22ISO 22000 Revision Checker

Home / Clause record / 8.9.3

8.9.3

Control of product and process nonconformities: corrective actions

ClauseUnchanged titleRetrieved 2026-10-19Last updated: 2026-10-19

The requirement that applies today

The organization evaluates the need for corrective action when a critical limit or action criterion is not met, and documents actions that find and eliminate the cause, prevent recurrence and return the process to control. The actions include reviewing nonconformities from complaints and inspections, reviewing monitoring trends that suggest lost control, determining causes, implementing action, documenting results and verifying effectiveness. Records of all corrective actions are kept.

ISO 22000:2018, 8.9.3 Control of product and process nonconformities: corrective actions; ISO/DIS 22000:2026, 8.9.3.

What the draft does

Unchanged title: The public contents keep 8.9.3 at the same number and title. No structural change is shown. The new 10.3 makes complaints a named input to this work.

Source: public contents and foreword at 8.9.3, retrieved 2026-10-19.

Why this clause matters

The clause is a small root cause programme. The most common weakness is a corrective action that treats the symptom, such as retraining, without looking at why the system allowed the error. Complaints are explicitly part of the input, which connects this clause to the new complaints requirement.

Suggested evidence to discuss with your auditor

For 8.9.3, these are the artefacts we suggest discussing with your auditor. The standard publishes no evidence list, so this is our reading, not a requirement.

  • Corrective action records with a cause, an action and an effectiveness check
  • Evidence that trends, not only single events, triggered action
  • Complaint and inspection findings reviewed for corrective action

Where systems usually fall short

  • Root cause recorded as "human error"
  • Actions closed without checking whether they worked

How to prepare

Take the last three corrective actions and ask "why" five times on each. If the answer stops at the operator, the cause is probably in the process, the training or the resourcing. Rewrite the action at that level.

Dates

Applies todayISO 22000:2018 as amended in 2024, the edition published today; certificate treatment after a new edition depends on the transition arrangements
DraftISO/DIS 22000:2026, DIS ballot closed 2026-07-29
Planning date2027-09-12 (estimate, not an ISO date)

Cross-references

8.9.2, 8.9.4, 9.1.2, 10.2

Source

Clause 8.9.3. Current edition: ISO 22000:2018. Draft: ISO/DIS 22000:2026. Retrieved 2026-10-19. The full DIS text for 8.9.3 is sold by ISO and not held here; the sources page lists what is.

Not legal advice; does not certify; our words, not the standard's, and the planning date is an estimate.