ISOISO 27001Continual ImprovementEASYFree question
Which set of inputs are recognized sources that can trigger continual improvement of the ISMS?
- A.Audit findings, security incidents, performance metrics, and management review outputs
- B.Supplier invoices, recruitment plans, marketing budgets, office lease terms, and board meeting agendas
- C.Certification fees, accreditation rules, auditor travel plans, courier receipts, and policy templates
- D.Payroll runs, hiring plans, press releases, and board agendas
Why A is correct
Improvement is driven from many sources including internal and external audit findings, incidents, monitoring and measurement (KPIs), and management review outputs. Limiting it to a single source would miss most improvement opportunities.
Know someone studying for ISO 27001? Send them this one.