Adding a CAPA
Last updated
Last updated
CAPA Name
The individual name given for the CAPA.
Status
The term status refers to the current condition or state of a Corrective and Preventive Actions (CAPA).
Open - This status indicates that a CAPA has been identified and is under investigation. At this stage, further investigation or analysis may be required to determine the appropriate action to take.
Closed - This status indicates that the CAPA has been implemented and the corrective or preventive action has been completed. At this stage, the results of the action taken may be evaluated to determine if the issue has been resolved satisfactorily.
Rating
Minor - This CAPA is seen as a minor improvement to be made to the organisation.
Major - This CAPA is seen as a major improvement or correction that must be made by the organisation.
CAPA Owner
The CAPA Owner section refers to the person responsible for implementing and managing the corrective and preventive actions identified as part of the ISMS.
Identified By
The person responsible for identifying this CAPA.
Asset Affected
Select an asset from the asset list which is most effected by the CAPA.
CAPA Description
The description section offers a detailed and complete summary of the CAPA, providing the reader with a clear understanding of what it entails.
Date Identified
The specific date on which the CAPA was raised.
Date Completed
The specific date on which the CAPA was actioned. If ongoing then leave section blank.
What Investigation was carried out?
Provide a detailed explanation of what investigation was carried out.
Root Cause Analysis
A root cause analysis (RCA) for a Corrective and Preventive Action (CAPA) in an Information Security Management System (ISMS) is a process of identifying the underlying cause(s) of an issue or problem in the organisation's security controls, processes, or procedures.
The purpose of conducting an RCA is to determine the source of the problem and prevent its recurrence in the future. The RCA process involves identifying the problem, analysing the problem's symptoms, identifying the contributing factors, and identifying the root cause(s) of the issue.
Corrective Action
Describe what actions have been identified as needed and how they have been put in place.
Have you verified that the actions are effective?
If the corrective actions have been verified to be effective in solving the problem.