Corrective action: fixing the cause rather than the symptom
A corrective action stops a problem recurring. Most of what gets recorded as one is a repair — the thing you do to the affected item, which changes nothing about the next occurrence.
A gap analysis is three columns — current state, target state, and what closes the difference. Its usefulness depends entirely on whether the first column is honest.
A gap analysis compares where something is now with where it needs to be, and lists what would close the difference. It applies to almost anything with a standard attached — skills against roles, processes against a certification, service levels against a contract, systems against what the business now needs — which is why the term appears everywhere and means slightly different things each time.
The structure is always the same three columns, and the whole exercise stands or falls on the first one. Current state assessed optimistically produces small gaps, comfortable conclusions and no change. Most gap analyses fail here rather than in the planning that follows.
Assess current state against evidence, not against memory. "We do document that" is worth checking: ask to see the last three instances. Nearly every gap analysis that later proves wrong was wrong in the current-state column, usually because the person assessing was also the person responsible for the gap.
Gap analysis earns its cost when the target is externally imposed and non-negotiable — a certification, a contractual service level, a regulatory requirement — because there the current-state column is genuinely decision-relevant and the gaps must be closed or explicitly accepted. It is much weaker as a general improvement tool, where the target is something you invented and the analysis becomes a way of listing everything imperfect. If you cannot name who set the target and why, that is a sign to skip the formal exercise.
Ettex Records fits the analysis once it is more than a one-off document: custom tables with typed fields for requirement, target, current state, gap, priority, action, owner, date and status; relations between tables so gaps link to the standard or project they came from; grid and kanban views with saved filters — open gaps by owner, high priority not yet started, everything overdue; formulas and rollups to summarise by area; revision history where every change is tracked, so you can see how the assessment moved between cycles; and CSV import to start from a spreadsheet. The standard and the written conclusions live in Ettex Docs, evidence collected during the assessment fits Ettex Forms, and the resulting work goes to Ettex Board.
Said plainly: Ettex has no gap or compliance module. There is no library of standards to assess against, no scoring engine, no maturity model, no automatic evidence collection and no compliance reporting. You define the rows and do the assessing; Records keeps the result structured and auditable. Formal certification programmes at scale want purpose-built software.
A structured comparison of current state against a target state, listing the difference for each item and what would close it, with owners and dates.
Requirement, target state, current state, the gap described in a sentence, priority, action, cost, owner, date and status. The gap description matters more than any score.
Against evidence — ask to see the last three instances — and with someone other than the person responsible reviewing the favourable rows.
No. Prioritise by impact and effort and record explicitly which gaps you are accepting. An undifferentiated list of everything imperfect is why gap analyses stall.
When the target is one you invented and nobody is holding you to. Without an external or agreed standard the exercise tends to catalogue imperfection rather than drive decisions.
Annually for compliance-driven targets, quarterly for capability. Keep prior assessments — the movement between cycles is more useful than any single snapshot.
A gap analysis is only as good as its current-state column. Agree the target, assess against evidence, describe each gap in a sentence, decide which ones you are not closing — and keep the tracker in the same table.
A corrective action stops a problem recurring. Most of what gets recorded as one is a repair — the thing you do to the affected item, which changes nothing about the next occurrence.
A conflict of interest policy is mostly a register and a habit. The point is not to forbid overlapping interests but to have them written down before anyone has reason to ask.
A record of processing activities lists what personal data you hold, why, where it goes and how long you keep it. It is dull to build and it answers half the questions anyone will ever ask you.