ISO 9001 Gap Analysis Evidence Plan: What to Collect Before You Close a Finding

What an ISO 9001 gap analysis evidence plan should show

A good evidence plan answers five plain-English questions:

• What requirement or implementation topic was checked?
• What evidence was reviewed?
• What is the exact gap or weakness?
• Who will fix it, and by when?
• What will prove the action is closed?

This keeps the work practical. Instead of saying “document control not complete”, you might record that the document master list is not populated for current procedures, the owner is the office manager, the due date is the end of the month, and closure will be verified by checking the master list against the live procedure folder.

Real document preview

The ISO 9001 gap analysis checklist in the paid pack is QMS-GAP-01. Its header identifies it as a Quality Management System Gap Analysis and provides spaces for the organisation and assessor/date. The checklist is included in the paid pack, not in the free sample. You can also use the free ISO 9001 gap analysis tool for an initial self-assessment before organising the evidence plan.

A practical evidence plan based on that checklist can be structured like this:

• Assessment basis: The applicable ISO 9001 edition, as shown on the checklist header
• Organisation: The business, site, department or process being assessed
• Assessor/date: Who completed the gap analysis and when
• Objective evidence: Procedures, records, logs, training evidence, audit results or interviews reviewed
• Precise gap: The specific missing, incomplete or ineffective item
• Owner: The person responsible for closing the action
• Due date: A realistic completion date
• Closure verification: The check that confirms the action is complete and effective

Example entry: “Supplier evaluation records reviewed for three current suppliers; no approval status recorded for two suppliers; purchasing lead to update supplier approval log by 30 October; closure verified by sample check of the updated log.”

Field-by-field guidance for SMEs

Assessment basis

Keep the assessment basis visible so everyone understands what the checklist is being used for. You do not need to copy standard text into your action plan. You need enough information to show that your QMS implementation was reviewed against a defined basis.

Organisation and scope

Use the organisation field carefully. If your business has more than one location, service line or operational team, define what the review covered. A vague entry such as the company name alone may be enough for a very small business, but a larger SME may need to state “sales, installation and service operations” or “Main office and field service activities”.

Assessor and date

Record the person who completed the gap analysis and the date. This matters later because you may need to show when the baseline was taken and who made the judgement. If a consultant helps you, keep an internal owner as well. The QMS belongs to the business, not to the outside adviser.

Objective evidence

Objective evidence is the material you actually looked at. It can include completed forms, registers, procedures, emails, meeting minutes, training records, supplier approvals, customer complaint records, calibration records or internal audit results. Try to reference the exact file, register row, date range or sample size.

Weak evidence entry: “Training checked.”

Better evidence entry: “Training matrix reviewed for office staff and two field engineers; induction records sampled for May to August.”

Precise gap

Write the gap so the owner knows what to fix. Avoid broad phrases such as “procedure missing” unless the whole procedure is genuinely absent. Many gaps are smaller and easier to close: a procedure exists but is not approved, a form is being used but not controlled, a register exists but has no review date, or an objective has no measurable target.

Owner and due date

Assign the owner who can actually complete the action. For SMEs, this is often a manager, administrator or process owner rather than a job title called “quality manager”. Due dates should reflect the risk and workload. A high-risk customer issue may need immediate action, while a low-risk formatting improvement can wait until the next document review cycle.

Closure verification

Do not close an action just because someone says it is done. Verification should be a short check of the updated evidence. Examples include reviewing the revised procedure, sampling completed forms, checking that training records are signed, or confirming that a corrective action register entry has been updated.

Turning findings into an implementation sequence

Once the gaps are listed, group them into a sensible sequence. SMEs often save time by completing foundation documents first, then records, then review activities.

A practical sequence is:

1. Confirm scope, processes and responsibilities.
2. Put document control in place so templates are managed consistently.
3. Complete core procedures and policies.
4. Populate registers and schedules.
5. Train staff on the documents they actually use.
6. Run internal audits and corrective actions.
7. Prepare management review evidence.

This sequence connects well with the wider roadmap in how to become ISO 9001 certified, because certification preparation depends on completed records, not just written templates.

Common mistakes when closing gap analysis actions

The most common mistake is closing a finding when a document has merely been drafted. Drafting is progress, but it is not always implementation. If staff have not been briefed, the document is not controlled, and no records have been created, the gap may still be open.

Other common mistakes include:

• copying a template title into the evidence column instead of recording reviewed evidence;
• assigning all actions to one person who cannot control every process;
• leaving due dates blank because the team is busy;
• closing actions without checking updated records;
• creating too many separate trackers instead of using one action list or corrective action register.

A good QMS template pack helps, but the discipline is in how you complete it. The gap analysis should point to the documents and records that prove the system is working.

Templates and guides that help with real catalogue links

AuditReady Templates sells the ISO 9001 gap analysis checklist as part of the complete ISO 9001 pack, not as a standalone download. The pack also includes a management system manual, procedures, policies, forms, Excel logs and registers, schedules, internal audit checklist, audit programme, corrective action request form and corrective action register.

For management review evidence, you can also download the free Management Review Minutes sample. It is useful when your gap analysis shows that leadership review evidence is weak, because it gives you a structured form for meeting details, required inputs, actions, owners, due dates and approval.

Final check before you mark the gap closed

Before you close any ISO 9001 gap analysis action, ask three questions. Can I show the updated document or record? Can I show who owns the process? Can I show that the fix has been checked? If the answer to all three is yes, the finding is much more likely to stand up during internal audit, management review and certification preparation.

For the wider workflow, see the gap analysis.

For the wider workflow, see the iso 9001.

For the wider workflow, see the gap analysis.

For the wider workflow, see the iso 9001.