Corrective Action Plan
What is Corrective Action Plan?
A documented set of steps to address audit findings, control deficiencies, or non-conformities, including timelines and responsible parties.
Terms that appear alongside corrective action plan
Each of these is named in at least one of the same controls as corrective action plan. The number is how many controls name both.
- remediation 2 shared controls
- audit 2 shared controls
- finding 2 shared controls
- fips 2 shared controls
- security controls 2 shared controls
- nist 2 shared controls
Frameworks that govern corrective action plan
What the standards actually require on corrective action plan
Requirements naming corrective action plan across 6 standards, quoted from the control text.
The IRS Office of Safeguards conducts continuous oversight of FTI safeguarding through structured reports + on-site reviews + assessments.
IRSPub1075-OfficeOfSafeguards-OnSite-Review-SAR-SDSR-SCSEM-POAM-CAP-Audit-FTI-Compliance · IRS Office of Safeguards Reviews + On-Site Safeguard Review + Safeguard Activity Report (SAR) + Safeguard Security Report (SSR) + SCSEM + Plan of Action and Milestones (POA&M) + Corrective Action Plan (CAP) →Track every audit finding on a risk-prioritised corrective action plan with named owners and due dates, and report remediation progress to the stakeholders accountable for closing it.
CCM-A&A-06 · Remediation →HITECH 4-tier CIVIL MONETARY PENALTIES (CMP) + enforcement (Section 17939; 45 CFR 160.404; inflation-adjusted annually). HHS OCR ENFORCEMENT AUTHORITY: HHS Office for Civil Rights (OCR) primary federal enforcer;
HITECH-Enforcement-CMP-Tiers-StateAGs-OCR · HITECH 4-Tier Civil Monetary Penalty Structure, State AGs Enforcement and HHS OCR Settlements →Supply chain + reporting + coordination cover ILO FPRW extension beyond own operations. Supply Chain Labour Standards: cascade ILO Fundamental Principles into supplier code of conduct + tier 1 + tier 2 + tier 3 + sub-tier visibility;
ILO-FPRW-SupplyChain-Reporting-Training-Coord-UNGC-OECD-UNGP-CSDDD · ILO FPRW - Supply Chain Labour Standards + Public Reporting + Worker Training + Coordination UN Global Compact + OECD MNE + UNGPs + EU CSDDD + Modern Slavery Acts →Address Mandatory Criterion 4 of Modern Slavery Statement under Section 16(1)(d) - describe actions taken by reporting entity to assess and address modern slavery risks including due diligence and remediation.
AU-MSA-Mandatory-Criterion-4-Actions-Section-16-1d-Due-Diligence-Supplier-Code-Worker-Voice-Recruitment-Fees · Australia MSA Mandatory Criterion 4 + Actions + Section 16(1)(d) + Due Diligence + Supplier Code + Worker Voice + Recruitment Fees →Per CPSC: Voluntary Recall Notice + Corrective Action Plan + SaferProducts.gov Complaint Monitoring.
USCPSC-3 · Recall, Corrective Action, SaferProducts.gov →Questions people ask about corrective action plan
What is Corrective Action Plan?
Why is Corrective Action Plan important for compliance?
Which compliance frameworks address Corrective Action Plan?
Where can I learn more about Corrective Action Plan?
See how Corrective Action Plan applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.