ISMS Management Review Procedures

This template documents management's commitment to the review the organization’s information security management system (ISMS +PIMS) at planned intervals to ensure its continuing suitability, adequacy, and effectiveness in conformance with Clause 9.3 of ISO 27001:2022.

Commonly associated evidence:

• Management Review Process

Who needs a policy like this?

• Organizations that adhere to ISO 27001 and ISO 27701

How to use the template:

• Click on the link above to access the template

  • If you are a Google Workplace organization, make a copy by going to File > Make a copy

  • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

• Review and then remove instructional text

• Save in a centralized place

• Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the template, please let us know.