ISO 9001:2026 Gap Analysis Report: How to Summarise Findings for Management

Real document preview

This report describes an assessment against ISO 9001:2026. The AuditReady Templates ISO 9001 gap analysis checklist is QMS-GAP-01, titled “Quality Management System Gap Analysis”, with spaces for the organisation and assessor/date. Confirm the assessment edition on the working document before starting and record it in the report scope.

The checklist instruction tells the user to mark each item as Conforming, Partial, Not Conforming or Not Applicable, cite objective evidence, record the precise gap, assign an owner and due date, then verify closure. The main checklist table uses these columns:

Checklist column	How to use it in the report
Clause	Group actions by requirement area when management needs a formal summary.
Area	Use the plain-English topic, such as Context, Resources, Internal audit or Management review.
Assessment prompt	Keep this in the working paper, but summarise it in the report.
Typical evidence	Convert this into the evidence still needed or already verified.
Status	Count Conforming, Partial, Not Conforming and Not Applicable items.
Gap / action	Lift the real action wording into the report.
Owner / due	Use this to create the implementation tracker.

Example entry: “Clause 9.2 Internal audit is Partial. Audit programme exists, but follow-up responsibilities are not defined. Operations manager to update the audit programme and assign action owners by 31 October. Closure will be verified by checking the revised audit programme and one completed audit action.”

What to include in the report summary

1. Scope of the assessment

State what was reviewed. A small business might write “office, sales and service delivery processes”, while a multi-site business should identify the location, team or process boundaries. Avoid vague wording such as “the whole QMS” unless the checklist really covered the whole system.

2. Overall status count

Use the checklist summary line to count Conforming, Partial, Not Conforming and Not Applicable items. The count helps management understand whether the project is mostly documentation clean-up, process implementation, evidence collection or a deeper system redesign.

3. Top priority gaps

Do not list every minor wording improvement. Pick the gaps that could block implementation or weaken audit evidence. Common priority areas include unclear process controls, incomplete supplier evidence, missing internal audit planning, weak corrective action closure or a management review that has not yet been held.

4. Evidence still needed

A gap analysis report is stronger when it separates “document not written” from “evidence not available”. For example, a procedure may exist, but training records, completed logs or review minutes may still be missing. This helps the business plan practical work instead of only writing more documents.

5. Owners, dates and verification

Each priority action should have one owner, one due date and one closure check. If an action needs several people, name the accountable owner and list contributors in the action notes.

How to turn checklist findings into management actions

Start with the checklist rows marked Partial or Not Conforming. For each one, write a short action that begins with a verb: update, complete, approve, review, train, verify or retain. Then add the evidence that will prove the action is complete.

A useful pattern is:

• Finding Management action
• Document master list incomplete Update the master list with current procedures, forms and logs; verify against the live document folder.
• Supplier approval not evidenced Complete supplier evaluations for active suppliers; retain approval status and review date.
• Internal audit programme not risk-based Revise the audit programme to show scope, criteria, frequency, responsibility and follow-up.
• Management review not held Schedule the review, prepare inputs and record decisions in the minutes form.

This format keeps the report practical. Management can see what decision or resource is needed, while the implementation owner can see exactly what evidence to produce.

Link the report to management review

A completed gap analysis report is a useful input to management review. It can show where the QMS is still weak, where resources are needed and which actions need leadership attention. It also gives a baseline for continual improvement because future reviews can compare current evidence against the original gaps.

For that reason, do not hide the report in a project folder. Reference the priority actions in your action tracker and bring the key decisions into your next management review minutes.

Common mistakes to avoid

• Reporting every checklist row instead of summarising decisions.
• Writing “not compliant” without saying what evidence was checked.
• Assigning actions to a department instead of a named owner.
• Closing gaps because a document was written, without checking whether it is used.
• Forgetting to update the report after actions are verified.

Templates and guides that help

For the wider method, start with the ISO 9001 gap analysis hub, use the free ISO 9001 gap analysis tool to structure an initial check, and use the ISO 9001:2026 transition readiness tool when reviewing the move to the 2026 edition. Follow the gap analysis evidence plan and gap analysis to action plan when turning findings into verified work. The ISO 9001 pack provides the editable documents behind that workflow.

The paid ISO 9001 pack includes the editable QMS-GAP-01 gap analysis checklist, along with procedures, forms, logs, schedules, audit documents and management review templates. The gap analysis should be used with the wider implementation route explained in how to become ISO 9001 certified, especially when you need to move from checklist findings to controlled evidence.

Page role: findings report

This page explains how to summarise completed gap-analysis findings for management. It is not the checklist or action plan; use the gap-analysis hub to move between those stages.