What should a company do if non-conformities are found during validation?

• A. File a report and wait for the regulator to act.
• B. Implement a CAPA with root-cause analysis, corrective actions, responsible owners, and a timeline for remediation.
• C. Replace the entire compliance program.
• D. Ignore the non-conformities if small.

Answer: (B)

When non-conformities are found during validation, the immediate and effective response is to implement a CAPA process. This means performing a root-cause analysis to understand why the issue occurred, designing corrective actions to fix the specific problem, assigning responsible owners to carry out those actions, and setting a clear timeline for remediation. This approach is essential because it moves beyond a quick fix or passive reporting; it creates a structured, evidence-based plan that not only resolves the immediate non-conformity but also prevents recurrence. It also provides documented accountability and a way to verify that the actions were effective, which is crucial for regulatory compliance and for maintaining the integrity of the validation process. Filing a report and waiting for a regulator, replacing the entire program, or ignoring small issues do not address the underlying causes or ensure ongoing quality and compliance.