Clause 10.1 Continual improvement
Clause 10.1 in ISO 27001:2022 (ISO/IEC 27001:2022). All ISO 27001:2022 controls held. Open ISO 27001:2022 on the standards site.
The control as we hold it
Continual improvement. The organization has to keep making its ISMS more suitable, more adequate and more effective.
Reviewed and closest counterparts in the other frameworks
We hold no cross-framework row for Clause 10.1 yet. The reviewed pairs page lists the released pairs and their coverage.
What an auditor commonly asks for
General guidance for this control area (domain: Clause 10), in our words, not a statement of the standard and not binding on an assessor.
- An improvement register or log with sources such as audits, reviews, incidents and metrics
- Evidence improvements were implemented and their effect assessed
- Trends showing ISMS performance over time
- Management review decisions driving improvement