ISOISO 27001Management ReviewEASYFree question
How do internal audit results feed into management review?
- A.Internal audit results are submitted to the certification body before the meeting, replacing management's own evaluation of ISMS conformity and performance
- B.Audit results go to the audit committee, and management reviews the certificate scope in the next audit
- C.Internal audit results are a required input to management review, informing management about ISMS conformity and effectiveness
- D.Internal audit findings are an optional input to the review, covering technical controls and tools
Why C is correct
Internal audit results are a required management review input, providing independent assessment of ISMS conformity and effectiveness for management consideration.
Know someone studying for ISO 27001? Send them this one.