ISOISO 27001Continuous ImprovementEASYFree question
What is the general process for implementing improvements?
- A.Make the change immediately, document it afterwards in the change log, and verify its effectiveness at the next certification audit rather than internally
- B.Plan the change, implement it, and standardize it across the organization straight away, with effectiveness assumed from the implementation record
- C.Document the proposed change in the register, and leave implementation to the control owner's discretion
- D.Identify the opportunity, plan the change, implement it, verify its effectiveness, and standardize successful improvements
Why D is correct
Improvement follows a structured process: identify the opportunity, plan the change, implement it, verify effectiveness, and standardize successful changes.
Know someone studying for ISO 27001? Send them this one.