thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Management Review

Planned review by top management of an ISMS to ensure its continuing suitability, adequacy, and effectiveness.

Definition

ISO/IEC 27001 Clause 9.3 requires management reviews at planned intervals considering audit results, nonconformities, monitoring results, risk assessment status, interested party feedback, and improvement opportunities. Outputs include decisions on improvements and changes. Records must be retained.

Example

The executive team reviews ISMS metrics and audit findings twice a year and approves resource changes.

Exam tip

Management review is mandatory; missing records is a common nonconformity.

Related terms