ISOISO 27001Continuous ImprovementEASYFree question
Why is root cause analysis important for corrective actions?
- A.It is reserved for major nonconformities, with minor findings corrected directly at the symptom level under clause 10.2
- B.It delays corrective action, giving the nonconformity time to recur
- C.It ensures the underlying cause is addressed, preventing the nonconformity from recurring
- D.It is optional under clause 10.2, applying to Annex A control failures alone
Why C is correct
Root cause analysis identifies the underlying cause of nonconformities, ensuring corrective actions prevent recurrence rather than just treating symptoms.
Know someone studying for ISO 27001? Send them this one.