Nonconformity occurrence and risks

Answer:
I have not seen the nonconformance. Looking into clause 10.2 I can guess what the intention of the auditor was. Please, check the first part of clause 10.2 – “When a nonconformity occurs” it is about the occurrence of a nonconformity, not about corrective action. When a nonconformity occurs, your organization should update risks and opportunities determined during planning, if necessary. A nonconformity is the manifestation of a risk that actually happened. Was that risk initially determined? Was that risk correctly classified and evaluated? The nonconformity can be about something that you overlooked during the initial risk determination. Waiting for an annual revision exercise can be too late to act.

The following material will provide you information about risks and opportunities:

- ISO 9001 – How to address risks and opportunities in ISO 9001 – https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/
- Risk-based thinking replacing preventive action in ISO 9001:2015 – The benefits https://advisera.com/9001academy/knowledgebase/risk-based-thinking-replacing-preventive-action-in-iso-90012015-the-benefits/
- - ISO 9001:2015 Risk Management Toolkit – https://advisera.com/9001academy/iso-90012015-risk-management-toolkit/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/