A regular review by top management of whether the management system remains suitable, adequate, and effective, with decisions on changes and resources.
The management review is the point where leadership formally evaluates the management system. It considers defined inputs such as audit results, performance against objectives, status of actions, incidents, and changes in context, then produces decisions on improvements and resources.
It is required at planned intervals and is what makes leadership accountable for the system rather than delegating it entirely to a security or compliance team.
KaitoSec