How do you calculate an audit readiness score?

Multiply the severity, occurrence, and detection scores together. With severity 6, occurrence 4, and detection 3 the calculator returns a combined audit-risk score of about 4.55 on its normalized scale.

What do severity, occurrence, and detection mean here?

Severity is how damaging a citation would be, occurrence is how likely the gap is actually present, and detection is how hard the gap is to catch before the auditor does. Higher detection scores mean harder to catch.

What is a good audit readiness score?

Lower is better — it means less audit risk. Since the score is relative, use it to rank items; the highest scores are your must-fix gaps before the audit, the lowest can be monitored.

How is this different from a standard FMEA RPN?

It uses the same severity-by-occurrence-by-detection logic as an RPN but is framed around audit exposure rather than product failure modes, so 'detection' means catching a gap before the auditor rather than before shipment.

Why keep the same scale across all items?

Multiplicative scores are only comparable when every item uses identical anchor definitions. Mixing a 1-5 and a 1-10 scale would make a low-risk item look worse than a genuine high-risk one.

Can I use this for supplier audits too?

Yes. The same three-factor model works for prioritizing supplier-audit gaps; just anchor severity to your supply risk and detection to your incoming controls.

QMS, CAPA & Quality System Management calculator

Audit Readiness Score Calculator

The Audit Readiness Score adapts classic FMEA-style risk math to certification-audit preparation, turning three judgments — how bad a finding would be, how likely the gap exists, and how hard it is to catch — into one comparable number. Quality managers and internal auditors use it to triage a self-assessment before an ISO 9001, AS9100, or IATF 16949 audit so limited prep time goes to the riskiest gaps first. It matters because not every open item carries the same audit exposure: a minor procedural gap that is easy to spot is far less dangerous than a severe, likely, hard-to-detect one. Scoring each item on the same scale keeps prioritization objective instead of driven by whoever argues loudest.

What this calculator does

Estimate audit readiness for qms, capa and quality system management using production-ready inputs so teams can rank risks and decide which issue needs containment, controls, or escalation first.
Use it when audit readiness in qms, capa and quality system management needs a defensible ranking against other qms, capa and quality system management risks for the next review.
It multiplies severity, occurrence, and detection scores into a single audit-risk priority number for ranking gaps.

Formula used

Audit readiness risk score = audit readiness severity score × audit readiness occurrence score × audit readiness detection score
Use the same scoring scale across comparable audit readiness risks.

Inputs explained

Audit finding severity (impact if cited):
Audit gap occurrence (likelihood present):
Audit gap detection difficulty:

How to use the result

Use it during pre-audit self-assessment or internal audit planning to decide which gaps to close first.
As a multiplicative index the score is only meaningful relative to other items scored on the identical scale; the absolute value has no standalone unit and shouldn't be compared across different scoring schemes.

Current U.S. benchmarks

U.S. manufacturing runs at 75.6% of capacity (Federal Reserve, May 2026). New factory orders are up 2.3% year over year (Census).

Common questions

How do you calculate an audit readiness score? Multiply the severity, occurrence, and detection scores together. With severity 6, occurrence 4, and detection 3 the calculator returns a combined audit-risk score of about 4.55 on its normalized scale.
What do severity, occurrence, and detection mean here? Severity is how damaging a citation would be, occurrence is how likely the gap is actually present, and detection is how hard the gap is to catch before the auditor does. Higher detection scores mean harder to catch.
What is a good audit readiness score? Lower is better — it means less audit risk. Since the score is relative, use it to rank items; the highest scores are your must-fix gaps before the audit, the lowest can be monitored.
How is this different from a standard FMEA RPN? It uses the same severity-by-occurrence-by-detection logic as an RPN but is framed around audit exposure rather than product failure modes, so 'detection' means catching a gap before the auditor rather than before shipment.
Why keep the same scale across all items? Multiplicative scores are only comparable when every item uses identical anchor definitions. Mixing a 1-5 and a 1-10 scale would make a low-risk item look worse than a genuine high-risk one.

Last reviewed 2026-05-12.