ISOISO 27001Performance EvaluationEASYFree question
Performance results show that an objective is consistently exceeded with wide margins every period. During management review, what is a reasonable consideration this trend should prompt?
- A.Immediately raise a major nonconformity
- B.Stop measuring because performance is good
- C.Consider whether the target is too easy and whether the objective or resource allocation should be adjusted as part of continual improvement
- D.Conclude the ISMS is not functioning
Why C is correct
Consistently exceeding a target by a large margin can signal an unambitious target or possible over-investment. Management review and continual improvement should consider recalibrating the objective rather than treating easy success as the end goal.
Know someone studying for ISO 27001? Send them this one.