{"id":10507,"date":"2023-01-25T14:07:22","date_gmt":"2023-01-25T13:07:22","guid":{"rendered":"https:\/\/compleye.io\/?p=10507"},"modified":"2026-10-02T14:30:26","modified_gmt":"2026-10-02T12:30:26","slug":"iso-27001-non-conformance-examples","status":"publish","type":"post","link":"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-non-conformance-examples\/","title":{"rendered":"10 Voorbeelden van ISO 27001-overtredingen, zowel klein als groot\u00a0"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"10507\" class=\"elementor elementor-10507\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e9bd75d e-flex e-con-boxed e-con e-parent\" data-id=\"5e9bd75d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6968d198 elementor-widget elementor-widget-text-editor\" data-id=\"6968d198\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">In dit artikel bekijken we wat een non-conformiteit betekent, wat het verschil is tussen een belangrijke en minder belangrijke non-conformiteit, hoe non-conformiteiten kunnen worden vermeden en gecorrigeerd en bekijken we tien ISO 27001 voorbeelden van non-conformiteiten.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What\u2019s an ISO 27001 non-conformity, anyway?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You might be asking yourself what a non-conformity is, exactly. The answer is quite straightforward. If your ISMS (Information Security Management System) doesn\u2019t fulfil one of the ISO 27001 requirements, you\u2019ve got yourself a non-conformity.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to Wikipedia, a <a href=\"https:\/\/en.wikipedia.org\/wiki\/Nonconformity_(quality)\">non-conformity<\/a> generally occurs as a result of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Poor communication (or miscommunication)<\/li>\n\n\n\n<li>Poor documentation (or lack of documentation)<\/li>\n\n\n\n<li>Poor or limited training of personnel<\/li>\n\n\n\n<li>Poor motivation of personnel<\/li>\n\n\n\n<li>Poor quality materials (or lack of appropriate materials)<\/li>\n\n\n\n<li>Poor quality tools and equipment (or lack of appropriate tools and equipment)<\/li>\n\n\n\n<li>Poor or dysfunctional operating environment<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">It does get slightly more complicated, because not all non-conformities were created equal: there are major and minor non-conformities. Both will be noted during audit, and a major non-conformity will result in a failure to be certified for ISO 27001.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What\u2019s the difference between a minor and a major ISO 27001&nbsp; non-conformity?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A minor non-conformity is:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A partial fulfilment of one of the ISO 27001 requirements\u2026&nbsp;<\/li>\n\n\n\n<li>A failure to fulfil a minor requirement, or\u2026&nbsp;<\/li>\n\n\n\n<li>A once-off failure to meet one of the standard\u2019s requirements.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A major non-conformity is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A repeated or untreated failure to meet one of the requirements, or\u2026&nbsp;<\/li>\n\n\n\n<li>An issue that will impact your customers if not corrected, and\/or\u2026<\/li>\n\n\n\n<li>If essential parts of the ISMS are missing or not implemented.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Requirements for ISO 27001<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s take a look at a topline overview of what the ISO 27001 requirements are:<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<ul class=\"wp-block-list\">\n<li>4.1 \u2013 Understanding the Organisation and its Context<\/li>\n\n\n\n<li>4.2 \u2013 Understanding the Needs and Expectations of Interested Parties<\/li>\n\n\n\n<li>4.3 \u2013 Determining the Scope of the Information Security Management System<\/li>\n\n\n\n<li>4.4 \u2013 Information Security Management System<\/li>\n\n\n\n<li>5.1 \u2013 Leadership &amp; Commitment<\/li>\n\n\n\n<li>5.2 \u2013 Information Security Policy<\/li>\n\n\n\n<li>5.3 \u2013 Organizational Roles, Responsibilities &amp; Authorities<\/li>\n\n\n\n<li>6.1 \u2013 Actions to Address Risks and Opportunities<\/li>\n\n\n\n<li>6.2 \u2013 Information Security Objectives &amp; Planning to Achieve them<\/li>\n\n\n\n<li>7.1 \u2013 Resources<\/li>\n\n\n\n<li>7.2 \u2013 Competence<\/li>\n\n\n\n<li>7.3 \u2013 Awareness<\/li>\n\n\n\n<li>7.4 \u2013 Communication<\/li>\n\n\n\n<li>7.5 \u2013 Documented Information<\/li>\n\n\n\n<li>8.1 \u2013 Operational Planning &amp; Control<\/li>\n\n\n\n<li>8.2 \u2013 Information Security Risk Assessment<\/li>\n\n\n\n<li>8.3 \u2013 Information Security Risk Treatment<\/li>\n\n\n\n<li>9.1 \u2013 Monitoring, Measurement, Analysis and Evaluation<\/li>\n\n\n\n<li>9.2 \u2013 Internal Audit<\/li>\n\n\n\n<li>9.3 \u2013 Management Review<\/li>\n\n\n\n<li>10.1 \u2013 Non-conformity and Corrective Action<\/li>\n\n\n\n<li>10.2 \u2013 Continual Improvement<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>ISO 27001 clause 10.1 \u2013 non-conformity and corrective actions<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mistakes happen. Even auditors know that. Of course it\u2019s vital that you try to meet each and every requirement of the standard that you\u2019re going for, in this case, ISO 27001. But even more important is that you record and resolve any non-conformities, once identified. You do this by taking corrective action.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Clause 10 (10.1 \u2013 10.2) will help you to find non-conformities and take said corrective action. You should provide evidence of how you are ensuring that the corrective action you\u2019re taking will return the company to a state of conformity. More about this later.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>3 steps to conformity<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Identified a non-conformity? You should follow these three steps:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The first step in addressing non-conformity is identifying what went wrong in the first place. You achieve this by identifying the cause of a problem by asking yourself \u2018Why?\u2019 This is called a root cause analysis.&nbsp;<br><br>In practice, the response to the first &#8220;Why?&#8221; should prompt another &#8220;Why?&#8221; and the response to the second &#8220;Why?&#8221; will prompt another, and so on. This method can help you to establish the root cause of a non-conformity.<\/li>\n<\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\">\n<li>Next, you need to come up with the appropriate corrective action to stop and prevent the problem. Preventive actions are measures to prevent non-conformity from recurring.<\/li>\n<\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"3\">\n<li>Once your corrective actions are in place, you start monitoring and reviewing the process.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It really is as easy as 1, 2, 3.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>10 ISO 27001 non-conformance examples, both minor and major<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It can be tricky to try and distinguish between minor and major non-conformities, but remember that much depends on the failure to fulfil and the frequency of the failure as well as whether or not the failure is repeated or untreated.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Minor non-conformities<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A few unattended laptops found on employee\u2019s desks not secured with cable lock.<\/li>\n\n\n\n<li>Closed Circuit Television (CCTV) malfunction when audit is being performed.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Major non-conformities<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Absence of <a href=\"https:\/\/compleye.io\/nl\/artikelen\/what-are-the-mandatory-documents-needed-for-iso-27001\/\">mandatory documentation<\/a>.<\/li>\n\n\n\n<li>Internal audit is not performed within the organization.<\/li>\n\n\n\n<li>Leader of the organization doesn\u2019t involve or give attention to ISMS (e.g. not attend to important ISMS meetings, involvement in main\/general policies); doesn\u2019t provide resources to implementation of ISMS.<\/li>\n\n\n\n<li>No evaluation of ISMS performance.<\/li>\n\n\n\n<li>No evidence that asset management is maintained properly.<\/li>\n\n\n\n<li>SOA content not justified or inconsistent.<\/li>\n\n\n\n<li>Risk assessment process not followed or inadequate.<\/li>\n\n\n\n<li>Misuse of a certification mark, thus misleading customers.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What\u2019s the difference between non-conformance and CAPA?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A non-conformance process and a Corrective Action, Preventative Action process are vital for your QMS (Quality Management System).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even though they are similar, it\u2019s important to realise that some non-conformities will require CAPA and others won\u2019t.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CAPA is a process which takes corrective or preventive action when an issue is identified by a customer, management, or an (internal or external) auditor.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CAPA process follows five steps:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Inquiry and assessment<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Pre-investigation<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Investigation<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Planning and execution<strong>&nbsp;<\/strong><\/li>\n\n\n\n<li>Review and verification<strong>&nbsp;<\/strong><\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Only take these steps if non-conformance is critical or systemic.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Volgens <a href=\"https:\/\/blog.intelex.com\/2019\/05\/03\/nonconformance-vs-capa\/\">Intelex<\/a>, to determine whether the problem needs to progress to CAPA, ask yourself three questions:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Can the problem be fixed&nbsp;<em>in the process?<\/em><\/li>\n\n\n\n<li>Did the problem result in waste, scrap, significant rework, or customer dissatisfaction?&nbsp;<\/li>\n\n\n\n<li>Is the non-conformity an indication of a more systemic problem, or is it likely to reoccur?&nbsp;<\/li>\n<\/ol>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>ISO 27001 non-conformity report example and mock scenario<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/iso27001guide.com\/what-is-the-difference-between-non-conformance-report-and-corrective-action-report-in-iso-27001-iso27001-guide-iso27001-guide.html\">ISO 27001 Guide<\/a> provides a clear outline of the difference between a non-conformance report and a corrective action report in ISO 27001.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s create our own mock scenario of a non-conformity in action using the first major non-conformity mentioned above, i.e. absence of mandatory documentation.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Non-conformity<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">ISMS scope statement is missing<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Root cause analysis (Why?)<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Why? <\/em>When questioned, the team showed a lack of understanding of which documents were mandatory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Why? <\/em>Management insisted that the team attempt to achieve certification without the help of an online tool or third party.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Why? <\/em>Management does not want to spend \u2018unnecessary funds\u2019<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The problem is evident \u2013 a lack of investment in the ISO 27001 certification process.&nbsp;<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Suggested Corrective Action&nbsp;<\/strong><\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">It is now clear what the corrective action should be: a third party (such as <a href=\"https:\/\/compleye.io\/nl\">Compleye<\/a>) or online <a href=\"https:\/\/compleye.io\/nl\/artikelen\/top-iso-27001-certification-software-tools\/\">ISO 27001 certification tool<\/a> or platform (such as <a href=\"https:\/\/compleye.io\/nl\/solutions\/\">Compleye Online<\/a>) should be used to find out what the mandatory documentation is and <a href=\"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-scope-statements\/\">how to create an ISMS Scope Statement<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is what the documentation for this non-conformity would look like:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"592\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-1024x592.png\" alt=\"\" class=\"wp-image-10516\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-1024x592.png 1024w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-300x173.png 300w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-768x444.png 768w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example-600x347.png 600w, https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/CAPA-Corrective-Action-Plan-Example.png 1384w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Example of ISO 27001 non-conformity documentation<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Don\u2019t let non-conformance stop you from making compliance (almost) fun!<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The ISO 27001 non-conformance examples that we\u2019ve provided are just a few of many that might form stumbling blocks for organisations wanting to achieve ISO 27001 certification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To learn more about what you need to do to guarantee your ISO 27001 certification success and to find out how we\u2019re making compliance (almost) fun, check out <a href=\"https:\/\/compleye.io\/nl\">Compleye<\/a> or book a demo below.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1f6f996 e-con-full e-flex e-con e-child\" data-id=\"1f6f996\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-06f69af elementor-widget elementor-widget-heading\" data-id=\"06f69af\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-334ef0d elementor-widget elementor-widget-n-accordion\" data-id=\"334ef0d\" data-element_type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5380\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-5380\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is an ISO 27001 non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5380\" class=\"elementor-element elementor-element-abb04dc e-con-full e-flex e-con e-child\" data-id=\"abb04dc\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ea277f4 elementor-widget elementor-widget-text-editor\" data-id=\"ea277f4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>An ISO 27001 non-conformity is any failure of an information security management system (ISMS) to meet a requirement of the ISO 27001 standard. Non-conformities are recorded during audits and are graded as minor or major, depending on how serious the failure is, how often it occurs, and whether it has been left untreated.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5381\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5381\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is the difference between a minor and a major ISO 27001 non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5381\" class=\"elementor-element elementor-element-57c26f7 e-con-full e-flex e-con e-child\" data-id=\"57c26f7\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-09da456 elementor-widget elementor-widget-text-editor\" data-id=\"09da456\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A minor ISO 27001 non-conformity is a partial or one-off failure to meet a requirement of the standard. A major ISO 27001 non-conformity is a repeated or untreated failure, an issue that will affect customers if left uncorrected, or a case where essential parts of the ISMS are missing or not implemented.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5382\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5382\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What are examples of major ISO 27001 non-conformities? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5382\" class=\"elementor-element elementor-element-dc21a79 e-con-full e-flex e-con e-child\" data-id=\"dc21a79\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9313d87 elementor-widget elementor-widget-text-editor\" data-id=\"9313d87\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>Examples of major ISO 27001 non-conformities include missing mandatory documentation, no internal audit, leadership that does not support the ISMS, no evaluation of ISMS performance, an inadequate risk assessment process, and a Statement of Applicability that is unjustified or inconsistent. Misusing a certification mark in a way that misleads customers is also a major non-conformity.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5383\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5383\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> Can you get ISO 27001 certified with a non-conformity? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5383\" class=\"elementor-element elementor-element-2150888 e-con-full e-flex e-con e-child\" data-id=\"2150888\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4d8ddfa elementor-widget elementor-widget-text-editor\" data-id=\"4d8ddfa\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A company can be ISO 27001 certified with minor non-conformities, as long as it gives the auditor an acceptable corrective action plan. A major non-conformity blocks ISO 27001 certification until the company has corrected it and the certification body has verified the fix, which may require a follow-up audit.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-5384\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-5384\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is the difference between a non-conformance and CAPA? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-5384\" class=\"elementor-element elementor-element-65d01cb e-con-full e-flex e-con e-child\" data-id=\"65d01cb\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6e02e3f elementor-widget elementor-widget-text-editor\" data-id=\"6e02e3f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span>A non-conformance is a single failure to meet a requirement, while CAPA (Corrective Action, Preventive Action) is the formal process used to investigate and resolve serious problems. Not every non-conformance needs CAPA. CAPA is reserved for non-conformances that are critical, systemic, likely to recur, or that caused waste, rework or customer dissatisfaction.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is an ISO 27001 non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"An ISO 27001 non-conformity is any failure of an information security management system (ISMS) to meet a requirement of the ISO 27001 standard. Non-conformities are recorded during audits and are graded as minor or major, depending on how serious the failure is, how often it occurs, and whether it has been left untreated.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is the difference between a minor and a major ISO 27001 non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A minor ISO 27001 non-conformity is a partial or one-off failure to meet a requirement of the standard. A major ISO 27001 non-conformity is a repeated or untreated failure, an issue that will affect customers if left uncorrected, or a case where essential parts of the ISMS are missing or not implemented.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What are examples of major ISO 27001 non-conformities?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"Examples of major ISO 27001 non-conformities include missing mandatory documentation, no internal audit, leadership that does not support the ISMS, no evaluation of ISMS performance, an inadequate risk assessment process, and a Statement of Applicability that is unjustified or inconsistent. Misusing a certification mark in a way that misleads customers is also a major non-conformity.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Can you get ISO 27001 certified with a non-conformity?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A company can be ISO 27001 certified with minor non-conformities, as long as it gives the auditor an acceptable corrective action plan. A major non-conformity blocks ISO 27001 certification until the company has corrected it and the certification body has verified the fix, which may require a follow-up audit.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is the difference between a non-conformance and CAPA?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"A non-conformance is a single failure to meet a requirement, while CAPA (Corrective Action, Preventive Action) is the formal process used to investigate and resolve serious problems. Not every non-conformance needs CAPA. CAPA is reserved for non-conformances that are critical, systemic, likely to recur, or that caused waste, rework or customer dissatisfaction.\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>In dit artikel bekijken we wat een non-conformiteit betekent, wat het verschil is tussen een belangrijke en minder belangrijke non-conformiteit, hoe non-conformiteiten kunnen worden vermeden en gecorrigeerd en bekijken we tien ISO 27001 voorbeelden van non-conformiteiten.<\/p>","protected":false},"author":17,"featured_media":10512,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79],"tags":[],"class_list":["post-10507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iso27001"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2<\/title>\n<meta name=\"description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-non-conformance-examples\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\" \/>\n<meta property=\"og:description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-non-conformance-examples\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-25T13:07:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-02T12:30:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1696\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0\",\"datePublished\":\"2023-01-25T13:07:22+00:00\",\"dateModified\":\"2026-10-02T12:30:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"},\"wordCount\":1733,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"articleSection\":[\"ISO27001\"],\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\",\"name\":\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"datePublished\":\"2023-01-25T13:07:22+00:00\",\"dateModified\":\"2026-10-02T12:30:26+00:00\",\"description\":\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp\",\"width\":2560,\"height\":1696},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-non-conformance-examples\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/nl\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-non-conformance-examples\/","og_locale":"nl_NL","og_type":"article","og_title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","og_description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","og_url":"https:\/\/compleye.io\/nl\/artikelen\/iso-27001-non-conformance-examples\/","og_site_name":"compleye.io","article_published_time":"2023-01-25T13:07:22+00:00","article_modified_time":"2026-10-02T12:30:26+00:00","og_image":[{"width":2560,"height":1696,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","type":"image\/webp"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Karolin Kruiskamp","Geschatte leestijd":"8 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0","datePublished":"2023-01-25T13:07:22+00:00","dateModified":"2026-10-02T12:30:26+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"},"wordCount":1733,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","articleSection":["ISO27001"],"inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/","url":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/","name":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","datePublished":"2023-01-25T13:07:22+00:00","dateModified":"2026-10-02T12:30:26+00:00","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/01\/10-iso-27001-non-conformance-examples-both-minor-and-major-blog-header-scaled.webp","width":2560,"height":1696},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/iso-27001-non-conformance-examples\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"10 ISO 27001 Non-Conformance Examples, Both Minor and Major\u00a0"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/nl\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/posts\/10507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/comments?post=10507"}],"version-history":[{"count":8,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/posts\/10507\/revisions"}],"predecessor-version":[{"id":25500,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/posts\/10507\/revisions\/25500"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/media\/10512"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/media?parent=10507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/categories?post=10507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/nl\/wp-json\/wp\/v2\/tags?post=10507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}