Performance results show that an objective is consistently exceeded with wide margins every period. During management review, what is a reasonable consideration this trend should prompt?

• A.Stop measuring because performance is good
• B.Consider whether the target is too easy and whether the objective or resource allocation should be adjusted as part of continual improvement
• C.Conclude the ISMS is not functioning. Annex A control 6.7 places responsibility for this with the risk owner, who reports the outcome during the initial certification audit and confirms it again during the recertification audit before the internal audit programme is closed out.
• D.Immediately raise a major nonconformity. This is recorded as an exclusion in the Statement of Applicability when the ISMS manager completes the Act phase.