ISOISO 27001Performance EvaluationEASYFree question
Which documented information is most relevant as evidence that Clause 9.1 monitoring and measurement has been performed?
- A.Minutes of the audit closing meeting and the certification body invoice for the surveillance visit
- B.The signed policy and the Statement of Applicability approved by top management at the Stage 1 audit
- C.Records of monitoring results and the analysis and evaluation of those results
- D.Training logs and the attendance records of the awareness course
Why C is correct
Records of monitoring results together with the analysis and evaluation of those results evidence that Clause 9.1 has been carried out. Social media counts, travel receipts, and menus do not demonstrate monitoring and measurement of the ISMS.
Know someone studying for ISO 27001? Send them this one.