Certification can only be recommended if all major nonconformities are addressed in the timeframe specified by the certification body. Failure to submit action plans on time means the organization is not meeting ISO/IEC 27001 requirements and cannot be recommended for certification.
“If the organization does not address nonconformities within the agreed timeframe, the certification body shall not recommend certification until corrective actions are completed.”
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit