Which of the following is NOT part of the steps required by ISO/IEC 27001 that an organization must take when a nonconformity is detected?

Question

Options

• AReact to the nonconformity, take action to control and correct it. and deal with its consequences
• BEvaluate the need for action to eliminate the causes of the nonconformity so that it does not recur
• CCommunicate the details of the nonconformity to every employee of the organization and

• A
  15% (10)
• B
  7% (5)
• C
  78% (53)

No community discussion yet for this question.