QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Recovering Tessaly Cloud Services' ISMS after a surveillance audit raised a major nonconformity: no management review for 436 days, and the last one a 22-slide deck with no decisions, with a follow-up visit on 7 January 2027 and 14 contracts worth £11.6M of recurring revenue at stake. The crisis board tracks the eight required review inputs, each with its overdue items falling to zero and its evidence becoming current, while the certification-at-risk index falls from 78 to 1 and top management records 68 decisions before the Board defence on 24 March 2027.
CY-PRO-052Pro Level · ISMS - ISO/IEC 27001

ISMS Management Review Recovery

A forty-hour Pro-level ISMS governance crisis simulation run on a live management review crisis board, where you are Head of Information Security Governance at a certified SaaS provider whose certification body has raised a major nonconformity — no management review for 436 days, the last one a slide deck with no decisions — with a follow-up visit in 90 days deciding the certificate and £11.6M of contracts behind it; you refuse the shortcuts, run a genuine review under pressure, prove closure, embed the cycle, price it at the margin and win a Board resolution everyone can be held to.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Read the management review requirement precisely and build honest, evidenced inputs, measurable objectives and a root-cause-based corrective action plan a certification body will accept.
  • Put risk treatment, residual-risk acceptance and resource decisions in front of the executives who own them, and run and record a management review whose every decision can be traced from input to evidence.
  • Prove nonconformity closure to a certification body with indexed evidence, independent internal audit and declared gaps, and embed the review cycle with a charter, automated evidence and leading indicators.
  • Price ISMS governance at the margin with loss scenarios built from the organisation's own records, give a board key risk indicators it will read, and win a resolution it can be held to.

Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.