How To Document Nonconformities In Iso 22000 Audits

By Author: Jane
Total Articles: 21
Comment this article

Understanding Nonconformities in ISO 22000

In ISO 22000 food safety audits, a nonconformity (NC) is essentially a failure to meet a specified requirement of the food safety management system (FSMS). This might involve anything from a missing procedure or record to an unmet critical control point. Each audit finding must be tied to a specific requirement (for example, an ISO 22000 clause or an internal procedure) to show exactly which rule is broken. Properly identifying nonconformities is the first step in driving corrective action and improving the food safety system.

Importance of Proper Documentation

Accurate documentation of nonconformities is crucial. Clear records of each audit finding ensure there is no confusion about what requirement was violated, how it was violated, and what evidence supports it. This clarity helps the audited organization understand and address the issues effectively. Well-documented findings also provide a clear audit trail. This is important not only for planning effective corrective actions, but also for demonstrating compliance during certification or regulatory audits.

Key ...
... Elements of Nonconformity Records

Auditors should follow a standard structure when recording a nonconformity. A complete NC report typically includes:

• Reference to Requirement: Identify the exact requirement that was not met. Cite the relevant ISO 22000 clause, customer or regulatory requirement, or internal document (such as a procedure or specification).
• Statement of Nonconformity: Describe clearly and concisely what the failure is, referencing the requirement. For example, “ISO 22000 clause 8.5.2 requires periodic verification of monitoring records. The cleaning log for the raw processing line is blank for three consecutive days.”
• Objective Evidence: Provide factual evidence that demonstrates the nonconformity. This could be documents (records, logs), direct observations (e.g. seeing a process step missed), or test results. Example: “Daily temperature log for the fridge (Jan–Mar) is missing and the last recorded calibration date is July 2019.”
• Classification (Major or Minor): Indicate whether the nonconformity is major or minor based on its significance. A major nonconformity is a significant breakdown (for example, a failed critical control point or a repeated violation of a key requirement) that could jeopardize food safety. A minor nonconformity is a smaller lapse (such as an isolated documentation error) that does not immediately endanger the FSMS.

These elements ensure each finding is clear, actionable, and traceable. Audit guidelines (such as ISO 19011) emphasize linking findings to specific criteria, stating the issue clearly, and backing it up with evidence.

Common Mistakes to Avoid

When documenting nonconformities, auditors should avoid these common errors:

• Vague Statements: Do not write ambiguous phrases like “documentation is incomplete” without detail. Be specific about which document and which parts are missing.
• Lacking Evidence: Every NC should include evidence. Avoid stating a problem without support. For example, say what was observed and when/where it was observed. Instead of “training records missing,” write “no training record was found for five new operators (as verified in personnel files on April 5, 2025).”
• No Clause Reference: Omitting the specific requirement deprives the finding of context. Always tie the NC to a clause or procedure. For example, “ISO 22000 clause 7.2 requires documented training procedures, but no training records are maintained.”
• Combining Issues: Don’t mix multiple unrelated issues in one finding. If two different requirements are violated, write two separate findings. This keeps each NC focused and clear.
• Subjective Language: Avoid words like “careless,” “negligent,” or “inadequate.” Stick to neutral, factual language. For instance, say “the procedure was not followed” instead of “operators failed to follow procedure.”
• First-Person or Opinions: Audit reports should not read like diaries or editorial pieces. Avoid “I observed that…” or including personal opinions. Present facts impersonally, e.g. “It was observed that…” or simply state the evidence directly.

By steering clear of these mistakes, auditors keep the report professional and make sure the auditee clearly understands each finding.

Tips for Clarity and Accuracy in Audit Reporting

Consider these best practices to make your findings easy to understand and effective:

• Be Precise and Factual: Use exact terms and data. If something is wrong, say exactly what and where. Always support statements with facts (dates, measurements, record references).
• Use a Consistent Format: Templates or standardized report forms ensure consistency. Many auditors use checklists or forms that have fields for requirement reference, description of NC, evidence, and classification.
• Keep Language Simple: Avoid jargon and complex sentences. Write in a straightforward, professional style. Short sentences and bullet points enhance readability for busy readers.
• Review and Proofread: Re-read each finding before finalizing the report. Ensure the text matches the evidence (photos, records, notes). Check that each NC is properly linked to a requirement and correctly classified.
• Separate Facts from Recommendations: The NC statement should describe only what is wrong, not how to fix it. Any corrective action or suggestion belongs in a different section.
• Continuous Training: Improving auditing skills improves the quality of reporting. For example, completing an online ISO 22000 lead auditor course: https://www.punyamacademy.com/course/food-safety/iso-22000-lead-auditor-training/

can teach auditors how to identify and clearly document nonconformities. Ongoing training keeps auditors familiar with ISO 22000 requirements and good reporting practices.
• Focus on Food Safety Impact: When relevant, note the safety risk of a finding. Linking a nonconformity to its potential impact (e.g. cross-contamination or adulteration risk) helps the organization understand urgency and prioritize actions.

Each of these practices makes audit reports clearer and more useful. Clear, accurate nonconformity documentation builds a stronger food safety culture by turning audit findings into opportunities for lasting improvement.