Template

    Corrective Action Plan Template

    In short

    A corrective action plan template is the form a team uses to stop a problem from happening again: it records the problem against the requirement, the containment already in place, the root cause, each corrective action with an owner and due date, how effectiveness will be checked, and who closes it. This template fits audit findings, non-conformances, incidents and customer complaints.

    Key facts

    • Use: audit findings, non-conformance reports, incidents and near misses, customer complaints, repeat breakdowns.
    • Core fields: problem, containment, root cause, action, owner, due date, verification of effectiveness, closure.
    • Standards: ISO 9001 and ISO 45001 clause 10.2 require action on the cause and a review of its effectiveness.
    • Rule of thumb: every action names one owner and a date; the plan closes only when the result is verified, not when actions are done.

    By Matt Mafrici, CEO and founder, TeamAssurance · Published

    LinkedIn Email

    The template

    Plan number: · Date raised: · Raised from (audit, NCR, incident, complaint, board measure): · Area / process: · Plan owner: · Target close date:

    SectionFieldEntry
    1. ProblemWhat happened, where, when, how often · Requirement not met (procedure, specification, standard clause, target) · Evidence (photos, data, records) · Source reference (NCR or audit finding number)
    2. ContainmentImmediate action already taken · Who, when · Is anything else at risk (other lines, shifts, batches, sites)?
    3. Root causeMethod (5 whys, fishbone, data) · Root cause statement · Why it was not detected earlier
    4. Corrective actionsOne row per action, in the table below
    5. VerificationMeasure of effectiveness · Check date and period · Result · Verified by
    6. ClosureStandard, procedure or checklist updated · Shared with (other teams or sites) · Closed by, date

    Action table

    #Action (addresses which cause?)Type (correct / prevent / standardise)Hierarchy-of-control level (safety)OwnerDueStatusEvidence
    1
    2
    3

    What is the difference between a corrective action plan and an NCR?

    A non-conformance report records one failure to meet a requirement and what was done with the affected items. A corrective action plan is the part that removes the cause, and one plan can cover several NCRs, an audit finding or an incident. Many sites raise the NCR first and open a corrective action plan when the root cause needs more than a quick fix, or when the same NCR keeps returning. The NCR template on this site has the corrective action as section 6; use this plan when that section needs its own owner, timeline and review.

    A filled example

    FieldEntry
    ProblemCAP-0093 · Internal audit, 4 Sep · Forklift pre-start checks missing on 9 of 30 days sampled across two shifts · Requirement: site procedure SP-12, pre-start before first use each shift
    ContainmentSupervisor checked every forklift on both shifts the same day; one unit tagged out for a faulty horn
    Root causePaper checklists kept in the office, 150 m from the forklift bay; night shift starts before the office opens; nobody reviews missing checks
    Action 1Move pre-start to a phone checklist at the bay (shift supervisor, 11 Sep)
    Action 2Missing pre-start shown on the Tier 1 board each morning (team leader, 11 Sep)
    Action 3Same review at the two other warehouses (operations manager, 30 Sep)
    Verification30 consecutive days with 100 per cent pre-start completion, checked 15 Oct; result met
    ClosureSP-12 updated to rev 5; shared at Tier 3; closed by the site manager, 17 Oct

    How do you write a good corrective action?

    • Tie each action to a root cause you listed. An action that matches no cause is a guess.
    • Write it as a change to the process, not a reminder. "Retrain operators" on its own rarely stops a repeat; changing the checklist, the layout or the equipment does.
    • For safety, aim as high on the hierarchy of control as is reasonably practicable and record the level.
    • Give one person ownership and a real date. "Maintenance team, ASAP" is not an owner or a date.
    • Decide how you will know it worked before you start, so verification is a check, not a debate.

    Common mistakes

    • Closing the plan when the actions are ticked off, before anyone checks the result.
    • Root cause written as "human error" or "operator did not follow procedure".
    • Containment recorded as the corrective action.
    • Plans kept in a spreadsheet nobody reviews, so overdue actions sit for months.
    • The same problem raised again next quarter under a new number.

    Corrective action plans inside daily management

    Open plans and their actions belong on the tier board, not in a separate register. The Tier 1 huddle sees actions due that day; the Tier 2 meeting reviews overdue actions and plans waiting for verification; repeat causes go up to Tier 3 as improvement projects or A3s. When the verification date arrives it is a dated action like any other, which is what stops plans being closed on paper only.

    Step by step

    1. Describe the problem. Record what happened against the specific requirement, with data, photos and the source reference.
    2. Contain. Record the immediate action already taken and check whether other lines, shifts or sites are at risk.
    3. Find the root cause. Use 5 whys or a fishbone with the people who run the process, and ask why it was not detected.
    4. Plan the actions. One or more actions per root cause, each with a single owner, a due date and, for safety, the hierarchy-of-control level.
    5. Verify effectiveness. Check the agreed measure over the agreed period; if it has not held, go back to the root cause.
    6. Standardise and close. Update the procedure or checklist, share the lesson with other teams, then close the plan.

    A worked example

    A food manufacturer had 46 open corrective action plans from audits and customer complaints, tracked in a spreadsheet the quality team updated monthly. Half were overdue and a third had been closed without any check. The site moved every open action onto the area tier boards with a named owner, added a verification date to each plan, and put overdue plans on the Tier 2 agenda every Tuesday. Within three months the open list was down to 12, and two plans that had been closed on paper were reopened when their verification checks failed.

    In TeamAssurance

    In TeamAssurance a non-conformance or failed audit check opens a record with containment, root cause and corrective actions, each action is owned on the tier board with a due date, and the effectiveness check is tracked as a dated action so the plan is verified before it closes. Reports show open, overdue and repeat corrective actions by area and cause for the Tier 2 review.

    FAQ

    Frequently asked questions

    What should a corrective action plan include?

    The problem against the requirement, containment, root cause, actions with an owner and due date for each, how and when effectiveness will be verified, and closure with the updated standard. The template above has all six sections in that order.

    What is the difference between corrective and preventive action?

    Corrective action removes the cause of a problem that has already happened so it does not recur. Preventive action removes the cause of a potential problem before it happens, for example applying the same fix to similar lines. Together they make up CAPA.

    How long should a corrective action plan take?

    Containment the same day, root cause and actions agreed within one to two weeks, actions completed within 30 to 60 days, and verification over a period long enough to show the problem has stopped. Anything overdue goes on the Tier 2 agenda.

    Who should own a corrective action plan?

    One person close to the process, usually the area supervisor or process owner, with quality or safety supporting the root cause work. Each action can have a different owner, but the plan has one.

    When is a corrective action plan closed?

    When the verification shows the result has held, the procedure or checklist has been updated and the lesson has been shared. Completing the actions is not enough on its own.

    About the author

    Matt Mafrici

    CEO and founder, TeamAssurance

    Operations and continuous improvement practitioner; builds daily management systems with manufacturers, miners, food and pharmaceutical producers in Australia and abroad.

    LinkedIn profile · All articles