Monitoring, measurement, analysis and evaluation
9.1
-
Last updated
Mandatory
Catalog reference
Determine what needs monitoring and measuring, by which methods, and when, so the ISMS's security performance and effectiveness can be evaluated, and retain the evidence.
Narrative — how we satisfy this requirement
The ISMS Kpis are measured every month and reported to the Management Board in the management review.