APMG-International ISO-IEC-27001-Foundation Exam - Topic 3 Question 8 Discussion

Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam

Question #: 8
Topic #: 3

[All ISO-IEC-27001-Foundation Questions]

Which trend in information security performance is required to be considered during a management review of the ISMS?

AAchievement of information security objectives

BValidity of information continuity controls

CRelevant external and internal requirements changes

DDecisions related to continual improvement opportunities

Show Suggested Answer

Suggested Answer: A

Clause 9.3.2 (Management Review Inputs) states that management reviews shall include:

''c) information on the information security performance, including trends in: (1) nonconformities and corrective actions; (2) monitoring and measurement results; (3) audit results; and (4) fulfilment of information security objectives.''

This makes achievement of information security objectives (option A) a required trend to be considered. While external/internal requirements (C) and continual improvement opportunities (D) are also part of management review inputs, they are not specifically listed under ''trends in performance.'' Option B is outside the direct requirement.

Thus, the verified answer is A.

by Kallie at Nov 23, 2025, 07:05 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilburn

8 days ago

I lean towards D too. Opportunities drive us forward.

upvoted 0 times

...

Felicia

13 days ago

I feel B is often overlooked. Validity is essential for continuity.

upvoted 0 times

...

Luther

18 days ago

A and C together give a complete picture. Can't ignore either.

upvoted 0 times

...

Cornell

24 days ago

D is my pick. Continuous improvement is key for growth.

upvoted 0 times

...

Jesusa

29 days ago

I agree, but C is also important. Changes affect our strategy.

upvoted 0 times

...

Cammy

1 month ago

Totally agree, continual improvement is key for ISMS!

upvoted 0 times

...

Lashaun

2 months ago

Wait, are we really considering all those options? Seems like a lot!

upvoted 0 times

...

Golda

2 months ago

I think internal and external changes are super important too.

upvoted 0 times

...

Elsa

2 months ago

Gotta focus on achieving those security objectives!

upvoted 0 times

...

Elza

2 months ago

Option A is the correct answer. Achieving security objectives is the primary focus of the ISMS management review.

upvoted 0 times

...

Annita

2 months ago

D looks good too. Continual improvement opportunities should be a key part of the review.

upvoted 0 times

...

Lilli

3 months ago

I agree with Della. Keeping up with relevant requirements is crucial for the management review.

upvoted 0 times

...

Della

3 months ago

Option C seems the most relevant to me, as changes in external and internal requirements can significantly impact the ISMS.

upvoted 0 times

...

Dominga

3 months ago

I definitely studied the validity of information continuity controls, but I’m uncertain if that’s what they’re asking for in this context.

upvoted 0 times

...

Keena

3 months ago

I feel like we should also consider changes in external and internal requirements, but I can't recall if that's the main trend we need to report on.

upvoted 0 times

...

Daren

3 months ago

I remember a practice question that mentioned the importance of continual improvement opportunities, so maybe that's the right answer?

upvoted 0 times

...

Joesph

3 months ago

Ugh, management review questions can be tricky. I'll need to carefully read through each option and think about what an ISMS review should cover.

upvoted 0 times

...

Wendell

4 months ago

This question is testing our knowledge of the ISO 27001 standard. I'm pretty confident I can eliminate a few of these options and narrow it down to the correct answer.

upvoted 0 times

...

Scarlet

4 months ago

I think the trend we need to focus on is the achievement of information security objectives, but I'm not entirely sure.

upvoted 0 times

...

Xochitl

4 months ago

I think A is crucial. We need to see if objectives are met.

upvoted 0 times

...

Bea

4 months ago

Okay, I think the key here is looking for the option that specifically mentions reviewing information security objectives and performance. That seems like the most relevant trend for a management review.

upvoted 0 times

...