How does the ISMS process per ISO 27001 consume input and produce output?

Question

Accepted Answer

Input = stakeholders' information-security requirements and expectations → Plan/Do/Check/Act cycle → Output = managed information security delivered back to those stakeholders.

* The ISO 27001 ISMS as a machine: interested-parties requirements in, through PDCA, to managed information security back out to those same parties. *
The classic 27001 PDCA loop with explicit interested parties on both sides:
Interested Parties
   ▼
Information security requirements/expectations
   ▼
[ Plan: Establish ISMS ]
[ Do:   Implement & operate ]
[ Check: Monitor & review ]
[ Act:  Maintain & improve ]
   ▼
Managed information security
   ▼
Interested Parties

"Interested parties" is a deliberately broad term — customers, regulators, employees, suppliers, the board — each has different security expectations, and a good ISMS reconciles them.
Tip: ISO 27001:2022 clause 4.2 makes the "interested parties" enumeration explicit. You can't certify without listing them and explaining how their requirements feed your security objectives.
Go deeper:

ISO/IEC 27001 — clause 4 context and interested parties — how stakeholder requirements feed the ISMS and how assurance is delivered back.