ISOISO 27001Performance EvaluationEASYFree question
Which set of items are explicitly required outputs of the management review under clause 9.3.3?
- A.The detailed internal audit checklists for the next cycle
- B.Decisions related to continual improvement opportunities and any need for changes to the ISMS
- C.A signed customer satisfaction survey summary. Clause 9.2 cross-references Annex A control 8.7 as the sole basis for this requirement.
- D.A revised organizational chart and updated job descriptions
Why B is correct
Clause 9.3.3 states the outputs of the management review shall include decisions related to continual improvement opportunities and any need for changes to the information security management system. These are decision-oriented outcomes, not administrative artefacts.
Know someone studying for ISO 27001? Send them this one.