← Insights

Quality systems

NCRs done properly: from defect to disposition

July 2026 · 7 min read

A nonconformance report is the moment a quality system touches physical reality: a part, a batch, a delivery that is not what the drawing says it should be. What happens in the next hour - and in the next column of your log - determines whether that defect becomes a controlled, costed, learned-from event or a rumour that ships to a customer.

The mechanics are not complicated, but there is a right order and a set of decisions that must be made by the right people. Here is the whole path, defect to disposition to lesson.

First: control the material

Before any paperwork, the nonconforming product must be identified and segregated so it cannot be used or shipped by accident - ISO 9001 clause 8.7 in one sentence. Tag it, move it to quarantine, and record the quantity. Scope honestly: if the defect could affect more than the parts in front of you, the batch in the warehouse and the batch in transit are part of the same NCR. The question "how much of this do we have?" is cheaper to answer now than after the customer answers it for you.

Then: decide its fate - the five dispositions

Every NCR ends in exactly one of five decisions, and the discipline lies in who is allowed to make each:

• Use as is - the nonconformity is real but does not affect fit, function, safety or compliance. This is a concession, and it is never a shop-floor call: it needs engineering authority, and where the characteristic is customer-designated, the customer's written agreement.
• Rework - bring the product back to full drawing conformity. Reworked product re-enters normal inspection; rework that skips re-inspection is just a second chance to ship the defect.
• Repair - make the product functional without full conformity (a weld repair, an oversize insert). Like use-as-is, a repair is a concession and carries the same authority rules.
• Scrap - unrecoverable. Physically mark or destroy so it cannot wander back into stock; scrap has a way of resurrecting on night shift.
• Return to supplier - the defect arrived through goods-in. The cost and the corrective-action demand travel back with it, and the event belongs on the supplier's scorecard.

Record the disposition, the authority who made it, and the cost. Cost of nonconformance - material, labour, expedited freight - is the number that gets quality improvement funded, and an NCR log without costs is invisible at budget time.

Why you need two documents, not one

Nonconformance control has two audiences with incompatible needs. The register - one row per NCR - serves the system: counts, trends, aging, cost, the raw material for Pareto analysis. The printable form - one page per NCR - serves the part: it travels with the quarantined material, tells whoever picks it up what is wrong, what the disposition is, who authorised it and whether verification happened.

Teams that keep only a register end up with quarantine cages full of untagged mystery; teams that keep only forms have no idea what their top defect is. You need both - ideally in one file so nothing is copied twice and the register is always the single source of truth.

The log is a sensor: read the trends

The Pareto by defect type tells you what to fix first. Six months of NCRs sorted by frequency (or better, by cost) almost always shows two or three categories carrying most of the pain - and each of those deserves a CAPA with a real root cause, not another reminder to be careful.

Detected-at tells you how far defects travel before you catch them. A defect found at goods-in costs pennies; the same defect found at final test costs the value added in between; found by the customer, it costs the relationship. If your detection points cluster late, your inspection strategy - your control plan - is aimed at the wrong end of the process.

Aging tells you whether the process itself is healthy. An NCR open past 30 days is usually a disposition nobody wants to make; it should turn red on its own and appear in the management review without anyone compiling it.

An NCR closed without a root cause reference is a defect you have agreed to meet again.

Not every NCR justifies a full investigation - a one-off cosmetic blemish can be dispositioned and closed. But the repeat offenders in the Pareto, the customer escapes and anything safety-related earn the full treatment: containment, root cause, corrective action, effectiveness check. The NCR log and the CAPA log are two halves of one loop - the NCR records the wound, the CAPA removes the cause.