ISOISO 27001Performance EvaluationEASYFree question
An organization's management review inputs include 'feedback from interested parties' but the team is unsure what qualifies. Which example most clearly fits this required input?
- A.The internal auditor's personal opinion about the weather
- B.The vendor's marketing brochure for a new firewall
- C.The number of coffee breaks taken during the review
- D.Customer security questionnaire concerns and a regulator's notice about new data-protection expectations
Why D is correct
Feedback from interested parties means relevant inputs from stakeholders such as customers, regulators, partners and staff that bear on the ISMS. Customer security concerns and a regulator's expectations are precisely the kind of feedback this input captures.
Know someone studying for ISO 27001? Send them this one.