When a vendor’s evidence falls short, the usual next step is an email asking them to fix it, which is hard to track and easy to lose. A corrective action plan should state exactly what is not acceptable, what the vendor needs to provide and by when.
Tracking each corrective action as its own item with an owner, due date and status makes it clear what is still open across all vendors. It also means the vendor’s approval status can reflect whether actions are on track, rather than depending on someone remembering to follow up.