Leveraging related ISMS processes – ISO 27005:2022
ISO 27005:2022 10.6: Management review
Input: assessment results and the status of the treatment plan. Action: review them to confirm residual risks meet the acceptance criteria and that the plan covers every relevant risk with its treatment options. Trigger: the planned review calendar. Output: changes to the acceptance and assessment criteria and an updated treatment plan or Statement of Applicability.
This control maps to 39 controls across 25 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.