ISO 27001 · Clauses 8 → 10
How the workstreams feed the rest of the ISMS
Clause 8 · Operation
Operational Plan
Risk Treatment
Corrective Action Log
ISMS Tasks
Runs the plan, keeps the records
Clause 9 · Performance
Monitoring & KPIs
Internal audit
Management review
Checks that it works
Clause 10 · Improvement
Corrective action
Continual improvement
Fixes and improves
Corrective actions feed back into the log