PECB
LEAD-IMPLEMENTER · Question #67
An organization that has an ISMS in place conducts management reviews at planned intervals, but does not retain documented information on the results. Is this in accordance with the requirements of…
The correct answer is B. No, ISO/IEC 27001 requires organizations to document the results of management reviews. See the full explanation below for the reasoning.
Question
An organization that has an ISMS in place conducts management reviews at planned intervals, but does not retain documented information on the results. Is this in accordance with the requirements of ISO/IEC 27001?
Options
- AYes. ISO/IEC 27001 does not require organizations to document the results of management
- BNo, ISO/IEC 27001 requires organizations to document the results of management reviews
- CYes. ISO/IEC 27001 requires organizations to document the results of management reviews only
How the community answered
(26 responses)- A8% (2)
- B85% (22)
- C8% (2)
Community Discussion
No community discussion yet for this question.