As soon as nonconformity is detected within the organization, it must be recorded. The ISO 9001 Standard requires that any non conforming product would be identified and controlled. The purpose is to prevent using this product or delivering it to your customers. The process of identifying and controlling shall be documented within a procedure. The documentation of the treatment must include authorities and responsibilities.