The CAPA Process: Corrective and Preventive Action

Imagine a manufacturer who discovers the same dimensional defect for the third time. Each time, the team removes the affected components, resumes production, and records the incident. Yet the problem keeps returning.

Removing defective parts helps handle an immediate issue, but it doesn’t explain why the defect occurred or what needs to change to prevent it from happening again.

That’s the purpose of the Corrective and Preventive Action (CAPA) process. It helps organizations investigate quality problems, address their underlying causes, and find similar risks before they lead to further challenges. It also provides a documented way to demonstrate whether the actions taken were effective.

What Is a CAPA?

CAPA stands for corrective and preventive action. It is part of a quality management system (QMS) and addresses existing nonconformities and potential problems.

The three terms, correction, corrective action, and preventive action, explain how CAPA works:

A correction examines what went wrong, corrective action addresses why, and preventive action eliminates future risks.

Not all isolated deviations require a full CAPA investigation, of course. The decision should reflect the severity, frequency, potential consequences, and applicable quality or regulatory requirements.

The CAPA Process: Six Practical Steps

1. Identify and document the problem

CAPA investigations typically start with customer complaints, internal audits, failed inspections, supplier reports, safety incidents, or adverse trends in production data. Whatever the source, the first step is to understand what happened, assess its impact, and decide whether further investigation is necessary.

For example, suppose a manufacturer’s quality control team identifies repeated dimensional defects in components produced on one machine. The team records the findings, checks recent inspection results, and reviews production records to determine whether other batches may be affected.

Because the defect recurs, the team opens a CAPA investigation and quarantines the affected batch to stop potentially defective components from reaching customers.

This immediate containment measure limits the impact while the team investigates the underlying cause.

2. Investigate the root cause

Root cause analysis assesses why the failure happened and what conditions allowed it. The investigation should follow the evidence, not settle on the first plausible explanation.

Depending on the complexity of the issue, teams may use:

• 5 Whys to investigate a relatively straightforward chain of causes.
• Fishbone diagrams for potential causes involving people, equipment, materials, methods, and working conditions.
• Fault tree analysis to examine complex failures that involve several contributing events.

In the manufacturing example above, the team compares machine settings, operator practices, maintenance records, and the approved work instruction.

The initial suspicion is operator error. However, the investigation reveals that the instruction contains an obsolete setup value. Different operators have compensated for the discrepancy in different ways, producing inconsistent results.

Retraining employees to follow the same incorrect instruction would leave the cause unresolved. The findings instead point to a document control failure.

3. Develop a CAPA action plan

Once the cause has been established, develop a CAPA plan that specifies what needs to change.

Each action should have an owner, a deadline, the necessary resources, and a defined outcome. The plan should also identify any approvals, document revisions, or training required before the change takes effect.

In our previous example, the corrective action plan should revisit the setup instruction, verify the approved machine settings, and train relevant operators.

The team also reviews other production lines with the same instruction. It discovers that a second line contains the obsolete value, although no defects have been reported there. An instruction update prevents future failure. 

4. Implement and document the actions

Implement the approved changes and keep evidence that each action is complete.

Document control should verify that obsolete versions are withdrawn and that employees can access the current instructions. Training records must display who received the training and, where appropriate, how they performed with the new instructions. 

Changes affecting equipment, products, or validated manufacturing processes may also require change-control approval, additional testing, or process validation.

The CAPA record should connect the investigation findings to the actions taken and the evidence of implementation to help a reviewer establish what changed and why.

5. Verify effectiveness

How do we know that CAPA has succeeded? Through an effectiveness check. Establish criteria for success or failure and the monitoring period.

Depending on the issue, evidence may include inspection results, production data, customer complaint trends, or follow-up audits. 

Let’s go back to our manufacturing example. After revising the machine setup instructions, the manufacturer monitors the measurements over a predefined number of production runs. The team checks whether dimensions consistently remain within tolerance and whether operators follow the approved settings.

If defects recur or results fail to meet the acceptance criteria, the team must reassess its findings and identify additional corrective actions. 

6. Close the CAPA and communicate the findings

Close the CAPA once the required actions are complete and the goals have been reached. 

The final record should mention the original problem, confirmed root cause, approved actions, implementation evidence, effectiveness results, and closure decision.

Share relevant findings with other departments or facilities that may have the same issues. Update associated procedures, work instructions, training materials, and risk assessments as needed.

For the manufacturing team, closure means the revised instructions are in use, the affected employees have been trained, and subsequent production results meet the expected criteria. 

How to Document and Manage the CAPA Process

A CAPA procedure defines how employees find, investigate, address, and close quality issues. It should provide clear instructions and allow investigations to vary based on the severity and complexity of each problem.

It also needs to work within the organization’s existing quality management system. A corrective action may begin with an inspection failure, but it’s the staff who must implement changes, train employees, and run risk assessments.

What Should a CAPA Procedure Include?

A well-documented procedure must establish the requirements for each stage of the investigation.

A recurring product defect with potential safety implications warrants a more extensive investigation than a minor, isolated documentation error. The procedure should accommodate both without leaving any uncertainty about the steps staff need to follow.

How CAPA Connects with Other QMS Processes

CAPA findings often require changes beyond the department where the original problem occurred:

• Nonconformity management provides the initial record of a failure, including its impact and any immediate correction or containment. Significant findings or recurring problems can trigger a CAPA investigation.
• Risk management helps teams prioritize investigations and find similar vulnerabilities in other products, processes, or facilities. CAPA findings also display risks missing from an existing assessment.
• Change control guarantees that proposed modifications are reviewed and approved before implementation. This step is especially important when the required actions affect equipment, specifications, or existing processes.
• Document control establishes that employees use the current versions of procedures, work instructions, and specifications. When an investigation identifies an outdated instruction as the root cause, the obsolete version must be withdrawn to limit confusion. 
• Internal audits and management review can identify recurring issues, review overdue actions, and reveal weaknesses in how the organization manages CAPA.

What Should a CAPA Record Contain?

Each CAPA record should connect the original finding with the decisions and evidence that followed. Anyone who reviews the CAPA should be able to see what went wrong, why it happened, what changed, and whether the fix worked.

For example, if a corrective action changes an equipment setting, the record should link to the approved change, revised work instruction, relevant training records, and subsequent inspection results.

Common CAPA Mistakes

1. Wrong root cause analysis

An investigation that stops at the first plausible explanation often addresses symptoms, not causes. 

Operator error, for example, may describe what happened without explaining why. Unclear instructions, unsuitable equipment, inadequate process controls, or an uncontrolled change may have contributed to the failure.

Before you take any corrective action, review all available evidence and assess how the identified cause led to the problem and if any other causes may have contributed.

2. Vague corrective action plans

Actions such as “improve inspections” or “increase employee awareness” are difficult to implement consistently or quantify objectively.

Instead, specify the required change, assign an owner, set a deadline, and define the evidence needed to prove that the task was completed. 

For example, a plan to improve inspections could require revising a specified inspection procedure, training affected employees, and reviewing inspection records after implementation.

3. Closing CAPAs before verifying effectiveness

An approved procedure, completed training session, or repaired machine simply shows that an action was taken. Unfortunately, this does not necessarily mean that the problem has been resolved.  

Close a CAPA only when the evidence meets the predefined acceptance criteria. If it doesn’t, the team needs to determine why and act accordingly. 

CAPA and Regulatory Requirements

CAPA requirements depend on the organization’s industry, applicable standards, and regulatory jurisdiction.

For example, under ISO 9001, organizations must: 

• respond to nonconformities
• understand the need to tackle their causes
• implement the right corrective actions
• review their effectiveness. 

As for the medical device industry, manufacturers must consider sector-specific quality management and regulatory requirements. In the United States, the FDA’s Quality Management System Regulation (QMSR), effective February 2, 2026, incorporates ISO 13485:2016 by reference.

We mention this to stress that a written CAPA procedure does not, by itself, mean regulatory compliance. Organizations must show records that prove they followed processes and took the necessary steps to fix the problem. 

During an audit or regulatory inspection, reviewers will examine the original finding, investigation records, and rationale behind the selected actions. They will want to see how the changes were implemented and how effective they were.

Clearer CAPA Documentation with TimelyText

A CAPA investigation may identify the right solution, but employees still need clear instructions on how to implement it. When corrective actions change how work is performed, the relevant procedures, work instructions, and training materials must follow suit and reflect those changes, or your staff may get confused.

TimelyText works with subject matter experts to develop and revise technical documentation, including standard operating procedures, work instructions, process maps, manuals, and training materials.

If your CAPA process requires new procedures, revised work instructions, or updated training materials, talk to TimelyText about your documentation needs! We are a trusted technical writing service and instructional design consulting partner for Fortune 500 companies worldwide. 

• About the Author
• Latest Posts

Brant Wilkerson-New( Marketing + Recruiting Lead )

I’m a storyteller!

Exactly how I’ve told stories has changed through the years, going from writing college basketball analysis in the pages of a newspaper to now, telling the stories of the people of TimelyText. Nowadays, that means helping a talented technical writer land a new gig by laying out their skills, or even a quick blog post about a neat project one of our instructional designers is finishing in pharma.

• SOP Vs. Work Instructions: What's the Difference?
• The CAPA Process: Corrective and Preventive Action
• DITA in Technical Writing: What It Is and Why It Matters