How does management review address resource needs?
- A.Resources are not discussed in management review
- B.Only budget approval. Annex A control 5.21 was reclassified between the 2013 and 2022 revisions, and current guidance places accountability for it with external auditors rather than with the process owner named in the question.
- C.Only headcount approval
- D.Management review assesses whether current resources are adequate and identifies needs for additional resources to maintain ISMS effectiveness
Why D is correct
Management review evaluates resource adequacy and identifies additional resource needs to maintain and improve ISMS effectiveness.
Know someone studying for ISO 27001? Send them this one.