Corrective action: fixing the cause rather than the symptom
A corrective action stops a problem recurring. Most of what gets recorded as one is a repair — the thing you do to the affected item, which changes nothing about the next occurrence.
An issue log records problems that have already happened, who owns each one, and what was decided. Its value is entirely in being one list rather than a memory spread across four people.
An issue log is a single list of problems that have actually occurred on a piece of work: what happened, who owns resolving it, what has been decided so far, and whether it is still open. It is deliberately narrow. A risk is something that might happen; an issue is something that already has, and mixing the two is the fastest way to make both lists useless.
The reason to keep one is not process compliance. It is that without a list, the same problem gets raised three times by three people, each time from scratch, and the decision taken in week two is unavailable to the person who hits it again in week six.
The decision field is the whole point. An issue log listing thirty resolved problems with no record of why each was resolved that way is a count of past inconvenience. One that records the reasoning is a document that answers next year's question about why the system works the way it does.
These three overlap enough to cause confusion. A risk register holds things that might happen, with likelihood and mitigation. An issue log holds things that have happened, with an owner and a resolution. A RAID log combines four lists — risks, assumptions, issues and dependencies — into one artefact, which suits small projects where maintaining four separate documents guarantees that three are stale.
The pair worth keeping separate on any larger piece of work is risks and issues, because they are reviewed by different people at different intervals. Risks want periodic reassessment; issues want daily chasing. Merged, one of the two rhythms always wins and the other list quietly dies.
Two ways, mostly. The first is severity inflation: everything is raised as critical because critical gets attention, until the field carries no information and the log is triaged by whoever is most persistent. Three levels, with a written definition of each, and the discipline to say that something is genuinely medium.
The second is the log becoming a place issues go instead of a place they get resolved. Once people learn that logging something means nothing will happen, they stop logging and start escalating directly, and the log turns into an incomplete record that is worse than none because it looks complete.
This is what Ettex Records is for: one structured list where each row is an issue, with fields for owner, severity, status, decision and dates, filterable to what is open and past its date. One list everyone can see beats a spreadsheet emailed round, which is where most issue logs start and where most of them fork into three versions.
It is a record system rather than a ticketing tool. There is no automatic escalation, no notification rules, no SLA timers and no customer-facing intake. The weekly review is a meeting, not a workflow engine — for small teams that is the right trade, and for anything running a support desk it is the wrong tool and worth saying so.
A single list of problems that have already occurred on a piece of work, each with an owner, a status and the decision taken.
A risk has not happened yet and is assessed by likelihood and impact. An issue has happened and needs an owner and a resolution.
A combined log of risks, assumptions, issues and dependencies. It suits small projects; larger work usually separates risks from issues because they are reviewed on different rhythms.
Three, each with a written definition. More levels invite inflation and the field stops carrying information.
The decision and its reasoning. Without it the log records that problems occurred but not why they were settled the way they were.
One named person, separate from the owners of individual issues, whose job is that the list stays current.
Keep issues separate from risks, assign an owner within a day, cap severity at three levels, and always write down why something was closed.
A corrective action stops a problem recurring. Most of what gets recorded as one is a repair — the thing you do to the affected item, which changes nothing about the next occurrence.
A conflict of interest policy is mostly a register and a habit. The point is not to forbid overlapping interests but to have them written down before anyone has reason to ask.
A record of processing activities lists what personal data you hold, why, where it goes and how long you keep it. It is dull to build and it answers half the questions anyone will ever ask you.