How does management review address resource needs?
- A.Management review approves the certification body fee quotation and confirms the auditor day rates for the next recertification audit cycle
- B.Resource needs are handled by the ISMS manager during daily operations and escalated to the audit committee once a major nonconformity is raised against the control
- C.Management review recruits the lead implementer and sets the salary grades for security operations staff
- D.Management review assesses whether current resources are adequate and identifies needs for additional resources to maintain ISMS effectiveness
Why D is correct
Management review evaluates resource adequacy and identifies additional resource needs to maintain and improve ISMS effectiveness.
Know someone studying for ISO 27001? Send them this one.