MENU
What is the purpose of management review in ISO/IEC 27001:2022?
Suggested Answer: C
Get Premium I27001F Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
ISO/IEC 27001:2022 requires top management to review the organization's ISMS at planned intervals to ensure its continuing suitability, adequacy, and effectiveness. Management review is a formal requirement under performance evaluation and is intended to confirm that the ISMS continues to support the organization's objectives and strategic direction. It is broader than policy review alone and is not limited to communication or Annex A coverage. Therefore, option C is correct.
=======
23 comments · newest first
OD
Odette
4 days ago
B is good, but C covers the bigger picture.
CH
Chuck
10 days ago
I feel like B is overlooked. Employees need updates too.
LI
Lilli
15 days ago
True, but without C, the ISMS can't adapt.
DE
Deja
20 days ago
But A is also important. Risks must align with the policy.
DI
Dino
25 days ago
Agreed, C is the best choice. It ensures ongoing effectiveness.
JA
Janey
1 month ago
I think it's C. The ISMS needs to be effective.
SK
Skye
1 month ago
I like A for risk alignment. It's essential.
NO
Norah
1 month ago
C feels comprehensive. It’s about ongoing improvement.
CA
Caprice
2 months ago
True, but D ensures all controls are covered.
AS
Asuncion
2 months ago
But C covers effectiveness too. That's crucial.
RA
Raylene
2 months ago
I prefer B. Employees should be informed.
GL
Glen
2 months ago
A is also valid. Risks need to match policies.
KI
Kirk
2 months ago
Agreed, C makes sense. Suitability is key.
DE
Denny
2 months ago
I think it's C. Very important for ISMS.
SU
Sue
3 months ago
Not sure if D is really a priority during reviews.
KI
Kiera
3 months ago
B is crucial too, can't leave employees in the dark.
JU
Julie
3 months ago
Surprised that some people overlook the importance of C!
HI
Hildegarde
3 months ago
I think A is just as important!
EM
Emmanuel
3 months ago
C is definitely the main goal of the management review.
AV
Avery
3 months ago
I thought it was about matching the policy with risks, but now I'm questioning if that's really the main goal of the management review.
LI
Lillian
4 months ago
I feel like the review also touches on policies and controls, but I can't recall if that's the primary purpose.
CA
Cassandra
4 months ago
I remember a practice question that emphasized the importance of ongoing suitability and effectiveness, which makes me lean towards option C.
LI
Linn
4 months ago
I think the management review is mainly about ensuring the ISMS is effective, but I'm not entirely sure if that's the only focus.