(Note that the date is an important part of the evidence).

Usually the auditor will discuss the finding with the auditee before recording it. This is to ensure the finding is
understood and to confirm there is actually a problem, e.g. the auditee above may reveal that Joe Bloggs personnel
folder includes a separate safety briefing record with the required signature. This can sometimes negate the finding,
or just change it i.e. the signature is there, but it is not following the procedure. In this example, the consequences
of not following the procedure are minor and the audit finding should reflect that.
The audit will finish with a closing meeting where the lead auditor gives an overall summary of the audit and
discusses each audit finding to ensure they are understood.
An external certification auditor will submit a formal written report on the audit to management several days later and
its common for an internal auditor to do the same. However, theres no requirement in the standard for a formal audit
report. You simply need to ensure the findings are recorded and communicated to management. You could just
record the findings and their details in your non-conformance form & register (or as an Issue in QSToolbox).
You will need to retain records of the audit which will typically include:
Completed Audit Checklists and/or marked up procedures
Notes on objective evidence examined, and personnel interviewed
Audit Findings (cross referenced to your Nonconformance Register)
Audit Report
Findings raised at both Internal and External Audits need to be addressed with corrective actions. If the audit reveals
that we dont do as we say, then we either change what we do, or change what we say
At the next audit, the auditor will verify that the corrective actions taken were effective in bringing the management
system into compliance.
Have a look at the auditing process using QSToolbox.
The ISO Standard ISO 19011 has guidance on auditing. It sets out requirements on training and experience for
auditors, and requirements for how audits should planned, conducted and recorded.