...periodic reviews to verify the effectiveness of the ISMS - Review the levels of acceptable and residual risk - Periodicallyconduct internal ISMS audits Act - Implement identified ISMS improvements - Take appropriate corrective and preventive...
http://infoedge.com/samples/CA-0001free.pdf