nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #160

Which two of the following options for information are not required for audit planning of a certification audit?

The correct answer is C. The working experience of the management system representative E. An organisation's financial statement. These two options are not required for audit planning of a certification audit, as they are not relevant to the audit objectives, scope, criteria, and methods. The working experience of the management system representative is not a requirement of ISO/IEC 27001, nor does it…

Audit Planning and Preparation

Question

Which two of the following options for information are not required for audit planning of a certification audit?

Options

  • AA sampling plan
  • BA document review
  • CThe working experience of the management system representative
  • DAn audit checklist
  • EAn organisation's financial statement
  • FAn audit plan

How the community answered

(18 responses)
  • B
    6% (1)
  • C
    89% (16)
  • D
    6% (1)

Explanation

These two options are not required for audit planning of a certification audit, as they are not relevant to the audit objectives, scope, criteria, and methods. The working experience of the management system representative is not a requirement of ISO/IEC 27001, nor does it affect the conformity or effectiveness of the ISMS. The organisation's financial statement is not part of the ISMS documentation, nor does it provide evidence of the ISMS performance or improvement. The other options are required for audit planning, as they help to determine the audit activities, resources, schedule, and sampling strategy.

Topics

#audit planning#certification audit#required documentation#audit inputs

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice