A supplier NCR records a specific nonconformance involving supplied product, documentation, material, or outsourced processing. Supplier corrective action addresses the cause of that nonconformance and the changes needed to reduce the chance of recurrence. They are related, but they are not the same record and should not be treated as interchangeable.
Supplier NCR: the defect or escape record
A supplier nonconformance report is normally opened when incoming inspection, source inspection, production, test, receiving, or customer review finds that supplied material or supplier-provided work does not meet a requirement.
The NCR should identify what is wrong, what requirement was missed, what lot, serial number, purchase order, drawing, specification, certificate, or process step is affected, and what immediate controls were taken. In regulated manufacturing, the NCR is part of the traceability record. It supports containment, disposition, and evidence for later review.
Common NCR dispositions include return to supplier, rework, repair, scrap, use-as-is where allowed, or further review through MRB or an equivalent authority. The allowed options depend on contract requirements, design authority rules, customer flow-downs, and the site quality system. An NCR does not automatically prove supplier systemic failure; it records a specific nonconforming condition.
Supplier corrective action: the recurrence prevention activity
Supplier corrective action is the process used to investigate root cause, define corrective actions, assign ownership and due dates, implement changes, and verify effectiveness. It is often handled through a SCAR, CAPA, 8D, RCCA, or supplier quality workflow, depending on the company and customer requirements.
Corrective action is typically appropriate when the issue is significant, repeated, high risk, customer-sensitive, safety- or conformity-related, or evidence of a supplier process breakdown. It should not be opened automatically for every minor receiving issue unless the site procedure requires it. Overuse creates administrative load and weak investigations; underuse allows recurring supplier escapes to continue.
How they connect
One supplier NCR may trigger one supplier corrective action. Several similar NCRs may be grouped into one corrective action if they share a likely common cause. A corrective action may also remain open after the related NCRs are dispositioned, because the affected parts still need a disposition while the supplier works on systemic prevention.
The practical distinction is this:
- NCR: What nonconforming item, lot, document, or process output was found?
- Containment: What has been stopped, quarantined, inspected, sorted, or protected from unintended use?
- Disposition: What will happen to the affected material or work?
- Corrective action: Why did it happen, what will change, and how will effectiveness be checked?
System and ownership implications
In brownfield environments, these records often live across more than one system. The NCR may be initiated in a QMS, receiving system, MES, inspection platform, or supplier portal. ERP may control inventory holds, returns, debits, purchase order status, and supplier performance metrics. MES may need to block use of affected material on the shop floor. PLM may be needed to confirm the applicable drawing, specification, or revision.
The risk is that the records appear connected in meetings but are not actually linked in the systems. If the NCR, quarantine status, MRB disposition, supplier response, and effectiveness check are not tied together with stable identifiers, traceability becomes fragile. Manual reconciliation is common, but it needs ownership and controls.
Full replacement of QMS, ERP, MES, or supplier portals just to improve NCR-to-corrective-action linkage is usually unrealistic in mature regulated plants. Qualification burden, validation cost, downtime risk, integration complexity, and long equipment or program lifecycles often make coexistence the practical path. The better near-term goal is usually clear record ownership, reliable cross-references, controlled workflows, and audit trails.
Common failure modes
- Closing the NCR after disposition and assuming recurrence risk has been addressed.
- Opening corrective actions with no evidence of systemic cause or no practical supplier leverage.
- Accepting supplier responses that describe correction, such as replacing parts, but not corrective action.
- Losing the link between supplier lot, inspection evidence, MRB decision, and supplier response.
- Using supplier scorecards that count NCRs but ignore severity, recurrence, responsiveness, and effectiveness.
The clean operating rule is simple: use the supplier NCR to control and document the nonconforming condition. Use supplier corrective action when the organization needs documented root cause, supplier process change, and effectiveness evidence. The exact trigger thresholds should be defined in the quality system and adjusted for product risk, customer requirements, supplier history, and regulatory context.