SBS - The Best Value in QMS software

Audit Observations - Is there a requirement to Respond to Observations?


Fully vaccinated are you?
Staff member
Saw this. Any coments here?

From: "David Jenkins"
Newsgroups: misc.industry.quality
Subject: Registrar comments

Date: Mon, 15 Apr 2002 20:09:51 GMT
Organization: Shaw Residential Internet
Xref: sn-us misc.industry.quality:16278

Just wondering if anyone else has observed this from an auditor on an ISO
9001:2000 registration audit?

They found one minor nonconformance and made a 'comment' on three other
issues. They are trying to insist that we respond to these 'comments' as
well as the nonconformance before confirming registration. On being
challenged as to whether these comments were really 'minor or
potential-minor nonconformances' they replied no - they were justs things
they would like to see changed: they could not point to non-complience with
the standard.

I've been through a fair number of ISO audits with our clients, but have
never run across this behavior before. Anyone else seen this?

David Jenkins
White Rock BC
Elsmar Forum Sponsor

Randy Stewart

Unfortunately, yes. One of the sites I use to be responsible for received a minor during the next audit because we didn't respond to the OFI. However, 1 incident out of all the audits in the past 6 years isn't a bad percentage.


M Greenaway

I have never experienced this, and find it quite alarming.

However what you could do is document it in your CA system, conduct an investigation, come to the conclusion that you cannot identify that there is any non-compliance (which your auditor must agree with), and then close the CA with 'no-action'.

Unless of course you really want to go to war on it, in which case tell the guy to ............. off


Quite Involved in Discussions
Our Registrar does not require a response on Opportunity for Improvements. They are also not allowed to write an OFI during a registration. File a grievance with the registrar
How do you define "respond"?

All "observations" need some form of response, if only to say that nothing will be done. If that is what the registrar is looking for; evidence that you considered the observation, then great. If, on the other hand, the registrar is looking for you to “fix” the observation, then I would have an issue. If it requires “fixing” it should be a nonconformance, not an observation. If the situation is conforming, then not “fix” should be required.


Super Moderator
Super Moderator
Guess I can't say how kosher these opportunities for improvement and responses are, but here is what I have done in the past.

We have welcomed any and all observations pertaining to opportunities for improvement. We also let our registrar know that while we welcome them, we may not choose to do the exact things that the auditor is looking for, we will do what is best for us. Our registrar has never required a formal action plan for OFIs. We do (quality team members) sit down with the auditor prior to the closing meeting and discuss them. We may come up with a plan right there, or not. But at least the auditor knows we are aware, and will keep them in mind. Usually these improvement opportunities lead to the next surveillance audit, and they give us a chance to maybe take care of a potential problem before it happens. Obviously, if they were in nonconformance now, we'd get a finding. Usually it is just a feeling from the evidence collected in the current audit that there is a potential for nonconformance down the road.

I don't know, maybe we are pretty naive, but we like to partner with our registrar and keep everything pretty low-key and friendly.

Jim Biz

Two way situation

I've seen this happen in two different situations

1) auditor "using" an improvement as a warning
(ie explaining that although it is wiitten as a "Suggestion" if nothing changes by the next visit - I'll find a way to write a nonconformance for it.....

2) Auditor Using improvement suggestins to "mold" the clients system to his viewpoint. Ie your system would be better in my opinion if you did this or that........

Of course the auditor that explains "this is what I think and you can take it and run with it OR ignore it completley is correct.


Super Moderator
Super Moderator
my experience

During our initial audit, our registrar found some OFIs. They included them in their report, but did not require a written response. We did have 3 minors written, and we had to respond to those before we received our certification.

Oh yeah

One additional thing I forgot, for some reason SteelMaiden's post reminded me of it. If an observation points to something that would be of benefit, then without a doubt follow-up, regardless of whether the registrar says you have to.


Two out of the three Registrars I have used required responses to Observations.

Both described it as being a warning about a future finding.
Thread starter Similar threads Forum Replies Date
L ISO 13485:2016 Clause 8.4 - Analysis of Audit Observations ISO 13485:2016 - Medical Device Quality Management Systems 8
Q Stage 1 audit observations - documented report? General Auditing Discussions 5
S ISO 9001 Audit Observations - Transitioning my career into auditing Career and Occupation Discussions 16
P Secretly Auditing - Writing an audit report with observations based on my experiences Internal Auditing 12
S Do I need to answer Audit Observations? General Auditing Discussions 33
V Classification of Audit Observations - Regulatory References US Food and Drug Administration (FDA) 1
D Need to follow-up Internal Audit 'Observations' ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 17
A Can Internal Audit Observations be kept confidential from State FDA inspections ? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 11
A Quality Objectives 5.4.1 - KPI SOP - ISO 13485 Audit Observations EU Medical Device Regulations 6
V Most Common Internal/External Audit Observations on Risk Management ISO 14971 - Medical Device Risk Management 4
I Observations Outside of the Audit Scope General Auditing Discussions 37
C Closure of CARs (Corrective Action Requests) and Audit Observations Internal Auditing 25
C Is approval needed for adopting observations made during audit? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
W TS 16949 Audit - Examples of Major & Minor NC's and Observations for Stage 1&2 audit. IATF 16949 - Automotive Quality Systems Standard 11
B Responding to ISO9001 Audit NCR?s/Observations - ?Top Management? ? Clause 5.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 24
M Linkage of Internal Audit Observations to Business Risk ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
B Responding to ISO9001 or TS16949 Audit NCR?s/Observations. Nonconformance and Corrective Action 5
X Sample SOC2 audit report (or a redacted one) IEC 27001 - Information Security Management Systems (ISMS) 0
D Lead time to schedule an ISO 13485 audit Auditing Quality and Environmental Management Systems 2
G Organizing internal audit program for an Integrated QHSE Management System Internal Auditing 13
S Does anyone have a checklist to prepare for ISO 13485, Stage I audit? ISO 13485:2016 - Medical Device Quality Management Systems 1
W How do you phrase your internal audit questions? Internal Auditing 3
Z Steps to take before an MDSAP audit for Canada Canada Medical Device Regulations 2
V Csv, excel format - audit trail file of HPLC system ( Empower, openlab, EZchrom or any other ) Qualification and Validation (including 21 CFR Part 11) 0
G Not accepting a non conformity during an audit General Auditing Discussions 11
K IATF audit day requirements table 5.2 IATF 16949 - Automotive Quality Systems Standard 6
Q ISO 9001/IATF 16949 Audit Finding Question - Document Retention IATF 16949 - Automotive Quality Systems Standard 10
M IATF - Internal Audit 3 year span Internal Auditing 4
Q Audit report template ISO 9001/14001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
Q ISO 9001-2015 Internal audit finding Internal Auditing 12
lanley liao How to understand this words that the planning of internal audit shall take into consideration the results of previous audits? Oil and Gas Industry Standards and Regulations 10
P Audit check for IT company (ISO 9001) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
D Supplier audit Medical Device and FDA Regulations and Standards News 2
M Go Live With New ERP System before Recertification Audit General Auditing Discussions 6
A Add MDSAP to Internal Audit Schedule Medical Device Related Regulations 0
A Define timeline for Major and Miner Audit finding General Auditing Discussions 4
J IATF 16949 Internal Audit question - Auditor's responsibility Internal Auditing 6
A API Monogram audit review process Oil and Gas Industry Standards and Regulations 4
S IATF 16949 Internal Audit Example IATF 16949 - Automotive Quality Systems Standard 11
B Remote IATF 16949 audit preparation General Auditing Discussions 10
M AS9100D Registrar pre-audit requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 15
I Do I need to sign off my annual audit calendar? Internal Auditing 2
R AS9100D internal audit checklist or ISO 9001 2015 to AS9100 D AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
M Nice and simple invitation email to an audit kickoff meeting Internal Auditing 1
M IATF 16949 - Audit of Remote Location/Support Site and IT IATF 16949 - Automotive Quality Systems Standard 4
Q IATF audit - Root Cause Analysis results IATF 16949 - Automotive Quality Systems Standard 5
Q Self-assessment audit information Quality Management System (QMS) Manuals 6
Le Chiffre Online training available for ISO/IEC 17021-1: Requirements for bodies providing audit and certification of management systems Training - Internal, External, Online and Distance Learning 3
xfngrs NIOSH Audit for N95 respirators US Food and Drug Administration (FDA) 1
Sidney Vianna IATF 16949 News Risked Based Audit Day Calculation IATF 16949 - Automotive Quality Systems Standard 2

Similar threads

Top Bottom