A key requirement is not met, or a control has failed systemically.
An isolated lapse that doesn't undermine the overall system.
A potential weakness that could become a nonconformity if ignored.
A conforming process that could still be made better.
The requirement is fully met — nothing to fix.