ISO 42001 Nonconformity & Corrective Action

Overview

Draft nonconformity and corrective action procedure and records for the AIMS under ISO/IEC 42001:2023.

Getting Started

Add your source materials to the project workspace, then activate the ISO 42001 Nonconformity & Corrective Action skill. The agent will guide you through the process step by step.

Example conversation

You: We need a nonconformity and corrective action procedure and a record template—how we identify, analyse, and close nonconformities and review effectiveness.

Agent: I’ll draft the procedure and record template using the skill reference. I’ll define how nonconformities are identified (audits, incidents, monitoring), root-cause analysis, corrective (and preventive) action with responsibility and deadlines, effectiveness review, and a record structure. I’ll run nonconformity_check on the procedure and fix any missing elements, then link to internal audit and incident response.

Output excerpt

Nonconformity and corrective action excerpt

Identification — Nonconformities arise from: internal audit; AI incidents; monitoring or review; complaints; external audit. Recorded in [e.g. register or ticket]; classified by severity.

Analysis — Root-cause analysis for [e.g. all nonconformities or severity ≥ Y]. Method: [e.g. 5 Whys or equivalent]. Relation to AI system(s) documented where relevant.

Corrective action — Action defined (what, who, when); implemented and verified. Preventive action where appropriate to avoid recurrence. Owner: [e.g. process owner or AIMS owner].

Effectiveness review — [e.g. After 30 days or next audit cycle]: confirm issue resolved and no recurrence. If not effective, re-open or escalate. Document in record.

Record — Retain: ID; date; source; description; AI system(s); root cause; corrective/preventive actions; due date; effectiveness review; status. Link to audit finding or incident where applicable.

Extension and validation

The skill includes nonconformity_check, which validates the nonconformity and corrective action procedure for: identification (audit, incident, monitoring); root-cause analysis; corrective action (responsibility, deadline); effectiveness review; record structure (identified problem, corrective actions taken). Run it after drafting and address any missing elements.