When a nonconformity arises, the laboratory shall: respond to it by controlling and correcting it and dealing with what it caused; assess whether action is needed to remove its causes so that it neither recurs nor appears elsewhere, by reviewing and analysing it, establishing why it happened, and checking whether similar nonconformities exist or might arise; carry out whatever action is needed; review whether the corrective action worked; where needed, update the risks and opportunities identified at the planning stage; and change the management system where needed. Corrective actions shall suit the effects of the nonconformity. Records shall be kept of what the nonconformities were, their causes, the actions taken and what the corrective action achieved.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.