How do you manage a Non-Conformance Report (NCR) from initial detection through to closure and preventive action verification?