The corrective action plan of a Sedex audit is the step-by-step process that the supplier develops as a result of the audit with non-conformities found. It details each nonconformity, its cause, correction, responsibility, deadline, and proof of closure. This plan is part of the Corrective Action Plan Report (CAPR) which is the attachment of the SMETA audit report.
A couple of important notes upfront. SMETA is not an accreditation process and does not certify a site either, nor is it a pass/fail audit. When people refer to “failed Sedex audit,” they usually mean the audit results contained significant non-conformities, or the customer was not satisfied with the outcome.
The pattern we have seen at Legal4sure for food, garment, and packaging suppliers is that those who take the CAPR as a project deliver findings faster and keep their customers. Here is how you do it.
What Is a CAPR in a Sedex Audit?
CAPR stands for the Corrective Action Plan Report, which is a document created by the auditor after completing the SMETA audit. CAPR documents all of the non-conformities with regards to the ETI Base Code and local law as well as providing the site with an opportunity to describe what will be done, by what time, and how it will be proven.
The auditor reviews the draft in detail during the closing meeting and sets realistic timelines with your agreement. Then the auditing company publishes the audit report and CAPR on the Sedex platform, typically in about 20 working days. Your buyers linked with your account can see both documents there.
Imagine this: the audit report informs your buyer about the auditor’s findings. The CAPR informs your buyer about your actions. The latter document is often read more carefully than the former.
Understanding Sedex Audit Non-Conformities
The Sedex audit non-conformities are classified according to the four pillars, which include labor practices, health and safety, environment, and business ethics. Each non-conformity is graded based on its severity, and that severity dictates how urgent the action is.
SMETA findings generally fall into these groups:
- Critical or zero tolerance non-conformances: child labor, forced labor or bonded labor, immediate safety risk, or bribing the auditor.
- Non-conformances of significance: systemic issues, including overtime abuse or insufficient payment of salaries.
- Non-conformances of low significance: singular incidents or documentation deficiencies, such as absence of records for the fire drill.
- Observations and best practices: advisory comments that are not non-conformances.
In Indian factories, the most common findings we see involve working hours and overtime pay, incomplete age verification records, blocked emergency exits, missing grievance channels, and gaps in PF and ESI contributions for contract workers.
Severity and typical response windows
| Severity | What it looks like | Typical response window | Evidence buyers expect |
|---|---|---|---|
| Critical | Child labour, forced labour, imminent danger | Contain immediately; verify closure within about 30 days | Investigation report, remediation records, buyer communication |
| Major | Systematic wage or hours violations, blocked exits | 1 to 3 months | Revised policy, training records, payment proof, photos |
| Minor | Isolated record gaps, missing signage | 3 to 6 months | Updated records, dated photos |
| Observation | Improvement opportunity | By the next audit | Internal action note |
These windows are common industry practice, not a fixed Sedex rule. Your auditor and buyer set the final dates, so confirm them before you commit.
How to Build a Sedex Corrective Action Plan: 7 Steps
If you are not sure how to develop a corrective action plan when Sedex fails its audit, you should follow these steps. Not taking the root cause step is the biggest mistake which makes suppliers face the same issues at their next audit.
Step 1: Review each finding point by point
Do not wait until the final uploading. Review the draft CAPR with your HR, compliance, and production managers. In case you have doubts about a finding, ask the auditor under which ETI Base Code or local law provision it was made.
Step 2: Isolate the problem
Stop the bad practice, then fix the system. For example, if the workers are working overtime in violation of local legislation this week, restrict their work hours right now. The buyers expect to see the process of isolation starting within days, not months.
Step 3: Conduct a root cause analysis
You can do this using such methods as “5 Whys” or a fishbone diagram. “Employees desired to work more hours” is often not the true root cause. Bad ordering, understaffing, and low base salary stand behind it.
Step 4: Create the corrective and preventive actions
The former addresses the problem itself while the latter prevents its reappearance in the future. Auditors expect you to provide both of them.
Step 5: Allocate ownership and deadlines
Name an individual and not just “management.” Choose a date that is realistic. Failing to meet your own deadline is more detrimental than allocating a longer but more realistic date.
Step 6: Gather dated and verifiable documents
Your evidence may include photos, payslips, training attendance, new policy document, etc. Be sure to include the date. Backdated documentation is an easy way of losing credibility.
Step 7: Upload, monitor and review
Keep your buyers updated on your progress using the Sedex platform, conduct short monthly reviews until all issues have been completed. Some of the buyers will ask for a follow-up audit as proof of closure.
Worked example: excess overtime finding
- Observation: Workers worked above the maximum allowed hours in three of the past twelve months.
- Root Cause: The sales department took rush orders without capacity checks.
- Action to be taken: Limit the hours on a weekly basis; repay overtime pay if any due.
- Future Action: Include capacity checks prior to the acceptance of orders; monitor weekly hours.
- Evidence: Time record form; overtime payment record; SOP and Training form.
What Should Be Included in a Sedex Corrective Action Plan?
An effective Sedex corrective action program involves the finding reference, code or law, cause of the finding, corrective action to be taken, preventive action to be taken, owner, due date, evidence, and closure status. Otherwise, there will be ambiguity for the auditor.
Sedex CAPR Template and Corrective Action Timeline
Here’s a simple Sedex CAPR template you can paste into a spreadsheet and adapt.
| Column | What to write | Example |
|---|---|---|
| Ref No. | Finding number from the audit report | LS-04 |
| Non-conformity | The finding in plain words | Overtime above legal limit in 3 months |
| Code / law reference | ETI Base Code clause or local law | ETI Code 6, Factories Act |
| Root cause | Why it happened | No capacity check on rush orders |
| Corrective action | Immediate fix | Cap hours; pay arrears |
| Preventive action | System change | Weekly hours tracker; order approval step |
| Owner | One named person | HR Manager |
| Target date | Agreed with auditor or buyer | 30 days from audit |
| Evidence | Documents or photos for closure | Payslips, revised SOP, training sheet |
| Status | Open, in progress, closed | In progress |
Now the Sedex corrective action timeline. This 90-day schedule works for most Major and Minor findings.
| Period | What should happen |
|---|---|
| Day 0 to 3 | Review the draft CAPR, brief senior management, contain any urgent risk |
| Day 4 to 10 | Complete root cause analysis, assign owners, agree dates with the auditor |
| Day 11 to 30 | Fix Critical and Major items, start training, collect first evidence |
| Day 31 to 60 | Complete system changes, update policies, run an internal check |
| Day 61 to 90 | Upload final evidence, close findings, prepare for any follow-up audit |
Common Mistakes in Sedex Audit Remediation
Sedex audit remediation goes wrong in predictable ways. Watch for these:
- Approaching the CAPR as documentation rather than an action plan.
- Addressing the symptom, e.g., correcting a single payslip without altering the procedure.
- Setting dates that you cannot keep to seem more co-operative.
- Providing undated or backdated proof.
- Ignoring worker input. The workers’ committees and channels for grievances provide the real issue.
- Failing to communicate your findings with your buyer.
Best Practices for Faster Closure
Suppliers who clear Sedex audit corrective actions quickly tend to do a few things the same way:
- Maintain one live tracker and review it monthly with the management team.
- Conduct a mock internal audit before the follow-up audit.
- Give buyers updates periodically without their prompting.
- Archive evidence in date-wise files with finding codes.
- Educate the supervisor and not just the HR department since most findings occur at the shop floor level.
When Should You Get Expert Help?
In-house assistance can solve all small documentation discrepancies. Seek external assistance when findings occur throughout audits, an issue of zero tolerance comes into play, the deadline from the buyer gets closer, and there is no person responsible for compliance in your team.
Sedex Registration Consultant will be helpful at setting up your account, scoping the audit and CAPR structure to ensure that you do not generate unnecessary findings. Legal4sure will assist suppliers with Sedex corrective actions, from root cause analysis to reviewing the evidence prior to uploading it.
Avoid consulting services when your findings are small and well-known. You are just wasting money for something you do not need.
Key Takeaways
- CAPR tracks all Sedex non-conformities and how you plan to correct each one.
- SMETA neither approves nor disapproves facilities, although significant issues will impact buyer confidence.
- Address any urgent issues first, then determine the cause and develop corrective actions.
- Every corrective action requires a responsible person, a realistic timeframe and documentation.
- Critical issues require an immediate response, while Major and Minor issues require actions within predetermined timeframes.
Conclusion
An audit outcome that is not positive does not mean that your supplier/buyer relationship is ruined. Sometimes a well-documented Sedex corrective action plan can build more confidence than a report without a single issue could have done.
Containment is your first step, look for the reason, give ownership and keep your documents tidy. If you want another person to check your CAPR, feel free to contact us at Legal4sure.
Resolve Sedex Audit Findings with a Clear Corrective Action Plan
Address Sedex audit non-conformities with structured CAPR guidance from Legal4Sure. Get support with root cause analysis, corrective and preventive actions, evidence preparation, and realistic closure timelines to strengthen compliance and maintain buyer confidence.
Frequently Asked Questions
What is a CAPR in a Sedex audit?
CAPR means the Corrective Action Plan Report showing all the non-conformities found in SMETA audit along with your proposed actions for each.
How to prepare a corrective action plan after a failed Sedex audit?
Contain the problem, identify its root cause, describe corrective and preventive actions, assign a responsible person with a deadline, then submit dated proof of closure.
What should be included in a Sedex corrective action plan?
The finding reference, Code clause, root cause, corrective and preventive action, responsible person, deadline, dated proof of closure and action status.
Is there a Sedex CAPR template and corrective action timeline I can follow?
Yes. You can use the ten column format and 90 days’ time frame mentioned in this tutorial, adjusting the deadlines to the agreement with your auditor and customer.
Can a supplier fail a Sedex audit?
No pass or fail is officially set. However, very serious or zero-tolerance findings may still cause order stoppage or quick resolution requirement.
How long do I have to close Sedex audit non-conformities?
It’s usually one to six months depending on severity, and the final dates are agreed with your auditor and buyer.
Who can see my CAPR on the Sedex Platform?
Only the buyers and customers you’ve linked and granted access to, so you control who views your audit results.
