Auditee receives non-conformity reportCorrective action plan preparedSubmit plan (where appropriate) to auditor Auditor evaluates responseAuditee implements planAuditee evaluates effectivenessAuditee revises plan if necessaryAuditee documents the changesAuditor verifies implementation and effectivenessRecords made of all actions taken (by auditor and auditee)