62 lines
1.9 KiB
Markdown
62 lines
1.9 KiB
Markdown
Title: Corrective Actions Register Template
|
|
Document ID: [REG-CORRECTIVE-001]
|
|
Version: 0.1 Draft
|
|
Status: Draft
|
|
Owner: CISO (Paul Jenkins)
|
|
Approver: CISO (Paul Jenkins)
|
|
Classification: Internal
|
|
Effective date: [DD Month YYYY]
|
|
Review date: [DD Month YYYY]
|
|
|
|
# Corrective Actions Register Template
|
|
|
|
## Purpose
|
|
|
|
This template provides the structure for recording and tracking corrective actions arising from ISMS issues, findings, and improvement activity.
|
|
|
|
## Scope
|
|
|
|
This register applies to actions arising from incidents, audits, risk reviews, exceptions, testing, management review, and other control gaps.
|
|
|
|
## Data Fields / Expected Columns
|
|
|
|
The register should record at least:
|
|
|
|
- action ID
|
|
- source
|
|
- issue summary
|
|
- action description
|
|
- owner
|
|
- priority
|
|
- target date
|
|
- status
|
|
- progress update
|
|
- closure evidence
|
|
- closure date
|
|
- linked records
|
|
|
|
## Ownership
|
|
|
|
This register should be owned by [Role]. Assigned action owners are responsible for progress and evidence of closure.
|
|
|
|
## Update Frequency
|
|
|
|
The register should be updated when actions are raised, reassigned, progressed, delayed, or closed. Overdue actions should be reviewed regularly.
|
|
|
|
## Retention
|
|
|
|
Corrective action records should be retained in line with document and records retention requirements and audit needs.
|
|
|
|
## Template Table
|
|
|
|
| Action ID | Source | Issue Summary | Action Description | Owner | Priority | Target Date | Status | Progress Update | Closure Evidence | Closure Date | Linked Records |
|
|
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|
|
| [CA-001] | [Incident / Audit / Review] | [Issue] | [Required action] | [Role] | [Low/Medium/High] | [DD Month YYYY] | [Open / In Progress / Blocked / Closed] | [Summary] | [Evidence ref] | [DD Month YYYY] | [Incident / risk / audit ref] |
|
|
|
|
## Related Documents
|
|
|
|
- Corrective Action Procedure
|
|
- Internal Audit Procedure
|
|
- Management Review Procedure
|
|
- Security Incident Handling Procedure
|