ISOISO 27001Continual ImprovementEASYFree question
A correction was applied to a nonconformity, but no corrective action followed. Three months later the identical nonconformity reappears. What does this outcome most clearly illustrate about correction versus corrective action?
- A.Correction addresses only the immediate instance, so without corrective action eliminating the cause the nonconformity is free to recur
- B.Corrective action is only needed for major nonconformities
- C.Correction and corrective action are equivalent, so the recurrence is unexplained
- D.The recurrence proves the original correction was never performed
Why A is correct
This scenario is the textbook demonstration of the distinction: correction fixes the symptom for the moment, but only corrective action removes the underlying cause. Skipping corrective action predictably allows the same nonconformity to recur, as it did here.
Know someone studying for ISO 27001? Send them this one.