What Is the Formal Process for Disputing an ISO Audit Finding?

When an Audit Finding Does Not Feel Right

You have just come out of your ISO certification audit. The auditor has raised a nonconformity against your business, and something about it does not sit right. Maybe the finding is based on a misreading of a clause. Maybe the auditor missed evidence you clearly presented. Maybe the finding references a requirement that simply does not apply to your scope. Whatever the reason, you believe the finding is wrong, and you want to challenge it.

This is more common than most businesses realise. Disputing an ISO audit finding is a legitimate, structured process, and knowing how it works can save your certification, protect your business reputation, and hold certification bodies accountable for the quality of their audits. This guide walks you through exactly what to do, step by step, in plain language.

Understanding What You Are Actually Disputing

Before you raise a formal dispute, it helps to be clear about what kind of finding you are challenging. Not every disagreement is worth escalating, and not every escalation follows the same path.

Types of Findings You Might Want to Challenge

• Nonconformities (major or minor): A finding that your management system fails to meet a specific clause requirement. Major nonconformities can block certification entirely. Minor nonconformities require corrective action within an agreed timeframe.
• Observations or opportunities for improvement: These are not mandatory findings, but you may still want to dispute them if they are factually incorrect and could influence future audits.
• Audit conclusions: In some cases, you may disagree with the overall audit outcome, such as a recommendation not to certify, rather than a specific individual finding.

Grounds for a Valid Dispute

Not every disagreement constitutes valid grounds for a formal dispute. Auditors have professional judgment, and certification bodies are not obligated to reverse a finding simply because you disagree with it. However, there are legitimate grounds that carry real weight:

• The auditor misinterpreted or misapplied a clause requirement
• The finding is based on incomplete or incorrect evidence
• The auditor failed to consider evidence you provided during the audit
• The finding is outside the agreed audit scope
• The auditor demonstrated bias or unprofessional conduct
• The finding contradicts a previous audit conclusion from the same certification body without explanation

If your dispute falls into one of these categories, you have a reasonable case to pursue formally. If your objection is simply that you do not like the finding or find it inconvenient, the process is unlikely to go in your favour.

Step 1: Raise It Verbally During the Closing Meeting

The closing meeting at the end of your audit is your first and most immediate opportunity to challenge a finding. This is where the auditor presents their findings before the formal report is issued. Many disputes are resolved right here, before they ever become formal.

Do not stay quiet to avoid conflict. If something is factually wrong, say so clearly and professionally. Point to the specific evidence the auditor may have missed. Ask the auditor to explain the exact clause they are citing and how the finding relates to it. Auditors are human, and sometimes they get it wrong. A good auditor will reconsider when presented with clear evidence.

If the auditor acknowledges the error and withdraws or modifies the finding, make sure this is reflected in the written audit report. Do not accept a verbal withdrawal that does not appear in the final documentation.

If the auditor maintains the finding despite your objection, note that you are formally disagreeing and that you intend to pursue the matter through the certification body's complaints and appeals process. This puts the auditor on notice and creates a record of your objection.

Step 2: Review the Written Audit Report Carefully

Once you receive the formal audit report, read it thoroughly before taking any further action. The written report is the document that matters for the formal process. You are looking for a few specific things:

• Is the finding clearly described with the specific clause reference?
• Is the objective evidence cited accurately and completely?
• Does the finding logically follow from the evidence described?
• Are there any factual errors in how your processes or documents are described?

Take notes. Gather your counter evidence. If the finding refers to a document, pull that document and check whether it actually meets the requirement. If the finding refers to a process, document exactly how that process operates and where it is recorded. The stronger your evidence, the stronger your formal dispute.

You should also check the timeline. Most certification bodies have a strict window for raising formal appeals, often between 30 and 60 days from the date the audit report is issued. Missing this window can forfeit your right to dispute, so do not delay.

Step 3: Submit a Formal Appeal to the Certification Body

Every accredited certification body is required to have a formal appeals process. This is not optional. ISO/IEC 17021-1, which governs the requirements for bodies providing audit and certification of management systems, explicitly requires certification bodies to maintain a documented appeals process that is impartial and accessible to all clients. If a certification body does not have one, that is a serious accreditation concern in itself.

To submit a formal appeal, you will typically need to:

1. Complete the certification body's official appeals form (available on their website or from your account manager)
2. Clearly state the specific finding or decision you are appealing
3. Identify the grounds for your appeal, referencing the relevant standard clause and the evidence that supports your position
4. Attach all supporting documentation, including the audit report, relevant records, and any correspondence with the auditor
5. Submit within the required timeframe

Write your appeal clearly and factually. Avoid emotional language. Stick to the evidence and the standard requirements. A well structured appeal that references specific clauses and specific evidence is far more effective than a general complaint about how the auditor behaved.

Most certification bodies will acknowledge receipt of your appeal within a few business days and assign it to someone independent of the original audit team for review. This independence requirement is a key part of the accreditation standards governing certification bodies.

Step 4: Engage With the Appeals Review Process

Once your appeal is lodged, the certification body will conduct an internal review. Depending on the body and the complexity of the issue, this can take anywhere from two to eight weeks. During this period, you may be asked to provide additional information or clarification.

The review is typically conducted by a senior technical reviewer or a dedicated appeals committee who was not involved in the original audit. They will assess whether the auditor applied the standard correctly, whether the evidence cited supports the finding, and whether the finding is within scope.

There are three possible outcomes from an internal appeal:

• Finding upheld: The certification body agrees with the auditor and maintains the finding. You will receive a written explanation.
• Finding withdrawn or modified: The certification body agrees with your appeal, in whole or in part, and amends the audit report accordingly.
• Partial resolution: The finding is modified but not fully withdrawn. This may or may not satisfy your concerns.

If the finding is upheld and you still believe it is wrong, you have further options. The process does not end here.

Step 5: Escalate to the Accreditation Body

If you are not satisfied with the certification body's internal appeals outcome, you can escalate your complaint to the relevant accreditation body. This is the organisation that has accredited the certification body to conduct ISO audits. In Australia, that is JASANZ. In the UK, it is UKAS. In the US, it is ANAB or IAS. Each country has its own accreditation body.

The accreditation body cannot overturn a specific audit finding directly. What they can do is investigate whether the certification body followed proper procedures, acted impartially, and applied the relevant accreditation standards correctly. If they find the certification body failed in its obligations, they can require corrective action, issue sanctions, or in serious cases, suspend or withdraw accreditation.

Escalating to the accreditation body is a serious step and should not be taken lightly. It is most appropriate when you believe there has been a systemic failure in the certification body's process, not just a disagreement over a single finding. That said, it is a legitimate avenue and one that accreditation bodies take seriously.

To understand more about how certification bodies are governed and what standards they must meet, our article on ISO 17021 and conformity assessment for certification bodies provides a detailed breakdown of the requirements they are held to.

What to Do While the Dispute Is in Progress

A common question is whether you need to fix the disputed finding while you are appealing it. The honest answer is: it depends on the finding and the timing.

If you are in the middle of a certification audit and the finding is blocking your certificate, you may need to address it as a precaution while the appeal proceeds, particularly if the appeal timeline extends beyond your certification deadline. Fixing a finding does not necessarily mean you are conceding the point. You can address it operationally while still pursuing the dispute formally.

If you are in a surveillance audit cycle and the finding is a minor nonconformity, you will typically have a defined period to submit a corrective action plan. You can submit a corrective action plan that addresses the finding while simultaneously noting in writing that you are disputing the validity of the finding. This protects your certification status without abandoning your appeal.

Document everything throughout this process. Every email, every phone call, every piece of evidence. If the dispute escalates, your documentation trail will be critical.

When the Finding Is About Auditor Conduct, Not Just the Finding Itself

Sometimes the issue is not just the finding itself, but how the auditor behaved during the audit. If an auditor was dismissive, failed to review evidence you presented, showed clear bias, or behaved unprofessionally, that is a separate complaint from a technical appeal about the finding.

Most certification bodies have a separate complaints process for conduct issues. You can run both processes in parallel, a technical appeal against the finding and a conduct complaint against the auditor. Keep them clearly separate in your correspondence, as they are handled differently.

Our article on what businesses can actually do about a bad ISO certification auditor covers this in more detail, including specific steps for lodging conduct complaints.

How to Strengthen Your Position Before and During the Audit

The best time to prepare for a potential dispute is before the audit even starts. Strong audit preparation reduces the likelihood of disputed findings arising in the first place, and it puts you in a much stronger position if they do.

• Keep your evidence organised and readily accessible during the audit. If an auditor asks for something, be able to produce it immediately.
• Take notes during the audit of what evidence was presented and what the auditor reviewed. This becomes your record if you need to dispute a finding later.
• If the auditor raises a potential finding during the audit, ask them to explain the specific clause and the specific gap. Do not accept a vague statement.
• Have a senior person from your team present at the closing meeting who has authority to raise objections on the spot.

For a detailed checklist of what to do before your audit to minimise surprises, see our guide on 10 things to do before an ISO Stage 2 certification audit.

The Bigger Picture: Why Disputing Findings Matters

Some businesses shy away from disputing findings because they worry it will damage their relationship with the certification body. This concern is understandable but largely unfounded. Accredited certification bodies are required to act impartially, and a formal appeal should not influence how your future audits are conducted. If you genuinely believe a finding is wrong, you have not only the right but arguably the responsibility to challenge it.

Accepting incorrect findings sets a bad precedent for your business. It can lead to unnecessary corrective actions, wasted resources, and a management system shaped by a misunderstanding of the standard rather than the actual requirements. It also does nothing to improve the quality of auditing across the industry.

Good certification bodies welcome well founded appeals. They use them to identify auditor training needs and improve their own processes. A certification body that becomes defensive or punitive when challenged is one you should think carefully about continuing to work with. Our article on why businesses are leaving their ISO certification body explores some of the warning signs that it might be time to switch providers.

Choosing the Right Certification Body From the Start

Many disputes could be avoided entirely by choosing a certification body that assigns experienced, technically competent auditors who understand your industry. Not all certification bodies are equal in this regard, and the quality of auditing varies significantly.

If you are at the stage of selecting a certification body, or if you are considering switching after a poor experience, getting competing quotes from multiple accredited providers is one of the most effective ways to assess your options. CertBetter connects businesses with verified ISO consultants and accredited certification bodies, so you can compare providers, ask the right questions, and make an informed decision before you commit. The service is completely free for businesses, and you receive up to three competing quotes from vetted providers with a single form submission.