Leadership Nonconformities: 9 Costly Ways Leaders Cause Them

ISO 9001:2026 Leadership Series · Part 3

Trace. Own. Correct.

The finding was written against a shipping clerk. A lot that failed final inspection went out the door on the last day of the quarter, and the auditor’s evidence was clear: the release record was signed, the nonconforming tag was removed, and the shipment left. The corrective action named “human error,” retrained the clerk, and closed in a week.

Three months later, it happened again. Different clerk. Same last day of the quarter.

When MSI asked one more question, the real cause surfaced in a two-word text message from a vice president: “Ship it.” The clerk never caused the nonconformity. The clerk just signed for it.

This is what we call leadership nonconformities: problems that show up on the shop floor, in the lab, or at the customer, but start with a decision, a signal, or a silence from the top. In 28 years of ISO consulting and 200+ audits attended, MSI has seen the same pattern again and again. The finding lands on the person closest to the work. The cause sits several levels above it.

“There is nothing worse than leadership causing the nonconformities. Top management should know the quality policy as if they wrote it and speak of it every day.”
— Diana Lynn, Founder and President, MSI

In Part 1 of this series, we covered the 12 leadership duties of ISO 9001:2026 Clause 5.1.1 and the Person. Role. Record. approach to accountability. In Part 2, we separated the quality policy from the mission statement. Part 3 looks at the other side: what happens when those duties aren’t demonstrated, how leadership nonconformities hide inside ordinary findings, and how to trace, own, and correct them.

Why Leadership Nonconformities Hide in Plain Sight

Very few audit reports say “top management caused this.” Leadership nonconformities rarely look like leadership problems when they first appear. They look like a missed calibration, an overdue corrective action, an untrained operator, or a skipped contract review. The paperwork points to the process. The pattern points upward.

There are three reasons leadership nonconformities stay hidden:

• Root cause analysis stops too early. Teams ask “why” until they reach a person, then write “human error” and retrain. ASQ’s guide to the five whys exists precisely to push past the first convenient answer, but most teams stop at the third why because the fourth one points at the boss.
• People closest to the work can’t name the cause safely. If a supervisor knows the real reason was a VP’s instruction, writing that down feels risky. So the record says something safer.
• Leaders rarely see the downstream effect. A budget freeze in January becomes an overdue calibration in May and a customer complaint in August. By then, no one connects them.

W. Edwards Deming estimated that most problems in an organization belong to the system, which management controls, rather than to individual workers. ASQ’s summary of Deming’s 14 points captures the idea well. ISO 9001:2026 turns that idea into a requirement: Annex A.5.1 notes that ethical behaviour in decisions, actions, and interactions can impact all aspects of quality. Leadership decisions are not separate from the quality system. They are inputs to it.

How Registrars Recognize Leadership Nonconformities

Registrars interview top management during certification and surveillance audits, and Clause 5 is assessed directly. But experienced auditors also recognize leadership nonconformities indirectly, by noticing the pattern behind findings in other clauses.

Having been at 200+ audits, MSI has seen these patterns first-hand from the registrar’s side of the table. The signals are consistent:

1. The same type of finding repeats across different departments.
2. Corrective actions close quickly but the problem comes back.
3. Root causes say “human error,” “oversight,” or “lack of training” again and again.
4. Management review records list data but show no decisions.
5. Leaders describe the quality system in general terms but can’t name current objectives or their status.
6. Employees can’t explain the quality policy, and neither can their managers.

When three or more of those signals appear together, the conversation in the closing meeting usually turns to Clause 5.1. That is how leadership nonconformities move from hidden to written.

The goal here isn’t to avoid a finding. It is to recognize that a system with leadership nonconformities doesn’t work in practice, regardless of what any auditor writes. For more on the patterns auditors themselves fall into when they miss these signals, see MSI’s article on internal audit mistakes.

Nine Leadership Nonconformities MSI Sees Most Often

Here are the nine leadership nonconformities that show up most often in MSI’s experience. For each one, you’ll see what it looks like, where the finding usually lands, the leadership duty behind it, and how to fix it.

1. Not knowing the quality policy

What it looks like: An auditor asks the plant manager what the quality policy says. The manager points to the framed copy on the wall. Later, three operators give three different answers, or none at all.

Where the finding lands: Clause 7.3 a), awareness of the quality policy, or Clause 5.2.2, which requires the policy to be communicated and to be implemented, understood, and applied within the organization.

The leadership root cause: Clause 5.1.1 a) and d). If leaders don’t know the policy, they can’t communicate it, and they can’t make decisions that reflect it. Employees take their cues from what leaders talk about, not from what’s on the wall.

The fix: This is the one Diana raises on every client project. Top management should know the quality policy as if they wrote it, because in most cases they did, and should speak of it every day. We’ll show you a simple daily routine for this later in the article. For a full look at what the policy must say under ISO 9001:2026, including how to address quality culture and ethics, see MSI’s guide to the ISO 9001 quality policy.

2. Objectives that contradict the strategy

What it looks like: The strategic plan says “become the preferred supplier for regulated customers.” The quality objectives track only internal scrap. Meanwhile, the sales team is rewarded purely on volume.

Where the finding lands: Clause 6.2, quality objectives, or Clause 5.1.1 a), compatibility with strategic direction.

The leadership root cause: Leaders set business goals and quality goals in separate meetings with separate people. When the two conflict, the business goal wins by default, and quality becomes the department that says no.

The fix: Review quality objectives in the same meeting as strategic objectives. Ask one question of each: “Does this support where we said we’re going?” MSI’s guide to ISO 9001 quality objectives shows how to write objectives leaders will actually use.

3. “Ship it anyway”

What it looks like: The scenario that opened this article. A lot fails inspection, and someone with authority pushes it out the door without a documented concession or customer approval.

Where the finding lands: Clause 8.6, release of products and services, or Clause 8.7, control of nonconforming outputs. ISO 9001:2026 is explicit that release shall not proceed until planned arrangements are satisfactorily completed, unless approved by a relevant authority and, as applicable, by the customer.

The leadership root cause: Clause 5.1.1 i), promoting quality culture and ethical behaviour, which is new in 2026. Of all leadership nonconformities, this one does the most damage to culture, because everyone involved learns what really matters when the quarter is on the line.

The fix: Make the concession path legitimate and visible. If a lot genuinely can ship under concession, document who decided, why, and what the customer agreed to. If it can’t, leaders must back the person who said no. MSI’s article on ISO 9001:2026 ethics requirements covers this in depth, and Diana’s list of unethical business practices gives teams real examples to discuss.

4. Starving the system of resources

What it looks like: Calibration is overdue because the outside lab’s invoice is waiting for approval. Training records are incomplete because the trainer was reassigned. The quality manager is also the safety manager, the HR coordinator, and the backup forklift driver.

Where the finding lands: Clause 7.1.5, monitoring and measuring resources; Clause 7.2, competence; or Clause 7.1, resources in general.

The leadership root cause: Clause 5.1.1 c), ensuring resources are available. The finding names the calibration record. The cause is a resource decision, or a decision that was never made.

The fix: Put resource requests on the management review agenda with a decision deadline. A request that sits for 90 days is a decision by default. MSI’s guide to the control of monitoring and measuring equipment shows how calibration gaps typically develop.

5. Skipping or postponing internal audits

What it looks like: The internal audit schedule slips quarter after quarter because “we’re too busy right now.” By the time the registrar arrives, half the processes haven’t been audited in two years.

Where the finding lands: Clause 9.2, internal audit.

The leadership root cause: Clauses 5.1.1 c) and e). Leaders decide what gets time. When audits slip, it’s because leadership didn’t protect them. Registrars across the industry expect every requirement of the standard to be internally audited annually, and as Diana puts it plainly:

“If you are not doing internal audits on an annual basis, you are not compliant.”
— Diana Lynn, Founder and President, MSI

The fix: Treat the audit program like payroll: it runs on schedule. If internal resources are thin, outsource. Performing internal audits is MSI’s core service, through internal audit services and the ongoing SureResults program. MSI’s guide to internal audit planning shows how to build a realistic annual schedule.

6. Management reviews that make no decisions

What it looks like: A two-hour meeting with 40 slides of charts. Everyone nods. The minutes say “reviewed.” No owners, no due dates, no resource decisions.

Where the finding lands: Clause 9.3.3, management review results, which requires decisions related to improvement opportunities, needed changes to the system, and resource needs.

The leadership root cause: Clause 5.1.1 e) and l). Management review is where leaders demonstrate accountability. A review with no decisions is a record that accountability didn’t happen.

The fix: End every agenda item with a decision, even if the decision is “no action, monitor.” MSI’s free guide, 5 Steps to a Decision-Ready ISO Management Review, walks through the structure, and MSI’s management review procedure guide covers the documentation.

7. Changes made without planning

What it looks like: A reorganization moves the quality manager under operations. A new ERP goes live over a weekend. A product line moves to a second site. Nobody asks what happens to the quality system until something breaks.

Where the finding lands: Clause 6.3, planning of changes, which requires changes to the quality management system to be carried out in a planned manner, considering purpose and consequences, integrity of the system, resources, responsibilities, communication, and how effectiveness will be evaluated.

The leadership root cause: Clause 5.3 f), which assigns responsibility for maintaining the integrity of the system when changes are planned and implemented. Strengthened management of change is one of the main changes ISO lists for the 2026 edition. Big changes are almost always leadership decisions, so leadership nonconformities in this area are common.

The fix: Add a one-page quality impact check to every major business change, signed by the person responsible for system integrity. MSI’s article on regulatory change management covers the broader discipline.

8. Bypassing the process for “special” cases

What it looks like: The CEO promises a key customer a custom spec over dinner. The order goes straight to production, skipping contract review. Nobody confirms the shop can actually meet the spec.

Where the finding lands: Clause 8.2.3, review of requirements for products and services.

The leadership root cause: Clause 5.1.1 j), promoting the process approach. When leaders bypass processes, they teach everyone that processes are optional for important work, which is exactly the work where they matter most.

The fix: Leaders route their own commitments through the same process as everyone else, and say so out loud. MSI’s sales management procedure article shows how to design contract review that’s fast enough for leaders to actually use.

9. Shooting the messenger

What it looks like: An inspector reports a recurring defect in a leadership meeting and gets questioned about why their numbers are “always negative.” Next month, the report is shorter. The month after, it’s gone.

Where the finding lands: Often nowhere, at first. That’s what makes it dangerous. Eventually, it lands in Clause 10.2 when a problem that was known internally surfaces as a customer complaint.

The leadership root cause: Clause 5.1.1 i) and f), promoting quality culture and directing and supporting people to contribute. It also affects Clause 7.3 e), which in 2026 requires people to be aware of the organizational quality culture and ethical behaviour.

The fix: Thank people publicly for bad news delivered early. Track the number of concerns raised as a positive indicator. MSI’s guide to psychological safety at work and the article on auditing quality culture both go deeper.

Leadership Nonconformities at a Glance

Save this table. It translates the finding you see into the leadership duty you need to fix.

How to Trace Leadership Nonconformities in Root Cause Analysis

ISO 9001:2026 Clause 10.2.1 requires the organization to determine the causes of a nonconformity and whether similar nonconformities exist or could occur. That second part is where leadership nonconformities get caught. A leadership cause almost never produces just one problem.

Most root cause methods, including the approaches ASQ describes in its guide to root cause analysis, work fine for this. What changes is the question you ask at the end. MSI recommends adding a “leadership layer” to every significant corrective action:

The leadership layer, step by step

1. Finish the normal analysis. Use five whys, a fishbone diagram, or whatever method your procedure specifies.
2. Ask the leadership question. “What decision, priority, or signal from leadership made this the easy path?”
3. Check for repeats. Search open and closed corrective actions for the same leadership cause. Clause 10.2.1 b) 3) asks you to look for similar nonconformities.
4. Assign it to the right level. If the cause is a leadership decision, the corrective action owner should be a leader. A clerk can’t fix a VP’s priorities.
5. Take it to management review. Leadership causes belong on the agenda, where Clause 9.3.2 d) 1) already requires trends in nonconformities and corrective actions.
6. Verify effectiveness at the right time. If the cause was end-of-quarter pressure, check effectiveness at the end of the next quarter, not next week.

For a complete corrective action structure, see MSI’s corrective action procedure guide. If you want a guided, step-by-step build, MSI’s ISO 9001 corrective action procedure course walks you through it.

Why “human error” is rarely the answer

“Human error” describes what happened, not why. If two different clerks made the same mistake at the same time of the quarter, the cause isn’t the clerks. Experienced auditors treat repeated “human error” root causes as a signal to look higher. Leadership nonconformities are often hiding one level above the last “why” anyone was comfortable asking.

Know It as If You Wrote It: A Daily Quality Policy Routine for Leaders

Of all nine leadership nonconformities, not knowing the quality policy is the easiest to prevent and the one that quietly enables the other eight. A leader who carries the policy in their head makes different decisions at 4:45 p.m. on the last day of the quarter.

Here is the routine MSI recommends. It takes less than five minutes a day.

Morning: Recite it

Before the first meeting, say the policy without reading it. If you can’t, read it until you can. A good policy is short enough for this. If yours isn’t, that’s useful information too.

Midday: Use it in a decision

Pick one decision you made today, whether it’s a schedule change, a supplier choice, or a hiring call, and say out loud which part of the policy it supports. “We’re holding this lot because our policy commits us to meeting customer requirements.” This is Clause 5.1.1 d) in action: communicating the importance of conforming to the quality management system.

Afternoon: Ask someone else

Ask one employee what the quality policy means for their job. Don’t quiz them. Listen. Their answer tells you whether Clause 7.3 a) is working and whether your quality culture matches what you think it is.

Weekly: Connect it to a number

Once a week, link one line of the policy to one quality objective and its current status. This keeps the policy from becoming a slogan and keeps Clause 5.1.1 a) alive.

A simple measure: at your next management review, ask each member of top management to state the quality policy from memory. Record the result. Repeat it at the following review. Leaders who do this consistently find that awareness throughout the organization rises right behind them.

Using Management Review to Surface Leadership Nonconformities

Management review is the one meeting where top management is required to look at the system as a whole. That makes it the best place to catch leadership nonconformities before they become customer problems.

Add three questions to your standing agenda:

1. Which corrective actions this period had a leadership cause? If the answer is always “none,” your root cause analysis may be stopping too early.
2. Which resource requests are still waiting for a decision? Make the decision in the room.
3. Where did a leadership decision conflict with the quality policy? This is the hardest question. It’s also the most valuable.

Clause 9.3.2 already requires inputs on nonconformity and corrective action trends, audit results, and the adequacy of resources. These questions simply make sure the leadership causes inside those inputs are visible. MSI’s article on the benefits of management review explains why this meeting matters so much more than most teams realize.

MSI promotes management review as the better way to start planning an ISO 9001:2026 transition, too. A quick “End in Mind” management review puts the data you already have on the slides and marks missing data TBD with a date. Leadership sees immediately where the gaps are and who will close them.

Measuring Progress Against Leadership Nonconformities

You can’t manage what you don’t track. These indicators help leadership teams see whether leadership nonconformities are shrinking or simply going underground.

Notice the last indicator. In the first months of this work, more reports is good news. It means people trust that raising a concern is safe. A sudden drop to zero is usually a warning sign, not a success.

Why ISO 9001:2026 Raises the Stakes on Leadership Nonconformities

ISO published ISO 9001:2026 on September 16, 2026, with greater emphasis on leadership, quality culture, and ethical behaviour. ISO’s own overview of what businesses need to know about ISO 9001:2026 highlights that Clause 5.1 clarifies what leadership responsibility means in practice.

Three changes make leadership nonconformities easier to see and harder to excuse:

• Quality culture and ethical behaviour are now leadership duties. Clause 5.1.1 i) is new, and Clause 7.3 e) extends awareness of culture and ethics to everyone. “Ship it anyway” now conflicts with explicit requirements at both levels.
• Management of change is strengthened. Leadership-driven changes that skip planning are more visible under the 2026 edition.
• Risks and opportunities are separated. Management review must now evaluate the effectiveness of actions on each, giving leaders less room to treat risk as an afterthought.

Organizations certified to ISO 9001:2015 need to transition, and certification bodies report a deadline of September 30, 2029. MSI’s article on the ISO 2026 transition deadline lays out the timeline, and the free ISO Transition Risk Scorecard gives you a fast read on where you stand. For the complete list of revisions, see MSI’s summary of ISO 9001:2026 changes.

Internal auditors also need to know how to spot leadership nonconformities. ISO 19011:2026, the guideline for auditing management systems, supports auditors in evaluating the system as a whole, not just individual records. ISO points to ISO 10010:2022 for guidance on understanding and improving quality culture.

Where ISO Consulting Helps With Leadership Nonconformities

Leadership nonconformities are hard to see from inside. The people best placed to name them often report to the people who caused them. That’s where an outside perspective helps.

MSI has provided ISO consulting for 28 years across manufacturing, technology, medical device, healthcare, government, and other regulated industries, with 80+ certifications supported, 200+ audits attended, and 600+ professionals trained. Our role is not to assign blame. It is to help leaders see the connection between their decisions and their system’s results, and to build habits that keep leadership nonconformities from returning.

Depending on what you need, MSI’s ISO consulting can support a full implementation through SurePath, ongoing internal audits through SureResults, or a senior-leadership diagnostic through The Portrait. For a deeper look at what accountability at the top means, read MSI’s article on executive accountability, and for the broader foundation, see leadership and commitment.

Frequently Asked Questions About Leadership Nonconformities

Can an auditor write a nonconformity against top management?

Is “human error” an acceptable root cause?

Who should own a corrective action with a leadership cause?

Does ISO 9001:2026 require leaders to know the quality policy?

What is the most common leadership nonconformity?

How quickly can leadership nonconformities be fixed?

The Bottom Line: Trace. Own. Correct.

Every organization has leadership nonconformities. The difference between systems that work in practice and systems that only look good on paper is whether leaders are willing to see them.

Trace each repeat finding one level higher than feels comfortable. Own the cause when it leads back to a decision at the top. Correct it at the level where it started. And start tomorrow morning by saying your quality policy from memory, as if you wrote it.

Ready to build these habits into your leadership team? The ISO 9001:2026 Leadership Commitment Workshop is available now as an online course you can start today, and anyone who enrolls before the official October 21 launch also receives the Leadership and Commitment QuickStart. For procedures that make the right path the easy path, start at MSI’s ISO Procedure Templates and Guides hub. To talk through your own findings, call MSI at 760-434-9141.

Leadership Series: Part 1: Leadership in ISO 9001:2026 Is Not What You Learned in Business School · Part 2: Quality Policy vs Mission Statement · Part 3: When Leadership Causes the Nonconformities