Division 4.1 For identified instances of non-compliance that are considered unacceptable, an action plan shall be drawn up. This shall:
United Kingdom
- (a)
lead to the enforcement of correctly implemented processes, procedures, technical, operational and organisational risk control measures as specified; or
- (b)
improve existing processes, procedures, technical, operational and organisational risk control measures; or
- (c)
identify and implement additional risk control measures.