Compliance & ContractsFree referencePDF, Excel, Word export

Nonconformance and Corrective Action Standards Clause Map

When an auditor asks where your system addresses nonconforming product, you need the clause number fast. This map lists the clauses across four common quality standards and the evidence auditors usually look for.

Download:

Standard	Clause	Clause title	What it covers (summary)	Typical audit evidence
ISO 9001:2015	8.7	Control of nonconforming outputs	Identify and control outputs that do not meet requirements to prevent unintended use or delivery	NCR procedure, quarantine records, disposition records
ISO 9001:2015	8.7.1	Actions on nonconforming outputs	Correction, segregation, return, suspension, informing the customer, authorization to accept by concession	Disposition and concession records
ISO 9001:2015	8.7.2	Documented information on nonconformity	Retain records describing the nonconformity, actions taken, concessions and who decided	Completed NCR with authority sign-off
ISO 9001:2015	10.2	Nonconformity and corrective action	React to nonconformity, evaluate need for action to eliminate causes, implement and review effectiveness	CAPA records, effectiveness reviews
ISO 9001:2015	10.2.2	Retained evidence of corrective action	Keep records of the nature of nonconformities, actions taken and results	CAPA log with results
ISO 9001:2015	8.6	Release of products and services	Planned verification before release, evidence of conformity and person authorizing release	Final inspection and release records
ISO 9001:2015	8.5.2	Identification and traceability	Identify outputs and status, and control unique identification where traceability is a requirement	Lot and serial records, status tags
ISO 9001:2015	9.1.3	Analysis and evaluation	Analyse data including product conformity, supplier performance and effectiveness of actions	Trend reports, management review inputs
ISO 9001:2015	8.4.2	Type and extent of control (external providers)	Ensure externally provided processes and products do not adversely affect conforming delivery	Supplier requirements, incoming inspection
AS9100D	8.7.1	Control of nonconforming outputs	Adds requirements such as authority for disposition, customer approval for use-as-is or repair where required, and marking of scrap	Disposition procedure, customer approvals
AS9100D	10.2.1	Nonconformity and corrective action	Includes corrective action flow down to suppliers, and determining whether other nonconformities exist or could occur	Supplier corrective action records
AS9100D	8.1.4	Prevention of counterfeit parts	Planning and controls to prevent use of counterfeit or suspect parts	Counterfeit prevention procedure
AS9100D	8.4.3	Information for external providers	Communicate requirements including corrective action flow down to suppliers	Purchase order flow-down clauses
IATF 16949:2016	8.7.1.1	Customer authorization for concession	Obtain customer authorization before processing when product or process differs from the approved one	Customer concession records
IATF 16949:2016	8.7.1.4	Control of reworked product	Rework instructions and reinspection before shipment	Rework instructions, reinspection records
IATF 16949:2016	8.7.1.5	Control of repaired product	Repair instructions and customer authorization where required	Repair instructions and approvals
IATF 16949:2016	10.2.3	Problem solving	Documented problem solving process including containment, root cause analysis, systemic corrective action and verification	Problem solving procedure, 8D records
IATF 16949:2016	10.2.4	Error-proofing	Determine error-proofing methods in the PFMEA and test their failure modes	Error-proofing verification records
IATF 16949:2016	10.2.5	Warranty management systems	Process to minimize warranty failures and handle warranty parts analysis	Warranty analysis records
IATF 16949:2016	10.2.6	Customer complaints and field failure test analysis	Analyse customer complaints and field failures and communicate results	Complaint and field failure analysis
ISO 13485:2016	8.3	Control of nonconforming product	Identify and control nonconforming product, with evaluation for investigation and notification of external parties	Nonconforming product procedure and records
ISO 13485:2016	8.3.4	Rework	Documented rework procedures that consider adverse effects of rework	Rework procedures and reverification records
ISO 13485:2016	8.5.2	Corrective action	Action without undue delay to eliminate causes of nonconformities, with review of effectiveness	Corrective action records
ISO 13485:2016	8.5.3	Preventive action	Determine action to eliminate causes of potential nonconformities	Preventive action records

This is a navigation aid with short summaries in our own words. Clause numbering follows the published editions named in the table. Always read the current standard text and your certification body's interpretation before relying on it in an audit.

Clause-to-record mapping sheet

Optional: an Excel sheet with a blank evidence column per clause, ready for your internal audit.

Optional. The tool and every export work without this. No spam.

How to use the clause map

Filter by standard or search for words such as concession, rework or complaint. Each row shows the clause, a short summary and typical audit evidence. Use it when writing an NCR or CAPA procedure so each requirement is traceable to a clause, when preparing for a surveillance audit, or when building an internal audit checklist. Export to Excel and add a column for the document or record that satisfies each clause in your own system.

Where the standards differ

ISO 9001 sets the base: control nonconforming outputs, keep records, fix causes and check effectiveness. AS9100D adds disposition authority, customer approval for use-as-is and repair, and supplier flow down. IATF 16949 adds a defined problem solving process, error-proofing and customer authorization for concessions. ISO 13485 adds notification of external parties and consideration of adverse effects of rework. Know which applies to each customer you serve.

AS9100D: customer approval for use-as-is and repair where required
IATF 16949: documented problem solving and error-proofing
ISO 13485: rework and notification of external parties

Common audit findings

Frequent findings include dispositions made by someone without defined authority, missing effectiveness reviews on closed corrective actions, rework with no reinspection record, and supplier corrective action requests that never reach the supplier. Map each clause to a named record in your ERP or quality system so an auditor can sample it. If the record is a spreadsheet or email, expect questions about control and retention.

Frequently Asked Questions

Which ISO 9001 clause covers corrective action?

Clause 10.2 covers nonconformity and corrective action. It requires reacting to the nonconformity, evaluating whether to eliminate the cause, implementing action, reviewing effectiveness, updating risks if needed and keeping documented information.

Is this the same for ISO 9001 and AS9100D?

AS9100D is built on the ISO 9001 structure, so clause numbers align, but it adds aerospace requirements such as disposition authority, customer approval for certain dispositions, and flow down of corrective action to suppliers.

Does IATF 16949 require 8D?

IATF 16949 requires a documented problem solving process in clause 10.2.3 but does not mandate a specific format. Many customers specify 8D in their customer-specific requirements, so check each customer.

Can I quote these summaries in an audit?

Use them to find the right clause, then cite the clause number and your own procedure. Summaries here are paraphrases, not standard text, so refer to the purchased standard for exact wording.

If auditors keep asking for evidence that sits in several systems, we can help build a read-only report over your ERP that produces it on request.

Talk to an Expert Explore More Free Tools

Related Tools

Quality & Inspection

More Compliance & Contracts tools

See all

Back to All Tools