Guest
Responsibility of the CEO for management review minutes
The ISMS Policy talks in section 4.4 Responsibilities (mark 3) about the responsibilities of the ceo (the ceo must have the ISMS reviewed at least once a year and has to create a protocol). Is the protocol the document for the management review?
Assign topic to the user
Expert
Dejan Kosutic
Nov 09, 2018
Answer:
Section 4.4 of the Information Security Policy speaks about the responsibility of the CEO (or other member of the top management) to prepare minutes of the management review meeting.
You can find the template of Management review minutes in the folder 11 of your ISO 27001 Toolkit; by the way, these minutes are a mandatory document.
Comment as guest or Sign in
Nov 09, 2018
Nov 09, 2018
Nov 09, 2018