audit finding

An audit finding is a documented observation recorded during an internal or external audit that evaluates whether a process, system, or record conforms to defined requirements. In regulated industrial and manufacturing environments, audit findings are a primary way to capture evidence of compliance issues, process gaps, or good practices.

Requirements that audit findings are evaluated against can include internal procedures, quality system requirements, customer contracts, and applicable regulations or standards. Each finding typically references objective evidence (such as records, system logs, or physical inspection results) and links to the specific requirement that was assessed.

Types of audit findings

While terminology varies by organization and standard, audit findings commonly fall into these categories:

• Nonconformity (nonconformance): A requirement is not met, such as a missing batch record signature, an unapproved work instruction in use on the shop floor, or a calibration past due date.
• Major / critical nonconformity: A significant or systemic deviation that may affect product quality, patient/user safety, data integrity, or regulatory compliance, or that indicates a breakdown of the quality system.
• Minor nonconformity: A limited or isolated deviation that does not indicate a systemic breakdown but still violates a defined requirement.
• Observation: A noted condition that is not clearly a requirement violation but may pose risk if not addressed, such as inconsistent documentation practices between shifts.
• Opportunity for improvement (OFI): A suggestion where processes already meet requirements but could be made more robust, efficient, or easier to control.
• Conformity / good practice: Positive evidence that requirements are met effectively, sometimes captured to share best practices across operations.

How audit findings are used operationally

In manufacturing, audit findings are used to drive and document corrective and preventive actions, and to monitor quality system performance over time. Typical operational uses include:

• Initiating investigations, root cause analysis, and CAPA for significant nonconformities.
• Feeding into risk assessments to evaluate impact on product quality, safety, or data integrity.
• Tracking closure status, lead times, and recurrence rates as quality indicators.
• Informing updates to SOPs, work instructions, training, and system configurations in MES, QMS, or ERP.
• Providing evidence for management review and for demonstrating audit readiness during future inspections.

Audit findings can originate from many types of audits, including internal quality audits, supplier audits, customer audits, regulatory inspections, and IT/OT or data integrity audits that examine manufacturing and quality systems.

Common confusion

• Audit finding vs. audit observation: Some organizations use “observation” only for lower-risk issues or opportunities for improvement, and reserve “finding” for true nonconformities. Others use the terms interchangeably. Locally defined audit procedures should clarify the distinction.
• Audit finding vs. CAPA: An audit finding is the documented issue or observation; a CAPA (corrective and preventive action) is the formal process and set of actions taken to address the root cause of that finding and prevent recurrence.
• Audit finding vs. nonconformance record: A nonconformance record may originate from in-process inspections, complaints, or line deviations, not only from audits. An audit finding specifically arises from an audit activity, although it may reference existing nonconformance records as evidence.

Relation to quality indicators

In regulated manufacturing, aggregated audit findings are often used as part of quality and compliance metrics. Examples include the number and severity of findings per audit, repeat findings across audit cycles, and time to closure. These indicators help organizations monitor audit and inspection performance and evaluate the effectiveness of the quality system.