 An organization applying for ISO 9001 certification is audited based on an extensive sample of its sites, functions, products, services, and processes.The auditor presents a list of problems (defined as "nonconformities", "observations", or "opportunities for improvement") to management.If there are no major nonconformities, the certification body issues a certificate.