ExportableProof — Routines today. Proof tomorrow.

Evidence

Management Review Minutes Template

Capture management review inputs, decisions, outputs and action items.

Back to demo

OSCAL source · MRMT

{
  "artifactId": "MRMT",
  "iso": [
    "9.3"
  ],
  "catalog": [
    {
      "iso": "9.3",
      "oscalId": "iso27001-9.3",
      "title": "Management review",
      "className": "iso27001-clause",
      "group": "Performance evaluation"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-9.3",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    }
  ],
  "components": [],
  "sspImplementedRequirements": [
    {
      "control-id": "iso27001-5.1",
      "props": [
        {
          "name": "iso-id",
          "value": "5.1"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Top Management"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        },
        {
          "name": "unresolved-evidence",
          "value": "ISP"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "MRART"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-7.1",
      "props": [
        {
          "name": "iso-id",
          "value": "7.1"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Top Management"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        },
        {
          "name": "unresolved-evidence",
          "value": "GS"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "MRART"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-9.2",
      "props": [
        {
          "name": "iso-id",
          "value": "9.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Internal Auditor"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "IAP"
        },
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-9.3",
      "props": [
        {
          "name": "iso-id",
          "value": "9.3"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Top Management"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "MRART"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-10.2",
      "props": [
        {
          "name": "iso-id",
          "value": "10.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "ISMS Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "CAR"
        },
        {
          "rel": "cites",
          "text": "IAP"
        },
        {
          "rel": "cites",
          "text": "MRMT"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    }
  ]
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…