Risk-based correction of QMS gaps and nonconformities, addressing the process that produced the gap — not just the document that revealed it.