How does the PDCA cycle support continual improvement?
- A.Through a single Plan-Do-Check-Act pass at certification, after that the ISMS is maintained through corrective action without repeating the cycle
- B.Through repeated cycles of Plan-Do-Check-Act, each cycle building on lessons learned to incrementally improve the ISMS
- C.Through the Check stage alone, where the internal audit measures the ISMS against the previous year's baseline to decide whether improvement occurred
- D.Through the Plan stage, where objectives are set once for the three-year certification period
Why B is correct
The PDCA cycle drives continual improvement through repeated iterations where each cycle incorporates lessons learned to enhance the ISMS.
Know someone studying for ISO 27001? Send them this one.