Almost every site can close a CAPA. Far fewer can show that the action removed the cause and that the problem stopped. This model tracks that distance.
CAPA maturity is measured by whether problems stop recurring, not by closure rate.
The process runs when something forces it to.
Actions are recorded after events, often as retraining, with no confirmed root cause and no check that anything changed.
Typical weakness. Closure is the objective; effectiveness is not assessed at all.
Risk. Recurrence is guaranteed and the record documents the pattern.
Procedures exist and are followed, mostly.
A CAPA procedure exists with due dates and approvals. Root cause is attempted but often stops at human error.
Typical weakness. Effectiveness is confirmed as 'implemented' rather than measured.
Risk. Repeat findings, which an inspectorate treats far more seriously than a first.
The process is designed, resourced and measured.
Investigation depth is proportionate to risk, causes are confirmed with evidence, and effectiveness criteria are defined before implementation.
Typical weakness. Backlog control is reactive — the queue is worked by age rather than by exposure.
Risk. High-exposure items sit behind easy ones because progress is measured by count.
It connects to the rest of the quality system.
Backlog is triaged by regulatory exposure, trends feed preventive action, and CAPA connects to change control and validation impact.
Typical weakness. Preventive action still lags corrective action in practice.
Risk. Known weaknesses recorded but not acted on until they produce an event.
It improves itself, and the improvement holds.
Effectiveness is verified against pre-defined data after closure, intake is repaired when it produces backlog, and recurrence is trended as a system metric.
Typical weakness. Sustaining the discipline when volume rises.
Risk. Reversion under pressure, which shows first in effectiveness-check quality.
ICH Q10, section on the corrective and preventive action system
Part I, Chapter 1; Chapter 8 for complaint-driven actions
These five levels are a GMPConsultant.nl framework for structuring a conversation about capability. They are not an official regulatory classification, no authority recognises or issues them, and a maturity level is not a statement of GMP compliance.
The GMP Health Index scores seven domains and maps each to a maturity level, in about ten minutes. It calculates in your browser and stores history on your device only.