nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #159

Drag and Drop Question Select the words that best complete the sentence: Answer:

The correct answer is an observation; conformity. Explanation: Audit Terminology - "An Observation of Conformity" The sentence (incomplete in your question, but standard in audit/quality management exams) likely reads something like: > "When evidence gathered during an audit shows that requirements are being met, the auditor…

Understanding ISO/IEC 27001 Requirements

Question

Drag and Drop Question Select the words that best complete the sentence:

Answer:

Exhibit

ISO-IEC-27001-LEAD-AUDITOR question #159 exhibit

Answer Area

Drag items

nonconformityan observationa recommendationcriteriaconformitya finding

Correct arrangement

  • an observation
  • conformity

Explanation

Explanation: Audit Terminology - "An Observation of Conformity"

The sentence (incomplete in your question, but standard in audit/quality management exams) likely reads something like:

"When evidence gathered during an audit shows that requirements are being met, the auditor documents ___ of ___."

Correct: an observationconformity


Why Each Item Goes Where It Does

Position 1 - "an observation"

In auditing (ISO 9001, ISO 19011), an observation is a documented note from the auditor - something they witnessed and recorded during the audit. It is distinct from:

  • A finding - a formal, evidence-based conclusion after evaluating against criteria (findings can be conforming or nonconforming)
  • A recommendation - advice for improvement, not a factual record of what was seen

The sentence calls for what the auditor documents, which is the act of noting what was seen → an observation.

Position 2 - "conformity"

Conformity means the evidence shows requirements are being met. It completes the phrase "observation of conformity," meaning the auditor noted that the process/system aligns with the audit criteria.

  • Nonconformity would be the opposite - requirements are not met, and is typically documented as a finding of nonconformity, not an observation.
  • Criteria are the benchmarks audits are measured against - not a result.

Common Misconceptions

MistakeWhy It's Wrong
Choosing a finding instead of an observationA finding is the formal conclusion; an observation is the lighter, documented note. Exams often test this distinction.
Choosing nonconformityThis is the opposite - it means requirements are not met.
Choosing a recommendationRecommendations are suggestions, not audit records of what was observed.

Key rule: "Observation of conformity" = auditor saw it, it's good. "Finding of nonconformity" = formal failure documented against criteria.

Topics

#ISMS concepts#ISO 27001 terminology#audit definitions

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice