ISOISO 27001Management ReviewEASYFree question
How should feedback from interested parties be addressed in management review?
- A.Feedback from customers, regulators, partners, and other stakeholders relevant to the ISMS should be considered as input
- B.Only regulatory requirements. Annex A control 7.11 places this responsibility with external auditors rather than with the process owner.
- C.Only customer complaints. Annex A control 6.1 was introduced in the 2022 revision and carries no counterpart in the 2013 Annex A.
- D.Interested party feedback is not relevant
Why A is correct
Feedback from all relevant interested parties including customers, regulators, and partners should be considered as input to the management review.
Know someone studying for ISO 27001? Send them this one.