How long do we have to close a non-conformity?

It depends on the certification body and the grading. Major findings commonly carry a thirty day deadline for evidence of action, sometimes with a follow-up visit. Minor findings are often reviewed at the next surveillance audit. Check your specific body's rules.

What is the difference between a major and a minor non-conformity?

Broadly, a major represents a systemic failure or the total absence of a required process, and it blocks or suspends certification until resolved. A minor is an isolated lapse that does not undermine the system as a whole.

Why do our responses keep getting rejected?

Almost always because the root cause has not been identified. Responses that describe retraining or reminders as the corrective action are rejected because they do not explain why the failure happened in the first place.

Can you help with findings from a customer audit?

Yes. The method is the same regardless of who raised the finding, and customer audit findings often carry more commercial weight than certification findings do.

What if the finding reveals a bigger problem?

We will tell you. Meeting the deadline while leaving the underlying weakness in place simply moves the problem to next year, usually as a repeat finding, which is treated more severely.

Audit and Assurance

Non-conformity Close-out Support

Turn audit findings into closed actions, on time

In short

Non-conformity close-out support helps you respond to findings raised at any audit. Equas conducts the root cause analysis, drafts the corrective action response, gathers the supporting evidence and submits it within your certification body's deadline, so findings are closed properly rather than papered over.

What a non-conformity close-out support involves

Findings are normal. Even well-run systems collect them, and a certification body that raises none at all is not auditing very hard.

What causes real problems is the response. Certification bodies impose deadlines, often thirty days for a major finding, and they judge the response on whether you have identified the actual cause. A response that says "staff have been reminded of the procedure" will usually be rejected, because being reminded is not a cause and reminding is not a corrective action.

The other trap is closing findings superficially. A finding closed without addressing the cause reappears at the next audit, and repeat findings are treated far more seriously than first-time ones.

We handle the whole cycle. That starts with understanding what the finding actually says, which is not always obvious, since findings are written in the language of the standard and cite clauses rather than describing the problem. We then run a structured root cause analysis with the people involved, agree corrective actions that address the cause rather than the symptom, gather the evidence the certification body will want, and draft and submit the response.

Where a finding points to something more substantial in the system, we will tell you that rather than get you through the immediate deadline and leave the underlying problem in place.

This service covers findings from any source: certification body audits, internal audits, customer or second-party audits, and regulator visits.

Who it is for

Working towards certification

Findings at Stage 1 or Stage 2 have to be closed before the certificate is issued. Getting the response right first time keeps your certification date intact.

Already certified

Surveillance findings carry deadlines and repeat findings escalate. This is the service for organisations who need a finding closed properly and quickly.

What is included

Finding interpretation

Working out what the finding actually requires, which the wording does not always make clear.

Structured root cause analysis

A proper method, run with the people involved, not a guess written at a desk.

Corrective action planning

Actions that address the cause, with owners and dates that will survive scrutiny.

Evidence gathering

The records and demonstrations your certification body will require as proof.

Response drafting and submission

Written in the form the certification body expects and submitted within the deadline.

Effectiveness verification

A check that the action worked, which is what stops the finding recurring next year.

Any audit source

Certification body, internal, customer, second-party or regulator findings.

How it works

1
Review the finding
We establish exactly what has been raised, against which clause, and what evidence of closure will satisfy it.
2
Root cause analysis
A structured session with the people who do the work, to find the actual cause rather than the nearest symptom.
3
Action planning
Correction, corrective action and any wider system changes, with owners and realistic dates.
4
Implementation and evidence
Actions are completed and the supporting evidence is gathered.
5
Submission
The response is drafted and submitted to the certification body within the deadline.
6
Verification
We check afterwards that the action has held, so the finding does not return.