<img src="https://secure.office-information-24.com/785669.png" style="display:none;">
Glossary Corrective Action

Preventive Action

Full name: Preventive Action (the "PA" in CAPA)
Preventive action is the action taken to eliminate the cause of a potential nonconformity before it occurs, based on risk assessments, trends or other data that indicate a failure could happen even though it has not happened yet. It is prospective by nature, in contrast to corrective action, which responds after a nonconformity has already occurred. In ISO 9001:2015, preventive action as a standalone clause was replaced by risk-based thinking woven throughout the standard, though many organizations still use the term operationally. 

Quick facts

Category Risk-based prevention of future nonconformities
Used by Manufacturing, medical devices, pharmaceuticals, aerospace, automotive and other regulated industries
Also called PA
Related standards ISO 9001, ISO 13485, AS9100, IATF 16949, FDA quality system requirements
Related processes Risk assessment, CAPA, trend analysis, FMEA, change control
Semantic match preventive action process, risk-based prevention, preventive vs corrective action, proactive quality action

What is Preventive Action?

Preventive action addresses potential problems before they become real ones. Rather than starting from a defect or complaint that has already happened, preventive action starts from a risk signal, such as a negative trend, a risk assessment finding, or data from a similar product or process, that suggests a failure could occur if nothing changes.

Preventive action is often confused with corrective action, since both can result in similar-looking process changes. The distinguishing factor is timing and trigger: corrective action follows an actual nonconformity, while preventive action is taken before one has occurred.

ISO 9001:2015 removed the dedicated preventive action clause that existed in earlier versions of the standard, integrating the underlying concept into risk-based thinking that runs throughout the current standard. Many organizations, and many industries such as medical devices, still use "preventive action" as a practical, everyday term for this proactive work.

Why is Preventive Action important?

Preventive action allows organizations to address weaknesses identified through risk assessments, near-misses or industry trends before they escalate into customer complaints, regulatory findings or product failures.

Because preventive action is proactive, it is often less costly than fixing a problem after it has already affected customers, production or compliance status. It shifts quality management from a reactive stance to a forward-looking one.

Preventive action supports continual improvement goals by using data, such as process capability trends or risk assessment scores, to guide where an organization should invest attention before a failure occurs.

How does Preventive Action work?

A typical preventive action process includes:

  1. Risk or trend identification. Identify a potential nonconformity through risk assessment, data trends or lessons learned.
  2. Evaluation. Assess the likelihood and potential severity if no action is taken.
  3. Action planning. Define actions that address the underlying risk factor.
  4. Implementation. Assign owners, deadlines and required resources.
  5. Effectiveness verification. Monitor relevant data to confirm the anticipated failure did not occur.
  6. Closure. Approve and close the preventive action once effectiveness is demonstrated.

Preventive Action vs. Corrective Action

Comparison Preventive Action Corrective Action
Trigger Potential risk or trend Existing nonconformance
Goal Prevent occurrence Prevent recurrence
Starts after Risk identification Failure
ISO 9001 Risk-based thinking throughout the standard Clause 10.2

Real-world examples of Preventive Action

A medical device manufacturer reviews complaint trends across a product family and notices a component from one supplier shows a rising defect rate elsewhere in the industry. The company proactively tightens incoming inspection for that component before any defect appears in its own product.

An aerospace supplier's FMEA identifies a process step with a high risk priority number due to potential operator error. Preventive action adds a poka-yoke fixture to the process so the error becomes physically difficult to make, before any nonconformity occurs.

A food manufacturer analyzes near-miss reports from its sanitation logs and identifies a recurring pattern that has not yet caused a failure. Preventive action revises the cleaning schedule and inspection criteria to address the pattern proactively.

Regulations and standards related to Preventive Action

ISO 9001:2015 removed the dedicated preventive action clause found in earlier versions and replaced it with risk-based thinking that is integrated throughout the standard, particularly in clauses addressing actions to address risks and opportunities. ISO 13485 retains explicit preventive action language reflecting its emphasis on medical device risk management.

AS9100 and IATF 16949 incorporate preventive concepts through risk management and advanced planning requirements specific to aerospace and automotive supply chains. FDA quality system requirements for medical devices historically required a documented preventive action subsystem as part of CAPA.

Because expectations vary by standard and industry, organizations should confirm how their applicable standard defines and expects preventive or risk-based activity to be documented.

Required by

How QT9 helps with Preventive Action

QT9 QMS preventive action capabilities

  • Link preventive actions to risk assessments, FMEAs and trend data.
  • Track potential risks alongside actual nonconformances in one system.
  • Assign owners, due dates and approval workflows with electronic signatures.
  • Verify effectiveness with monitored data before allowing closure.
  • Surface emerging trends with real-time dashboards and reporting.
  • Maintain a complete, audit-ready record of every preventive action taken.

Request a CAPA Demo Explore CAPA Software →

See QT9 Software in Action

Discover how QT9 Software helps manufacturers improve efficiency, strengthen compliance and connect quality management and ERP processes within one integrated platform.

Common mistakes with Preventive Action

Common preventive action mistakes include confusing it with corrective action and only opening records after a failure has already occurred, which defeats the proactive purpose of preventive action.

Other problems include relying on vague risk language without tying the action to specific data or a defined risk assessment, and failing to monitor and verify whether the anticipated failure was actually avoided after the action was implemented.

Frequently asked questions

ISO 9001:2015 removed the dedicated preventive action clause used in earlier versions of the standard. The underlying concept is now addressed through risk-based thinking that runs throughout the standard, rather than a single standalone requirement.
Preventive action addresses the cause of a potential problem before it occurs, based on risk data or trends. Corrective action addresses the cause of a problem that has already occurred.
Preventive action is typically triggered by a risk assessment finding, an FMEA result, a negative trend in process or quality data, or information about a failure that occurred on a similar product, process or at another site.
Effectiveness is measured by monitoring the relevant risk indicator or trend after the action is implemented, to confirm that the anticipated failure did not materialize over a defined monitoring period.
Usage varies. Some industries and standards, including medical devices, continue to use preventive action as an explicit term, while ISO 9001 now expresses the same concept primarily through risk-based thinking.
Yes. If the risk that prompted a preventive action materializes into an actual nonconformity before the action is completed, the response shifts into the corrective action process to address the now-realized failure.

Related quality management terms

Related content

Ready to Transform Your Business?

See how QT9 Software helps manufacturers simplify operations, improve traceability and drive continuous improvement with integrated quality management and ERP software.

Last reviewed: July 21, 2026