During the external audit, the certification body finds a critical deviation, a major non conformity, with regard to one of the standard requirements. Now what?
First of all: no need to panic! Consider this as a gift and not as criticism; it will certainly not result in the loss of your certificate. It gives you the opportunity to learn where the problem comes from and to remove the weak spot from your system.
Such a major non conformity prevents you from obtaining or renewing a certificate. But this is a temporary problem...you just need to handle it correctly. The problem must be resolved and tested within the timeframe defined by the certification body. Usually this is a period of 3 months.
Analysis of the cause of the major non conformity
Step one is analysis of the cause which will reveal the áctual cause. Make sure that you do not only stick to direct causes but also look for basic causes (errors in procedures, management, method of working etc.). A frequently used method is the 5 x why.
Corrective action
When the cause is known, step two can be taken: the corrective action. At that moment, the major non conformity is solved (based on direct causes) but also prevented from occurring again in the future (based on basic causes).
The cause analysis and measures taken must be reported to the auditor before the final step can begin. In the case of a major non conformity, the effectiveness of the corrective measures must always be verified by the auditor who established the nonconformity. The auditor may wish to return to the site to do this.
(Re)certification
As soon as the auditor has approved the report, the major non conformity will be closed and (re)certification can be proceeded to.
