QHSE Non-conformance: Management, Corrective, and Preventive Actions

The management of non-conformances is a cornerstone of QHSE management according to ISO 9001/14001/45001. Identification, cause analysis, corrective and preventive actions are part of the continuous improvement cycle.

Non-conformance is a central concept in QHSE management (Quality, Health and Safety, Environment). Whether detected during an audit, an inspection, an incident, or a surveillance measure, its structured management is a pillar of an organization's continuous improvement. The standards ISO 9001:2015, ISO 14001:2015, and ISO 45001:2018 explicitly require it.

Definition

A non-conformance is defined as the non-fulfillment of a requirement. This requirement can be:

Legal or regulatory (Labor Code, environmental standard).
Contractual (customer specifications).
Normative (ISO 9001:2015, ISO 45001:2018, ISO 14001:2015).
Internal (procedure, job description, quality instruction).

Types of Non-conformances

Audits generally distinguish three levels:

Minor: An isolated deviation with no immediate impact on quality, safety, or the environment (e.g., a poorly archived form).
Major: A significant or repetitive deviation affecting an entire process (e.g., a team not being trained on a critical risk).
Critical: A serious deviation that calls into question legal compliance, safety, or the environment (e.g., working at height without collective protection, unmeasured discharge).

Processing Procedure

The structured management of a non-conformance follows a five-stage cycle:

Identification: Reporting via an audit, inspection, incident, or employee (feedback form).
Cause Analysis: Investigation of the root cause(s) (5 Whys, Ishikawa).
Corrective Action: Implementation of an action to eliminate the cause and prevent recurrence.
Effectiveness Verification: Verification at a defined deadline that the action has actually resolved the problem.
Closure: Formalization of the closure in the non-conformance register and capitalization.

Cause Analysis

Two complementary tools are frequently used:

5 Whys: An iterative technique that traces the chain of causes by asking "why?" five times until the root cause is found.
Ishikawa Diagram (or fishbone): Classification of causes into categories (Method, Machine, Manpower, Material, Measurement, Environment) for a systemic view.

CAPA (Corrective and Preventive Action)

The CAPA concept encompasses:

Corrective Action: Eliminating the cause of a detected non-conformance to prevent its recurrence.
Preventive Action: Eliminating the cause of a potential non-conformance to prevent it from occurring (anticipation).

The CAPA approach is explicit in the ISO standards and in the pharmaceutical (ICH Q10) and automotive (IATF 16949:2016) frameworks.

Tools and Registers

Non-conformance Register: A numbered list of deviations, causes, actions, and statuses.
Action Plan: A tracking table by deadline and responsible party.
Indicators: Closure rate, average processing time, recurrence.

Link with ISO 9001:2015 / 14001:2015 / 45001:2018

The modern ISO standards (versions 2015 and 2018) require a dedicated chapter (Chapter 10.2 — Nonconformity and corrective action) on non-conformances and corrective actions. The PDCA (Plan-Do-Check-Act) cycle structures continuous improvement.

Sources et références

Code du travail marocain (Loi n° 65-99), Titre IV — articles 281 et suivants (principes généraux de prévention) ILO NATLEX : https://natlex.ilo.org/dyn/natlex2/r/natlex/fe/details?p3_isn=67319
INRS — Démarche QSE (portail risques) https://www.inrs.fr/risques.html
ISO 9001:2015 — Quality management systems (chapitre 10.2 Non-conformité et action corrective) https://www.iso.org/standard/62085.html