August 31, 2026    bambang RIYADI

---

Root Cause Analysis (RCA) Masterclass: 5 Whys vs. Fishbone vs. FMEA for ISO Non-Conformity Resolution

Category: Continuous Improvement & Auditing | Author: Bambang Riyadi

Executive Summary: The single most frequent audit finding during third-party ISO surveillance audits across ISO 9001, 14001, 45001, and 50001 is "Inadequate Root Cause Analysis." Too often, corrective action reports cite "human error" or "lack of training" as the primary cause, leading to superficial fixes that fail to prevent recurrence. This masterclass compares three essential Root Cause Analysis (RCA) tools—the 5 Whys, Ishikawa Fishbone Diagram, and Failure Mode and Effects Analysis (FMEA)—and provides a framework for choosing the right tool for every non-conformity.

1. The Anatomy of Corrective Action Failure under ISO Standards

Under Clause 10.2 (Non-conformity and Corrective Action) across all Annex SL management standards, when a non-conformity occurs, the organization must evaluate the need for action to eliminate the cause(s) of the non-conformity so that it does not recur or occur elsewhere.

However, external certification auditors frequently re-open non-conformities during surveillance audits because the initial CAPA focused on correcting the immediate symptom rather than eliminating the systemic root cause. Citing "operator carelessness" as a root cause is an audit red flag—systems must be designed to minimize human error through robust process engineering and poka-yoke (mistake-proofing).

2. Comparative Evaluation of Core RCA Tools

Methodology	Best Suited For	Primary Advantage	Key Limitation
5 Whys Technique	Linear, single-factor operational breakdowns (e.g., machine lube pump failure).	Fast, simple to execute on the shop floor without complex training.	Can lead to superficial conclusions if used on complex multi-factor system problems.
Ishikawa (Fishbone) Diagram	Complex operational failures with multiple potential contributing factors.	Systematically explores 6 categories: Man, Machine, Material, Method, Measurement, Environment.	Identifies potential causes but does not automatically quantify relative impact.
Failure Mode & Effects Analysis (FMEA)	Proactive risk assessment during process design or major engineering changes.	Calculates Risk Priority Numbers (RPN = Severity × Occurrence × Detection).	Requires significant time investment and cross-functional expert teams.

3. How to Apply Each Method Effectively in ISO CAPA Workflows

A. Mastering the 5 Whys (Avoiding the Human Error Trap)

When applying the 5 Whys, force the audit team to drill past human behavior to reach system controls:

• Symptom: Operator processed parts using wrong drawing revision.
• Why 1? The drawing on the workstation workbench was Rev B instead of Rev C.
• Why 2? The document control clerk did not collect the old paper drawing during morning updates.
• Why 3? The document retrieval checklist was not filled out.
• Why 4? The revision update procedure relies entirely on manual physical paper exchange across 40 benches.
• Why 5 (Systemic Root Cause): Documented procedure lacks a digital document control gate that automatically locks terminal access unless current drawing revision is opened electronically.

B. Deploying the Ishikawa Fishbone Diagram for Multi-Factor Incidents

For major environmental spills (ISO 14001) or lost-time safety injuries (ISO 45001), assemble a cross-functional team and evaluate all six M's on the Fishbone diagram:

1. Machine: Was equipment maintenance overdue? Did sensors fail?
2. Method: Was the SOP ambiguous or missing key safety steps?
3. Material: Did raw material variance contribute to process instability?
4. Measurement: Was the inspection tool out of calibration window?
5. Man: Were training records verified for current task assignment?
6. Environment: Did lighting, glare, heat, or noise disrupt operator focus?

4. The 5-Step Complete CAPA Closed-Loop Process

To ensure your corrective actions pass third-party audit scrutiny every time, follow this strict lifecycle:

1. Immediate Containment: Quarantining non-conforming product, stopping hazardous equipment, or containing chemical spill immediately.
2. Root Cause Investigation: Applying 5 Whys or Fishbone diagram with objective evidence attached.
3. Systemic Corrective Action Plan: Implementing process-level changes (e.g., engineering poka-yoke, SOP update, system automation).
4. Verification of Effectiveness (Clause 10.2): Checking back 30 to 90 days post-implementation to verify the non-conformity has NOT recurred.
5. Standardization & Horizontal Deployment: Updating FMEA risk registers and applying fixes to similar production lines across the facility.

About the Author

Bambang Riyadi is a Manager and Lead Internal Auditor specializing in ISO 9001, ISO 14001, ISO 45001, and ISO 50001 Management Systems. An OMNEX Certified Trainer with over two decades of industrial experience in high-tech manufacturing, he writes extensively on digital transformation, EHS integration, and operational quality strategy on effiqiso.com.