Distinguish correction from corrective action. Which pairing is accurate?
A.Correction eliminates the cause; corrective action fixes the symptom
B.Both terms mean exactly the same thing in ISO 27001
C.Correction fixes the immediate problem; corrective action eliminates the cause to prevent recurrence
D.Correction is documented while corrective action never is
Why C is correct
A correction addresses the detected nonconformity itself (the symptom), while corrective action targets the underlying cause to prevent recurrence. The two are distinct and both may be needed for the same nonconformity.
Know someone studying for ISO 27001? Send them this one.
CyberCertPrep gives you 20 free ISO 27001 questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
ISO 27001 and ISO are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISO or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
Which metric is LEAST useful for evaluating the effectiveness of the corrective action process itself?