ISO 9001 Audit Report Template: Structure and Examples for 2026
The audit report is the part of an audit that outlives the audit. It is what process owners act on, what top management reviews and what the next auditor reads first. This ISO 9001 audit report template is built for audits against ISO 9001:2026, published in September 2026, and works for internal, supplier and pre-certification audits.
What makes an audit report useful
- Objective: every finding rests on verifiable evidence. ISO 9001:2026 defines an audit in clause 3 as a systematic, independent process for obtaining evidence and evaluating it objectively.
- Clear: a process owner can understand the finding without the auditor in the room.
- Actionable: nonconformities state the requirement and the gap, so the owner can find the cause.
- Balanced: strengths and good practice are recorded alongside problems.
- Connected: results reach the relevant managers (9.2.2 c) and feed management review, where audit results are a required input (9.3.2 d).
The ISO 9001 audit report template, section by section
1. Executive summary
Often the only part senior managers read. Keep it to half a page:
- overall conclusion on conformity and effectiveness of the audited scope;
- number of major and minor nonconformities and opportunities for improvement;
- the one or two issues that most need management attention;
- notable strengths;
- recommendation, for example "ready for certification audit" or "follow-up audit required".
2. Audit details
| Audit reference | IA-2026-07 |
| Audit type | Internal / supplier / pre-certification |
| Dates and sites | 14 to 15 October 2026, Casablanca plant |
| Objectives | Verify conformity of production and the new risk and opportunity process to ISO 9001:2026 |
| Criteria | ISO 9001:2026, QMS manual rev. 9, customer specification CS-12 |
| Scope | Production, maintenance, quality control; clauses 6.1, 7.1.5, 8.5 to 8.7 |
| Audit team and auditees | Names and roles |
| Impartiality | Confirmation that no auditor audited their own area |
Clause 9.2.2 a) asks you to define objectives, criteria and scope for each audit, so state all three explicitly. Clause 9.2.2 b) asks for objectivity and impartiality; a one-line confirmation saves an argument later.
3. Findings
Strengths and good practice
Record specific examples: "First-off inspection records on all four CNC cells complete and signed for the 20 jobs sampled."
Nonconformities
Each nonconformity needs three parts:
- Requirement: the clause, procedure or customer requirement.
- Evidence: what you saw, read or were told, with references.
- Statement: the gap between the two.
Grade each one:
- Major: a required element is missing or has broken down, or nonconforming product is likely to reach customers.
- Minor: an isolated lapse in an otherwise working process.
Example nonconformity statements
- Clause 7.1.5.2: "Measuring equipment shall be calibrated at specified intervals. Gauges G-14 and G-22 used at final inspection were 3 and 5 months past their calibration due dates (calibration register, viewed 14 October). No assessment of the validity of previous results was recorded." Minor.
- Clause 6.1.2: "Risks shall be analysed and evaluated and the effectiveness of actions evaluated. The risk register lists 18 risks with no evaluation against criteria and no effectiveness review for any completed action." Major if the whole process is missing.
- Clause 4.1: "The organization shall determine whether climate change is a relevant issue. No determination was found in the context analysis dated March 2025." Minor.
Opportunities for improvement
Suggestions where requirements are met but something could work better. Label them clearly so nobody treats them as mandatory.
4. Conclusion
State the degree of conformity with the criteria, the effectiveness of the audited processes in achieving their intended results, and any limits to the audit, such as areas not sampled.
5. Follow-up and distribution
List agreed due dates for corrective action plans, who receives the report and when it will be presented at management review. Clause 9.2.2 d) asks for correction and corrective action without undue delay, so set dates in the report rather than leaving them open.
Common reporting mistakes
- Findings without evidence ("document control is weak").
- Citing clauses that no longer exist, such as clause 10.3 for continual improvement, which ISO 9001:2026 consolidated into 10.1.
- Citing "6.1" for everything instead of 6.1.2 for risks or 6.1.3 for opportunities.
- Mixing opportunities for improvement into the nonconformity list.
- Reports issued weeks after the closing meeting.
From report to action
A report only matters if findings get fixed. Each nonconformity should become a tracked corrective action with an owner, a root cause, a due date and an effectiveness check, ideally in CAPA management software linked to the finding. Reference the exact document revisions you sampled, which is easy when evidence lives in document control software.
In ISO audit software such as SmartISO, the report is generated from the findings you record during the audit, so the structure above is applied consistently and every nonconformity becomes an action automatically. See also our ISO 9001:2026 change guide before auditing against the new edition.
Frequently asked questions
How long should an audit report be?
As long as it needs to be to be clear. A focused process audit may fit on three pages; a full system audit with many findings will be longer.
Who reads the audit report?
Top management reads the summary, process owners act on the findings, and the audit programme manager uses the whole report to plan future audits.
What is the difference between a nonconformity and an opportunity for improvement?
A nonconformity is a requirement not fulfilled. An opportunity for improvement is a suggestion where the requirement is met but performance could be better.
Should audit reports reference ISO 9001:2026 clauses now?
Use the edition you are auditing against as your criteria. During the transition, many organizations audit against both editions or run a dedicated 2026 gap audit. State which edition applies in the criteria section.