Back to Blog
    ISO 9001 March 17, 2026 3 min read
    Chapter 10 of 48ISO 9001 Corrective Action Process for Canadian Manufacturers: Complete Implementation Guide for 2026
    Learn more about ISO 9001

    Chapter 10: Step 2 — Nonconformance Classification and Prioritization

    Chapter 10: Step 2 — Nonconformance Classification and Prioritization

    You now have a quarantined batch and a containment record. Before you launch a full root cause investigation, you need to ask: Is this worth a major investigation, or can we handle it quickly? This is where risk-based triage saves you from drowning in low-value CARs.

    The Risk-Based Triage Matrix: Severity × Recurrence × Detection

    Assign a priority level (Critical, Major, Minor) using three dimensions:

    1. Severity: What would happen if this reached a customer?

    • Safety risk, regulatory violation, line shutdown → Critical
    • Performance impact, aesthetic flaw, functional degradation → Major
    • Cosmetic, documentation error, no functional impact → Minor

    2. Recurrence: How often has this happened in the past?

    • First occurrence, new process → Lower risk
    • Recurring issue, has failed twice in past 12 months → Higher risk
    • Chronic problem, happens regularly → Critical consideration

    3. Detection: How likely would the customer have caught this themselves?

    • We found it with 100% inspection → Lower risk
    • We found it with sampling inspection → Medium risk
    • Customer would likely find it → Critical

    Create a simple matrix:

    **Severity****Recurrence****Detection****Priority****RCA Timeline****Closure Timeline**
    CriticalAnyAnyCritical3 days14 days
    MajorRecurringCustomer-findableCritical3 days14 days
    MajorFirst timeWe found itMajor7 days30 days
    MinorFirst timeWe found itMinor14 days60 days

    Response Timelines

    Assign timelines to each priority:

    • Critical: Root cause analysis complete within 3 days; corrective action approved within 5 days; effectiveness verified within 14 days.
    • Major: Root cause analysis within 7 days; corrective action approval within 10 days; verification within 30 days.
    • Minor: Root cause analysis within 14 days; corrective action within 30 days; closure within 60 days.

    These are internal targets, not promises to customers. But they keep your team accountable and prevent CAR files from aging indefinitely.

    Talk to an Expert

    Need guidance on your certification journey?

    Our consultants have prepared more than 250 manufacturers globally — from growing businesses to large enterprises — for successful certification. Get a free, no-obligation consultation tailored to your industry.

    The Most Common Mistake: CAR Inflation

    Here's what kills a corrective action system in Canadian manufacturers: opening one CAR for every minor hiccup. You end up with 200 active CARs, each needing attention, and none of them getting solved.

    Set a threshold: documentation errors, one-off typos in work instructions, and isolated operator mistakes *do not require a full CAR*. They require a correction. Use a simpler form—a "Corrective Maintenance Log" or "Process Adjustment Record"—for these quick fixes. Save full CARs for systematic issues, repeating problems, and anything a customer could detect.

    Pro Tip: If the same "minor" issue pops up a second time within six months, convert it to a formal CAR and investigate why your quick fix didn't stick. This signals that your process needs permanent improvement, not just a patch.
    Industrial quality management
    Start Today

    Ready to Reach the Summit?

    Book your free 30-minute consultation and discover how PinnacleQMS can guide your organization to ISO certification.

    Free 30-min consultationTailored to your industryNo obligation

    PinnacleQMS

    ISO Certification Assistant
    Hi! I'm the PinnacleQMS assistant. I can answer questions about ISO certification or help you book a free consultation. What can I help you with?
    Online
    Powered by AI