ISOISO 27001Isms FundamentalsEASYFree question
What does ISO 27001 require regarding continual improvement?
- A.The organization must redesign the ISMS in each three-year cycle, and submit the revised plan to the certification body
- B.The organization must continually improve the suitability, adequacy, and effectiveness of the ISMS
- C.The organization must benchmark its controls against ISO 27002, and adopt each new Annex A control within one year
- D.The organization must limit improvement to nonconformities raised by the certification body, and record them in the audit report
Why B is correct
Clause 10 requires organizations to continually improve the suitability, adequacy, and effectiveness of the ISMS through corrective actions and other improvements.
Know someone studying for ISO 27001? Send them this one.