Nonconformity vs Observation vs OFI

Finding type	What it means	Required response
Nonconformity (Major)	A systemic failure to meet a requirement -- the process is broken or absent	Formal corrective action required; can block or suspend certification
Nonconformity (Minor)	An isolated instance of not meeting a requirement, without systemic failure	Corrective action required, typically with a defined timeline before the next audit
Observation	A potential future nonconformity -- something trending toward a gap but not yet one	No mandatory corrective action, but should be tracked and addressed proactively
Opportunity for Improvement (OFI)	The requirement is met, but the auditor sees a way to do it better	Optional -- purely advisory, not a compliance issue

Why the distinction matters

Organizations sometimes treat every audit comment as equally urgent, or conversely dismiss real nonconformities as "just a suggestion." Both are wrong. A major nonconformity threatens certification and needs immediate, documented action; an OFI can reasonably sit on a backlog. Reading findings at the correct severity level is itself a governance skill the exam and real audits both test.