ISOISO 27001Performance EvaluationEASYFree question
An organization's management review inputs include 'feedback from interested parties' but the team is unsure what qualifies. Which example most clearly fits this required input?
- A.Internal audit nonconformities and a surveillance report from the certification body about the audit programme
- B.Monitoring dashboards from the SIEM and a headcount forecast from the HR department for the next financial year
- C.Staff survey results on office facilities and a supplier invoice dispute about licence fees for the toolset
- D.Customer security questionnaire concerns and a regulator's notice about new data-protection expectations
Why D is correct
Feedback from interested parties means relevant inputs from stakeholders such as customers, regulators, partners and staff that bear on the ISMS. Customer security concerns and a regulator's expectations are precisely the kind of feedback this input captures.
Know someone studying for ISO 27001? Send them this one.