Nonconformity and Corrective Action Economic Prosperity step 19 · Social Value step 19 (HS 10.2)

In this step, when something fails to meet a requirement (a nonconformity), you find the cause and eliminate it so that the same thing does not recur. You receive a nonconformity and corrective action register (Excel), and this register becomes an input to 18 Management Review.
Designate the folder or files holding nonconformity material (nonconformity reports, audit reports, customer complaints, existing nonconformity registers, etc.), and if you also add the results of nonconforming product control (Economic Prosperity), internal audit and management review kept in this browser, the AI extracts nonconformity candidates.
In the nonconformity and corrective action consultation window below, proposals are made case by case in the following order.
G1 Clause → G2 Nonconformity description and grade (requirement, objective evidence, statement of the nonconformity; major nonconformity, minor nonconformity, observation) → G3 Root cause (5 Whys, 4M+1E) → G4 Improvement measures (correction, corrective action, horizontal deployment, criteria for verifying effectiveness) → G5 Schedule and owner
At each step (gate), your company consults by agreeing, amending, proposing an alternative, deferring or asking a question. Only what your company confirms goes into the nonconformity and corrective action register (31 columns) and the change history, and it is downloaded as an Excel file (the reply deadline, completion deadline, elapsed days and deadline judgment are Excel formulas).
The register and the status report (top 3 recurring causes) pass to the input of 18 Management Review. Files are read only inside the browser and only the text is sent (it is not stored on the server and is not used for AI training). Your company decides the staff member in charge.
※ The number beside the title is the basis clause. HS is the Harmonized Structure (the common clause structure used across ISO standards).

Nonconformity and corrective action: (1) Select the standard and industry (2) Upload nonconformity data (folders and files) (3) Start the consultation (4) Consult case by case (5) Reflect in the Excel register and management review

When you select the standard to operate, a draft of the work for the selected steps is written to fit that standard's requirements. The requirements consist of the clauses and subclauses of the common chapter structure used by ISO standards (the harmonized structure, HS) and the requirements specific to each standard (for example, ISO 14001: environmental aspects and compliance evaluation; ISO 45001: risk assessment and worker participation).
If you select several standards, common requirements are written once, and standard-specific requirements are written separately with the standard name attached. Pass per standard: it is not sold by step and is not paid in advance.
If you click "Write with AI" for a standard without a pass, the cost is shown first, and if you agree, payment is made on the spot and writing continues.

Until AI writing is connected, please leave a message via "Contact staff".After entering your input, click "Write with AI". If you agree to the cost notice, the payment screen opens, and after payment you return to this page and continue with your input as it was.
The output appears after the document completeness check (80 points). On-screen payment (card, simple payment) is being prepared. Before then, or if you prefer a bank transfer, click "Contact staff". A staff member will explain the amount and the payment method, and will open access after confirming the deposit (eiso Pricing).

Operation track *
Economic Prosperity (based on ISO 9001) or Social Value (environmental protection and social justice): only the standards and 20 steps of the selected track are shown (if you turn on "Integrated management system" in the common steps, the standards of both tracks are selected together). If you select ICT (ISO/IEC 42001 and 27001), you are taken to ICT Management System Operation. The industry is passed on, and step results are carried over from one to the next in this browser.
Standard to operate *
Economic prosperity
Environmental protection
Social Justice

* Only standards typically associated with management system certification have been selected. We will keep improving the platform to help you establish and operate the selected standards.

Industry *

For 1 Context of the Organization, please enter your industry. The opportunities, threats and interested parties of the industry are researched on the web.

The selected standards and industry apply to every operation step. Each step reflects the processes, equipment, risks, legal requirements and interested-party characteristics of the industry.

Operation step *
1 Context of the Organization: first analyze interested parties (4.2), then analyze the context of the organization (4.1) with the selected methods
When you enter your industry, the AI researches on the web the external trends (opportunities and threats) of that industry and the needs and expectations of interested parties, and analyzes them together with the content and materials you provide (sources and reference dates are shown). From this it prepares a proposed decision on the requirements your company will address (adopt) in its management system, and links them to risks, objectives and legal requirements.
Legal requirements are adopted; other requirements are each marked as proposed for adoption, needs review or not addressed, with reasons (decisions and approval rest with your company). Internal strengths and weaknesses are drawn only from your materials and input. Where there is no basis, the AI asks under "Items to be confirmed".
Analysis method *

First choose the analysis method (more than one is possible): only the sections for the methods you choose are written.

Interested party analysis (4.2) comes before the analysis of the context of the organization, so it is selected by default together with SWOT. If you select nothing, interested party analysis + SWOT is used.

Upload materials

When you upload a folder or several files, each file is placed in a field according to its file name. Business plan → current-year business plan; management review, performance, analysis, KPI → previous-year management analysis materials; strengths, weaknesses, SWOT, audit, survey → strengths and weaknesses analysis materials; everything else → summary of situation and materials. After placing, you can edit or delete them in the field.

Names to mask

DOCX, XLSX, PPTX, HWPX, PDF and TXT. Files are read only within your browser and only the text is used (not stored, not used for AI training).

Business plan for the current year
Management analysis materials for the previous year
Strengths and weaknesses analysis materials
Basic information
Company website
17 Internal Audit: from your materials, an audit plan → checklists per audit unit → an internal audit report after the audit
When you specify a folder or upload files (manuals, procedures, organization chart, roles and responsibilities, risk assessment, objectives, statement of applicability, previous audit results), the AI matches the requirements of the standard against your processes and documents, and prepares an audit plan and checklists to support the internal auditors.
After the audit, enter the audit records and write the internal audit report on the same screen (findings not in the records are not written). For Annex A controls, the applicability declarations in your statement of applicability (SoA) take priority.
Upload materials

Each file is placed in a field according to its file name. Forms and templates (audit plan, checklist, audit report) → customer forms; statement of applicability, SoA → statement of applicability; previous audits, nonconformities, corrective actions, NCR → previous audit results; audit records, checklist results (when “Internal audit report” is selected) → audit records; everything else (manuals, procedures, organization chart, roles and responsibilities, etc.) → audit materials.

To be prepared
Audit type
Audit unit

What to divide the checklist by: for departments and divisions, clauses are assigned using the organization chart and roles and responsibilities; for processes, using the process map; for projects, using the life cycle.

Audit subjects and number of items
Audit schedule

For the “Internal audit plan”, the schedule and auditor information are required. Auditors are assigned so that they do not audit their own work or department.

Auditor information
Audit materials
Customer forms (audit plan, checklist, audit report)
Statement of Applicability (SoA)
Previous audit results
Audit records (for the report)
Specify the basic data on your computer: specify the folder or files for this step
When you specify the basic data accumulated on your computer for this step (records, results, current forms, documents), eiso organizes, aggregates and analyzes it, and synthesizes the result. Files are read only inside your browser, and only the text is placed in the fields below. Nothing is sent to a server or stored.
Designate materials
Materials on your computer
Department or process
Summary of situation and materials *

For 1 Context of the Organization, this may be left blank if basic information or the materials below are provided.

Requests
Company Workspace Company Workspace
When you select a Company Workspace, the AI carries over the results of previous steps you have saved (for example, issues from context of the organization → risk assessment; risks → process control, audit checklists and management review input). The Company Workspace is being prepared. When it opens, we will announce it in the Announcements.

* AI-generated output is a reference draft and does not guarantee certification.: AGENT eiso.co.kr

Guide to the nonconformity and corrective action steps Expand

Output

  • Nonconformity report (description, impact, immediate action)
  • Root cause analysis (why-why analysis, cause-and-effect diagram)
  • Corrective action plan and record of effectiveness review

Next steps

Economic Prosperity: Steps that feed into this one: Risk Assessment · Contract Management · Nonconforming Product Control · Analysis and Evaluation · Internal Audit · Management Review
Steps that use the results of this step: Risk Assessment · Competence Recognition · Internal Audit · Management Review · Improvement

Social Value: Steps that feed into this one: Risk Assessment · Participation, Consultation and Communication · Emergency Preparedness and Response · Analysis and Evaluation · Compliance Evaluation · Internal Audit · Management Review
Steps that use the results of this step: Risk Assessment · Competence Recognition · Internal Audit · Management Review · Improvement

Division of roles: eiso prepares the plan, forms and document change proposals for this step. What your company does on its own computers is investigate causes, carry out actions and verify effectiveness. The records and results built up through this work are the base data.
When you operate, designate the Management System\Nonconformity and Corrective Action folder (or files), and eiso will organize, tally, analyze and consolidate that data.
Data to designate: nonconformity and corrective action requests, investigation records, evidence of action results. (Management System Operation Guide)

Management System Operation Guide