Stage 2 Audit Objective
The Stage 2 audit is the formal certification audit. The auditor determines whether your QMS conforms to ISO 9001 requirements, is effectively implemented, and is achieving its intended outcomes. Stage 2 is conducted at your premises (or remote for applicable scopes) and typically lasts two to four days depending on organization size and scope. The certification body makes the final certification decision based on Stage 2 audit findings.
Stage 2 Audit Agenda Structure
The Stage 2 audit follows a standard agenda: opening meeting where the auditor meets with management and explains the audit process, process audits where the auditor examines specific QMS processes and interviews staff, management interviews where the auditor discusses organizational context and management review, document and record reviews of mandatory DI and evidence files, and closing meeting where the auditor presents findings and discusses next steps. The auditor navigates between ISO 9001 clauses and actual QMS processes simultaneously, sampling evidence to verify conformance.
What Auditors Examine at Stage 2
| Audit Focus Area | How Auditors Verify | Evidence They Request |
|---|---|---|
| Process Operation (Clause 8) | Process walkthroughs; staff interviews; record examination | Process records, work instructions, nonconformity registers, evidence of in-process monitoring |
| Customer Requirements (8.2) | Requirements review process examination; contract review records | Quotations, purchase orders, signed requirements reviews, customer confirmation records |
| Product/Service Conformity (8.6) | Release process verification; sample product examination | Inspection and testing records, acceptance sign-offs, release approvals, delivery records |
| Nonconforming Output (8.7) | NCR system examination; disposition review | NCR register entries, root cause analysis records, customer notification letters, disposition approvals |
| Internal Audit (9.2) | Audit program and records review; audit finding verification | Audit schedule, audit reports with evidence of examination, NC identification, CA linkage |
| Management Review (9.3) | Review records and action tracking | Management review meeting minutes, attendance lists, mandatory input evidence, action item tracking |
| Corrective Actions (10.2) | CA register review; root cause analysis verification; effectiveness testing | CA register with root cause, CA plan, completion evidence, effectiveness verification records |
| Quality Objectives (6.2) | Performance data review and trend analysis | Monthly or quarterly objective monitoring reports, target vs. actual data, trend charts |
Staff Interview Technique
Auditors interview staff at all levels — top management, process owners, operational staff, and support staff. The auditor looks for awareness of quality policy and objectives, understanding of personal processes, knowledge of what to do when nonconformities occur, and ability to show evidence of their work. Common interview patterns include walking through a process step-by-step, requesting evidence of specific activities, asking what happens when something goes wrong, and exploring problem-solving approaches. Proper preparation is understanding, not memorizing scripted answers. Staff who can naturally describe their process and show evidence confidently will create a positive audit impression.
| KEY IDEA | Stage 2 auditors sample evidence — they cannot examine everything. What matters is that evidence exists and is accessible when requested. An auditor who asks for the records of the last five customer requirements reviews must find five records, not a blank filing system. Systematic record-keeping through QMS operation is what makes Stage 2 successful. |
Finding Categories at Stage 2
The auditor categorizes findings based on severity. A Major Nonconformity indicates the absence of a QMS element or systemic failure affecting conformance. A Minor Nonconformity indicates an isolated lapse or partial implementation. An Observation is an area of concern where evidence of nonconformity is not yet present. An Opportunity for Improvement is not a finding but advisory feedback. Only Major Nonconformities prevent certification; Minor Nonconformities must be addressed within 90 days typically.
| Finding Type | Impact | CB Response | Organization Response |
|---|---|---|---|
| Major NC | Certification cannot be granted until resolved | Stage 2 extended or re-audit required | Root cause analysis and CA required before certification |
| Minor NC | Certification granted subject to CA within timeframe | Correction and CA required within 90 days typically | CA plan submitted to CB; effectiveness verified at surveillance audit |
| Observation | No immediate certification impact | Noted in report; no formal action required | Consider as improvement opportunity; no formal response required |
| OFI | Advisory feedback only; no compliance implication | Noted for organization consideration | Optional to action; treated as continuous improvement input |
Closing Meeting and Certification Decision
At the closing meeting, the auditor presents all findings with category (Major, Minor, Observation, OFI), describes the evidence supporting each finding, and discusses corrective action expectations. The auditor does not make the certification decision at closing — that decision is made by the certification body, not by the individual auditor. Certificate issuance typically follows two to six weeks after Stage 2 if no Major Nonconformities are raised. If Major Nonconformities exist, they must be resolved and verified before certification is granted.
When Stage 2 Generates Major Findings
If a Major Nonconformity is raised at Stage 2, the organization must conduct a root cause analysis and implement corrective actions. The certification body schedules a re-audit or extended closing session to verify that corrective actions address the root cause. The timeline for certification extends by four to eight weeks depending on remediation complexity. Major Nonconformities at Stage 2 are usually preventable with adequate pre-Stage 1 preparation and diligent Stage 1 gap closure.
| IMPORTANT | Auditors interview staff at all levels — not just management and QMS leads. A production operator who cannot describe their process or explain what happens when a defect is found will generate audit observations or findings. Brief all staff involved in QMS processes before Stage 2, not just management. |
| BITLION INSIGHT | The most impactful Stage 2 preparation activity is an internal audit using the same sampling methodology the CB will use — select actual evidence, trace it through the QMS, identify gaps. Organizations that conduct this evidence audit 3–4 weeks before Stage 2 find and fix the gaps their internal audit program may have missed, and arrive at Stage 2 with confidence. |