Which of the following is NOT part of the steps required by ISO/IEC 27001 that an organization must take when a nonconformity is detected?

React to the nonconformity, take action to control and correct it. and deal with its consequences
Evaluate the need for action to eliminate the causes of the nonconformity so that it does not recur or occur elsewhere
Communicate the details of the nonconformity to every employee of the organization and suspend the employee that caused the nonconformity

Answer(s): C

What supports the continual improvement of an ISMS?

Answer(s): A

Based on the scenario above, answer the following question:
What caused SunDee’s workforce disruption?

The negligence of performance evaluation and monitoring and measurement procedures
The inconsistency of reports written by different employees
The voluminous written reports

Answer(s): C