What Is CAPA and Why Does It Matter More Than Auditors Let On

By Robert Low, Lead Management System Specialist

CAPA — Corrective and Preventive Action — is one of those terms that gets used constantly in quality management without always being explained clearly. Most people in a manufacturing environment know roughly what it means, but the distinction between “corrective” and “preventive,” and why both matter, often gets lost.

The Basic Definition

A corrective action fixes the cause of a problem that has already happened, so it does not happen again. A preventive action addresses a potential problem before it has occurred at all, usually identified through trend analysis, risk assessment, or a near-miss that did not become a full nonconformance.

In practice, most CAPA activity in a typical manufacturer is corrective — responding to an actual nonconformance that has already been logged. Preventive action tends to get less attention, partly because it requires proactively looking for problems rather than reacting to ones that have already surfaced.

Why CAPA Is Different From Just “Fixing the Problem”

Here is the distinction that matters most and is most often missed in practice: fixing the immediate issue is not the same as completing a CAPA. If a batch fails because a supplier sent out-of-specification raw material, swapping in a different batch of material fixes that specific batch. It does not address why the out-of-spec material was accepted in the first place, or what changes to supplier monitoring prevent it happening again with the next delivery.

A properly closed CAPA requires identifying the root cause — not just the immediate cause — and implementing a change that addresses that root cause specifically. This is the part that gets rushed under time pressure, and it is also the part auditors scrutinise most closely.

Why This Is Such a Common Audit Finding

Auditors flag CAPA processes constantly, and it is usually not because nothing was done about the nonconformance. It is because:

• The root cause analysis was superficial — “human error” written down without asking why the error was possible in the first place
• The corrective action addressed the symptom, not the cause, so the same nonconformance recurs months later
• The CAPA was closed without verification — nobody checked, after implementing the fix, whether it actually worked
• There was no link between the CAPA and the original nonconformance record, making it hard to prove the loop was actually closed

That last point is where disconnected systems cause real problems. If a nonconformance lives in one spreadsheet and the CAPA lives in another, with no enforced link between them, it becomes entirely possible for a CAPA to get marked “complete” without anyone confirming it actually resolved what it was supposed to resolve.

What Effective Root Cause Analysis Actually Looks Like

Structured root cause tools — the “five whys” technique is the most commonly used — exist precisely because the first answer to “why did this happen” is rarely the real answer. “The supplier sent bad material” leads to “why was bad material accepted” leads to “the goods-in check did not catch it” leads to “the goods-in check does not actually test for this parameter” — and now you have found something worth fixing.

Skipping this process and going straight to the first available explanation is exactly how the same nonconformance ends up recurring eighteen months later, with everyone wondering why “we already fixed this.”

What Good CAPA Management Requires Structurally

For CAPA to function properly rather than become a paperwork exercise, three things need to be true:

• Every CAPA needs a named owner and a real due date, not an open-ended commitment
• Closure should require evidence, not just a status change — verification that the action was actually implemented and actually worked
• The CAPA needs to remain linked to its originating nonconformance permanently, so the full history is visible to anyone reviewing it later, including an auditor

When these three things are enforced by the system rather than relying on individual discipline, CAPA stops being the recurring audit finding it is in so many manufacturing operations.