Template

    Corrective Action Request System

    In short

    A corrective action request (CAR) system is the way a site raises, assigns, tracks and closes corrective actions so each problem is fixed at its cause. It holds a request form, an owner, a due date, a root cause, verification and a closure record for every request. It can be paper, a spreadsheet or software.

    Key facts

    • Triggers: audit findings, non-conformances, customer complaints, repeat incidents and failed inspections.
    • Core record: the request, owner, due date, root cause, action, verification and closure, all on one form.
    • Standard link: ISO 9001:2015 clause 10.2 expects nonconformities to be reacted to, their causes evaluated and the effectiveness of actions reviewed.
    • Health measure: the number of open and overdue requests, and how many repeat the same cause.

    By Matt Mafrici, CEO and founder, TeamAssurance · Published

    LinkedIn Email

    What does a corrective action request system do?

    It makes sure a problem found once is fixed for good. Without a system, issues raised at an audit or on the floor live in emails and notebooks, owners change and nobody checks whether the fix worked. A CAR system gives every request one record, one owner and one closure test, and shows leaders what is still open.

    What goes on a corrective action request form?

    FieldWhat to record
    CAR number and dateA unique reference so the request can be found and counted
    Raised by and sourceAudit, inspection, complaint, incident or non-conformance report, with the reference
    Problem statementWhat was found, where, when and the requirement it breaks, with evidence
    Severity and typeMinor, major or critical; first occurrence or repeat
    ContainmentWhat was done straight away to stop it reaching a customer or hurting someone
    Root causeThe cause found with a method such as the 5 whys or a fishbone, not a symptom
    Corrective actionsOne row per action: what changes, owner, due date
    VerificationThe measure and period that will show the fix worked, and who checks
    ClosureClosed by, date, and whether the procedure, training or inspection plan changed

    What are the stages of a corrective action request?

    1. Raise. Anyone can raise a request with the evidence attached. The form is short enough to complete on the floor.
    2. Triage. A quality or area lead confirms it is valid, sets severity and assigns one owner.
    3. Contain. The owner stops the problem spreading and records what was done.
    4. Find the root cause. The team asks why until it reaches a cause that, if removed, would prevent a repeat.
    5. Act. Actions are agreed, owned and dated, and linked to the cause they address.
    6. Verify. After the agreed period, someone other than the owner checks the result against the measure.
    7. Close. The request is closed only on verified evidence, and the lesson goes back into the standard.

    Who owns what in a CAR system?

    RoleOwns
    Person who raises itAn accurate description and the evidence
    Area or quality leadTriage, severity and keeping the register clean
    Action ownerContainment, root cause and the action plan
    VerifierThe effectiveness check and the closure decision
    Site leadershipThe weekly or monthly review of open, overdue and repeat requests

    Paper, spreadsheet or software: which fits?

    Paper formSpreadsheetSoftware
    Raising on the floorEasyHard without a laptopEasy on a phone or tablet
    Reminders for due datesNoneManualBuilt in
    Evidence and photosStapled onSeparate filesAttached to the record
    Spotting repeatsReading old formsFilter and searchReport by cause or area
    Audit trailWeakEasy to overwriteDated history of changes

    A spreadsheet is a fair start for a small site. It tends to break once several people raise requests, because no one is reminded and old rows are quietly edited.

    What should you look for in a CAR system?

    • One record per request, from raising to verified closure, with a history of changes.
    • A named owner and due date on every action, and reminders when they pass.
    • A required root cause and verification step before a request can close.
    • Links back to the audit, inspection or non-conformance that started it.
    • A review view of open, overdue and repeat requests by area, cause and source.
    • Simple raising on a phone, because most problems are found away from a desk.

    Common mistakes

    • Closing the request when the action is done rather than when the result is checked.
    • Treating "retrain the operator" as the root cause.
    • Letting one person raise, fix and close the same request.
    • No limit on how long a request can stay open, so the register fills with stale items.
    • Counting requests closed as the measure of success instead of repeats prevented.

    Step by step

    1. Raise the request. Record the problem, where it was found, the requirement it breaks and the evidence on one form.
    2. Triage and assign. Confirm the request is valid, set its severity and give it a single owner and a due date.
    3. Contain the problem. Stop it reaching customers or causing harm and note what was done and when.
    4. Find the root cause. Use the 5 whys or a fishbone diagram to reach a cause that, once removed, prevents a repeat.
    5. Agree and carry out actions. List each action with an owner and date and link it to the cause it addresses.
    6. Verify effectiveness. After the agreed period, a second person checks the result against the stated measure.
    7. Close and review. Close on verified evidence, update the standard, and review open, overdue and repeat requests in the regular meeting.

    A worked example

    A packaging plant kept finding the same carton print errors at audit, and each one was logged in a spreadsheet and closed once the batch was reworked. After it moved to a request form with a required root cause and a four-week verification, the team saw that the errors traced to a plate changeover step with no check. The action added a first-off sign-off at every changeover. The verifier, from another shift, checked the next twenty changeovers before the request was closed, and the repeat finding stopped appearing at audit.

    In TeamAssurance

    In TeamAssurance a corrective action can be opened from an audit finding, inspection or non-conformance with the evidence attached, then owned on the area's tier board with a due date. Open and overdue actions come up in the daily and weekly tier meetings, and the verification is tracked as a dated action so the request does not close until it is checked. Reports show open, overdue and repeat actions by area or cause.

    FAQ

    Frequently asked questions

    What is a corrective action request?

    A corrective action request, or CAR, is a formal record that asks for a problem to be fixed at its root cause. It names the problem, the owner, the due date and how the fix will be checked, and stays open until that check is done.

    What is the difference between a CAR and a CAPA?

    A CAR is the request that starts a corrective action. CAPA is the wider process that covers corrective and preventive action together, including investigation and effectiveness checks. Many sites use the two terms for the same workflow.

    Who can raise a corrective action request?

    Anyone who finds a problem, from an operator to an auditor. The area or quality lead then checks it is valid, sets the severity and assigns an owner, so raising stays easy while ownership stays clear.

    How long should a corrective action request stay open?

    Set a due date for each action and a fixed time limit by severity, for example shorter for critical issues. Overdue requests should come up at the regular review so they are resolved, re-planned with a reason or escalated.

    Is a spreadsheet enough for a corrective action system?

    It can work for a small site with few requests. It usually struggles once many people raise requests, because reminders, evidence and a reliable change history are manual. Software suits sites that need to show an audit trail.

    About the author

    Matt Mafrici

    CEO and founder, TeamAssurance

    Operations and continuous improvement practitioner; builds daily management systems with manufacturers, miners, food and pharmaceutical producers in Australia and abroad.

    LinkedIn profile · All articles