{"id":10507,"date":"2023-01-25T14:07:22","date_gmt":"2023-01-25T13:07:22","guid":{"rendered":"https:\/\/compleye.io\/?p=10507"},"modified":"2026-10-02T14:30:26","modified_gmt":"2026-10-02T12:30:26","slug":"exemples-de-non-conformite-a-la-norme-iso-27001","status":"publish","type":"post","link":"https:\/\/compleye.io\/fr\/articles\/exemples-de-non-conformite-a-la-norme-iso-27001\/","title":{"rendered":"10 exemples de non-conformit\u00e9 \u00e0 la norme ISO 27001, mineure ou majeure\u00a0"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"10507\" class=\"elementor elementor-10507\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e9bd75d e-flex e-con-boxed e-con e-parent\" data-id=\"5e9bd75d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6968d198 elementor-widget elementor-widget-text-editor\" data-id=\"6968d198\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">Dans cet article, nous verrons ce qu'est une non-conformit\u00e9, la diff\u00e9rence entre une non-conformit\u00e9 majeure et une non-conformit\u00e9 mineure, comment \u00e9viter et corriger les non-conformit\u00e9s, et nous examinerons dix exemples de non-conformit\u00e9 \u00e0 la norme ISO 27001.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Qu'est-ce qu'une non-conformit\u00e9 \u00e0 la norme ISO 27001 ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vous vous demandez peut-\u00eatre ce qu'est exactement une non-conformit\u00e9. La r\u00e9ponse est assez simple. Si votre SMSI (syst\u00e8me de gestion de la s\u00e9curit\u00e9 de l'information) ne satisfait pas \u00e0 l'une des exigences de la norme ISO 27001, il y a non-conformit\u00e9.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Selon Wikip\u00e9dia, un <a href=\"https:\/\/en.wikipedia.org\/wiki\/Nonconformity_(quality)\">non-conformit\u00e9<\/a> se produit g\u00e9n\u00e9ralement \u00e0 la suite de :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Mauvaise communication (ou mauvaise communication)<\/li>\n\n\n\n<li>Mauvaise documentation (ou absence de documentation)<\/li>\n\n\n\n<li>Formation insuffisante ou limit\u00e9e du personnel<\/li>\n\n\n\n<li>Faible motivation du personnel<\/li>\n\n\n\n<li>Mat\u00e9riaux de mauvaise qualit\u00e9 (ou absence de mat\u00e9riaux appropri\u00e9s)<\/li>\n\n\n\n<li>Outils et \u00e9quipements de mauvaise qualit\u00e9 (ou manque d'outils et d'\u00e9quipements appropri\u00e9s)<\/li>\n\n\n\n<li>Environnement op\u00e9rationnel m\u00e9diocre ou dysfonctionnel<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Les choses se compliquent un peu, car toutes les non-conformit\u00e9s ne sont pas identiques : il y a des non-conformit\u00e9s majeures et des non-conformit\u00e9s mineures. Les deux seront not\u00e9es lors de l'audit, et une non-conformit\u00e9 majeure entra\u00eenera l'impossibilit\u00e9 d'obtenir la certification ISO 27001.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Quelle est la diff\u00e9rence entre une non-conformit\u00e9 mineure et une non-conformit\u00e9 majeure \u00e0 la norme ISO 27001 ?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Une non-conformit\u00e9 mineure est :&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Une satisfaction partielle de l'une des exigences de la norme ISO 27001...&nbsp;<\/li>\n\n\n\n<li>Un manquement \u00e0 une exigence mineure, ou...&nbsp;<\/li>\n\n\n\n<li>Un manquement ponctuel \u00e0 l'une des exigences de la norme.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Une non-conformit\u00e9 majeure est :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Un manquement r\u00e9p\u00e9t\u00e9 ou non trait\u00e9 \u00e0 l'une des exigences, ou...&nbsp;<\/li>\n\n\n\n<li>Un probl\u00e8me qui aura un impact sur vos clients s'il n'est pas corrig\u00e9, et\/ou...<\/li>\n\n\n\n<li>Si des \u00e9l\u00e9ments essentiels du SMSI manquent ou ne sont pas mis en \u0153uvre.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Exigences de la norme ISO 27001<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Jetons un coup d'\u0153il sur une vue d'ensemble des exigences de la norme ISO 27001 :<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<ul class=\"wp-block-list\">\n<li>4.1 - Comprendre l'organisation et son contexte<\/li>\n\n\n\n<li>4.2 - Comprendre les besoins et les attentes des parties int\u00e9ress\u00e9es<\/li>\n\n\n\n<li>4.3 - D\u00e9terminer le champ d'application du syst\u00e8me de gestion de la s\u00e9curit\u00e9 de l'information<\/li>\n\n\n\n<li>4.4 - Syst\u00e8me de gestion de la s\u00e9curit\u00e9 de l'information<\/li>\n\n\n\n<li>5.1 - Leadership et engagement<\/li>\n\n\n\n<li>5.2 - Politique de s\u00e9curit\u00e9 de l'information<\/li>\n\n\n\n<li>5.3 - R\u00f4les, responsabilit\u00e9s et pouvoirs de l'organisation<\/li>\n\n\n\n<li>6.1 - Actions pour faire face aux risques et aux opportunit\u00e9s<\/li>\n\n\n\n<li>6.2 - Objectifs de s\u00e9curit\u00e9 de l'information et planification pour les atteindre<\/li>\n\n\n\n<li>7.1 - Ressources<\/li>\n\n\n\n<li>7.2 - Comp\u00e9tence<\/li>\n\n\n\n<li>7.3 - Sensibilisation<\/li>\n\n\n\n<li>7.4 - Communication<\/li>\n\n\n\n<li>7.5 - Informations document\u00e9es<\/li>\n\n\n\n<li>8.1 - Planification et contr\u00f4le op\u00e9rationnels<\/li>\n\n\n\n<li>8.2 - \u00c9valuation des risques en mati\u00e8re de s\u00e9curit\u00e9 de l'information<\/li>\n\n\n\n<li>8.3 - Traitement des risques li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l'information<\/li>\n\n\n\n<li>9.1 - Suivi, mesure, analyse et \u00e9valuation<\/li>\n\n\n\n<li>9.2 - Audit interne<\/li>\n\n\n\n<li>9.3 - Revue de direction<\/li>\n\n\n\n<li>10.1 - Non-conformit\u00e9 et action corrective<\/li>\n\n\n\n<li>10.2 - Am\u00e9lioration continue<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>ISO 27001 clause 10.1 - non-conformit\u00e9 et actions correctives<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Des erreurs se produisent. M\u00eame les auditeurs le savent. Bien entendu, il est essentiel que vous vous efforciez de satisfaire \u00e0 chacune des exigences de la norme que vous visez, en l'occurrence l'ISO 27001. Mais il est encore plus important d'enregistrer et de r\u00e9soudre toute non-conformit\u00e9, une fois qu'elle a \u00e9t\u00e9 identifi\u00e9e. Pour ce faire, vous devez prendre des mesures correctives.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La clause 10 (10.1 - 10.2) vous aidera \u00e0 d\u00e9tecter les non-conformit\u00e9s et \u00e0 prendre les mesures correctives qui s'imposent. Vous devez fournir des preuves de la mani\u00e8re dont vous vous assurez que l'action corrective que vous mettez en \u0153uvre ram\u00e8nera l'entreprise \u00e0 un \u00e9tat de conformit\u00e9. Nous y reviendrons plus tard.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>3 \u00e9tapes vers la conformit\u00e9<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vous avez identifi\u00e9 une non-conformit\u00e9 ? Vous devez suivre les trois \u00e9tapes suivantes :<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>La premi\u00e8re \u00e9tape du traitement de la non-conformit\u00e9 consiste \u00e0 identifier ce qui n'a pas fonctionn\u00e9. Pour ce faire, il convient d'identifier la cause du probl\u00e8me en se demandant \"pourquoi\", ce que l'on appelle l'analyse des causes profondes.&nbsp;<br><br>En pratique, la r\u00e9ponse au premier \"Pourquoi ?\" devrait susciter un autre \"Pourquoi ?\" et la r\u00e9ponse au deuxi\u00e8me \"Pourquoi ?\" en suscitera une autre, et ainsi de suite. Cette m\u00e9thode peut vous aider \u00e0 \u00e9tablir la cause premi\u00e8re d'une non-conformit\u00e9.<\/li>\n<\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\">\n<li>Ensuite, vous devez proposer l'action corrective appropri\u00e9e pour arr\u00eater et pr\u00e9venir le probl\u00e8me. Les actions pr\u00e9ventives sont des mesures visant \u00e0 emp\u00eacher la r\u00e9currence de la non-conformit\u00e9.<\/li>\n<\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"3\">\n<li>Une fois les actions correctives mises en place, vous commencez \u00e0 surveiller et \u00e0 revoir le processus.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">C'est aussi simple que 1, 2, 3.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>10 exemples de non-conformit\u00e9s ISO 27001, mineures et majeures<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Il peut \u00eatre difficile de distinguer les non-conformit\u00e9s mineures des non-conformit\u00e9s majeures, mais n'oubliez pas que tout d\u00e9pend du manquement, de sa fr\u00e9quence et du fait qu'il soit r\u00e9p\u00e9t\u00e9 ou non trait\u00e9.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Non-conformit\u00e9s mineures<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Quelques ordinateurs portables laiss\u00e9s sans surveillance sur les bureaux des employ\u00e9s n'ont pas \u00e9t\u00e9 s\u00e9curis\u00e9s par un cadenas.<\/li>\n\n\n\n<li>Dysfonctionnement de la t\u00e9l\u00e9vision en circuit ferm\u00e9 (CCTV) lors d'un audit.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Non-conformit\u00e9s majeures<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Absence de <a href=\"https:\/\/compleye.io\/fr\/articles\/quels-sont-les-documents-obligatoires-pour-liso-27001\/\">documentation obligatoire<\/a>.<\/li>\n\n\n\n<li>L'audit interne n'est pas r\u00e9alis\u00e9 au sein de l'organisation.<\/li>\n\n\n\n<li>Le dirigeant de l'organisation ne s'implique pas ou n'accorde pas d'attention au SMSI (par exemple, il n'assiste pas aux r\u00e9unions importantes sur le SMSI, il ne participe pas aux politiques principales\/g\u00e9n\u00e9rales) ; il ne fournit pas de ressources pour la mise en \u0153uvre du SMSI.<\/li>\n\n\n\n<li>Pas d'\u00e9valuation des performances du SGSI.<\/li>\n\n\n\n<li>Rien n'indique que la gestion des actifs soit correctement assur\u00e9e.<\/li>\n\n\n\n<li>Le contenu de l'AOS n'est pas justifi\u00e9 ou incoh\u00e9rent.<\/li>\n\n\n\n<li>Le processus d'\u00e9valuation des risques n'a pas \u00e9t\u00e9 suivi ou est inad\u00e9quat.<\/li>\n\n\n\n<li>Utilisation abusive d'une marque de certification, induisant ainsi les clients en erreur.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Quelle est la diff\u00e9rence entre non-conformit\u00e9 et CAPA ?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Un processus de non-conformit\u00e9 et un processus d'action corrective et pr\u00e9ventive sont essentiels pour votre SMQ (syst\u00e8me de gestion de la qualit\u00e9).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00eame s'ils sont similaires, il est important de comprendre que certaines non-conformit\u00e9s n\u00e9cessiteront une CAPA et d'autres non.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Le CAPA est un processus qui permet de prendre des mesures correctives ou pr\u00e9ventives lorsqu'un probl\u00e8me est identifi\u00e9 par un client, la direction ou un auditeur (interne ou externe).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Le processus CAPA se d\u00e9roule en cinq \u00e9tapes :<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Enqu\u00eate et \u00e9valuation<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Pr\u00e9-enqu\u00eate<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Enqu\u00eate<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Planification et ex\u00e9cution<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Examen et v\u00e9rification<strong>&nbsp;<\/strong><\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Ne prenez ces mesures que si la non-conformit\u00e9 est critique ou syst\u00e9mique.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Selon le <a href=\"https:\/\/blog.intelex.com\/2019\/05\/03\/nonconformance-vs-capa\/\">Intelex<\/a>Pour d\u00e9terminer si le probl\u00e8me doit \u00eatre trait\u00e9 dans le cadre du programme CAPA, posez-vous trois questions :<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Le probl\u00e8me peut-il \u00eatre r\u00e9solu ?&nbsp;<em>dans le processus ?<\/em><\/li>\n\n\n\n<li>Le probl\u00e8me a-t-il entra\u00een\u00e9 des d\u00e9chets, des rebuts, des reprises importantes ou une insatisfaction du client ?&nbsp;<\/li>\n\n\n\n<li>La non-conformit\u00e9 est-elle le signe d'un probl\u00e8me plus syst\u00e9mique ou est-elle susceptible de se reproduire ?&nbsp;<\/li>\n<\/ol>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Exemple de rapport de non-conformit\u00e9 ISO 27001 et sc\u00e9nario fictif<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/iso27001guide.com\/what-is-the-difference-between-non-conformance-report-and-corrective-action-report-in-iso-27001-iso27001-guide-iso27001-guide.html\">Guide ISO 27001<\/a> fournit un aper\u00e7u clair de la diff\u00e9rence entre un rapport de non-conformit\u00e9 et un rapport d'action corrective dans la norme ISO 27001.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cr\u00e9ons notre propre sc\u00e9nario fictif d'une non-conformit\u00e9 en action en utilisant la premi\u00e8re non-conformit\u00e9 majeure mentionn\u00e9e ci-dessus, \u00e0 savoir l'absence de documentation obligatoire.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Non-conformit\u00e9<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">La d\u00e9claration sur le champ d'application du SMSI est manquante<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Analyse des causes profondes (Pourquoi ?)<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Pourquoi ? <\/em>Lorsqu'elle a \u00e9t\u00e9 interrog\u00e9e, l'\u00e9quipe a montr\u00e9 qu'elle ne comprenait pas quels documents \u00e9taient obligatoires.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Pourquoi ? <\/em>La direction a insist\u00e9 pour que l'\u00e9quipe tente d'obtenir la certification sans l'aide d'un outil en ligne ou d'une tierce partie.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Pourquoi ? <\/em>La direction ne veut pas d\u00e9penser de \"fonds inutiles\".<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Le probl\u00e8me est \u00e9vident : un manque d'investissement dans le processus de certification ISO 27001.&nbsp;<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Mesures correctives propos\u00e9es&nbsp;<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">L'action corrective est d\u00e9sormais claire : une tierce partie (telle que le <a href=\"https:\/\/compleye.io\/fr\">Compleye<\/a>) ou en ligne <a href=\"https:\/\/compleye.io\/fr\/articles\/les-meilleurs-outils-logiciels-de-certification-iso-27001\/\">Outil de certification ISO 27001<\/a> ou d'une plate-forme (telle que <a href=\"https:\/\/compleye.io\/fr\/solutions\/\">Compleye Online<\/a>) doit \u00eatre utilis\u00e9 pour conna\u00eetre la nature de la documentation obligatoire et <a href=\"https:\/\/compleye.io\/fr\/articles\/iso-27001-scope-statements\/\">comment cr\u00e9er une d\u00e9claration de port\u00e9e du SMSI<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Voici \u00e0 quoi ressemblerait la documentation relative \u00e0 cette non-conformit\u00e9 :<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"592\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-1024x592.png\" alt=\"\" class=\"wp-image-10516\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-1024x592.png 1024w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-300x173.png 300w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-768x444.png 768w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-600x347.png 600w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example.png 1384w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Exemple de documentation de non-conformit\u00e9 \u00e0 la norme ISO 27001<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Ne laissez pas la non-conformit\u00e9 vous emp\u00eacher de rendre la conformit\u00e9 (presque) amusante !<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Les exemples de non-conformit\u00e9 \u00e0 la norme ISO 27001 que nous avons fournis ne sont que quelques-uns des nombreux points d'achoppement auxquels peuvent se heurter les organisations d\u00e9sireuses d'obtenir la certification ISO 27001.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pour en savoir plus sur ce que vous devez faire pour garantir le succ\u00e8s de votre certification ISO 27001 et pour d\u00e9couvrir comment nous rendons la conformit\u00e9 (presque) amusante, consultez le site suivant <a href=\"https:\/\/compleye.io\/fr\">Compleye<\/a> ou r\u00e9servez une d\u00e9monstration ci-dessous.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1f6f996 e-con-full e-flex e-con e-child\" data-id=\"1f6f996\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-06f69af elementor-widget elementor-widget-heading\" data-id=\"06f69af\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-334ef0d elementor-widget elementor-widget-n-accordion\" data-id=\"334ef0d\" data-element_type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5380\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-5380\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is an ISO 27001 non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5380\" class=\"elementor-element elementor-element-abb04dc e-con-full e-flex e-con e-child\" data-id=\"abb04dc\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ea277f4 elementor-widget elementor-widget-text-editor\" data-id=\"ea277f4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>An ISO 27001 non-conformity is any failure of an information security management system (ISMS) to meet a requirement of the ISO 27001 standard. Non-conformities are recorded during audits and are graded as minor or major, depending on how serious the failure is, how often it occurs, and whether it has been left untreated.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5381\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5381\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is the difference between a minor and a major ISO 27001 non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5381\" class=\"elementor-element elementor-element-57c26f7 e-con-full e-flex e-con e-child\" data-id=\"57c26f7\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-09da456 elementor-widget elementor-widget-text-editor\" data-id=\"09da456\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A minor ISO 27001 non-conformity is a partial or one-off failure to meet a requirement of the standard. A major ISO 27001 non-conformity is a repeated or untreated failure, an issue that will affect customers if left uncorrected, or a case where essential parts of the ISMS are missing or not implemented.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5382\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5382\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What are examples of major ISO 27001 non-conformities? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5382\" class=\"elementor-element elementor-element-dc21a79 e-con-full e-flex e-con e-child\" data-id=\"dc21a79\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9313d87 elementor-widget elementor-widget-text-editor\" data-id=\"9313d87\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>Examples of major ISO 27001 non-conformities include missing mandatory documentation, no internal audit, leadership that does not support the ISMS, no evaluation of ISMS performance, an inadequate risk assessment process, and a Statement of Applicability that is unjustified or inconsistent. Misusing a certification mark in a way that misleads customers is also a major non-conformity.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5383\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5383\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> Can you get ISO 27001 certified with a non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5383\" class=\"elementor-element elementor-element-2150888 e-con-full e-flex e-con e-child\" data-id=\"2150888\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4d8ddfa elementor-widget elementor-widget-text-editor\" data-id=\"4d8ddfa\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A company can be ISO 27001 certified with minor non-conformities, as long as it gives the auditor an acceptable corrective action plan. A major non-conformity blocks ISO 27001 certification until the company has corrected it and the certification body has verified the fix, which may require a follow-up audit.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5384\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5384\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is the difference between a non-conformance and CAPA? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5384\" class=\"elementor-element elementor-element-65d01cb e-con-full e-flex e-con e-child\" data-id=\"65d01cb\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6e02e3f elementor-widget elementor-widget-text-editor\" data-id=\"6e02e3f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A non-conformance is a single failure to meet a requirement, while CAPA (Corrective Action, Preventive Action) is the formal process used to investigate and resolve serious problems. Not every non-conformance needs CAPA. CAPA is reserved for non-conformances that are critical, systemic, likely to recur, or that caused waste, rework or customer dissatisfaction.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is an ISO 27001 non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"An ISO 27001 non-conformity is any failure of an information security management system (ISMS) to meet a requirement of the ISO 27001 standard. Non-conformities are recorded during audits and are graded as minor or major, depending on how serious the failure is, how often it occurs, and whether it has been left untreated.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is the difference between a minor and a major ISO 27001 non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A minor ISO 27001 non-conformity is a partial or one-off failure to meet a requirement of the standard. A major ISO 27001 non-conformity is a repeated or untreated failure, an issue that will affect customers if left uncorrected, or a case where essential parts of the ISMS are missing or not implemented.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What are examples of major ISO 27001 non-conformities?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"Examples of major ISO 27001 non-conformities include missing mandatory documentation, no internal audit, leadership that does not support the ISMS, no evaluation of ISMS performance, an inadequate risk assessment process, and a Statement of Applicability that is unjustified or inconsistent. Misusing a certification mark in a way that misleads customers is also a major non-conformity.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Can you get ISO 27001 certified with a non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A company can be ISO 27001 certified with minor non-conformities, as long as it gives the auditor an acceptable corrective action plan. A major non-conformity blocks ISO 27001 certification until the company has corrected it and the certification body has verified the fix, which may require a follow-up audit.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is the difference between a non-conformance and CAPA?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A non-conformance is a single failure to meet a requirement, while CAPA (Corrective Action, Preventive Action) is the formal process used to investigate and resolve serious problems. Not every non-conformance needs CAPA. CAPA is reserved for non-conformances that are critical, systemic, likely to recur, or that caused waste, rework or customer dissatisfaction.\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Dans cet article, nous verrons ce qu'est une non-conformit\u00e9, la diff\u00e9rence entre une non-conformit\u00e9 majeure et une non-conformit\u00e9 mineure, comment \u00e9viter et corriger les non-conformit\u00e9s, et nous examinerons dix exemples de non-conformit\u00e9 \u00e0 la norme ISO 27001.<\/p>","protected":false},"author":17,"featured_media":10512,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79],"tags":[],"class_list":["post-10507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iso27001"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2<\/title>\n<meta name=\"description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/fr\/articles\/exemples-de-non-conformite-a-la-norme-iso-27001\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\" \/>\n<meta property=\"og:description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/fr\/articles\/exemples-de-non-conformite-a-la-norme-iso-27001\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-25T13:07:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-02T12:30:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1696\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0\",\"datePublished\":\"2023-01-25T13:07:22+00:00\",\"dateModified\":\"2026-10-02T12:30:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"},\"wordCount\":1733,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"articleSection\":[\"ISO27001\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\",\"name\":\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"datePublished\":\"2023-01-25T13:07:22+00:00\",\"dateModified\":\"2026-10-02T12:30:26+00:00\",\"description\":\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"width\":2560,\"height\":1696},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/fr\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/fr\/articles\/exemples-de-non-conformite-a-la-norme-iso-27001\/","og_locale":"fr_FR","og_type":"article","og_title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","og_description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","og_url":"https:\/\/compleye.io\/fr\/articles\/exemples-de-non-conformite-a-la-norme-iso-27001\/","og_site_name":"compleye.io","article_published_time":"2023-01-25T13:07:22+00:00","article_modified_time":"2026-10-02T12:30:26+00:00","og_image":[{"width":2560,"height":1696,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","type":"image\/webp"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Karolin Kruiskamp","Dur\u00e9e de lecture estim\u00e9e":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0","datePublished":"2023-01-25T13:07:22+00:00","dateModified":"2026-10-02T12:30:26+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"},"wordCount":1733,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","articleSection":["ISO27001"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/","url":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/","name":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","datePublished":"2023-01-25T13:07:22+00:00","dateModified":"2026-10-02T12:30:26+00:00","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","width":2560,"height":1696},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/fr\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/posts\/10507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/comments?post=10507"}],"version-history":[{"count":8,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/posts\/10507\/revisions"}],"predecessor-version":[{"id":25500,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/posts\/10507\/revisions\/25500"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/media\/10512"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/media?parent=10507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/categories?post=10507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/fr\/wp-json\/wp\/v2\/tags?post=10507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}