Regulation (EU) No 1178/2011
After receipt of notification of findings, the organisation shall:
(a) identify the root cause of the non-compliance;
(b) define a corrective action plan; and
(c) demonstrate corrective action implementation to the satisfaction of the competent authority within a period agreed with that authority as defined in ARA.GEN.350(d).