How audit findings are actually classified
- Major nonconformity. A total breakdown of a required process, absence of a required element, or a pattern of minors indicating the system is not working. Examples from real audits: no internal audits performed at all, customer complaints ignored with no corrective action process, or records fabricated. Majors block certification until corrected and verified.
- Minor nonconformity. An isolated lapse in an otherwise functioning system: one uncalibrated instrument among fifty, a missed training record, a procedure step not followed in one instance. You submit a corrective action plan; the auditor verifies it, often at the next visit.
- Observations and opportunities for improvement. Not nonconformities. No obligation to act, though smart organizations mine them.
What happens after a rough Stage 2
If majors are raised at the initial certification audit, you typically get a defined window (commonly 90 days, set by the certification body) to implement corrective action. Depending on severity, verification may be a document review or a follow-up visit. Correct effectively and the certificate proceeds; miss the window and you may repeat part or all of Stage 2. Expensive and demoralizing, but recoverable.
The failures that actually matter
In years of auditing, the organizations that struggle are rarely the ones with imperfect documents. They are the ones where the audit reveals that leadership is absent: no management reviews with substance, objectives nobody tracks, corrective actions that restate the problem as the action. Auditors can work with messy but alive. They cannot certify dead. If your system runs for real, audit day is just another day with a visitor taking notes.