Supplier Audit & CAPA Tracker

Corrective and Preventive Action — the structured response to an audit finding. Corrective action fixes the immediate problem (the defect, the gap); preventive action addresses the root cause so it doesn't recur (the process change, the control added). A complete CAPA does both, and the audit isn't truly closed until the actions are VERIFIED effective — not just promised. CAPA is the difference between an audit that finds the same problems every year and one that drives lasting improvement: the finding identifies, the CAPA resolves, the verification confirms.

Because findings are problems identified, not problems solved. An audit report listing non-conformances has accomplished nothing if those non-conformances persist — the supplier still has the gaps, and your supply chain still has the risk. The audit's purpose is improvement, achieved only when corrective actions close the findings and verification confirms they worked. Stopping at 'findings issued' is why some audit programs are expensive theater: lots of findings, no resolution, same issues recurring. The board's stages past 'findings issued' are where the actual value is realized.

Common types: initial qualification (before approving a new supplier — can they meet requirements?), periodic surveillance (routine re-verification of approved suppliers), for-cause (triggered by a quality problem, complaint or incident — what went wrong?), re-audit/follow-up (verifying CAPA from a prior audit), and document/remote audits (reviewing records without an on-site visit). The type sets the scope and urgency. For-cause audits especially need tight CAPA tracking, since they follow an actual failure that must be prevented from recurring.

It's a key input to risk and performance assessment. A supplier with clean audits or who closes CAPAs promptly is lower-risk and higher-performing than one with recurring major findings or slow, ineffective corrective actions — and that pattern should feed their scorecard quality rating and risk score. Audit history also justifies sourcing decisions: persistent uncorrected findings support reducing volume or exit, while strong audit performance supports partnership. Tracking audits to closure builds this history; filing reports loses it. The closed-loop audit record is both an improvement tool and an evidence base for the broader supplier-management decisions the scorecard and risk tools support.