corrective action

ISO 27001 Clause 10.2: Nonconformity and Corrective Action

Clause 10.2 governs how you handle things that go wrong in the ISMS. The difference between correction and corrective action, how to do root cause properly, and what auditors check.