Action plan for non-conformity

To prepare a corrective action to treat a non-conformity you need to:

• Define the problem
• Define the scope
• Containment Actions
• Find the Root Cause
• Plan a Corrective Action (steps needed to eliminate the root cause of the problem)
• Implement the Corrective Action
• Follow up to make sure the Plan worked

This article will provide you further explanation about corrective actions:
- Seven Steps for Corrective and Preventive Actions to support Continual Improvement https://advisera.com/9001academy/blog/2013/10/27/seven-steps-corrective-preventive-actions-support-continual-improvement/ (although this article is about ISO 9001, the same concept applies to ISO 27001)
 
This material will also help you regarding corrective actions:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/