Chapter 45: The 5-Point Self-Audit: Is Your Current CA Process Audit-Ready?

Before you redesign anything, you need to know where you stand. Grab a cup of coffee, open your CAR register, and spend 15 minutes answering these five questions. Be honest. Your auditor will be.

Question 1: Can you locate, and visually confirm closure of, every corrective action raised in the past 18 months?

This sounds obvious. It shouldn't. Many manufacturers keep CARs in email threads, spreadsheets scattered across shared drives, or a combination of both.

If your quality manager, operations lead, and plant director would each give you a different answer about how many open CARs exist right now, you have a documentation and visibility problem. An ISO 9001 auditor will treat a missing CAR the same as an unaddressed one—as a nonconformance.

Question 2: For every open CAR older than 90 days, can you produce a root cause analysis that explains the delay?

If you have CARs that have been sitting open for four, five, or six months with no documented RCA or escalation record, this is a red flag. ISO 9001 Clause 10.2.2 requires organizations to determine and implement corrective actions. That doesn't mean instant action, but it does mean purposeful, tracked action.

An auditor will ask: why is this still open? If the answer is "it fell through the cracks," you've failed the standard. If the answer is "we've completed an RCA and are waiting on engineering approval from the parent facility," that's defensible—as long as it's documented.

Question 3: Do you have a defined, written root cause analysis method that your team actually uses consistently?

We discussed 5 Why, fishbone diagrams, and fault tree analysis in Chapters 4 and 5. But if your procedure says "perform RCA" without specifying *how*, or if your team uses three different methods depending on who's leading the investigation, an auditor will note inconsistency.

Better to have a simple, documented method that everyone follows than a sophisticated one that nobody uses uniformly.

Question 4: When was the last time you tracked corrective action trends and presented them to management?

This isn't just an audit requirement—it's a business requirement. If you're opening 15 CARs per month but your management team has no idea, you're flying blind. Trends reveal systemic problems: Are your rejections clustered in one product line? Are supplier CARs concentrated in one vendor?

Chapter 9 covered trend analysis in detail. If you haven't produced a trend report in the past quarter, that's your starting point.

Question 5: When was the last time you audited your corrective action process itself?

Most manufacturers audit their products, their procedures, and their documentation. Fewer audit the process that fixes problems. If your last internal audit didn't include a specific scope item for the effectiveness of your CA system—or if you've never audited it—you're relying on the external auditor to find your systemic gaps.

That's reactive, not proactive.

Important: If you answered "no" to three or more of these questions, you have a major nonconformance risk before your next surveillance visit. If you answered "no" to two, you have medium-priority improvement work. If you answered "yes" to all five, your CA process is mature—but read the next section anyway. Even well-run systems can get better.