ISOISO 27001Management ReviewEASYFree question
What are required inputs to the management review?
- A.Audit reports from the certification body, the Statement of Applicability, asset inventory results, and the list of approved supplier contracts
- B.Penetration test findings, the annual security budget, headcount forecasts for the security team, and the results of the last stage 1 audit review
- C.Internal audit schedule, the risk treatment plan approval record, and the current organization chart for the ISMS scope
- D.Status of actions from previous reviews, changes in external/internal issues, ISMS performance feedback, and opportunities for improvement
Why D is correct
Required inputs include previous action status, changes in context, performance feedback (including nonconformities, monitoring results, audit results), and improvement opportunities.
Know someone studying for ISO 27001? Send them this one.