ISOISO 27001Management ReviewEASYFree question
How does management review contribute to continual improvement?
- A.By issuing the certificate and scheduling surveillance audits to confirm the scope, controls, and records
- B.By replacing failed controls and retraining staff on the policy, procedures, and escalation paths
- C.By identifying opportunities for improvement and directing actions to enhance ISMS suitability, adequacy, and effectiveness
- D.By recording auditor findings and filing them with the registrar, ahead of the next surveillance audit
Why C is correct
Management review identifies improvement opportunities and directs actions to enhance the ISMS, forming a key part of the continual improvement cycle.
Know someone studying for ISO 27001? Send them this one.