# ISO 13485 Internal Audit Report Example With Findings

> Source: https://netray.co/tools/iso-13485-internal-audit-report-example
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

A filled-in internal audit report for a medical device manufacturer: scope, criteria, conforming practices, findings with clause references and conclusion.

## Category

quality

## Industry

Medical Devices

## Audience

- Medical device quality manager
- Internal auditor
- Regulatory affairs

## Tool

**Kind:** template

**Output:** document

**Fields:**

#### Organization

**Key:** company

**Type:** text

**Default:** Meridian Medical Components Inc.

#### Report number

**Key:** report_no

**Type:** text

**Default:** IA-2026-04

#### Audit date

**Key:** audit_date

**Type:** date

**Default:** 2026-09-16

#### Lead auditor

**Key:** auditor

**Type:** text

**Default:** J. Rivera

#### Process owner(s) audited

**Key:** auditee

**Type:** text

**Default:** Production manager, purchasing lead

#### Audit scope

**Key:** scope

**Type:** textarea

**Default:** Purchasing, supplier evaluation, incoming inspection and production of the infusion pump housing family (clauses 7.4, 7.5, 8.2.4, 8.3).

#### Finding 1 (major)

**Key:** finding_1

**Type:** textarea

**Default:** Two critical suppliers on the approved supplier list had no re-evaluation record in the last 24 months, although the procedure requires an annual review (clause 7.4.1).

#### Finding 2 (minor)

**Key:** finding_2

**Type:** textarea

**Default:** Cleaning station log for the molding area had three missing signatures in August (clause 6.4.1).

#### Observation

**Key:** observation

**Type:** textarea

**Default:** Incoming inspection work instruction WI-RI-03 refers to a gauge that was replaced; the instruction may confuse new inspectors.

#### Overall result

**Key:** grading

**Type:** select

**Options:**

- Effective, no findings
- Effective with minor findings
- Partly effective, major finding raised
- Not effective

**Default:** Partly effective, major finding raised

**Blocks:**

#### Internal Audit Report {{report_no}}

**Body:** Organization: {{company}}
Audit date: {{audit_date}}
Lead auditor: {{auditor}}
Auditee(s): {{auditee}}
Audit criteria: ISO 13485 requirements, applicable regulatory requirements, the organization's quality manual and procedures

#### 1. Scope and objective

**Body:** {{scope}}

Objective: determine whether the processes in scope conform to planned arrangements, are effectively implemented and maintained, and meet the stated criteria.

#### 2. Method

**Body:** The audit was carried out by interview, observation of work and sampling of records. Samples were selected from the last 12 months. Auditor independence: the auditor does not work in the processes audited.

#### 3. Positive observations

**Body:** Complaint handling records were complete and traceable to CAPA. Calibration status labels were present and current on all gauges sampled. Device history records for the three lots sampled matched the production orders.

#### 4. Findings

**Table:**

**Columns:**

- No.
- Grade
- Description
- ISO 13485 clause
- Due date

**Rows:**

**0:** 1

**1:** Major nonconformity

**2:** {{finding_1}}

**3:** 7.4.1

**0:** 2

**1:** Minor nonconformity

**2:** {{finding_2}}

**3:** 6.4.1

**0:** 3

**1:** Observation

**2:** {{observation}}

**3:** 7.5.1

**4:** No action required

#### 5. Conclusion

**Body:** Overall result: {{grading}}.

The auditee must respond to each nonconformity with containment, root cause and corrective action, and the quality manager will track them to closure through the CAPA system. Effectiveness of the actions will be verified at follow-up.

#### 6. Distribution and follow-up

**Body:** Copies to: top management, process owners, quality manager. This report is an input to the next management review. Follow-up audit of findings 1 and 2 to be scheduled after the due dates.

#### 7. Sign-off

**Signatures:**

- Lead auditor
- Process owner
- Quality manager

**Notes:** The example is fictional. Replace every field with your own audit evidence. Clause references are to the ISO 13485 structure; confirm them against your licensed copy of the standard and add any regulatory references (for example FDA QMSR or EU MDR) that apply to your scope.

## Content

**Intro:** A good internal audit report is short, factual and traceable. This ISO 13485 internal audit report example shows how to state scope and criteria, record what was seen, grade findings and tie them to clauses so the quality manager can feed them into CAPA and management review.

**Sections:**

#### How to use the example

**Body:** Edit the fields with your audit details, then export the report to Word or PDF. Keep the findings text objective: say what the requirement is, what you saw and the evidence (record number, date, location). Avoid blame and avoid advice on the solution. Grade each finding using your own procedure, and give a due date for the response. Add the records sampled to your audit file so that the finding can be reproduced if challenged.

**Bullets:**

- State the requirement, the evidence and the gap.
- Cite the clause or procedure for every finding.
- Separate nonconformities from observations.
- Keep the report to a few pages.

#### What ISO 13485 expects from internal audits

**Body:** Clause 8.2.4 requires internal audits at planned intervals to check that the quality management system conforms to the standard, regulatory requirements and the organization's own arrangements, and is effectively implemented and maintained. You need a documented procedure covering audit criteria, scope, frequency, methods, auditor selection for objectivity, and reporting. Management responsible for the audited area must act without undue delay to eliminate nonconformities and their causes, and follow-up must verify the actions. Results feed the management review.

#### Findings: grading and common mistakes

**Body:** Most organizations use major and minor nonconformity grades plus an optional observation or opportunity. A major usually means a missing or systemic failure of a requirement, or a risk to product safety or compliance. A minor is an isolated lapse. Common mistakes are vague findings with no evidence, auditing only documents and not the work, mixing consultancy advice into the report, auditors reviewing their own processes, and no check that corrective actions worked. Plan the audit schedule by process risk and past results, not just by calendar.

**Bullets:**

- Findings with no objective evidence.
- Auditor not independent of the process.
- Corrective action closed without effectiveness check.
- Same findings repeated audit after audit.

**Cta:** Where audit evidence sits in an ERP, we can set up a private assistant on your own servers to pull the records an auditor asks for. This template stands on its own.

**Faq:**

#### What should an ISO 13485 internal audit report include?

**Answer:** Scope, criteria, date, auditors and auditees, method, positive observations, findings with clause and evidence, an overall conclusion, distribution and follow-up dates. Sign-off by the lead auditor shows the report is complete.

#### How often must internal audits be done under ISO 13485?

**Answer:** At planned intervals defined in your audit procedure. Many companies cover all processes across a year, with higher-risk or problem areas audited more often. Regulators and notified bodies expect the plan to be risk based.

#### What is the difference between a major and minor nonconformity?

**Answer:** There is no single definition, so write yours in the audit procedure. A major usually means a system-level failure or a risk to safety or regulatory compliance, while a minor is an isolated lapse that does not undermine the system.

#### Can the quality manager audit their own area?

**Answer:** No. The standard asks for objectivity and impartiality, so auditors must not audit their own work. In small companies use a trained person from another area or an external auditor for the areas the quality manager owns.

## Search terms

iso 13485 audit report example, iso 13485 internal audit report template, sample internal audit report iso 13485, medical device internal audit report, iso 13485 audit findings examples, iso 13485 nonconformity report example

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json