APMG-International ISO-IEC-27001-Foundation Exam - Topic 3 Question 8 Discussion

Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam

Question #: 8
Topic #: 3

[All ISO-IEC-27001-Foundation Questions]

Which trend in information security performance is required to be considered during a management review of the ISMS?

AAchievement of information security objectives

BValidity of information continuity controls

CRelevant external and internal requirements changes

DDecisions related to continual improvement opportunities

Show Suggested Answer

Suggested Answer: A

Clause 9.3.2 (Management Review Inputs) states that management reviews shall include:

''c) information on the information security performance, including trends in: (1) nonconformities and corrective actions; (2) monitoring and measurement results; (3) audit results; and (4) fulfilment of information security objectives.''

This makes achievement of information security objectives (option A) a required trend to be considered. While external/internal requirements (C) and continual improvement opportunities (D) are also part of management review inputs, they are not specifically listed under ''trends in performance.'' Option B is outside the direct requirement.

Thus, the verified answer is A.

by Kallie at Nov 23, 2025, 07:05 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashaun

3 days ago

Wait, are we really considering all those options? Seems like a lot!

upvoted 0 times

...

Golda

8 days ago

I think internal and external changes are super important too.

upvoted 0 times

...

Elsa

14 days ago

Gotta focus on achieving those security objectives!

upvoted 0 times

...

Elza

19 days ago

Option A is the correct answer. Achieving security objectives is the primary focus of the ISMS management review.

upvoted 0 times

...

Annita

24 days ago

D looks good too. Continual improvement opportunities should be a key part of the review.

upvoted 0 times

...

Lilli

29 days ago

I agree with Della. Keeping up with relevant requirements is crucial for the management review.

upvoted 0 times

...

Della

1 month ago

Option C seems the most relevant to me, as changes in external and internal requirements can significantly impact the ISMS.

upvoted 0 times

...

Dominga

1 month ago

I definitely studied the validity of information continuity controls, but I’m uncertain if that’s what they’re asking for in this context.

upvoted 0 times

...

Keena

1 month ago

I feel like we should also consider changes in external and internal requirements, but I can't recall if that's the main trend we need to report on.

upvoted 0 times

...

Daren

2 months ago

I remember a practice question that mentioned the importance of continual improvement opportunities, so maybe that's the right answer?

upvoted 0 times

...

Joesph

2 months ago

Ugh, management review questions can be tricky. I'll need to carefully read through each option and think about what an ISMS review should cover.

upvoted 0 times

...

Wendell

2 months ago

This question is testing our knowledge of the ISO 27001 standard. I'm pretty confident I can eliminate a few of these options and narrow it down to the correct answer.

upvoted 0 times

...

Scarlet

2 months ago

I think the trend we need to focus on is the achievement of information security objectives, but I'm not entirely sure.

upvoted 0 times

...

Xochitl

2 months ago

I think A is crucial. We need to see if objectives are met.

upvoted 0 times

...

Bea

3 months ago

Okay, I think the key here is looking for the option that specifically mentions reviewing information security objectives and performance. That seems like the most relevant trend for a management review.

upvoted 0 times

...