What is a non-conformance report (NCR)?

    Short answer

    A non-conformance report (NCR) is the formal record raised when a product, material, process or system fails to meet a specified requirement: a drawing, specification, procedure, standard or customer requirement. It describes the non-conformance, the immediate disposition of the affected items, the root cause and the corrective action, and is closed when the action is verified.

    Last updated · TeamAssurance

    What an NCR contains

    SectionContent
    IdentificationNCR number, date, raised by, area, product or process, batch or lot
    DescriptionWhat was found, against which requirement, how many items, evidence (photos, measurements)
    ContainmentQuarantine, hold, stop the line, inform the customer if product has shipped
    DispositionRework, repair, use as is (with concession), scrap, return to supplier
    Root causeFive whys or fishbone; the underlying cause, not the symptom
    Corrective actionWhat will stop recurrence, owner, due date, hierarchy-of-control level where safety is involved
    Verification and closureEvidence the action is done and effective; sign-off

    Where NCRs come from

    Inspection and test, customer complaints, supplier deliveries, internal and external audits, process monitoring and, in regulated industries, deviations from the approved procedure. Safety non-conformances, such as a guard found removed on a layered audit, use the same record.

    NCR, deviation and CAPA

    A deviation (pharmaceutical and food) is a departure from an approved procedure, whether or not product was affected. An NCR records a failure against a requirement. Both feed CAPA, the system that manages the corrective and preventive actions and verifies them. ISO 9001 clause 10.2 requires all three elements: react and contain, evaluate and act on causes, and review effectiveness.

    Common mistakes

    • Disposition recorded, root cause left blank.
    • Root cause written as "operator error" or "supplier".
    • Corrective action closed when assigned rather than when verified.
    • NCRs raised only for product, never for process or system failures.
    • A backlog nobody reviews, so repeat non-conformances are invisible.

    NCRs inside daily management

    A non-conformance found on the line is raised at the Tier 1 huddle the same day: containment is agreed, the NCR is opened, and the root cause work is assigned. Open NCRs and overdue corrective actions appear on the quality section of the tier board; repeat non-conformances by product or cause are reviewed at Tier 2 and become improvement projects.

    How TeamAssurance helps

    In TeamAssurance, non-conformances are raised from checklists and inspections with photos, each becomes a tracked record with containment, root cause and corrective actions owned on the tier board, and reports show open, overdue and repeat non-conformances by area, product and cause.

    Frequently asked questions

    Who can raise an NCR?

    Anyone who finds a non-conformance: operators, inspectors, auditors, customers via the complaint process. Raising should be easy; the review and disposition are controlled.

    What is the difference between an NCR and a CAPA?

    The NCR records one non-conformance and its handling. CAPA is the wider system that manages corrective and preventive actions, including those from NCRs, audits and complaints, and verifies them.

    How long should an NCR stay open?

    Containment and disposition within a day; root cause and corrective action within an agreed period, often 30 days; closure only after verification. Ageing NCRs are a Tier 2 agenda item.