Revision as of 22:05, 21 February 2021

Abstract

Corrective and Preventive Actions (CAPA) are procedures designed to handle nonconformity and other undesirable situations. In this context is corrective actions is defined as actions set in motion to eliminate an occurred nonconformities or unwanted situations, and preventive actions as actions set in motion to eliminate potential nonconformities or unwanted situations ^[1]. CAPA is a mandatory part of the Quality Management System (QMS) for any pharmaceutical or medical device manufacturer reporting to the U.S Food and Drug Administration (FDA). CAPA is also an integrated part of ISO:13485 and Good Manufacturing Practice (GMP) for medical products. The FDA defines the purpose of a CAPA procedure as: collecting and analyzing information, identifying and investigating product and quality problems, and taking appropriate and effective corrective and/or preventive action to prevent their recurrence ^[2]

The purpose of this article is to give the reader an overview on how to perform a CAPA and which risk to be aware of. In this article a 7 step framework is presented. The steps include 1) Identification; 2) Evaluation; 3) Investigation; 4) Analysis; 5) Action Plan; 6) Implementation; 7) Follow-up.

The context of CAPA

Project quality management

A project is an unique temporary organizational construction with a defined objective. Projects can operate under different constrains such as time, cost, quality, etc. CAPA projects are related to quality management of a product/system. Quality management is the coordinating of activities to direct and control an organization with regard to quality. The CAPA process can be used as a quality management approach when working with project management. A quality management approach is a procedure that describes how quality will be managed in a given project ^[3].

Continuous improvement

CAPA is categorized under the section measurement, analysis and improvement in ISO:13485 and closely related to continues improvement processes. CAPA can be an alternative to processes such as the plan-do-check-act (PDCA) by Shewhart (modified by Deming), or other quality improvement initiatives such as total quality management (TQM), Six Sigma, and Lean ^[3].

Regulatory authorities

CAPA is most commonly used in highly regulatory industries and is a mandatory part of a Quality Management System (QMS) for any pharmaceutical or medical device manufacturer reporting to the U.S Food and Drug Administration (FDA) or who is compliant with ISO:13485 Medical Devices as well as European Pharmaceutical GMP and IATF. Procedures for corrective actions is also mandatory to include in the QMS for the majority of ISO management systems.

Figure 1: Corrective action vs. preventive action ^[4]

The purpose of an efficient CAPA process

CAPA is designed to ensure quality and continuous improvement, which is especially important in the pharmaceutical and medicine device industry since lack of control can have fatal consequences. CAPA is one of the most essential regulatory area for both the FDA and ISO in pharmaceutical quality systems and industries producing medical devices ^[2], ^[5]. The CAPA system is practically always a part of the regulatory compliance audit and around 30-50 percent of nonconformance cited by the FDA is due to inadequate performance of CAPA. In the worst case can the FDA withdraw their certification, which is necessary to sell production on the U.S market. The CAPA process is more demanding and rigid than other similar approaches such as the PDCA. This is to ensure that all regulatory demands are fulfilled ^[1].

The 7 steps of CAPA

The CAPA process is typically divided into 5-9 steps depending on the scope of the steps. In this article a 7 step framework is introduced. The steps include 1) Identification; 2) Evaluation; 3) Investigation; 4) Analysis; 5) Action Plan; 6) Implementation; 7) Follow-up. When CAPA is performed as a part of a regulatory requirement such as FDA or ISO:13845 documentation through each step is crucial.

Step 1: Identification

The first step of the CAPA process is to identifying, describe and document the problem. A nonconformity incident does not necessarily trigger a CAPA. However it is necessary to evaluated every nonconformance and assess what action is appropriate. Nonconformance can be identified from both internal and external sources, including, but not limited to:

• service request;
• internal quality audits;
• costumer complaints;
• quality assurance inspections;
• staff observation;
• trending data;
• risk assessment;
• management review;
• failure mode analysis;
• Audit findings ^[6]. ^[7].

When a problem is discovered, a clear problem statement should be written. It is important to precisely and completely describe the situation. The problem statement should include the source of the information, evidence of the problem and a detailed explanation of the problem ^[6]. Here answering the following questions can be helpful.

Figure 2: How to identify the problem ^[8]

Information about the problem will often be provided form different parts of the organization, and it can therefore be helpful to develop a standard procedure for collecting this data, and trying to reduce the work load for the employees^[8]. A well-defined problem statement is essential for the later work and the effectiveness of the CAPA process ^[5]. As the cited quote from Charles Kettering emphasizes “a problem well-stated is a problem half-solved”.

Step 2: Evaluation

In step 2 the problem is evaluated to determine why the problem is a concern, and the impact and risk associated with the problem. This can be the possible impact on costs, function, product quality, safety, reliability, customer satisfaction, etc. ^[5]. The risks can be evaluated based on the probability/impact matrix.

Figure 3: The probability/impact matrix </ref>, ^[5]

The evaluation is used to decide the priority of the actions as well as the level of investigation. It makes it possible for management to better prioritize encountered complaints, deviations, nonconformance, corrections, and removals ^[5]. In some cases immediate corrective action is necessary until a thorough investigation have been conducted and permanent solutions have been implemented. The immediate corrective actions can in some cases be enough to correct the problem which eliminate the need for step 5 and 6 ^[6]. In other cases, it is assessed that no action is required. If this is the conclusion a justification must be documented.

Read more about impact and probability in risk assessment here

Step 3: Investigation

In step 3 a procedure for the investigation (analysis) if formulated. High-risk investigations will have priority over low-risk situations ^[1]. The purpose of the procedure is to ensure that noting is overlooked in the investigation. The procedure should include information about, but not limited to: the objective for the actions, which resources is required (money, time, testing equipment, personnel, etc.), who is responsible for conducting the investigation, which data is collected, and instructions for determining the causes of the problem including a timeline ^[5], ^[6]. The procedure require a review of all circumstances related to the problem and must consider the following:

• External factors
• Software
• Training
• Design
• Procedures
• Personnel
• Materials
• Equipment

The level of investigation is determined based on the risk evaluation results or trend analysis results ^[5].

Step 4: Analysis

In step 4 the investigation procedure is used to investigate the root cause of the problem as well as other contributing factors. This is done by collecting all relevant data and investigating all possible causes through a Root Cause Analysis (RCA). A RCA is a systematic approach to finding the underling (main) cause of a problem. When a root cause is proper managed the problem stops recurring ^[5]. Different tools can be used to support this step. The most typical tools include, 5xwhy and fishbone diagram. Five whys is a simple and very popular tool for RCA. To find the root cause one has to ask what cause the problem, and question the answer five times^[9].

Figure 4: The 5xwhys^[9]

The five whys approach can quickly be adapted and applied to most problems. There are three fundamental elements to effectively using the five whys: 1) a good clear statement; 2) honesty and competencies to answer the questions; 3) determination to find the problem^[9]. The second method is the fishbone diagram (also known as the cause and effect diagram), which can be used by itself or together with the five whys. The fishbone diagram is used to identify different elements that could be the root cause, divided into different areas. The fishbone diagram are useful if many factors affect the problem ^[8].

Figure 5: fishbone diagram^[10]

Step 5: Action plan

When the root cause is identified an action plan needs to be developed. The action plan determine what actions will be initiated, how, by who, when and so on. The documentation of that actions are initiated is important to have an effective follow-up ^[5]. Examples of actions that can be initiated includes: documentation/forms/instruction changes; procedure changes; employee training; or new equipment. A monitoring system or controls also need to be implemented to prevent the problem for recurrent.

Figure 6: corrective/preventive action plan ^[5]

The degree of corrective and preventive action taken to eliminate or minimize actual or potential non-conformities must be appropriate to the magnitude of the problem and commensurate with the risks encountered ^[7]. It is necessary to validate that the proposed corrective and/or preventive actions will achieving the desired results^[1].

Step 6: Implementation

In step 6 the action plan is implemented. Documentation of each implementations is important to ensure all actions are completed. The documentation should be attached to a final report of this CAPA action. When a plan has been completed all activities should be verified by ta independent party from the individual having completed the task ^[5]. A frequent problem observed by the FDA is that the corrective and preventive actions were not implemented. It is therefore important to appoint to define clear responsibility’s and apply a tracking system that can verify the implementation ^[1].

Step 7: Follow-up

The last step of the CAPA process is a follow-up where the corrective or preventive actions is evaluated. The first step is to check that all changes have been implemented and verified ^[5].

Limitations

Other relevant Wiki articles

How to create a working CAPA team: Roles and responsibilities in project team.

How to control the scope of the CAPA project: Project Scope Management.

How to ensure control of the CAPA proces: Project Control.

How to improve your CAPA processes: Lessons learned.

Annotated Bibliography

CAPA for the FDA Regulated Industry, José Rodríguez-Pérez, 2011. This book contains a guidance to execute and improve the CAPA system. The book have focus on the FDA regulatory requirement, but include other regulatory areas such as ISO.

CAPA in the Pharmaceutical and Biotech Industries – How to Implement an Effective Nine Step Program, Jackelyn Rodriguez, 2016. This book contains information on how to implement, develop and maintain an effective CAPA system and investigation program using a 9-step for medical device, pharmaceutical and biologic manufacturers, as well as any company or institution, which has to maintain a quality system.

FDA website Corrective and Preventive Actions (CAPA). The FDA website have public information about what elements should be included in the CAPA process.

Root Cause Analysis – The core of Problem Solving and Corrective Action, Duke Okes 2019. In this book different methods to identifying and execute corrective actions is described.

References

1. ↑ ^{1.0 1.1 1.2 1.3 1.4} Rodríguez-Pérez, José American Society for Quality 2011, CAPA for the FDA Regulated Industry
2. ↑ ^{2.0 2.1} FDA website Corrective and Preventive Actions (CAPA). Link: https://www.fda.gov/corrective-and-preventive-actions-capa#page3.
3. ↑ ^{3.0 3.1} AXELOS, Managing Successful Projects with PRINCE2 2017 Edition chapter 8
4. ↑ Hammar, Mark Complete guide to corrective action vs. preventive action. Link: https://advisera.com/9001academy/blog/2020/06/22/complete-guide-to-corrective-action-vs-preventive-action/
5. ↑ ^{5.00 5.01 5.02 5.03 5.04 5.05 5.06 5.07 5.08 5.09 5.10 5.11} Rodriguez, Jackelyn. CAPA in the Pharmaceutical and Biotech Industries – How to Implement an Effective Nine Step Program 2016, Woodhead publishing series in biomedicine
6. ↑ ^{6.0 6.1 6.2 6.3} Simplifying CAPA: Seven Steps to a Comprehensive CAPA Plan 2019 MasterControl. Link: https://www.mastercontrol.com/learning-center/capa-management/simplifying-capa-seven-steps.
7. ↑ ^{7.0 7.1} Abhishek, Raj. 2016 A review on corrective action and preventive action (CAPA) Deputy R&D Manager, Quest Pharmaceuticals Pvt. Ltd, Chhata Pipara, Bara, Birgunj, Nepal. Link: https://academicjournals.org/journal/AJPP/article-full-text-pdf/4EF704756791
8. ↑ ^{8.0 8.1 8.2} Okes, Duke 2009. Root Cause Analysis – The core of Problem Solving and Corrective Action. ASQ Quality Press.
9. ↑ ^{9.0 9.1 9.2} Serrat, Olivier, 2017, The Five Whys Technique, Knowledge Solutions.
10. ↑ Jensen, Torben Jul 2005 Kvalitetsstyring og måleteknik (quality management and measurement technology).