3.3 You are conducting an audit of management review. You examine the minutes of the last three management review meetings which cover a period of two years. You note that they have largely been a presentation by the department managers to top management of operational cost issues and nonconformities identified through internal audit.

The minutes do not indicate that any actions resulted from the review.

You consider this does not meet the requirements of ISO 27001 clause 9.3.