ISOISO 27001Continual ImprovementEASYFree question
An auditor distinguishes a correction from a corrective action using a server-room overheating incident. Which pairing correctly maps each term to the action?
- A.Correction: log the incident in the register and notify the auditor; Corrective action: restore the servers from the latest backup
- B.Correction: power down affected servers to stop damage; Corrective action: install temperature monitoring and an alerting threshold to prevent overheating recurrence
- C.Correction: move the servers to another room and update the asset list; Corrective action: schedule an annual cooling inspection with the vendor
- D.Correction: restart the servers and confirm the services are up; Corrective action: add the incident to the next management review agenda
Why B is correct
Correction addresses the immediate situation (powering down to halt damage). Corrective action eliminates the cause so the nonconformity does not recur (monitoring and alerting that catch rising temperatures early). The two are distinct steps in Clause 10.2.
Know someone studying for ISO 27001? Send them this one.