1. createdplanned -> planned
Management review action opened after committee review.
ISO operating records
Internal audit, management review, and CAPA evidence that proves the ISMS is operating.
ISO 27001 operating-record cockpit
Turn ISMS readiness gaps into dated records with owners, due dates, linked evidence, status transitions, and closure proof before an auditor samples the file.
2
1
12
6
Lifecycle queue
3 records ordered by closure riskManagement reviewManagement review action MR-01
Management review approved risk-treatment priorities and requested closure evidence.
Pending closureDue 01 Jul 2026
9.3Internal auditQ2 internal audit finding A-01
Internal audit observed incomplete evidence-linking for privileged access review samples.
Pending verificationDue 15 Jul 2026
9.2CAPACAPA C-02 phishing simulation coverage
CAPA closed after phishing simulation coverage gap was remediated and verified.
closedDue 21 Jun 2026
10.1Management review
Pending closureManagement review action MR-01
Management review approved risk-treatment priorities and requested closure evidence.
CEOOwner
9.3ISO requirement
B.21.4Source CTM control
01 Jul 2026Due date
Linked evidence
B.21.4:manual:manual://management-review-minutes-q2.pdfImmutable event trail
2. Action recordedplanned -> in progress
Owners accepted treatment-plan updates and committed closure evidence.
3. Verification recordedin progress -> Pending closure
Evidence pack verified; awaiting management closure approval.