ISOISO 27001Management ReviewEASYFree question
What performance information should be reviewed during management review?
- A.Nonconformities, corrective actions, monitoring and measurement results, audit results, and fulfillment of information security objectives
- B.Penetration test tooling licences, vendor invoices, helpdesk ticket volumes, and the total headcount of the security operations team at each regional site
- C.Certificate expiry dates, registrar invoices, auditor travel claims, and the number of pages in the Statement of Applicability for the last cycle
- D.Asset purchase orders, software licence counts, backup job durations, and the quarterly patching calendar maintained by the IT operations team
Why A is correct
Performance review covers nonconformities, corrective actions, monitoring results, audit findings, and progress toward information security objectives.
Know someone studying for ISO 27001? Send them this one.