1Define

ISO 27001Objective Metric

ISO 42001Management Objective

Management Objective

Purpose

A measurable management-system objective with target, measure, owner, period and result.

Role

ISO/IEC 27001 Clauses 6.2 and 9.1 and ISO/IEC 42001 Clauses 6.2 and 9.1 require objectives and monitoring of their achievement. Ten Factor evaluates against policy and controls; it does not yet bind those results to stated ISMS or AIMS objectives. ISO/IEC 27001 names this Objective Metric.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Organisation Context
• Risk Assessment
• Party Register

Links downstream

• Evaluation Log
• Management Review

Related factors

• Continuous Governance
• Evidence by Default

References

• ISO/IEC 27001 Analysis — Clauses 6.2 and 9.1
• ISO/IEC 42001 Analysis — Clauses 6.2 and 9.1
• ISO/IEC 27001 Guidance Catalog (iso27001-6.2)