Hicomply feature	Yearly saving
Automated scoping Easily scope your ISMS with the Hicomply platform
Asset register autogeneration A shorter learning curve for organisations and a simplified process
Risk assessment Autogenerate your risk register and risk treatment plan
Extended policy templates 90% of the essential are already written out of the box
Controls framework All controls are pre-loaded and already linked to the risks they mitigate
Task management Automate all actions, administration and setup time of your ISMS
Real time monitoring Understand status and progress across your ISMS with the Hicomply dashboard
Compliance & Training Your whole team, on the same page
Audit readiness Hicomply makes sure you have everything in place for your audit
Auditor access Give auditors a dedicated login to access and audit your ISM

Hicomply feature

Yearly saving

Automated scoping Easily scope your ISMS with the Hicomply platform

Asset register autogeneration A shorter learning curve for organisations and a simplified process

Risk assessment Autogenerate your risk register and risk treatment plan

Extended policy templates 90% of the essential are already written out of the box

Controls framework All controls are pre-loaded and already linked to the risks they mitigate

Task management Automate all actions, administration and setup time of your ISMS

Real time monitoring Understand status and progress across your ISMS with the Hicomply dashboard

Compliance & Training Your whole team, on the same page

Audit readiness Hicomply makes sure you have everything in place for your audit

Auditor access Give auditors a dedicated login to access and audit your ISM

ISO27001 - Nov 30, 2021

ISO 27001 Clause 9.3: Management Review

The purpose of the management review is ensure that the ISMS is suitable, effective and adequate to support information security. A management review consists of the status of actions from the previous management reviews, any changes in the internal or external issues that are relevant to the ISMS. It also includes the management feedback related to information security performance including trends in nonconformities and corrective actions, monitoring and measurement results, audit results and fulfilment of information security objectives. The review includes feedback from the interested parties and the results from the risk assessment process and risk treatment process.

Management reviews are one of the key elements of the ISMS because of the top management role in the organisation. So, for instance, if information security needs more budget urgently due to an unplanned risk, the top management can make this possible.