Can You Fail an ISO Audit? What UK Businesses Need to Know
A complete guide to ISO audit findings, major and minor non-conformances, what causes them, and how UK businesses can avoid certification delays.
"What if we fail?" is the question that comes up in nearly every first conversation we have with a UK business approaching their ISO certification audit.
It is a reasonable concern. Here is the honest answer: ISO audits do not work the way most people imagine.
The Short Answer
You cannot fail an ISO audit the way you fail an exam.
ISO certification audits produce findings, not verdicts. Those findings are classified into categories that determine what happens next — and in most cases, what happens next is a defined corrective action process, not the end of your certification journey.
The Three Types of Audit Findings
Observations. Suggestions for improvement. No corrective action required. Your certificate is not affected.
Minor Non-Conformances. A specific clause is not being fully met, but it does not represent a fundamental breakdown. You are given 30 to 90 days to submit evidence of corrective action. Your certificate is issued once accepted.
Major Non-Conformances. A fundamental requirement is absent or has completely broken down. Certification cannot be confirmed until the major non-conformance is addressed and verified.
The vast majority of initial certification audits for well-prepared UK SMEs result in either no findings or minor non-conformances. Major findings at initial certification are uncommon.
What Actually Causes Major Non-Conformances?
Internal audit not completed. Every major ISO standard requires at least one complete internal audit before certification. If it has not been done, it is automatically a major non-conformance. This is the most common cause of certification delays we see. See our ISO 9001 audit preparation checklist.
Management review not conducted. A formal management review meeting with documented minutes must be completed before Stage 2.
QMS exists on paper but not in practice. If staff cannot demonstrate they follow documented procedures, no amount of well-written documentation will save you.
Scope not aligned with actual activities. If your defined QMS scope does not accurately reflect what your business does, this creates significant alignment issues.
A mandatory clause entirely absent. A complete gap in a mandatory requirement is a major finding.
What Happens If You Get a Major Non-Conformance?
- The auditor explains the finding clearly at the closing meeting, with specific evidence
- You agree a timeframe to address the root cause and implement corrective action
- You submit evidence to UniCert
- The evidence is reviewed by your auditor
- If accepted, certification is confirmed and your certificate is issued
- If a further on-site visit is needed, a short follow-up audit is arranged
A major non-conformance is not a rejection. It is a pause in the process while a specific issue is properly resolved.
How to Avoid Non-Conformances
- Complete your internal audit at least four weeks before Stage 2.
- Hold and minute your management review before Stage 2.
- Walk your own site as if you were the auditor.
- Brief your team — but keep it simple. A ten-minute briefing is worth more than a hundred pages of procedure.
- Check that corrective actions from your internal audit are closed.
The Reality for Well-Prepared UK Businesses
The most common outcome for a UK SME that has followed a structured implementation process is a smooth certification with a handful of minor observations.
Certification audits are professional processes conducted by experienced auditors. They are not adversarial. A finding is information, not a punishment.
Once you are certified, see what happens next in the three-year cycle.
If you are preparing for your audit and want to make sure you are genuinely ready, read our ISO 9001 audit preparation checklist →.
Get a Pre-Audit Readiness Check
If you are approaching your certification audit and want an independent view of where you stand, contact UniCert.
Frequently Asked Questions
Can you fail an ISO certification audit in the UK?
Not in the traditional sense. ISO audits produce findings — observations, minor non-conformances, and major non-conformances — rather than a pass or fail verdict. Minor non-conformances allow certification to proceed once corrective action evidence is submitted. Only major non-conformances prevent certification until the issue is resolved.
What is the difference between a minor and major non-conformance in an ISO audit?
A minor non-conformance means a specific requirement is not fully met but the overall management system is functioning. Certification can proceed once corrective action evidence is accepted, typically within 30 to 90 days. A major non-conformance means a fundamental requirement is absent or has broken down entirely. Certification cannot be confirmed until the major non-conformance is addressed and verified.
What are the most common causes of major non-conformances at ISO audits?
The most common causes are: the internal audit has not been completed before the certification audit; the management review has not been held and minuted; the management system exists on paper but is not being used in practice; or a mandatory clause of the standard has been entirely overlooked.
How long do I have to fix a non-conformance after an ISO audit?
For minor non-conformances, you typically have 30 to 90 days to submit evidence of corrective action. For major non-conformances, the timeframe is agreed with your auditor but is usually 30 to 60 days. The timeframe and process will be clearly explained at the closing meeting.
Related certifications:
Take the Next Step with UniCert
From ISO 9001 quality management to cyber security and supply chain assurance – UniCert provides the management system certification you need to unlock global markets.