Ask five auditors from the same body to grade the same finding and you will often get three answers. That is not a competence problem — it is a criteria problem. ISO/IEC 17021-1 requires the certification body to classify findings, but it does not hand you the dividing line. The line is yours to write, and the requirement is that it be written and applied consistently.
The test most bodies converge on
A major is usually defined by one of three things: the absence of a required part of the system, a breakdown so widespread that the process cannot be considered under control, or a failure whose effect reaches the product, the service or a legal requirement. A minor is a single lapse in a process that otherwise works — a record missing, one step skipped once, a document not updated after a change.
The word that carries most of the weight is systemic. One missing training record is a minor. Fifteen missing training records across three departments is the same fact repeated until it stops being an accident and starts being how the process actually runs. The judgment call is whether you are looking at an exception or at the rule, and that is a judgment an auditor makes on site, with the evidence in front of them.
Why classification is really a consistency problem
The grade is not cosmetic. A major triggers a verification of the corrective action within a bounded period and can hold up the certification decision; a minor is normally accepted with a plan and verified at the next audit. Grade the same situation differently for two clients and you have created an inconsistency that a client can appeal and an accreditation body can raise against you.
This is why classification consistency is checked, not assumed. Applying the same written criteria to every finding, across auditors and regions, and citing the criterion in the record is what turns a grade into something defensible. The Audit Report Agent drafts every finding against your own criteria and flags the ones where the wording and the grade do not line up, so the inconsistency shows up before the report leaves the body rather than after.
One practical note: an observation is not a third grade of nonconformity. It is a comment on something that complies today but could drift, and it carries no obligation for the client. Mixing observations into the nonconformity count is one of the most common ways a report becomes hard to defend.
Related articles
See it in your own operation
We run the agents on a real audit file of yours.
- —30 minutes, no commitment
- —Your accredited procedures and formats
- —Every decision stays with your people