9.3.2Management review inputs

The management review the organization's information security management system :

a) the status of actions from previous management reviews;

b) changes in external and internal issues that are relevant to the information security management

system;

c) changes in needs and expectations of interested parties that are relevant to the information

security management system;

d) feedback on the information security performance, including trends in:

1) nonconformities and corrective actions;

2) monitoring and measurement results;

3) audit results;

4) fulfilment of information security objectives;

e) feedback from interested parties;

f) results of risk assessment and status of risk treatment plan;

g) opportunities for continual improvement.