Commonly, auditors review non-conformance records that show how your organization detects, contains, evaluates, disposes, implements, and closes quality issues with full traceability. They are usually not looking at NCRs in isolation. They often follow the record into the surrounding evidence trail.
The exact sample depends on the audit scope, the type of approval or oversight involved, product criticality, recent escapes or enforcement history, supplier risk, and whether the organization is manufacturing, repair, overhaul, or mixed operation. So there is no universal fixed list. In practice, the records most often reviewed include:
Product non-conformance reports with potential airworthiness or conformity impact, especially those tied to dimensional misses, material discrepancies, process deviations, documentation gaps, or configuration mismatches.
Open and recently closed NCRs, to assess timeliness, aging, interim containment, and whether closure was supported by objective evidence rather than administrative completion.
Recurring or trend-related NCRs, where auditors may test whether repeated defects were escalated appropriately and linked to corrective action.
NCRs involving critical characteristics, key process controls, or special processes, because these often carry higher traceability and validation expectations.
MRB dispositions and approval records, including use-as-is, repair, rework, or scrap decisions, with evidence that authority, rationale, and downstream actions were controlled.
Rework and repair records, including the approved instructions used, revision status, operator qualifications where applicable, inspection results, and final acceptance evidence.
Deviation, concession, or waiver-related records, where allowed by the organization and customer framework, especially if they affect delivered hardware or documentation.
Supplier non-conformance records, including incoming inspection rejects, supplier corrective actions, containment of suspect stock, and whether affected work orders, lots, or serial numbers were identified.
Escape and containment records, especially where nonconforming material moved to downstream operations, to customers, or into service-related channels before detection.
Scrap records tied to NCRs, to confirm physical segregation, disposition control, and reconciliation between quality records and inventory or MES/ERP status.
Linked CAPA or root cause records, if the issue met the organization’s escalation threshold for systemic investigation.
Training, document change, or process change records linked to the NCR, when the corrective response required updated instructions, retraining, or revised controls.
Clear identification of the nonconformance, affected part, lot, serial, batch, or work order
Date, source of detection, and who initiated the record
Containment actions and segregation status
Impact assessment, including whether other product may be affected
Disposition decision, approval path, and technical rationale
Execution evidence for rework, repair, or scrap
Verification or reinspection results after disposition
Closure evidence and, where required by procedure, effectiveness follow-up
Consistency across NCR, traveler, inspection records, DHR, ERP inventory status, and shipment history
The most common problems are not usually missing forms. They are broken evidence chains. Examples include NCRs closed before reinspection was complete, dispositions that do not match the work actually performed, serial or lot traceability gaps, rework instructions used without clear revision control, supplier issues not linked to affected product, and CAPA decisions that are inconsistent with repeat findings.
Another common issue in brownfield environments is record fragmentation. The NCR may exist in a QMS, the disposition in email or a spreadsheet, rework execution in paper travelers, training in a separate LMS, and inventory status in ERP. That can still be workable, but only if the links are reliable, timestamps are preserved, approvals are controlled, and users can retrieve the full history quickly during an audit. If integration is weak, auditors and internal teams may see conflicting statuses or incomplete closure evidence.
That is also why full system replacement is often a poor near-term strategy in regulated, long-lifecycle environments. Replacing QMS, MES, ERP, or DHR workflows all at once can create validation burden, downtime risk, retraining overhead, and new traceability gaps during transition. In many plants, strengthening evidence linkage across existing systems is more realistic than attempting a clean replacement.
Auditors commonly review NCRs that are high risk, recent, recurring, supplier-related, disposition-heavy, or linked to escaped product. They also tend to follow those NCRs into MRB, CAPA, training, document control, traceability, and shipment records. The question is usually less “Do you have an NCR form?” and more “Can you prove the nonconformance was controlled correctly from detection through final resolution?”
Whether you're managing 1 site or 100, Connect 981 adapts to your environment and scales with your needs—without the complexity of traditional systems.
Whether you're managing 1 site or 100, C-981 adapts to your environment and scales with your needs—without the complexity of traditional systems.
