Expert Advice Community

Guest

Corrective action in ISO

  Quote
Guest
Guest user Created:   May 18, 2020 Last commented:   May 18, 2020

Corrective action in ISO

In the templates, you provided us, in 12 procedure for corrective action, there is nothing in the document on preventive actions, is that no longer an ISO requirement? The only thing in there is corrective actions, this is also reflected in the 12.1 form

0 0

Assign topic to the user

ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT

Document the results of the risk management process.

ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT

Document the results of the risk management process.

Expert
Rhand Leal May 18, 2020

ISO 27001:2013 does not have requirements for preventive actions, however, preventive actions are in fact included in the risk assessment and treatment because the essence of risk management is to recognize a potential problem before it happens, and by treating it to prevent such an incident from happening.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 18, 2020

May 18, 2020