Description
The minutes of the management review record the inputs and the discussion, but not what top management decided about people, tools, and budget for the ISMS. The standard asks for decisions on resources as an output of the review. The lead auditor noted that the decisions were taken in the meeting and are visible in later actions, but the minutes themselves do not state them.