Non-Conforming Part Machining: SCPM's Corrective Steps
A non-conforming part on a CNC cell rarely stays a single bad piece for long. If it slips past the operator, it can ride into a shipment, land on a customer's assembly line, and come back as a field return with your shop's name on the paperwork. Non-conforming part machining is only half about cutting metal to print. The other half is what happens in the hours after someone catches a dimension out of tolerance. At Summit City Precision Machining in Fort Wayne, Indiana, we treat that response as a defined process, not a judgment call made at the machine. Here is how it runs, from containment through the corrective action and verification that ISO 9001 clause 10.2 expects.
Table of Contents
Quick Takeaways
Key Insight | Explanation |
|---|---|
Containment comes first | Quarantine suspect parts and check what has already left the building before you debate the cause. Shipped parts are the expensive problem. |
A nonconformance is any missed requirement | It can be a dimension, a missing cert, a wrong print revision, or a skipped inspection step. Paperwork failures count. |
Write the NCR so a stranger can act on it | State the requirement affected, what went wrong, the disposition, and what will stop it from happening again. |
Correction is not corrective action | Reworking a bad batch fixes the parts. Only eliminating the root cause stops the next batch from failing the same way. |
Verify the fix on real production | A corrective action is not finished until the next lots show the process holding, and the effectiveness check is recorded. |
Feed trends into management review | Repeated nonconformances on one machine, gauge, or program are a system signal, not a one-off shop problem. |
What Counts as a Nonconforming Part
ISO 9001 defines a nonconformity as any failure to meet a requirement. That requirement can come from the customer's print, a customer-specific document, a regulatory body, the standard itself, or your own procedures. In a machine shop, that definition is broader than most people expect.

In our shop, the trigger is usually a CMM result that falls outside the print tolerance, a go/no-go gauge that will not pass, a visible surface defect, or a process step that was skipped. A missing material certification or a job traveler carrying an old print revision also counts. The part can be dimensionally perfect and still be nonconforming.
Major and minor nonconformances on the shop floor
ISO 9001 separates nonconformances into two groups. A major nonconformance means the quality management system is absent or has broken down so badly that it cannot meet the standard. A minor nonconformance is an isolated failure that does not undermine the system as a whole.
In practice, a single missed first-article check on one job is usually minor. A cell that runs production with no working inspection plan at all is major. The distinction matters because it decides how far up the chain the response has to go.
When the part is fine but the record is not
Some of the most expensive nonconformances we see are documentation failures. A calibration sticker that expired last week, a material cert that does not match the heat lot, or a program revision that never reached the machine are all real requirement misses. They are easy to overlook because the metal looks correct.
Treat paperwork as product. If a document defines the part's acceptance, a missing or wrong document is a nonconformance that needs the same response as a bad dimension.
Containment Before Anything Else
The first hour after a nonconforming part is found is about stopping the bleeding. Containment means isolating suspect material so it cannot be shipped, assembled, or run again by mistake. It is not the same as fixing the cause, and it should never wait for the cause to be understood.
Start by physically quarantining the parts. Move them to a marked area, tag them with a hold status, and make sure the job's remaining work in process is checked for the same condition. A red tag on a part that is still sitting next to a finished pallet does nothing.
Checking what has already left the building
Next, look backward. Pull the lot history, the shipping records, and any work in process that came off the same machine, fixture, or tool during the suspect window. The question is not only which parts are wrong, but which parts could be wrong, and where they went.
A common mistake is stopping at the parts on the table. If a bad offset or a worn tool ran for four hours, the risk includes every part made in that window, including the ones already packed.
Pro tip: Record the time the nonconformance was first detected and the last time the process was known to be good. That window tells your team exactly how far back to search for suspect parts.
Deciding whether the customer needs to know
If suspect parts have shipped, the customer needs to hear about it early and in plain terms. Say what was found, what lots are affected, and what you are doing about it. Waiting until the root cause is known usually makes the conversation worse, not better.
Writing the NCR
A nonconformance report, or NCR, is the document that turns a shop floor problem into something the organization can act on. According to ISO guidance summarized in industry references, an NCR should describe the deviation, explain how it occurred, and show how to prevent it from happening again. If the report only says "part out of spec," it has failed its purpose.
Every NCR we write needs four core elements: the requirement affected, what went wrong, what can be done to prevent recurrence, and the corrective action to be taken. Missing any one of them leaves the next person guessing.
Describing the requirement that was missed
Name the exact requirement. Write the feature, the callout, the tolerance, the revision letter, or the procedure step, not a general phrase like "dimensional issue." A reader who was not on the shift should be able to find the requirement on the print or procedure without asking anyone.
Disposition decisions that need a second signature
The disposition is the decision about what happens to the affected material. Typical options are rework, scrap, return to supplier, or use-as-is with documented customer approval. Use-as-is is the one that needs the most scrutiny, because it means a known deviation is being accepted. That decision should never be made by the operator alone.
Pro tip: Attach the inspection data to the NCR, not just a summary. A CMM report with the actual readings lets the engineer check the disposition in minutes instead of rerunning the inspection.
Root Cause on the Machine Floor
Once the parts are contained, the real work starts. Root cause analysis asks why the nonconformance happened, then asks why that condition existed, until you reach something you can change in the process. Stopping at "operator error" is almost never the answer, because the process allowed the error to reach the part.
A root cause you can't change is a description, not a fix. Keep asking why until the answer is a process, a tool, a setting, or a document.
Asking why until the answer is a process
A typical chain on a five-axis job might look like this. The bore was undersize. The tool offset was wrong. The offset was entered from the wrong sheet. The sheet was not the current revision. The revision control step does not verify the tool table against the traveler. That last link is where the corrective action belongs, not in a reminder to the operator.
Other common roots we investigate include tool wear that was not compensated, fixture locators that were not cleaned, programs revised without a release check, and gauges that drifted outside their calibration interval.
Where the root cause usually sits
Most root causes sit in one of four places: a missing or unclear work instruction, a machine or tool setting that can be changed by the wrong person, a gauge or measurement method that does not catch the problem, or a handoff between shifts or departments. Check those four before you blame an individual.
Corrective Action Versus Correction
This is the distinction that separates a real corrective action from a paperwork exercise. ISO auditing guidance defines correction as action to eliminate a detected nonconformity, while corrective action is action to eliminate the cause of a nonconformity so it does not recur. Rework fixes the parts. Corrective action fixes the process.

Many shops stop at correction. They sort the bad parts, rework what can be saved, and close the report. The problem is that the next batch on the same program fails the same way, and the second NCR looks like the first one because nothing actually changed.
Three response strategies compared
The table below compares the approaches we see most often. The first is fast but leaves the cause in place. The third takes longer but is the only one that prevents recurrence.
Response Approach | What It Fixes | Where It Falls Short |
|---|---|---|
Correction only (sort, rework, or scrap) | The parts already made, and the immediate customer exposure | Does nothing about the cause, so the same nonconformance returns on the next run |
Corrective action with root cause analysis (5 Whys or fishbone review) | The process condition that allowed the nonconformance | Depends on the quality of the investigation, and often ends with training instead of a process change |
Corrective action with a process control change (interlocks, poka-yoke, gauge or fixture change, revised release check) | The cause itself, built into the machine, tool, document, or inspection | Takes more time and cost to implement, and needs verification to prove it worked |
Verifying the Fix
ISO 9001 requires organizations to review the effectiveness of corrective actions, and that review is where many shops quietly drop the ball. A change that was approved and implemented has not been proven. The only proof is production data after the change.
Our verification step asks a specific question: did the nonconformance stop happening under normal running conditions? The answer comes from the next lots, the next inspection results, and any control chart data the process generates. Record the window, the data reviewed, and the result.
Setting the verification window
Set the verification window before you close the NCR. Pick a number of lots or parts that represents real production, not a single showcase run. If the nonconformance happened on a second shift, check second-shift output too. A fix that works only when the engineer is watching does not work.
Feeding repeat problems into management review
Nonconformances and corrective actions belong in the management review, the periodic meeting where leadership looks at the quality system as a whole. A single bad part is an operational event. Three NCRs on the same fixture in one quarter is a pattern that leadership needs to see and fund.
Pro tip: Tag every NCR with the machine, program number, and gauge ID. Within a few months, that simple field will show you which assets generate most of your problems.
ISO 9001 Clause 10.2 in Practice
ISO 9001:2015 clause 10.2 covers nonconformity and corrective action. In plain terms, it requires you to react to the nonconformity, control and correct it, deal with the consequences, determine the root cause, evaluate whether the cause must be eliminated, implement the needed action, and review its effectiveness. Auditors look for the chain from the NCR to the corrective action to the verification.

The clause also expects you to document the nature of the nonconformity, the actions taken, and the results of those actions. An audit trail is only as good as the link between those records. If the corrective action cannot be traced back to a specific NCR, or the NCR cannot be traced to a verification result, the record will not hold up.
What an auditor will ask for
Expect requests for the original NCR, the containment record, the root cause analysis, the approved corrective action, and the verification data. Auditors often pick one closed NCR at random and follow it through the whole chain. Pick a recent one yourself and do the same walk-through before the audit.
Keeping the record useful after it is filed
The record should answer a future engineer's question, not just satisfy an auditor. Keep the NCR number on the process change, the revised work instruction, and the gauge or fixture record it touched. When the same problem appears two years later, that link will save days of investigation.
Frequently Asked Questions
What is the difference between a nonconformance and a defect?
In ISO 9001 terms, a nonconformance is any failure to meet a requirement, and a requirement can include customer, regulatory, or internal procedure requirements. A defect is usually a specific flaw in the product itself. Every defect is a nonconformance, but a nonconformance can exist even when the part physically looks fine, such as a missing certification or an outdated print revision.
Do all nonconforming parts need a formal NCR?
Not every event needs the full process, but every nonconformance should be recorded. A simple, well-documented note for a trivial, isolated issue may be enough, while anything that reaches a customer, repeats, or involves a process failure should get a formal NCR with root cause analysis.
How long should a corrective action take to close?
The timeline depends on the root cause. A containment and rework decision can happen the same day, while a process change involving fixtures, programs, or gauges can take weeks. The NCR should stay open until the verification window confirms the fix, not just until the paperwork is signed.
Can a corrective action be closed if the parts were reworked successfully?
No. Successful rework is correction, and it only addresses the parts already made. A corrective action needs a documented cause and a change that removes it, plus evidence from production that the change works.
Why does a machine shop need to keep corrective action records for a long time?
Customers and auditors often ask about past nonconformances when they review a supplier or investigate a field issue. Records that link each NCR to its cause, change, and verification let you answer those questions quickly and show that the process improved, not just that the paperwork was completed.
We want to hear from you. What is the hardest nonconformance you have had to trace back to a root cause in your own shop, and what finally got you to the real fix?




Comments