I agree with Marc. I think 10 days is adequate to require a corrective action plan. Just the plan, not the actual correction! That will depend on a couple of things. 1. the amount of time it will take to develop, test, and implement a fix, (you don't want to have a less than acceptable correction because you didn't allow enough time to do it right!), and 2. how long management is willing to live in a state of non-compliance, based on the risk of getting busted with your system still non-compliant. (Busted means either getting caught by another audit, or having your systems fail you because they aren't working correctly). Most auditors will consider your having a plan in place and as long as it appears to be a valid plan, (i.e. it addresses the issue and appears to be a legitimate time frame), will not cite you again. Setting time frames for corrective actions is always a tough issue as different fixes take different resources and time. I would just require a set response time for your corrective action plan and then evaluate each plan as to whether or not it's being addressed quickly enough. Changing a procedure is usually much easier and quicker than developing a new manufacturing process, and thus would take less time. One thing we do is look at short term and long term corrective actions. Short term limits the possibility of having another failure through extraordinary activities, (e.g. extra inspections, testing, etc.), and long term eliminates the possibility of failures as a matter of process, (e.g. SPC). A corrective action plan is not a complete plan without an anticipated closure date, which is what we use as a tracking mechanism to monitor progress.
Good luck and let us know what you end up doing.
------------------
See you down life's highway!
Eric