ISO 37301:2021 10.2: Nonconformity and corrective action
When a nonconformity or noncompliance occurs the organization shall react to it and as applicable take action to control and correct it and deal with the consequences; evaluate the need for action to eliminate its causes so it does not recur or occur elsewhere by reviewing it, determining its causes and determining whether similar ones exist or could occur; implement any action needed; review the effectiveness of corrective action taken; and make changes to the CMS if necessary. Corrective actions shall be appropriate to the effects of the nonconformity or noncompliance, and documented information shall be kept that shows its nature, the actions taken and the results of corrective action.
This control maps to 32 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.