Internal audit results

Answer: Recurrent nonconformities may indicate a rupture in the management system (a failure in the maintenance of the system), and for certificated systems if such situation is not corrected until the next external audit, this may lead to a major nonconformity, which can compromise the management system certification.

2 - Management has not taken corrective actions. Where in the standard can I find a reference to this.

Answer: If you have evidence that recurrent nonconformities can be related to inaction of management, you can relate this situation as a failure to comply with one of the following clauses:
- 10.1 c): implement any action needed (either to control and correct the nonconformity or, if necessary, prevent that it does not recur or occur elsewhere); or
- 10.1 d): review the effectiveness of any corrective action taken

This article will provide you further explanation about non conformities:
- Major vs. minor nonconformities in the certification audit https://advisera.com/27001academy/blog/2014/06/02/major-vs-minor-nonconformities-in-the-certification-audit/

These materials will also help you regarding non conformities:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/
- ISO 27001:2013 INTERNAL AUDITOR COURSE https://advisera.com/training/iso-27001-internal-auditor-course/