In my case, I came in to just two months missing records due to lack of QAM (not CCP, thank god but GMP inspections, EMP swabbing, monthly meetings, tons of missing verifications etc.) and yes, it was a lot of corrective action reports all with the same conclusion: backup was not established due to poor communication. Solution: established and trained back up.
And for some things like the missing EMP, I did a big swab-a-thon for a month to ensure we were ok for missing so much. So in terms of mitigating risk and really correcting that action, it depends what was missing.
Auditor seemed disappointed (not at me, as I wasn't here) but no NCs on it due to trying to recover the best I could, having documented CAPA, and then having every record from my start date be perfect haha.