ExamSimul
  • Certifications
    • Agile
    • Agile Scrum
    • Business Continuity
    • Design Thinking
    • DevOps
    • Enterprise Architecture
    • Governance System
    • Information Security
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • Project Management
      • Agile PM
      • PM2
      • PRINCE2
      • PRINCE2 Agile
    • Service Management
      • FitSM
      • ISO 20000
      • ITIL
        • ITIL Foundation
        • ITIL Managing Professional
        • ITIL Strategic Leader
        • ITIL Practitioner
      • OpenSM
    • SW Testing
  • Exams
    • AgilePM
    • Agile Scrum Product Owner
    • Agile Scrum Master
    • Design Thinking
    • DevOps
    • Enterprise Architecture
      • Exam Simulator for TOGAF® EA Foundation
    • FitSM
    • ISO 20000
      • ISO 20k Foundation
      • ISO 20k Auditor
    • ISO 22301
    • ISO 27001
      • ISO 27001 Foundation
      • ISO 27001 Auditor
      • ISO 27001 Lead Auditor
    • ISO 31000
    • IT Governance
    • ITIL
      • ITIL Foundation
      • ITIL Managing Professional
      • ITIL Strategic Leader
      • ITIL Practitioner
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • OpenSM
      • OpenSM Foundation
      • OpenSM MP
      • OpenSM SL
    • PM2
      • PM2 Foundation
    • PRINCE2
      • PRINCE2 Foundation
      • PRINCE2 Practitioner
    • PRINCE2 Agile
    • SW Testing
  • Courses
    • AgilePM
      • AgilePM® Foundation
      • AgilePM® Practitioner
    • Agile Scrum
      • Agile Scrum Master
    • Design Thinking
      • DT Method® Foundation
    • Cloud Management
    • FitSM
      • FitSM Foundation
    • ISO/IEC 20000
      • ISO 20000 Foundation
      • ISO 20000 Auditor
      • ISO 20000 Practitioner
      • ISO 20000 Lead Auditor
    • ISO 22301
      • ISO 22301 Foundation
    • ISO/IEC 27000
      • ISO 27001 Foundation
      • ISO 27001 Auditor
      • ISO 27001 Practitioner
      • ISO 27001 Lead Auditor
      • ISO 27032 Foundation
      • ISO 27035 Foundation
    • ISO 31000
      • ISO 31000 Foundation
    • ITIL® 4
      • ITIL® 4 Foundation
      • ITIL® 4 Managing Professional
        • ITIL® 4 CDS
        • ITIL® 4 DSV
        • ITIL® 4 HVIT
        • ITIL® 4 DPI
      • ITIL® 4 Strategic Leader
        • ITIL® 4 DPI
        • ITIL® 4 DITS
      • ITIL® 4 Practitioner
        • ITIL® 4 Monitoring and Event Management
        • ITIL® 4 Incident Management
        • ITIL® 4 Problem Management
        • ITIL® 4 Service Desk
        • ITIL® 4 Service Request Management
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • OpenSM
      • OpenSM Foundation
    • PM2
      • PM2® Foundation
    • PRINCE2®
      • PRINCE2® Foundation
      • PRINCE2® Practitioner
    • PRINCE2 Agile®
      • PRINCE2 Agile® Foundation
      • PRINCE2 Agile® Practitioner
    • SW Testing
      • SW Testing Foundation
    • TOGAF®
      • TOGAF® EA Foundation
      • TOGAF® EA Practitioner
  • Resources
    • Examination Institute
      • APMG
      • Axelos
        • CPD Requirements
      • EXIN
      • GoToCertify
      • ISACA
      • PECB
      • Peoplecert
        • How to access eBook
        • How to book an Exam
        • How to renew ITIL certification
      • PMI
        • PDU to maintain PMI® certifications
        • Earn Education PDUs
      • The Open Group
        • Test Center
        • Online exam
    • Learning Delivery Methods
      • Online courses
      • Distant courses
      • In-house courses
      • ONE-to-ONE courses
      • Blended courses
      • Fully tailored courses
    • Exam Glossary
    • Exam Proctor
    • Tutor / Trainer
    • Download
    • Webinar
  • Blog
    • Learn
      • Agile
        • Agile History
        • Manifesto Agile
        • AgilePM
          • About AgilePM
          • Choosing DSDM
      • Design Thinking
        • Background
        • About Design Thinking
        • What is Design Thinking
        • Design Thinking Process
      • Enterprise Architecture
        • About TOGAF® Standard, 10th Edition
        • Structure of TOGAF® Standard, 10th Edition
        • Migration TOGAF® EA certification
      • ISO 27001
        • ISO 27001 Requirements
          • Clause 4
            • Requirements 4.1
            • Requirements 4.2
            • Requirements 4.3
            • Requirements 4.4
          • Clause 5
            • Requirements 5.1
            • Requirements 5.2
            • Requirements 5.3
          • Clause 6
            • Requirements 6.1
            • Requirements 6.2
          • Clause 7
            • Requirements 7.1
            • Requirements 7.2
            • Requirements 7.3
            • Requirements 7.4
            • Requirements 7.5
          • Clause 8
            • Requirements 8.1
            • Requirements 8.2
            • Requirements 8.3
          • Clause 9
            • Requirements 9.1
            • Requirements 9.2
            • Requirements 9.3
          • Clause 10
            • Requirements 10.1
            • Requirements 10.2
      • Lean Six Sigma
        • LSS Define Phase
          • The Basics of Six Sigma
            • Meanings of Six Sigma
            • History of Six Sigma
            • LSS Project Deliverables
            • y= f(x)
            • Voice of Customer
            • Six Sigma Teams
        • LSS Measure Phase
        • LSS Analyze Phase
        • LSS Improve Phase
        • LSS Control Phase
      • Project Management
        • PM2
      • Service Management
        • ISO/IEC 20000
          • ISO20k vs Practices
        • ITIL® 4
          • ITIL® 4 Roles based
          • ITIL® 4 Practices based
          • ITIL® 4 Certification guide
          • ITIL® 4 DITS Practical Assignments
    • News
      • Agile Scrum
      • Design Thinking
      • Enterprise Architecture
      • Examination Institute
      • Information Security
      • Project Management
      • Service Management
  • About Us
    • Why ExamSimul
    • Accreditations
    • Partner Program
    • Corporate Training
      • Training Points
    • Terms of Use
    • Privacy Policy
    • Contact Us

Signup  Login

Clause 10

  • Home\
  • Blog \
  • Learn\
  • ISO 27001\
  • ISO 27001 Requirements\
  • Clause 10
 

What is covered under Section 10 of ISO 27001:2022?

Section 10 addresses how you will improve your ISMS on an ongoing basis.

ISO 27001, like many other ISO standards, is concerned with continual improvement. Given the speed of change in many organisations, not to mention the ever-changing threat landscape, this is arguably one of the most important areas of the standard.

Falling under Sect.10 is:

  • 10.1 - Demonstrate how the organisation shall continually improve the suitability, adequacy and effectiveness of the information security management system
  • 10.2 - Demonstrate how nonconformities and corrective actions will be addressed
 

ISO 27001 Section 10.1 - Continual improvement

A large part of running an information security management system is to see it as a living and breathing thing. Your organisation should always be assessing, testing, reviewing and measuring the performance of the ISMS, to ensure it is still supporting and meeting your business goals.

There are several mechanisms covered within ISO 27001 for the continual evaluation and improvement of your ISMS including audits, management reviews, the corrective actions and improvements process, ongoing risk assessment, ongoing staff engagement etc. The secret is not to waste time duplicating work that is going on in the wider ISMS in order to easily demonstrate continual improvement is taking place.

ISO 27001 Section 10.2 - Nonconformity and corrective action

Section 10.2 of ISO 27001 concerns the actions your organisation commits to taking when a failure in the compliance of the standard occurs. The standard refers to this as a 'nonconformity' and the steps you take to correct this is called a 'corrective action'.

In the event of a nonconformity, the organisation should 'take action to control and correct it', and deal with the consequences of the event. They should then take steps to ensure that it doesn't happen again. This is done by addressing the cause of the nonconformity.

The corrective action should be assessed and the effectiveness of that action, measured and documented. Remember, to obtain and maintain ISO 27001 certification, an auditor will expect to see evidence of improvements.

It is not a failure to show you are addressing nonconformities, taking corrective actions etc so do make sure that they are visible if appropriate to demonstrate the philosophy of continuous improvement that is required by the standard.

 
  • Learn
    Learn
    • Agile
      Agile
      • Agile History
      • Manifesto Agile
      • AgilePM
        AgilePM
        • About AgilePM
        • Choosing DSDM
    • Design Thinking
      Design Thinking
      • Background
      • About Design Thinking
      • What is Design Thinking
      • Design Thinking Process
    • Enterprise Architecture
      Enterprise Architecture
      • About TOGAF® Standard, 10th Edition
      • Structure of TOGAF® Standard, 10th Edition
      • Migration TOGAF® EA certification
    • ISO 27001
      ISO 27001
      • ISO 27001 Requirements
        ISO 27001 Requirements
        • Clause 4
          Clause 4
          • Requirements 4.1
          • Requirements 4.2
          • Requirements 4.3
          • Requirements 4.4
        • Clause 5
          Clause 5
          • Requirements 5.1
          • Requirements 5.2
          • Requirements 5.3
        • Clause 6
          Clause 6
          • Requirements 6.1
          • Requirements 6.2
        • Clause 7
          Clause 7
          • Requirements 7.1
          • Requirements 7.2
          • Requirements 7.3
          • Requirements 7.4
          • Requirements 7.5
        • Clause 8
          Clause 8
          • Requirements 8.1
          • Requirements 8.2
          • Requirements 8.3
        • Clause 9
          Clause 9
          • Requirements 9.1
          • Requirements 9.2
          • Requirements 9.3
        • Clause 10
          Clause 10
          • Requirements 10.1
          • Requirements 10.2
    • Lean Six Sigma
      Lean Six Sigma
      • LSS Define Phase
        LSS Define Phase
        • The Basics of Six Sigma
          The Basics of Six Sigma
          • Meanings of Six Sigma
          • History of Six Sigma
          • LSS Project Deliverables
          • y= f(x)
          • Voice of Customer
          • Six Sigma Teams
      • LSS Measure Phase
      • LSS Analyze Phase
      • LSS Improve Phase
      • LSS Control Phase
    • Project Management
      Project Management
      • PM2
    • Service Management
      Service Management
      • ISO/IEC 20000
        ISO/IEC 20000
        • ISO20k vs Practices
      • ITIL® 4
        ITIL® 4
        • ITIL® 4 Roles based
        • ITIL® 4 Practices based
        • ITIL® 4 Certification guide
        • ITIL® 4 DITS Practical Assignments
  • News
    News
    • Agile Scrum
    • Design Thinking
    • Enterprise Architecture
    • Examination Institute
    • Information Security
    • Project Management
    • Service Management
Courseware based on ISO/IEC 20000 Foundation
Courseware based on ISO/IEC 20000 Foundation
475.00‎€
PRINCE2® Foundation with exam
PRINCE2® Foundation with exam
745.00‎€
View Details
SW Testing Foundation Mock Exam
SW Testing Foundation Mock Exam
28.00‎€
View Details
ITIL® 4 Incident Management with exam
ITIL® 4 Incident Management with exam
446.00‎€
View Details

ExamSimul - is the training centre for the BITIL.COM group - an organization of professionals and senior experts whose main interest is the spread of knowledge and the application of methodologies Agile, Scrum, ITIL, Prince2, CobiT, TOGAF®, Design Thinking and Standard International. [...]

Latest downloads

PRINCE2 7 Brochure
PRINCE2 7 WHATS NEW
The TOGAF® Standard, 10th Edition Reference Cards (Personal PDF Edition) (Italian Translation)

Quick link

  • Course Catalogue
  • News
  • FAQs
  • Term of Use
  • Privacy Policy
  • Contact

Contact

Where we areEmail: info@examsimul.com
Linkedin Group: ExamSimul
2023 © Copyright ExamSimul - All Right Reserved
ITIL®, PRINCE2®, PRINCE2 Agile® are Registered Trade Marks of AXELOS Limited. TOGAF® is a registered trademarks of The Open Group in the United States and other countries. COBIT® 2019 is a Registered Trade Marks of the Information Systems Audit and Control Association and the IT Governance Institute. APMG International Scrum, APMG-International™ AgilePM®, APMG-International™ ISO/IEC 20000, APMG-International™ ISO/IEC 27001 are Trade Marks of APM Group Limited. FitSM® is a registered trademark of ITEMO e.V.
  • Certifications
    • Agile
    • Agile Scrum
    • Business Continuity
    • Design Thinking
    • DevOps
    • Enterprise Architecture
    • Governance System
    • Information Security
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • Project Management
      • Agile PM
      • PM2
      • PRINCE2
      • PRINCE2 Agile
    • Service Management
      • FitSM
      • ISO 20000
      • ITIL
        • ITIL Foundation
        • ITIL Managing Professional
        • ITIL Strategic Leader
        • ITIL Practitioner
      • OpenSM
    • SW Testing
  • Exams
    • AgilePM
    • Agile Scrum Product Owner
    • Agile Scrum Master
    • Design Thinking
    • DevOps
    • Enterprise Architecture
      • Exam Simulator for TOGAF® EA Foundation
    • FitSM
    • ISO 20000
      • ISO 20k Foundation
      • ISO 20k Auditor
    • ISO 22301
    • ISO 27001
      • ISO 27001 Foundation
      • ISO 27001 Auditor
      • ISO 27001 Lead Auditor
    • ISO 31000
    • IT Governance
    • ITIL
      • ITIL Foundation
      • ITIL Managing Professional
      • ITIL Strategic Leader
      • ITIL Practitioner
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • OpenSM
      • OpenSM Foundation
      • OpenSM MP
      • OpenSM SL
    • PM2
      • PM2 Foundation
    • PRINCE2
      • PRINCE2 Foundation
      • PRINCE2 Practitioner
    • PRINCE2 Agile
    • SW Testing
  • Courses
    • AgilePM
      • AgilePM® Foundation
      • AgilePM® Practitioner
    • Agile Scrum
      • Agile Scrum Master
    • Design Thinking
      • DT Method® Foundation
    • Cloud Management
    • FitSM
      • FitSM Foundation
    • ISO/IEC 20000
      • ISO 20000 Foundation
      • ISO 20000 Auditor
      • ISO 20000 Practitioner
      • ISO 20000 Lead Auditor
    • ISO 22301
      • ISO 22301 Foundation
    • ISO/IEC 27000
      • ISO 27001 Foundation
      • ISO 27001 Auditor
      • ISO 27001 Practitioner
      • ISO 27001 Lead Auditor
      • ISO 27032 Foundation
      • ISO 27035 Foundation
    • ISO 31000
      • ISO 31000 Foundation
    • ITIL® 4
      • ITIL® 4 Foundation
      • ITIL® 4 Managing Professional
        • ITIL® 4 CDS
        • ITIL® 4 DSV
        • ITIL® 4 HVIT
        • ITIL® 4 DPI
      • ITIL® 4 Strategic Leader
        • ITIL® 4 DPI
        • ITIL® 4 DITS
      • ITIL® 4 Practitioner
        • ITIL® 4 Monitoring and Event Management
        • ITIL® 4 Incident Management
        • ITIL® 4 Problem Management
        • ITIL® 4 Service Desk
        • ITIL® 4 Service Request Management
    • Lean Six Sigma
      • LSS Yellow Belt
      • LSS Green Belt
      • LSS Black Belt
    • OpenSM
      • OpenSM Foundation
    • PM2
      • PM2® Foundation
    • PRINCE2®
      • PRINCE2® Foundation
      • PRINCE2® Practitioner
    • PRINCE2 Agile®
      • PRINCE2 Agile® Foundation
      • PRINCE2 Agile® Practitioner
    • SW Testing
      • SW Testing Foundation
    • TOGAF®
      • TOGAF® EA Foundation
      • TOGAF® EA Practitioner
  • Resources
    • Examination Institute
      • APMG
      • Axelos
        • CPD Requirements
      • EXIN
      • GoToCertify
      • ISACA
      • PECB
      • Peoplecert
        • How to access eBook
        • How to book an Exam
        • How to renew ITIL certification
      • PMI
        • PDU to maintain PMI® certifications
        • Earn Education PDUs
      • The Open Group
        • Test Center
        • Online exam
    • Learning Delivery Methods
      • Online courses
      • Distant courses
      • In-house courses
      • ONE-to-ONE courses
      • Blended courses
      • Fully tailored courses
    • Exam Glossary
    • Exam Proctor
    • Tutor / Trainer
    • Download
    • Webinar
  • Blog
    • Learn
      • Agile
        • Agile History
        • Manifesto Agile
        • AgilePM
          • About AgilePM
          • Choosing DSDM
      • Design Thinking
        • Background
        • About Design Thinking
        • What is Design Thinking
        • Design Thinking Process
      • Enterprise Architecture
        • About TOGAF® Standard, 10th Edition
        • Structure of TOGAF® Standard, 10th Edition
        • Migration TOGAF® EA certification
      • ISO 27001
        • ISO 27001 Requirements
          • Clause 4
            • Requirements 4.1
            • Requirements 4.2
            • Requirements 4.3
            • Requirements 4.4
          • Clause 5
            • Requirements 5.1
            • Requirements 5.2
            • Requirements 5.3
          • Clause 6
            • Requirements 6.1
            • Requirements 6.2
          • Clause 7
            • Requirements 7.1
            • Requirements 7.2
            • Requirements 7.3
            • Requirements 7.4
            • Requirements 7.5
          • Clause 8
            • Requirements 8.1
            • Requirements 8.2
            • Requirements 8.3
          • Clause 9
            • Requirements 9.1
            • Requirements 9.2
            • Requirements 9.3
          • Clause 10
            • Requirements 10.1
            • Requirements 10.2
      • Lean Six Sigma
        • LSS Define Phase
          • The Basics of Six Sigma
            • Meanings of Six Sigma
            • History of Six Sigma
            • LSS Project Deliverables
            • y= f(x)
            • Voice of Customer
            • Six Sigma Teams
        • LSS Measure Phase
        • LSS Analyze Phase
        • LSS Improve Phase
        • LSS Control Phase
      • Project Management
        • PM2
      • Service Management
        • ISO/IEC 20000
          • ISO20k vs Practices
        • ITIL® 4
          • ITIL® 4 Roles based
          • ITIL® 4 Practices based
          • ITIL® 4 Certification guide
          • ITIL® 4 DITS Practical Assignments
    • News
      • Agile Scrum
      • Design Thinking
      • Enterprise Architecture
      • Examination Institute
      • Information Security
      • Project Management
      • Service Management
  • About Us
    • Why ExamSimul
    • Accreditations
    • Partner Program
    • Corporate Training
      • Training Points
    • Terms of Use
    • Privacy Policy
    • Contact Us
  0  - 0.00‎€
Your shopping cart is empty!
USD EUR GBP
Top

Sales

100% OFF Exam Simulator 

Immediate access to realistic exam sample questions

Course Catalogue    Corporate Training    Course Calendar  Contact Us