The organization must implement actions to eliminate the causes of potential nonconformities in order to prevent their occurrence. Preventive actions must be appropriate to the severity of the potential problems. The organization must establish a process to reduce the impact of negative effects of the risk, including the following: a) determination of potential non-conformities and their causes; b) assessment of the need for actions to prevent the occurrence of non-conformities; c) determination and implementation of necessary actions; d) documented information on the actions taken; e) critical analysis of the effectiveness of preventive actions taken; f) use of lessons learned to prevent recurrence in similar processes (see ISO 9001, Section 7.1.6)