A recent studyby AFNOR Certification, analyzing nearly 20,000 ISO 9001 audit reports, has just revealed that non-conformities are rarely attributable to documentation.
In most cases, the discrepancies identified relate to the way in which the management system is run on a day-to-day basis.
Analysis of the audit reports highlights three areas that are particularly vulnerable:
- Chapter 7 – Resources (12.6% of non-conformities and sensitive issues)
- Chapter 9 – Monitoring, measurement, analysis, and evaluation (7.5%)
- Chapter 8 – Production and service provision (7.4%)
These figures do not reflect a lack of knowledge of the standard. They highlight organizational weaknesses.
Resources: when skills are not sufficiently structured
With 12.6% of the discrepancies observed, skills management (chapter 7) tops the list of discrepancies identified. The most common issues concern:
- Integration pathways with little formal structure
- Partially mapped job training courses
- Difficulty demonstrating the balance between needs and resources
- Insufficient traceability of critical skills
In many organizations, the skills are there. But their structuring and monitoring still need improvement.
The risk is not only auditory. It is also operational: loss of expertise, dependence on key profiles, difficulty in securing skills development.
Monitoring and measurement: indicators exist, but are rarely used
Chapter 9 accounts for 7.5% of the discrepancies.
Recurring findings relate to:
- Indicators not aligned with strategic objectives
- Review of rarely used dashboards
- Delays in periodic checks
- Limited use of collected data
The data often exists. But it is not always used to actually drive the business.
An indicator that does not guide a decision becomes a mere piece of documentation.
However, ISO 9001 now requires clear demonstration of the system's effectiveness.
Production and service provision: the gap between theory and practice
Chapter 8 accounts for 7.4% of non-compliances.
The discrepancies observed relate in particular to:
- Uneven application of processes
- Discrepancies between formal procedures and actual practices
- Insufficient follow-up on corrective actions
- Partial disclosure of client results
Here, the problem is not the existence of procedures. It lies in their appropriation and operational control.
The audit then reveals a discrepancy between the system described and the reality on the ground.
What these findings reveal
These three chapters have one thing in common: they deal with the steering of the management system.
The differences are no longer mainly documentary. They are organizational.
They translate:
- A lack of skill structuring
- Insufficient use of data
- Heterogeneous operational control
With the 2026 revision of ISO standards approaching, these dimensions are becoming even more strategic. The standard reinforces expectations in terms of consistency, traceability, and alignment between strategy and operational management.
How can these gaps be reduced in a sustainable manner?
The most mature organizations share several common practices:
- Dynamic skills management linked to processes and risks
- Indicators selected to guide, not to fill a table
- Structured workflows for tracking actions
- Centralization of quality information
The digitization of the management system plays a key role here. It makes traceability more reliable, improves managerial visibility, and facilitates data exploitation.
At Avanteam, we support organizations in this structuring process in order to transform the quality system into a genuine management tool, serving performance and sustainable compliance.
Contact us for more information.
Source: Afnor Certification ISO 9001 & ISO 14001 study
