This is a ready-to-use report for writing up the findings of an equipment and instrument qualification program audit, after the walkthrough itself is complete. It rolls the individual Pass/Fail items from an audit checklist into a findings register, classifies each finding by its effect on data and product rather than paperwork tidiness, and reaches a defensible conclusion on whether the program is ready for an inspection. Replace every <<FILL: ...>> placeholder with your own specifics. A filled specimen follows. This is educational reference content, not legal or regulatory advice; verify every cited regulation against its current published version before you rely on it.
This report is a program-level document. It is distinct from an equipment qualification summary report or a periodic review report, which each close out a single asset; this report summarizes what an audit of the whole program, or a risk-based sample of it, found across many assets and processes at once. Pair it with a checklist such as Equipment and Instrument Qualification Program Audit Checklist or your own audit tool as the source of the individual items scored here.
Report control header
| Field | Entry |
|---|---|
| Report title | Equipment Qualification Audit Findings and Severity Summary, <<FILL: site/facility>> |
| Report number | <<FILL: AUD-RPT-ID>> |
| Audit type | <<FILL: self-audit / internal audit / CMO oversight / pre-inspection readiness>> |
| Audit date(s) | <<FILL>> |
| Auditor(s) | <<FILL>> |
| Report date | <<FILL>> |
| EML population audited against | <<FILL: total GxP asset count>> |
| Sample size and technique | <<FILL: count and rationale>> |
| Assets sampled (IDs) | <<FILL: list>> |
| Distribution | <<FILL: site quality head, validation lead, equipment owners named below>> |
1. Purpose and scope
This report documents the findings of the equipment and instrument qualification program audit conducted at <<FILL: site>> between <<FILL: dates>>, classifies each finding by its effect on the validity of GxP data and product, and states the overall program-health conclusion and the actions required before the next inspection or the next scheduled audit cycle, whichever is sooner.
2. Audit methodology summary
State the sampling technique and how coverage relates to the total population, so the conclusion’s basis is auditable on its own.
| Item | Entry |
|---|---|
| Sampling technique | <<FILL: stratified random across risk classes, e.g. 2 Group C instruments, 2 direct-impact manufacturing units, 1 environmental chamber, 1 balance, 1 portable asset>> |
| Full-population data pull performed | <<FILL: yes/no; if yes, what was pulled, e.g. overdue periodic reviews, expired calibrations, open change controls>> |
| Sequence followed | <<FILL: reference to the audit method used, e.g. inventory review, sample pull, trace, floor walk, interview, score>> |
| Deviation from planned scope | <<FILL: none, or state what could not be audited and why>> |
3. Findings register
List every finding, whatever its severity. An empty register with no Minor findings at all reads as an audit that did not look hard enough, not as a clean program.
| Finding # | Area | Asset ID | Description | Severity | Data/product impact | Immediate action | CAPA ref | Owner | Due date | Status |
|---|---|---|---|---|---|---|---|---|---|---|
<<FILL: F-01>> | <<FILL: e.g. Change Control>> | <<FILL>> | <<FILL>> | <<FILL: Critical/Major/Minor>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL: Open/Closed>> |
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
4. Severity definitions applied
| Severity | Definition | Typical examples |
|---|---|---|
| Critical | Equipment is in GxP use without completed qualification, or required requalification was not performed after a triggering event | Direct-impact instrument generating release data with no OQ; equipment modified and run without any requalification assessment |
| Major | Qualification exists but has significant gaps that could affect data reliability | Missing OQ acceptance criteria, undocumented protocol deviations, overdue periodic reviews on critical equipment, a calibration-failure process with no historical-data impact step |
| Minor | Organizational or completeness issues that do not affect the validity of specific GxP data | Records filed out of order, a missing signature later reconstructed, inconsistent but traceable ID labeling |
The governing test for every finding: does it weaken confidence in the validity of the GxP data this equipment produced. A finding that does is a data-reliability issue and needs a retrospective assessment of affected data and product in section 6, not only a procedural fix.
5. Severity rollup
| Severity | Count this audit | Count prior audit (if available) | Trend |
|---|---|---|---|
| Critical | <<FILL>> | <<FILL>> | <<FILL>> |
| Major | <<FILL>> | <<FILL>> | <<FILL>> |
| Minor | <<FILL>> | <<FILL>> | <<FILL>> |
| Total | <<FILL>> | <<FILL>> | <<FILL>> |
| Item | Entry |
|---|---|
| Findings by area (highest count first) | <<FILL: e.g. Change Control 3, Calibration 2, OQ 2, Documentation 1>> |
| Findings concentrated in one equipment family or risk class? | <<FILL: yes/no, describe pattern>> |
6. Data and product impact assessment
For every Critical or Major finding, state whether GxP data or released product could be affected, and what retrospective assessment that triggers. A CAPA that corrects the procedure but never asks whether earlier results were sound is incomplete.
| Finding # | Data/product potentially affected | Retrospective assessment required | Assessment owner | Outcome |
|---|---|---|---|---|
<<FILL>> | <<FILL>> | <<FILL: yes, scope; or no, with rationale>> | <<FILL>> | <<FILL: pending / no impact confirmed / impact confirmed, see deviation ref>> |
7. Immediate actions taken during the audit
Record any containment action taken on the spot, such as quarantining an instrument or halting use of an asset, separately from the longer-term CAPA.
| Action | Asset | Taken by | Date/time | Confirmed effective |
|---|---|---|---|---|
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
8. Overall program-health conclusion
State the conclusion plainly, tied to the severity rollup, not asserted independently of it.
Based on the findings above,
<<FILL: N>>Critical,<<FILL: N>>Major, and<<FILL: N>>Minor findings were identified across a sample of<<FILL: N>>assets drawn from a population of<<FILL: N>>. The equipment and instrument qualification program at<<FILL: site>>is assessed as:<<FILL: Audit-ready / Conditional, remediation plan required before the stated deadline / Not ready, escalation required>>. This conclusion is based on<<FILL: state the specific finding(s) driving the conclusion, especially any single Critical finding>>.
9. CAPA and follow-up commitment
| Item | Entry |
|---|---|
| CAPAs opened this audit | <<FILL: count and references>> |
| Target closure for Critical findings | <<FILL: date, typically the shortest defensible interval>> |
| Target closure for Major findings | <<FILL: date>> |
| Follow-up verification method | <<FILL: re-audit of affected assets, document review, or both>> |
| Follow-up verification date | <<FILL>> |
10. Escalation and distribution
| Severity | Who is notified | Timing |
|---|---|---|
| Critical | <<FILL: e.g. Site Quality Head, Head of Validation, within 24 hours>> | <<FILL>> |
| Major | <<FILL>> | <<FILL>> |
| Minor | <<FILL: routine distribution with the full report>> | <<FILL>> |
11. References
21 CFR 211.68 (equipment calibration and controls), 211.182 (equipment use and cleaning records). EU GMP Chapter 3 (Premises and Equipment); EU GMP Annex 15 (Qualification and Validation), 2015 revision. USP General Chapter <1058>, Analytical Instrument Qualification. ICH Q9 (R1), Quality Risk Management. ISPE Commissioning and Qualification Baseline Guide, Volume 5.
Confirm the current version and clause numbers of each reference before issue.
12. Revision history
| Version | Date | Author | Summary of change |
|---|---|---|---|
<<FILL: 1.0>> | <<FILL: date>> | <<FILL: author>> | Initial issue. |
13. Approvals
| Role | Name | Signature | Date |
|---|---|---|---|
| Author (Auditor) | <<FILL>> | ||
| Reviewer (Validation/Engineering) | <<FILL>> | ||
| Approver (Site Quality Head) | <<FILL>> |
Filled specimen
Audit of a mid-sized biologics drug-substance and QC site, EML population 210 GxP assets, sample of 7 stratified across risk classes, plus a full-population data pull of periodic-review and calibration due dates.
Header: AUD-RPT-2026-014. Internal audit, 14 to 15 July 2026. Auditor: M. Cheng (independent of the validation function). Report date 22 July 2026. Sample: BRX-014 (bioreactor), HPLC-11 and GC-04 (Group C instruments), STZ-04 (autoclave), CHM-09 (stability chamber), BAL-0042 (balance), DL-07 (portable data logger).
Findings register (abridged):
| Finding # | Area | Asset | Description | Severity | Impact | CAPA ref | Status |
|---|---|---|---|---|---|---|---|
| F-01 | Change Control | BRX-014 | Impeller shaft replaced March 2026, no change record; 3 batches run since with no requalification impact assessment | Critical | 3 batches use undocumented equipment configuration; retrospective assessment required | CAPA-2026-088 | Open |
| F-02 | Periodic Review | BRX-014 | Last full periodic review 2022-01, none since, no CAPA raised for the miss | Major | Program-level: reviews on the most critical direct-impact asset are furthest overdue | CAPA-2026-089 | Open |
| F-03 | OQ | HPLC-11 | Group C instrument, audit trail capture never tested at OQ despite Group C classification | Major | Data-integrity control for release-testing instrument unverified since installation | CAPA-2026-090 | Open |
| F-04 | OQ | BAL-0042 | OQ tested only at 100 g and 200 g; instrument used down to 5 mg in routine work | Minor | Low-end use not challenged; no evidence of actual failure | CAPA-2026-091 | Open |
| F-05 | Documentation | STZ-04 | One execution record signed 9 days after test date, isolated instance | Minor | Contemporaneity gap, single record, package otherwise clean | CAPA-2026-092 | Closed, retraining completed |
Severity rollup: 1 Critical, 2 Major, 2 Minor. Full-population data pull found 6 additional assets (of 210) with periodic reviews overdue by more than 90 days, none previously flagged, corroborating the F-02 pattern rather than an isolated miss.
Data and product impact assessment: F-01 triggered a retrospective review of the 3 batches run on BRX-014 since the impeller change; Manufacturing and QA confirmed the replacement was like-for-like with no process-parameter shift, batches released with no hold, and the finding remains open only pending the formal change record and requalification impact assessment, not because product is suspect. F-03 triggered a targeted retrospective review of HPLC-11 audit trail entries for the prior 6 months using the raw system log; no unauthorized changes were found, but the control gap itself remains open until formally OQ-tested.
Overall program-health conclusion: Conditional, remediation plan required before the next scheduled inspection window (target: <<FILL: date>>). The single Critical finding (F-01) drives this conclusion; it is a control-gap finding with no confirmed product impact on investigation, but the missing change record and requalification assessment must close before the program can be called audit-ready. The periodic-review pattern (F-02 plus the 6 additional assets from the data pull) is the second driver and points to a systemic scheduling gap, not an isolated miss.
CAPA commitment: Critical finding target closure 30 days; Major findings target closure 60 days; follow-up verification by targeted re-audit of BRX-014, HPLC-11, and a fresh 10-asset periodic-review-status pull, scheduled <<FILL: date>>.
This specimen shows the report doing the two things a findings report has to do that a checklist alone cannot: it ties a Critical classification to an actual retrospective impact assessment with a stated outcome, and it uses the full-population data pull to tell the difference between an isolated miss and a systemic pattern before writing the conclusion.
Common inspection findings this report prevents
- A “Conditional” or “Pass” conclusion asserted with no severity rollup or findings register behind it.
- A Critical finding logged with no retrospective data/product impact assessment, leaving the real question, was any released product or data actually affected, unanswered.
- Findings from a small sample generalized to the whole program with no full-population data pull to confirm or rule out a systemic pattern.
- CAPAs opened with no target closure date or no follow-up verification method, so the audit’s findings quietly go stale.
- Critical findings routed through the same distribution and timing as Minor findings, with no defined escalation.
How to adapt this report
- Pair this report with your own audit tool or with the paired program audit checklist; this report is the write-up, not the walkthrough.
- Populate section 2 with your actual sampling technique so the conclusion’s coverage basis is visible to whoever reads the report later, including an inspector.
- For every Critical or Major finding, complete section 6 with a real assessment outcome, not just a placeholder; “pending” is acceptable only until the assessment is actually done.
- Set escalation timing in section 10 to match your own deviation/CAPA procedure’s severity-based notification requirements.
- Confirm every regulation in section 11 against the current published version before issue.