---
title: Assessing and Writing of Non-conformity
description: Assessing and Writing of Non-conformity
image: https://blog.bcm-institute.org/hubfs/Audit%20Morepost/IC_Morepost_What%20is%20considered%20non-conformity%20in%20ISO22301.png
---

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

##### BCM Audit Series

![Blog_Jan_Ban.jpg](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/Blog_Jan_Ban.jpg?width=1920&name=Blog_Jan_Ban.jpg "Blog_Jan_Ban.jpg")

# Assessing and Writing of Non-conformity

When assessing for non-conformity, an auditor should be prepared with a series of questions to ask.

Once the "NC" is identified, it should be written correctly to reflect the finding.

[Moh Heng Goh](https://blog.bcm-institute.org/audit/author/moh-heng-goh) Sep 19, 2020

###### BCMS Audit Certified Planner-Specialist-Expert

#### Assess Non-conformity

![IC_Morepost_Assess and Write Non-conformity](https://blog.bcm-institute.org/hs-fs/hubfs/Audit%20Morepost/Audit%20Appendix/IC_Morepost_Assess%20and%20Write%20Non-conformity.png?width=239&name=IC_Morepost_Assess%20and%20Write%20Non-conformity.png)When assessing for non-conformity, these are the questions to ask:

- Is what the Auditor found a representative of a non-conformity?
- How confident of the Auditor's judgment is the Client?
- Are there sufficient facts to support the non-conformity?
- Will  this non-conformity result in a critical situation?
- Is this an isolated case of minor discrepancy?
- Does this non-conformity happen frequently?
- Are there too many non-conformity found?
- Does the non-conformity warrant a formal correction versus immediate actions?

#### Guide to Writing Non-conformity

During the writing of a non-conformity, the Auditor should observe the following guidance:

- Be Specific
- Confirm “Where” was the non-conformity found
- Confirm “What” regarding the names and numbers
- Confirm “Why” as per system or requirement
- Be sure that the facts are correct

#### Collect Evidence

The methods of collecting audit evidence of the respective BCM areas are:

- Interviews
- Examination of documents
- Observation of activities and conditions

#### Document Audit Observations

- Document conformity
- Document non-conformity, show objective evidence and reference the standard

#### Complete Findings Write-up Sheet

View more about Audit Working Paper

#### Record Non-conformity

- Give exact observation of facts
- Confirm “Where” it was found
- Confirm “Why” it is a non-conformity by citing the specific requirement
- Confirm “Who” was there
- Use local terminology
- Make it retrievable
- Make it helpful

#### Non-conformity Recommendations

These are the options the audit team may take upon completion of the audit. In this section, the recommendations are:

To register 

- No major non-conformities

Not to register

- Many major non-conformities

Hold registration, pending corrective actions

- Many minors major non-conformities
- May require re-visits

Complete internal audit covering all elements of BCMS

- At least one management review
- All majors and minors must be closed before recommending to submit for registration to be certified.

[![A Manager’s Guide to Auditing & Reviewing Your Business Continuity Management Program](https://no-cache.hubspot.com/cta/default/3893111/1b9562a3-44b0-4f3b-ba1d-5563718d7d4e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1b9562a3-44b0-4f3b-ba1d-5563718d7d4e)

#### Resource

Goh, M. H. (2016). **A Manager's Guide to Auditing and Reviewing Your Business Continuity Management Program**. Business Continuity Management Series (2nd ed.). Singapore: GMH Pte Ltd.

Extracted from **"Stage 3: Audit Review and Reporting****"**

 

#### [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/2d66ca6d-96cd-4f69-9825-eb800f029f30.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2d66ca6d-96cd-4f69-9825-eb800f029f30)

#### Singapore ![singapore_flag](https://blog.bcm-institute.org/hs-fs/hubfs/Flags/singapore_flag.jpg?width=100&name=singapore_flag.jpg)Government Funding for BCM-8530 Course

The next section applied to Singaporean and Singapore permanent residents.  Click the button "**Government Funding Available**" to find out more about the funding that is available from the Singapore government.  This includes the CITREP+, SkillsFuture Credit and UTAP.

 

#### Find out more about Blended Learning BCM-8530 \[BL-A-5\] & BCM-8030 \[BL-A-3\]

| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/88415cfb-296f-433f-9e06-5286ce107d36.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/88415cfb-296f-433f-9e06-5286ce107d36) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/21ce6f6a-312c-4b11-940a-3ce497d73ef1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/21ce6f6a-312c-4b11-940a-3ce497d73ef1) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/17f3f14e-225e-4f6b-9196-1aef316f96c0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/17f3f14e-225e-4f6b-9196-1aef316f96c0) |
| --- | --- | --- |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/bf0565ae-ed49-4330-a623-ace5772377c5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bf0565ae-ed49-4330-a623-ace5772377c5) | [![TMM \[BL-A-5\]](https://no-cache.hubspot.com/cta/default/3893111/e7af9322-15cb-412d-91b6-59cd388ee6e9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/e7af9322-15cb-412d-91b6-59cd388ee6e9) | [![Register \[BL-A-5\] ](https://no-cache.hubspot.com/cta/default/3893111/bb38417e-6241-4057-b90c-f319f31a494e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/bb38417e-6241-4057-b90c-f319f31a494e) |
| [![FAQ for BL-A-3](https://no-cache.hubspot.com/cta/default/3893111/c6752f0c-5af2-46ae-8205-785a36fafc84.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c6752f0c-5af2-46ae-8205-785a36fafc84) | Please feel free to send us a note if you have any of these questions to [sales.ap@bcm-institute.org](mailto:sales.ap@bcm-institute.org) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6566ccb3-282e-40d6-9ec9-810b5e5587d7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6566ccb3-282e-40d6-9ec9-810b5e5587d7) |

#### **For Your Comments**

### More Posts

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/99262138-c48e-4ab9-a389-d5b3fa011937.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/99262138-c48e-4ab9-a389-d5b3fa011937)

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026