An audit report has just landed on your desk and there is a non-conformance in it. Maybe two. The first instinct, especially for a provider that has worked hard on its systems, is defensive - the auditor did not understand, the example was unfair, the standard is being read too literally. Those reactions are human. They also rarely help.
A non-conformance is information. Read it properly and it tells you exactly where the gap is - and exactly what closing the gap looks like.
Anatomy of a non-conformance
Every one has the same four parts. Read them in this order and the response writes itself.
- 01The standard or indicator referenced
- 02What the auditor expected to see
- 03What the auditor actually saw (the evidence)
- 04Whether it is a major or minor finding
If any of those four are unclear in the report, your first task is not the corrective action plan - it is a clarification request to the auditor. You cannot fix what you do not understand.
Major versus minor
A minor non-conformance is usually a documentation or evidence gap. A major non-conformance points to a systemic problem with how the standard is being met. Read which one you have got, because the response is meaningfully different.
- Minor - you usually have 90 days, a single corrective action, evidence on completion
- Major - root-cause analysis required, board oversight, often a return visit
Writing the corrective action plan
A good corrective action plan answers four questions in plain English. What was missing. What we have changed. How we have evidenced the change. How we will know it has not slipped back.
If your CAP does not answer the fourth - how we will know it has not slipped back - you have closed the finding without fixing the cause. The same gap will turn up at the next audit, and this time it will be a major.
What boards should be hearing
Every non-conformance - major or minor - belongs in the next compliance dashboard. Not as a buried line item but as a named finding with an owner, a due date, and a status. Boards that govern audit findings as standing items rarely get caught off-guard at re-registration.
The harder truth
Most non-conformances are not surprises. They are things someone inside the organisation already knew about - and either could not get traction on, or did not have a clear path to fix. The audit just made it visible. Treat the finding as the gift it actually is, and use it as the mandate to fix the thing that has been bothering your operations manager for months.
