Internal Audit Findings Before the Certification Body Arrives

The omitted R-410A and diesel aspects are likely a major nonconformity against clause 6.1.2 because the aspect register is the core planning document and these are significant aspects with refrigerant loss, global warming, spill, and fire potential. If they are fully controlled by another documented procedure, it could be minor, but the register itself is incomplete. The management review is a major nonconformity against clause 9.3: the 11-month interval may be within an annual plan, but the review omitted required inputs such as audit results and compliance obligations. The closed corrective action without evidence is a nonconformity against clause 10.2; it is major if the spill root cause was never corrected and the system falsely closed it. The missing training records for 12 of 40 employees are a minor nonconformity against clause 7.2 unless those employees perform tasks that can cause significant environmental impacts, in which case it is major. Classify by system failure, not by the certification date.

I should refuse to downgrade documented findings to observations. Audit findings must be recorded accurately; ISO 19011 and professional ethics require integrity, objectivity, and competence. Recording a major nonconformity as an observation to protect a certification is falsification and could mislead the certification body, top management, and regulators. I would explain that the certification body will likely find the same issues, and that a credible corrective action plan before the audit is a better strategy. I would offer to help prioritize the fixes and prepare evidence. If the environmental manager persists, I would escalate to top management or the audit program manager and document the request and my response. If I am not independent because I manage the area being audited, I should disclose that and have another auditor lead the audit.

For each finding, contain the immediate problem, perform a root-cause analysis using a method such as 5 Whys or a fishbone diagram, and assign an owner and due date. Update the aspect register to include refrigerant and diesel, evaluate their significance, and add operational controls and objectives as needed. Schedule a management review with all clause 9.3 inputs, including audit results and compliance obligations. Reopen the solvent-spill corrective action and verify that training was delivered and that workers demonstrate competence, not just that an email was sent. Create a training matrix for hazardous waste handlers and close gaps. Track actions in a corrective action register, close only with objective evidence, and verify effectiveness before the certification audit. Review the results at the next management review.