CAPA — Corrective and Preventive Action — is the process of investigating a quality problem, fixing its root cause, preventing recurrence, and proving the fix actually worked. It's the single most-audited element of a quality system, because CAPA is where a real quality process either closes the loop or quietly leaves it open.
Root cause analysis — named methodologies, not vague references
"Root cause analysis" as a phrase means little without a named methodology behind it. The two most commonly used and auditor-recognized approaches:
- Five Whys — repeatedly asking "why did this happen" (typically five times) until you reach a systemic cause rather than a surface symptom.
- Fishbone / Ishikawa diagram — mapping potential causes across categories (people, process, equipment, materials, environment) to systematically explore contributing factors rather than jumping to the first plausible explanation.
A real, documented failure pattern
A company tracking 200+ open CAPAs across paper forms and Excel couldn't produce a clear status report when an inspector asked for one — resulting in a Form 483 that could have been avoided with a system that made "how many CAPAs are open right now" a one-click answer.
Corrective action vs. preventive action
Corrective action fixes the specific problem that already happened. Preventive action addresses the systemic cause so the same category of problem doesn't recur elsewhere in the organization. A CAPA that implements only a corrective action — fixing this one instance — without a preventive component hasn't actually closed the loop on the underlying risk.
The step most systems skip: effectiveness verification
Implementing a corrective action is not the same as verifying it worked. A defensible CAPA process requires a documented effectiveness check — evidence, collected after a defined period, that the root cause actually stopped recurring — before the CAPA can be marked closed. This is the single easiest gate to skip under deadline pressure, and the single most valuable one to enforce structurally rather than leave to individual discipline.
A complete CAPA record
- Documented root cause via a named methodology (Five Whys, fishbone, or equivalent).
- Distinct corrective action (immediate fix) and preventive action (systemic fix) tracked separately.
- A mandatory effectiveness check before closure is possible.
- An e-signature on closure, capturing who verified effectiveness and when.
Ready to see this in your own lab? Book a free ValiCore demo.