This forum is so interesting, we learn alot form it..., Root cause analysis; this is how I train. Any given nonconformity has three main response segments; i) Root cause, ii) correction and iii) corrective actions
Once a nonconformity is raised, 1st establish the root cause, what is the most probable reason that made this to happen, e.g. 1 out of 14 sampled didn't have a medical exam report - Lack of a proper system in monitoring the processes in meeting the intended results
Correction; Immediately have the 1 person be medically examined and attach the results to NC for objective evidence
Corrective action - Always the corrective action should address the root cause - Since there was no proper system in monitoring the processes in meeting intended results, establish one, i.e. You can say, you will on monthly basis audit the medical exams records for employees since the expiry period may not be the same, OR you apply Microsoft outlook to provide alerts whenever a given individual period lapses, its one of the most effective method since its scheduled and alert one automatically you switch on the computer, guess this is good enough