Template

    Non-Conformance Report Template

    In short

    A non-conformance report template is the form used to record a product, process or system that does not meet a requirement and to drive it to closure: identification, a description against the specific requirement, containment, disposition of the affected items, root cause, corrective action with an owner and date, verification and sign-off. This template covers quality and safety non-conformances alike.

    Key facts

    • Use: inspection and test failures, audit findings, supplier defects, customer complaints, procedure deviations.
    • Flow: contain today, disposition within a day, root cause and corrective action within 30 days, close only after verification.
    • Standards: ISO 9001 clause 10.2 (nonconformity and corrective action); ISO 45001 clause 10.2 for safety.
    • Output: one record per non-conformance, numbered, with its actions on the tier board.

    By Matt Mafrici, CEO and founder, TeamAssurance · Published

    LinkedIn Email

    The template

    SectionFieldEntry
    1. IdentificationNCR number · Date raised · Raised by · Area / line · Product, batch or process · Source (inspection, audit, supplier, customer, deviation)
    2. DescriptionWhat was found · Requirement not met (spec, drawing, procedure, standard, clause) · Quantity affected · Evidence (photos, measurements)
    3. ContainmentQuarantine / hold · Line stopped? · Other batches checked · Customer notified? · By whom, when
    4. DispositionRework · Repair · Use as is (concession no.) · Scrap · Return to supplier · Approved by
    5. Root causeMethod (5 whys, fishbone) · Root cause statement · Why it was not detected
    6. Corrective actionAction · Owner · Due date · Hierarchy-of-control level (safety) · Preventive action for similar processes
    7. VerificationEvidence the action is complete · Evidence it is effective (measure, period) · Verified by, date
    8. ClosureClosed by · Date · Lessons shared to

    A filled example

    SectionEntry
    IdentificationNCR-0412 · 14 Mar · Line 2 QC · Carton sealing · Batch 2403-17 · Source: in-process inspection
    Description38 cartons with incomplete side seal; requirement: seal width ≥ 8 mm per packaging spec PS-21 rev 4; photos attached
    ContainmentBatch on hold; line stopped 20 min; previous two batches checked, no defects; no product shipped
    Disposition38 cartons reworked through manual sealer and re-inspected; approved by QA lead
    Root causeSeal-bar temperature drifted after mid-shift clean; no check in the post-clean procedure; drift not visible to the operator
    Corrective actionAdd temperature check to post-clean checklist (supervisor, 21 Mar); fit drift alarm (engineer, 30 Apr); review other lines (QA, 30 Apr)
    VerificationChecklist in use from 21 Mar; alarm fitted 26 Apr; zero seal NCRs in the following 8 weeks
    ClosureQA manager, 30 Jun; shared at Tier 3 and to sister site

    How do you complete an NCR?

    1. Raise it the moment the non-conformance is found; do not wait for the end of shift.
    2. Contain first: stop the spread before you investigate.
    3. Describe against the requirement, with numbers and photos, not "poor quality".
    4. Decide disposition with the authority your procedure sets; record concessions.
    5. Find the root cause with the people who run the process, and ask why it was not detected as well as why it happened.
    6. Corrective actions get owners and dates; for safety, record the hierarchy level.
    7. Verify effectiveness over a period, then close and share.

    Common mistakes

    • Closing at "action assigned".
    • Root cause written as "operator error".
    • Disposition recorded, sections 5–7 blank.
    • Repeat NCRs for the same cause with no project raised.

    NCRs inside daily management

    Open NCRs and overdue corrective actions appear on the quality section of the tier board. The daily huddle agrees containment and assigns the root cause work; the Tier 2 meeting reviews ageing NCRs and repeat causes, and turns repeats into improvement projects. The verification step is a dated action like any other.

    Step by step

    1. Raise and contain. Record what was found against which requirement; hold the affected items and check adjacent batches.
    2. Disposition. Rework, repair, use as is with concession, scrap or return; approved by the set authority.
    3. Root cause. 5 whys or fishbone with the people who run the process; include why it was not detected.
    4. Corrective action. Actions with owners and dates on the tier board; preventive action where similar processes exist.
    5. Verify and close. Evidence of completion and effectiveness over a period; close, then share.

    A worked example

    A pharmaceutical packaging site had 140 open NCRs, most closed at the disposition step with root cause left blank. Making sections 5–7 mandatory and putting ageing NCRs on the Tier 2 agenda every Thursday cut the open count to 31 in a quarter. Three repeat causes accounted for 60 per cent of the historic NCRs; each became an improvement project, and the site's deviation rate at its next audit was the lowest recorded.

    In TeamAssurance

    In TeamAssurance a non-conformance raised from an inspection checklist opens a record with containment, disposition, root cause and corrective actions, the actions are owned on the tier board with the verification step as a dated action, and reports show open, overdue and repeat NCRs by area, product and cause for the Tier 2 review.

    FAQ

    Frequently asked questions

    What is the difference between an NCR and a deviation report?

    A deviation records a departure from an approved procedure whether or not product was affected (common in pharmaceutical and food). An NCR records a failure to meet a requirement. Many sites use one form for both.

    Who approves the disposition?

    The authority set in your quality procedure: typically QA for product, engineering for design concessions, and the customer for anything that changes what they receive.

    Does every non-conformance need a root cause analysis?

    Every NCR needs a root cause statement; the depth should match the severity and frequency. A one-off minor defect gets five whys at the board; a repeat or a safety non-conformance gets a structured investigation.

    How long should NCRs take to close?

    Containment the same day, disposition within a day, corrective action within 30 days, closure after verification. Anything older than 30 days is a Tier 2 agenda item.

    About the author

    Matt Mafrici

    CEO and founder, TeamAssurance

    Operations and continuous improvement practitioner; builds daily management systems with manufacturers, miners, food and pharmaceutical producers in Australia and abroad.

    LinkedIn profile · All articles