CAPA — Corrective and Preventive Action

CAPA is a quality system process for identifying, investigating, and eliminating the causes of non-conformances (Corrective Action) and potential non-conformances (Preventive Action). It is a core requirement of ISO 9001, IATF 16949, ISO 13485, and FDA 21 CFR Part 820.

Why companies use it

·Required by all major quality management standards — a quality system without CAPA is non-compliant
·Prevents recurrence of quality problems by addressing root causes, not just symptoms
·Creates a traceable audit trail for regulators and customers showing that issues are systematically resolved
·Trend analysis of CAPA data identifies systemic weaknesses in the quality system before they escalate

What hiring managers look for

·The volume and closure rate of CAPAs is a live indicator of quality system health — engineers must understand how to manage it
·In regulated industries (medical devices, aerospace), improper CAPA management can result in FDA warning letters or customer disqualification
·Effective CAPA requires root cause analysis skills, not just administrative closure
·Preventive Action (PA) — identifying and acting on potential issues before they occur — is rarer and more valued than Corrective Action

Typical interview questions

What is the difference between Corrective Action and Preventive Action?

How do you verify that a corrective action was effective after implementation?

What would you do if you had 40 open CAPAs and no time to address them all?

How do you prioritise which CAPAs to work on first?

Describe a CAPA you led from problem identification to verified closure.

Common mistakes

·Treating CAPA as a paperwork process — opening and closing CAPAs without genuine root cause analysis or effectiveness verification
·Not differentiating the corrective action (fixes the specific event) from the systemic action (prevents recurrence across the system)
·Letting CAPAs age open indefinitely — auditors flag over-age open CAPAs as evidence of an ineffective system
·Not verifying effectiveness — closing a CAPA without checking that the issue did not recur is a common audit finding
·Opening too many low-priority CAPAs, overwhelming the system and making it impossible to focus on what matters

Real engineering example

A medical device manufacturer received a customer complaint about labelling errors on a batch of surgical instruments. Corrective Action: quarantine the batch, re-label under controlled conditions, update the process checklist. Preventive Action: root cause analysis found the labelling template was stored in an uncontrolled shared folder, allowing accidental modification. The template was moved to a document control system with change control and revision history, eliminating the systemic risk across all product families.

Topics covered

CAPAcorrective actionpreventive actionqualityISO 9001FDAnon-conformance