Skip to main content
All downloads

Template

Turn management review into clear decisions.

Refer to current risks, objectives, audits and earlier decisions. Record the actual review by top management and the follow-up work it agrees.

Cover of ISO 27001 management review template for leadership decisions
  • Evaluate the required inputs using their current sources.
  • Record decisions on improvements and ISMS changes.
  • Keep responsibilities, deadlines and follow-up references in existing records.

Use this template in these measures

Implementation measure

Prepare and record management review

Further framework mappings of this measure

  • ISO/IEC 27001 · 9.3.1

    ISO/IEC 27001:2022 + Amd 1:2024 · Supporting contribution

    The record identifies the review date, period considered and top management actually participating. It prepares a reasoned conclusion on continuing suitability, adequacy and effectiveness. Suitable planned intervals and the actual review by management must be ensured organisationally.

    Read the source ↗

  • ISO/IEC 27001 · 9.3.2

    ISO/IEC 27001:2022 + Amd 1:2024 · Supporting contribution

    Seven input groups connect authoritative information with its evaluation. Performance trends explicitly include nonconformities and corrective actions, monitoring and measurement, audit results and objective achievement. The user must obtain all actually relevant inputs, evaluate their development and retain a retrievable record of the state considered. A list of links alone is insufficient.

    Read the source ↗

  • ISO/IEC 27001 · 9.3.3

    ISO/IEC 27001:2022 + Amd 1:2024 · Supporting contribution

    The result fields record management decisions on improvement opportunities and necessary ISMS changes and the references to agreed work. The conclusion makes the result and participating management traceable. Actual decisions, appropriate document control and implementation of follow-up work remain with the user.

    Read the source ↗