SuperbaKnowledge Demonstration release
Platforms
ENIT
Operational guide · SMS process

Corrective and Preventive Action (CAPA)

The action that truly closes the loop: what the ISM Code actually requires — corrective action under Section 9 — and where the CAPA cycle used by many Companies comes from instead.

ISM CodeCAPAroot cause analysiscontinuous improvement

Operational Explanation

What the ISM Code requires is corrective action. Section 9.2 requires the Company to establish «procedures for the implementation of corrective action» in response to non-conformities, accidents and hazardous occurrences: action that eliminates the cause of a non-conformity already identified.

Preventive action does not appear in the ISM Code, and neither does the acronym CAPA. Both come from quality-system practice — ISO 9001 — which in turn removed preventive action in its 2015 revision, replacing it with risk-based thinking. Many Companies nonetheless run a combined NC / corrective action / preventive action cycle in their SMS, and doing so is legitimate and often useful: what matters is knowing that it is a Company choice built on a quality-management model, not a requirement of the Code. An auditor will verify corrective action against Section 9; the rest is verified against the Company's own procedure, if the Company has undertaken it.

A well-executed CAPA does not simply "fix the symptom": it addresses the root cause, has an owner, a deadline and — a point often overlooked — an effectiveness verification carried out after a suitable interval.

Regulatory Reference

ISM Code, Section 9.2: the Company must establish procedures for the implementation of corrective action, including measures intended to prevent recurrence. Read together with par. 1.2.2.2 ("assess all identified risks to its ships, personnel and the environment and establish appropriate safeguards"), which is the Code's risk-based obligation. Preventive action and the CAPA acronym belong to ISO 9001 and to Company quality procedures, not to the ISM Code.

Scope of Application

Corrective action applies to every non-conformity, accident and hazardous occurrence, on board and at the Company's shore offices. Where the Company has adopted a full CAPA cycle in its SMS, the preventive branch also covers risks identified as potential — as a commitment the Company has taken on itself, on which it will be audited against its own procedure.

Procedure / How to Complete It

  1. Define the action starting from the root cause identified in the NC analysis, not from the observed symptom.
  2. Assign a clear owner and a realistic deadline for implementation.
  3. Distinguish whether the action is corrective (on an NC that has already occurred) or preventive (on a risk identified but not yet manifested).
  4. Implement the action and document its execution (e.g. a procedure change, training, technical intervention).
  5. Verify the effectiveness of the action after a defined interval, before considering the CAPA closed.
  6. If the verification shows the problem persists, reopen the analysis and re-plan the action.

Practical Example

Example: NC for an inconsistent sludge balance. Root cause: no dedicated form for recording internal tank-to-tank transfers. Corrective action: introduction of a dedicated form in the PMS. Effectiveness verification: after 2 months, the sludge balance verified consistent across all records. CAPA closed.

What Typically Goes Wrong

A frequent error found in certification audits is the premature closure of CAPAs, without waiting the necessary time to verify their effectiveness: the NC is formally closed, but the underlying problem resurfaces a few months later, generating a new NC on the same topic — a signal auditors immediately recognise as a systemic weakness of the SMS.

Common Mistakes Mistake Library

MistakeConsequenceHow to avoid it
Corrective action addressing the symptom, not the root causeThe NC recurs in similar formUse structured root cause analysis techniques (5 Whys, cause-and-effect diagram)
No effectiveness verification scheduledImpossible to know whether the action actually workedAlways set a verification date, even months ahead
The Company's own SMS procedure not followed where it provides for a preventive branchRisks identified but not yet manifested remain without mitigationTreat preventive actions with the same discipline as corrective ones

What the PSCO Checks

Certification auditors and, indirectly, Port State Control Officers (PSCOs) assess the quality of CAPAs as an indicator of SMS maturity: generic actions, without an owner or an effectiveness verification, are among the most common observations in external audits.

Operational Tips

Preparation checklist

Educational checklist. This summary supports learning and preparation only. It does not replace the vessel’s approved procedures, manuals, statutory documents, company SMS, or applicable official requirements. Completing it demonstrates neither compliance nor readiness for an inspection: it shows that a list has been read, not that the ship is in order. Always verify the current documents carried on board.

FAQ

What is the difference between a corrective and a preventive action?
A corrective action eliminates the cause of an NC that has already occurred; a preventive action eliminates the cause of a potential NC, identified before it actually materialises.
How much time must pass before verifying a CAPA's effectiveness?
There is no fixed period in the ISM Code: it depends on the nature of the action. Standard practice is to define the verification interval already at the planning stage, proportionate to the risk.
Can a CAPA remain open beyond the external audit?
Yes, if the action requires a longer timeframe (e.g. technical work in dry dock); what matters is that progress is documented and communicated to the auditor.

Related Topics

Last substantive revision of this page: 29 August 2026 · page fingerprint 4a90df0ae485