ISOISO 27001Management ReviewEASYFree question
What types of changes should be considered during management review?
- A.Changes in the auditor's sampling method and the certification body's fee schedule, including scheduling, travel, and reporting changes
- B.Changes in external and internal issues relevant to the ISMS, including regulatory, threat, and business environment changes
- C.Changes in the Annex A numbering and the control wording in the standard, including new attribute tags, themes, and layered categories
- D.Changes in the ISMS document templates and file naming, including version labels, headers, and approval stamps
Why B is correct
Management review must consider changes in external and internal issues including regulatory requirements, threat landscape, business environment, and technology changes.
Know someone studying for ISO 27001? Send them this one.