What are required outputs from the management review?
- A.Approval of the Statement of Applicability and a revised internal audit programme for the next certification cycle
- B.Issue of the stage 2 audit report and a signed renewal request sent to the accreditation body for the certificate
- C.Assignment of audit findings to the certification body and a revised sampling plan for the surveillance audit
- D.Decisions and actions related to continual improvement opportunities and any needs for changes to the ISMS
Why D is correct
Outputs must include decisions and actions related to continual improvement opportunities and any identified needs for changes to the ISMS.
Know someone studying for ISO 27001? Send them this one.