Which one option best describes the purpose of retaining documented information related to the Information Security Management System (ISMS) of an organisation?

Question

Options

• ATo ensure that all workers will follow the established procedure.
• BTo show compliance with legal requirements.
• CTo show objective evidence to third-party auditors.
• DTo the extent necessary, to have confidence that the processes have been carried out as planned.

• A
  3% (1)
• C
  3% (1)
• D
  94% (33)

Explanation

The purpose of retaining documented information related to the ISMS of an organisation is to the extent necessary, to have confidence that the processes have been carried out as planned. This means that the documented information provides evidence of the conformity and effectiveness of the ISMS, as well as the achievement of the information security objectives and the continual improvement of the ISMS. Documented information also supports the analysis and evaluation of the ISMS performance and the identification of opportunities for improvement.

No community discussion yet for this question.