10.1 Non-Conformity and Corrective action
when a
non-conformity occurs including any arising from complaints , the organization
shall
(a)Take action to
control and correct it
(b)Deal with the
consequences
Evaluate the need
for action to eliminate the clauses of the non-conformity in order that it does
not recur or occur else where by:
(a) Reviewing and
analysing the non-conformity
(b) Determine the
causes of non-conformities
(c) Determine if
similar non-conformities exist or could
potentially occur;
And
Implement any action needed, review the effectiveness of any
corrective action taken,
update risk and opportunities determined
during
planning , make necessary changes
in the Information Security Management
System .
User questions & answers