Hi I was assigned as QA recently and asked to prepare for our ISO surveillance audit this march, most of the responsible people for the QMS resigned and I found out there are a lot of gaps, one is that the company have not yet conducted a vendor evaluation. They have an approved procedure of doing it and as a supplier they particpated to customer's vendor evaluation..but there are no records that they initiate any vendor qualification or evaluation. They say that one reason is that most vendors are nominated but there is no document to support it..Considering that we only have less than a month left, can anyone advise me on what is the best corrective / preventive action for this issue? Is it a major non conformance? The company is iso certified for almost a year already..