What IATF 16949 Auditors Flag Most, and What to Check on Your Floor Tomorrow
Which IATF 16949 clauses fail most often? Per the IATF's own chart of global third-party audits (rolling 12 months, data as of 23 Apr 2026), 10.2.3 problem solving leads major nonconformities with a chart value of 563, about twice the next clause (270). Among minors, 8.5.1.5 total productive maintenance leads and 8.5.1.1 control plan is fourth.
Last checked: 20 Oct 2026
For owners of Indian auto-component plants that hold or seek IATF 16949. Published IATF documents only; not certification advice. Your certification body (CB) decides what conforms.
Verified against
- IATF top-10 major and minor nonconformity charts ("© IATF 2026", data as of 23 Apr 2026), published on the VDA QMC IATF statistics page, the quality management centre of the German automotive industry association VDA
- IATF, IATF 16949:2016 Sanctioned Interpretations, November 2025 (SI 1–30)
- IATF, IATF 16949:2016 FAQs, June 2026
- IATF, Rules 6th Edition Sanctioned Interpretations, June 2026
- The IATF 16949 standard itself is sold by national associations and was not read; clause titles below are the ones printed on the IATF charts.
- Checked 20 Oct 2026.
The IATF top-10 lists, 12 months to 23 Apr 2026
The charts rank findings from all stage 2, surveillance, recertification and transfer audits worldwide, on-site and remote, over a rolling 12-month window, per the VDA QMC page (data as of 23 Apr 2026).
Each bar carries a number with no unit. The VDA QMC page text says the charts show the "percentage share" of each top-10 nonconformity among all majors or minors in the period, but a share cannot exceed 100 and the major chart prints 563 (checked 20 Oct 2026). The unit is not stated, so this page quotes the values exactly as printed and uses them only to rank clauses within one chart.
The full rows are in the CSV download.
| Rank | Major nonconformities: clause | Value printed on major chart (no unit shown) | Minor nonconformities: clause | Value printed on minor chart (no unit shown) |
|---|---|---|---|---|
| 1 | 10.2.3 Problem solving | 563 | 8.5.1.5 Total productive maintenance | 3.333 |
| 2 | 10.2.1 Nonconformity and corrective action | 270 | 6.2.2.1 Quality objectives, supplemental | 3.329 |
| 3 | 8.3.5.2 Manufacturing process design output | 167 | 8.3.5.2 Manufacturing process design output | 3.187 |
| 4 | 7.1.5.1.1 Measurement systems analysis | 155 | 8.5.1.1 Control plan | 3.036 |
| 5 | 6.1.2.3 Contingency plans | 145 | 8.5.1.3 Verification of job set-ups | 2.909 |
| 6 | 8.5.1.1 Control plan | 142 | 8.5.1.2 Standardised work, operator instructions | 2.692 |
| 7 | 9.1.1.1 Monitoring and measurement of manufacturing processes | 141 | 10.2.4 Error-proofing | 2.608 |
| 8 | 8.5.1.5 Total productive maintenance | 116 | 7.1.5.3.1 Internal laboratory | 2.545 |
| 9 | 9.1.2.1 Customer satisfaction, supplemental | 115 | 8.3.3.3 Special characteristics | 2.453 |
| 10 | 8.5.1.3 Verification of job set-ups | 109 | 8.5.1 Control of production and service provision | 2.258 |
Source: IATF charts on the VDA QMC page, data as of 23 Apr 2026. Values are copied exactly as printed; the minor chart writes them as "3.333", "3.329" and so on, and does not say whether the dot is a German thousands separator or a decimal point.
Four clauses appear on both lists: 8.3.5.2 process design output, 8.5.1.1 control plan, 8.5.1.3 set-up verification and 8.5.1.5 TPM, per the IATF charts (23 Apr 2026).
Clause 8.7 (control of nonconforming outputs) and 9.2.2.3 (manufacturing process audit) do not appear on either top-10 chart (checked 20 Oct 2026). Both still feed 10.2.3, because problem solving starts with containment.
India held 7,820 IATF 16949 certificates as of 23 Apr 2026, second only to China's 63,293, per the same VDA QMC page.
What to check on your floor tomorrow
Editorial floor checks, one per top clause; not the clause text.
| Clause | Walk to | Ask or look for | Red flag |
|---|---|---|---|
| 10.2.3 Problem solving | Last three customer complaints | Containment, root cause, systemic action, effectiveness check, updated PFMEA and control plan | 8D closed with "operator retrained" only |
| 10.2.1 Corrective action | Internal NC log | Same defect raised twice in 12 months | Repeat NCs with new numbers |
| 8.3.5.2 Process design output | One recent new part | PFMEA, control plan, flow chart and work instructions that match the running line | Documents copied from a sister part |
| 7.1.5.1.1 MSA | Gauges named in the control plan | A study for each gauge type or gauge family | Gauge on the plan with no study |
| 6.1.2.3 Contingency plans | Your biggest press or CNC | Written plan for its breakdown, a power cut, a cyber-attack; date of last test | Plan never tested |
| 8.5.1.1 Control plan | Any running operation | Frequency and sample size on the plan versus the check sheet at the machine | Check sheet fewer than the plan |
| 9.1.1.1 Process monitoring | Capability studies | Cpk tracked on special characteristics | Study done only at PPAP |
| 8.5.1.5 TPM | Maintenance room | Planned maintenance done versus scheduled, spares for key machines, MTBF or downtime trend | Plan exists, completion not measured |
| 8.5.1.3 Set-up verification | Next changeover | First-off approval recorded before the lot runs | Lot running, first-off unsigned |
| 8.5.1.2 Standardised work | Operator station | Instruction at the station, in a language the operator reads | Instruction in the office file |
On 10.2.3, the requirement is public: SI 20 (issued December 2020, still in the November 2025 SI list) adds "which prevent(s) recurrence" and lists six elements, from containment to "updating the appropriate documented information (e.g., PFMEA, control plan)".
On 6.1.2.3, SI 3 (revised July 2021, in the November 2025 SI list) names key equipment failures, utility interruptions, cyber-attacks, pandemics and labour shortages, and asks for periodic tests "(e.g. simulations, as appropriate)" and an annual review with top management.
SI 3 also asks for a check that product still meets specification after a restart following an emergency stop, where regular shutdown was not followed. In an Indian plant, an unplanned grid trip on a press line is that case.
On 7.1.5.1.1, the IATF FAQ (June 2026) says a study on each single piece of equipment is not required: instruments with the same characteristics "can be grouped" and a sample instrument used.
On 8.5.1.5, the FAQ says "periodic overhaul" is rework of tooling and equipment once regular maintenance is no longer enough, "as detected using Mean Time Between Repairs or other similar metrics".
On 8.5.1.3, first-off/last-off validation is required only "when it is applicable and appropriate"; where it is not done, "there is no requirement to maintain records", per the IATF FAQ (June 2026).
On 9.2.2.3, "all manufacturing processes must be audited on all shifts over a three-year cycle", and the three-year frequency is a minimum "intended for low risk and fully compliant" processes, per the IATF FAQ (June 2026).
The clock after a finding
The IATF Rules 6th Edition, effective 1 Jan 2025, set these clocks (Rules Sanctioned Interpretations, June 2026).
| Event | Time limit (calendar days) | Source |
|---|---|---|
| Client response to a major NC | 15 | Rules 6th Ed. SI (June 2026), 5.11.3.1 |
| Client response to a minor NC | 60 | same |
| On-site special audit to verify systemic corrective action for a major | within 90 of the closing meeting | Rules SI, 5.11.4 |
| CB decision on suspension once decertification starts | within 15 | Rules SI, 8.3 |
The certificate "shall be suspended" if the decertification process is tied to an audit with one or more major nonconformities confirmed by a technical reviewer, per Rules SI 8.3 (June 2026).
The CB must notify the IATF oversight office if no major is written where a client misses IATF OEM quality and delivery targets, per Rules SI 5.12 b). Poor customer scorecards can turn into a major on their own.
A worked ₹ example: one major on problem solving
All figures are assumptions for illustration; your CB quote and wage rates will differ.
| Item | Assumption | ₹ |
|---|---|---|
| Special audit, 1 auditor-day plus travel | assume ₹45,000 per day all-in | 45,000 |
| Re-doing three 8Ds properly | assume 3 engineers × 4 days × ₹4,000/day | 48,000 |
| 100% sorting during containment | assume 2 inspectors × 3 shifts × 10 days × ₹800/shift | 48,000 |
| Total | 1,41,000 |
The larger risk is not this bill but the customer. What one escalated complaint costs is priced on the PPM escalation page, and the owner's wider risk list is on the auto supplier risks page.
What cameras do not answer
IATF 16949 does not name CCTV, and the camera questions that come up in OEM audits are on the IATF audit cameras page.
Footage helps only where the question is "did it happen": whether the first-off was checked before the lot ran (8.5.1.3), or how long a key machine stood before restart (6.1.2.3).
Where Mama fits
Mama reads the cameras a plant already has and sends the owner a short note each morning on machines: which ran, which stood idle, and for how long. That downtime record can feed a TPM trend (8.5.1.5); it watches machines, not named people. The money side of machine hours is on the auto-component machine-hours page. Leave an email or phone in the form below.
FAQ
What are the most common IATF 16949 nonconformities?
Per the IATF chart for the 12 months to 23 Apr 2026, majors are led by 10.2.3 problem solving, 10.2.1 corrective action and 8.3.5.2 process design output (chart values 563, 270 and 167, no unit shown); minors by 8.5.1.5 TPM, 6.2.2.1 quality objectives and 8.3.5.2.
How long do you have to respond to a major nonconformity in IATF 16949?
Fifteen calendar days for the response, and the CB verifies systemic corrective action on site within 90 days of the closing meeting, per IATF Rules 6th Edition SIs (June 2026).
Must the manufacturing process audit cover every shift?
Not in one audit, but every manufacturing process must be audited on all shifts within a three-year cycle, more often if risk or performance requires it, per the IATF FAQ (June 2026).