011:2026 — Guidelines for auditing management systems · 2026
An audit without independence produces calm, not assurance.
At 9.1 the organization decides what it monitors and measures, by which methods, when and by whom, and the chosen methods have to produce comparable and reproducible results to be considered valid. At 9.2 an internal audit programme is required — frequency, methods, responsibilities, planning and reporting requirements — built with the importance of the processes and the results of previous audits in mind; auditors must be selected so as to ensure the objectivity and impartiality of the process. At 9.3 top management reviews the system against a fixed list of inputs: the status of previous actions, changes in context and in interested parties' requirements, system performance, audit results, fulfilment of objectives, risk assessment results and opportunities for improvement. The method guidance is ISO 19011, whose fourth edition appeared in May 2026 and replaces the 2018 edition; being a guidance standard, it applies immediately, with no transition period.
“Independence is the basis for the impartiality of the audit and objectivity of the audit conclusions. Auditors should be independent of the activity being audited wherever practicable and should in all cases act in a manner that is free from bias and conflict of interest.”