The Risk of Carrying Open NCs Forward
A nonconformity raised during Stage 1 represents a gap in the client's management system that needs to be addressed before certification can proceed. When those NCs are left open and the CB moves ahead to Stage 2 anyway, the certification process is built on an unresolved foundation.
The accreditation body expects NCs to be formally closed with objective evidence. A note in a spreadsheet saying "client says they fixed it" is not closure. A verbal assurance during a phone call is not closure. Closure requires documented root cause analysis, corrective action, evidence of implementation, and auditor verification.
Yet many CBs advance to Stage 2 with open Stage 1 findings because their systems do not prevent it. The planner schedules Stage 2, the auditor shows up, and the open NCs from Stage 1 are either re-evaluated on site or, worse, quietly forgotten.
What the AB Expects
Accreditation bodies review the NC management process closely during surveillance assessments. They expect to see:
- •A clear record of each NC raised, including its classification (minor, major, or critical)
- •A defined due date for closure
- •Evidence that the client submitted root cause analysis and corrective action
- •An auditor review of the evidence, with a documented accept or reject decision
- •If rejected, a clear record of the additional round of correction
If the AB assessor finds that Stage 2 was conducted while Stage 1 NCs remained formally open, that is a finding against the CB. It suggests that the CB's NC management process is not effective, which strikes at the core of the certification body's operational credibility.
The NC Lifecycle in Certiva
Certiva manages nonconformities through a structured lifecycle with defined states and transitions. Here is how it works:
1. NC Is Raised
During the audit, the auditor identifies a nonconformity and creates it within the audit set. The NC is classified as minor, major, or critical based on the nature and severity of the finding.
Each classification carries different implications. A minor NC requires corrective action within a defined timeframe. A major NC must be resolved before a positive certification decision can be made. A critical NC indicates a fundamental system failure.
2. Due Dates Are Auto-Computed
When the NC is raised, Certiva automatically calculates the due date based on the classification and the CB's configured rules. Minor NCs might have a 90-day window. Major NCs might require resolution within 30 days. These rules are configurable per CB but enforced consistently by the system.
This eliminates a common problem: auditors setting arbitrary or inconsistent due dates, or worse, not setting due dates at all.
3. Client Uploads Root Cause and Corrective Action
The client receives a notification through the client portal that an NC has been raised. They can view the NC details, including the clause reference, the finding description, and the due date.
The client then uploads their root cause analysis and corrective action plan. This might include revised procedures, training records, updated process documents, or photographic evidence of physical changes.
4. Auditor Reviews and Closes or Rejects
The assigned auditor reviews the client's submission. They evaluate whether the root cause analysis is adequate, whether the corrective action addresses the finding, and whether the evidence demonstrates effective implementation.
If the submission is satisfactory, the auditor closes the NC. The closure is recorded with a timestamp and the auditor's comments.
If the submission is not satisfactory, the auditor rejects it with specific feedback. The NC returns to the client for another round of correction. This cycle can repeat until the auditor is satisfied or the due date is exceeded.
5. Rejected NCs Go Another Round
When an NC is rejected, the client sees the auditor's feedback and submits a revised response. Each round is tracked separately in the system, creating a complete history of the back-and-forth. This history is valuable during accreditation assessments because it demonstrates the rigor of the CB's NC management process.
The Gate: No Advancement With Open NCs
Here is where Certiva's approach diverges from manual processes. In Certiva, a stage cannot advance to the next phase while NCs from that stage remain open. If Stage 1 produced two minor NCs and one major NC, all three must be closed before Stage 2 can begin.
This is not a soft warning. It is a hard gate. The planner cannot schedule Stage 2. The system does not allow it.
Consider "Meridian Certification," a CB managing 300 active clients. Their planners are under pressure to keep audits moving. In a spreadsheet-based system, a planner might schedule Stage 2 for a client even though one minor NC from Stage 1 is still awaiting the client's response. The auditor arrives at Stage 2 and has to deal with the open finding on top of the new audit scope. The audit report becomes muddled. The committee reviewer questions whether the Stage 1 findings were properly managed.
With Certiva, the planner sees immediately that the audit set cannot advance. The open NC is visible in the dashboard. The client's submission status is tracked. The planner follows up with the client, the auditor reviews the response, the NC is closed, and only then does Stage 2 become available.
The Compound Effect of Disciplined NC Management
When NC closure is enforced at every stage transition, the quality of the entire certification process improves. Clients learn that they must respond to findings promptly and thoroughly. Auditors learn that their NCs will be formally tracked and reviewed. Planners learn that scheduling depends on clean closure of prior findings.
Over hundreds of audit cycles, this discipline creates a certification body that an AB can assess with confidence. Every finding is traceable. Every closure is documented. Every stage transition is justified.
Stop carrying open findings into the next phase.
Certiva gates stage progression on NC closure because unresolved findings undermine the entire certification. See it in action at getcertiva.com.