How should feedback from interested parties drive improvement?

• A.Positive feedback from customers should be logged for the marketing team, and complaints from regulators and partners handled outside the ISMS through legal channels
• B.Feedback should be collected during the certification audit alone, and the auditor's summary of interested-party views used in place of direct engagement with customers and regulators
• C.External feedback falls outside the ISMS context under clause 4.2, and improvement opportunities should be drawn from internal audit results and incident analysis instead of customers
• D.Feedback from customers, regulators, and partners should be analyzed for improvement opportunities and incorporated into ISMS enhancement plans