Nonconformity Report (NCR) Form Templates

What is an NCR?

A Nonconformity Report (also called a Non-Conformance Report or NCR) is a formal document used to record when a product, service, process or management system fails to meet a specified requirement. It captures the details of the nonconformity, the immediate containment actions taken, the root cause investigation and the corrective actions implemented to prevent recurrence.

NCRs are a mandatory element of any ISO management system. ISO 9001 Clause 10.2 requires organisations to react to nonconformities, evaluate the need for action to eliminate the root cause, implement corrective actions and review their effectiveness. The same principle applies under ISO 14001 Clause 10.2 and ISO 45001 Clause 10.2. Without a robust NCR process, organisations cannot demonstrate that they are systematically identifying and resolving problems.

NCR Process Flow

Every nonconformity follows a structured lifecycle from initial detection through to formal close-out. Understanding each stage ensures nothing falls through the cracks and that corrective actions genuinely prevent recurrence.

1. Identification — Detect the nonconformity through internal audits, process monitoring, customer complaints, inspection results or management review. Anyone in the organisation should be empowered to raise an NCR.
2. Documentation — Record the full details on the NCR form including a clear description of what was found, where it was found, when it occurred, the relevant standard clause or procedure reference, and the objective evidence supporting the finding.
3. Containment — Take immediate action to control the nonconformity and prevent further impact. This might include quarantining defective product, stopping a process, notifying affected customers or reverting to a previous procedure version.
4. Root Cause Analysis — Investigate why the nonconformity occurred using structured techniques such as the 5 Whys method, Fishbone (Ishikawa) diagrams, fault tree analysis or 8D problem solving. The goal is to identify the underlying systemic cause, not just the surface-level symptom.
5. Corrective Action — Design and implement a permanent fix that addresses the root cause. This may involve updating procedures, retraining staff, modifying equipment, changing supplier controls or revising process parameters. Assign a responsible person and a target completion date.
6. Verification — After the corrective action has been implemented, verify that it is effective. This typically involves re-auditing the area, reviewing performance data over a defined period, or conducting product re-inspection to confirm the issue has been eliminated.
7. Close-out — Once effectiveness has been confirmed, formally sign off and close the NCR. Record the closure date, the person authorising closure and a brief statement confirming effectiveness. The closed NCR then feeds into trend analysis and management review.

What's Included

Major vs Minor Nonconformities

Not all nonconformities carry the same weight. Correctly classifying findings is essential for prioritising resources and communicating risk to management.

A major nonconformity represents the absence of, or a total breakdown in, a system or process required to meet a standard clause or regulatory requirement. It indicates a systemic failure that significantly affects the ability of the management system to achieve its intended outcomes. Examples include having no internal audit programme at all, a complete absence of management review, or a fundamental failure to control a critical process. Major nonconformities typically require urgent action and must be resolved before a certification body will recommend certification or continued registration.

A minor nonconformity is a single observed lapse or isolated instance of non-fulfilment that does not represent a systematic failure. The management system is generally functioning but a specific requirement has not been fully met in one area or on one occasion. Examples include a single training record that is missing a signature, one calibration certificate that has expired, or an isolated case where a procedure was not followed. Minor nonconformities still require corrective action but are less urgent and do not typically prevent certification.

It is worth noting that a pattern of related minor nonconformities across different areas may collectively indicate a systemic problem. In such cases, an auditor may choose to raise a single major nonconformity rather than multiple minors.

Why a Structured NCR Process Matters

Beyond meeting the requirements of ISO 9001, ISO 14001 and ISO 45001, a well-managed NCR process delivers tangible business benefits. It reduces recurring defects and failures, lowers the cost of poor quality, improves customer satisfaction and provides a clear evidence trail for certification auditors. Organisations that treat NCRs as opportunities for learning rather than exercises in blame-assignment consistently outperform those that view them as administrative burdens.