Continual improvement is a key aspect of the ISMS in the effort to achieve and maintain the suitability, adequacy, and effectiveness of the information security as it relates to the organisation's objectives. Organisations with an operational ISMS must continually strive to improve their management system. This is fundamental to all management systems and the ISMS is no exception.
