A CAPA process that I was a part of during my exposure in the IT industry. Although, the term CAPA wasn’t used but the process was similar. There was a defect in running our energy scripts in the software called Powerplant. The scripts usually come from a vendor that would be software enhancements or adding employee data. As a contracting company, we were the customer to the vendor. In one instance upon running the script, it revealed lot of employee details to my team. Our job was only to run the script, we would not be generally aware of the data it contained. This called for a CAPA process where the defect had to be fixed on our machines and then a preventative wall was created to block the user from seeing the data/code for running the scripts in the future.