CORAA
University · Internal audit

ISO Internal Audit Report Builder.

Enter each finding with its clause, area, grade and evidence. The tool counts findings by grade and writes an internal audit report text you can paste into your document, plus an Excel findings register with columns for root cause and corrective action.

Findings and audit details

Use the grade words below in the Grade column. Anything else is shown as not graded. Your management system procedure decides what makes a finding major or minor.

Report
Findings5
Major nonconformities2
Minor nonconformities2
Opportunities for improvement1
#ClauseAreaGrade
18.4PurchasingMinor nonconformity
29.2Internal auditMinor nonconformity
37.5Document controlMajor nonconformity
410.2Corrective actionMajor nonconformity
57.1InfrastructureOpportunity for improvement

A report is only as useful as its grading and its evidence.

Each finding should name the clause, state what was seen and point to the evidence, so the auditee can find it again and the next auditor can verify the fix. Keeping the grade words consistent also lets you count findings from one audit to the next.

ISO nonconformity trackerISO internal audit programme planner

How the report is built

Each line of the table is a finding. The tool matches the Grade column against the three words you set for major, minor and improvement opportunity.

It counts the findings in each grade, groups them in the report text with the most serious first, and shows evidence beside each one.

The Excel register keeps blank columns for root cause, corrective action, owner, due date and verification so it can be used to follow up.

Worked example — five findings

An internal audit against ISO 9001 records two major findings, two minor findings and one improvement opportunity.

Inputs
Major2
Minor2
Improvement opportunities1
Output
Findings in report5
Order in reportMajor, minor, improvement
The summary line gives the counts and each grade section lists its findings with clause and evidence.

Common mistakes

Findings without evidence
A finding that cannot be traced to a record is hard to defend and hard to close.
Inconsistent grade words
Mixed spellings are shown as not graded. Keep to the words you set.
No due date for corrective action
Use the register columns to agree an owner and date before the report is issued.

Frequently asked questions

Does it decide whether a finding is major or minor?+
No. You grade each finding using your own procedure and the standard you audit against.
Can I use it for ISO 27001, 14001 or 45001?+
Yes. Enter the standard name and the clause numbers you use.
Is my data uploaded?+
No. Everything runs in your browser.

Authoritative sources

ISO 19011, Guidelines for auditing management systems — Guidance on audit findings and reporting. Check the current edition.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
ISO nonconformity tracker →ISO internal audit programme planner →ISO readiness scorecard →
Share this tool
Last reviewed: 2026-10-17 · For informational purposes only — not professional advice.