Corrective action eliminates the cause of a nonconformity so that it does not happen again.
The distinction that matters
Correction fixes the thing in front of you. The wrong part shipped, so you send the right one.
Corrective action stops it happening again. You find out why the wrong part was picked, and change whatever allowed that.
Almost every weak corrective action system in the world is actually a correction system wearing the wrong label. The tell is a log full of entries reading “operator retrained” or “reminded staff to check” — those are corrections. Nothing about the system changed, so the same finding returns next year.
What an auditor looks for
- The nonconformity is described specifically, not vaguely
- The cause was actually investigated, not assumed
- The action addresses that cause rather than the symptom
- Someone verified afterwards that it worked
- If the same cause could affect other processes, that was considered too
That last point — extending the action to similar situations — is where most systems stop short, and it is where the real value of the process sits.
Preventive action
ISO 9001:2015 removed the separate clause for preventive action. It did not remove the idea. Prevention now lives in clause 6.1, risks and opportunities: you are expected to address potential problems as part of planning rather than as a separate procedure.