CAPA vs Corrective Action: What's Actually Different

CAPA stands for Corrective and Preventive Action. The word is plural on purpose: it is the system, not one of the two activities. Corrective action is the response to a problem that has happened; preventive action is the response to a risk that has not. CAPA holds both. See the broader CAPA guide and the focused corrective action guide.

Definitions

Corrective action — the structured response that eliminates the cause of a confirmed nonconformance. Trigger: NCR, complaint, audit finding, SCAR. See the corrective action process.

Preventive action — the structured response that eliminates the cause of a potential nonconformance before it occurs. Trigger: trend, FMEA, risk assessment, near-miss, lessons learned. See corrective vs preventive action.

CAPA — the management system that holds both, with screening, risk assessment, and (in regulated environments) explicit type tracking and approval gates.

The three structural differences

1. Screening

A CAPA system has an explicit screening step before opening the record. NCRs below a defined severity/frequency/risk threshold are dispositioned in the source system without escalating to CAPA. A corrective action system without screening tends to open a CAR for every NCR, which floods the log and dilutes attention.

2. Risk assessment

CAPA requires an explicit risk assessment (severity, occurrence, detection) recorded on every entry. Corrective action processes outside regulated environments often skip the formal scoring. In ISO 13485 and FDA 21 CFR 820 systems, the risk assessment is auditable on every record.

3. Type field and parallel handling

CAPA records carry a Corrective / Preventive type. The system handles both with the same workflow but different trigger logic and slightly different evidence (preventive records have no containment step). A standalone corrective action system has no place for preventive entries.

Industry usage

• Medical device, pharma, IVD — always "CAPA." The term is in the regulation (21 CFR 820.100, ISO 13485 clause 8.5.2 / 8.5.3).
• Aerospace — usually "corrective action" in day-to-day language; AS9100 requires both corrective and preventive activity, often run through a combined CAPA log at larger primes.
• Automotive — "corrective action" most often, with the 8D process as the de facto workflow. IATF 16949 requires corrective action plus risk-based preventive activity; some Tier 1s formalize it as CAPA, others do not.
• General manufacturing (ISO 9001) — "corrective action," with preventive activity living in risk-based thinking under clause 6.1.

What the standards say

• ISO 9001:2015 clause 10.2 — Nonconformity and corrective action. Preventive activity lives in clause 6.1 risk-based thinking.
• IATF 16949:2016 clause 10.2 — Builds on ISO 9001 with problem-solving and error-proofing requirements.
• AS9100D clauses 10.2 and 10.3 — Corrective action plus continual improvement.
• ISO 13485:2016 clauses 8.5.2 (CA) and 8.5.3 (PA) — Both explicit, both auditable separately.
• FDA 21 CFR 820.100 — Corrective and preventive action as a named subsystem of the Quality System Regulation; FDA inspections target it directly.

What this means in practice

For a medical device contract manufacturer, the CAPA system is a hard regulatory requirement and the FDA inspectors will read the procedure, sample records, and verify the workflow. For an automotive Tier 1, calling the same system "corrective action" is common and accepted as long as the risk-based preventive activity is demonstrable (PFMEA, layered process audits, risk register). For an ISO 9001 contract machine shop, a documented corrective action procedure with evidence of risk-based thinking covers the requirement without needing a dedicated CAPA module.

The practical advice: use the term your industry uses, but make sure both halves of the work (corrective response and preventive risk reduction) are happening. Auditors are looking for the activity, not the label.

FAQ

Is CAPA the same as corrective action?

No. CAPA is the system that includes both corrective action and preventive action, with screening, risk assessment, and (in regulated environments) explicit type tracking. Corrective action is one element inside CAPA.

When do people say CAPA vs corrective action?

Regulated industries — medical device, pharma, IVD — say CAPA. Aerospace, automotive, and general manufacturing more often say corrective action even when running essentially the same process.

Do I need a separate CAPA system if I'm under ISO 9001?

Not formally. ISO 9001 requires corrective action plus risk-based thinking; both can live in the same workflow. ISO 13485 and FDA 21 CFR 820 environments require a named CAPA system.

Is the 8D process a CAPA process?

8D is a corrective action method, widely used in automotive. It maps cleanly onto the CAPA process steps but does not by itself include the screening, risk assessment, or preventive-side elements that make a system CAPA-compliant for FDA or ISO 13485.