ISO-IEC-27001-LEAD-AUDITOR · Question #171
You are an ISMS audit team leader tasked with conducting a follow-up audit at a client's data centre. Following two days on-site you conclude that of the original 12 minor and 1 major…
The correct answer is A. Agree with the auditee/audit client how the remaining nonconformity will be cleared, by when, and C. Close the follow-up audit as the organisation has demonstrated it is committed to clearing the F. Note the progress made but hold the audit open until all corrective action has been cleared G. Advise the individual managing the audit programme of any decision taken regarding the. The four options for the actions you could take are A, C, F, and G. These options are consistent with the guidance and requirements of ISO 19011:2018, Clause 6.712. You could agree with the auditee/audit client how the remaining nonconformity will be cleared, by when, and how…
Question
You are an ISMS audit team leader tasked with conducting a follow-up audit at a client's data centre. Following two days on-site you conclude that of the original 12 minor and 1 major nonconformities that prompted the follow-up audit, only 1 minor nonconformity still remains outstanding. Select four options for the actions you could take.
Options
- AAgree with the auditee/audit client how the remaining nonconformity will be cleared, by when, and
- BRecommend that the outstanding minor nonconformity is dealt with at the next surveillance audit
- CClose the follow-up audit as the organisation has demonstrated it is committed to clearing the
- DRecommend suspension of the organisation's certification as they have failed to implement the
- EAdvise the auditee that you will arrange for the next audit to be an online audit to deal with the
- FNote the progress made but hold the audit open until all corrective action has been cleared
- GAdvise the individual managing the audit programme of any decision taken regarding the
- HConduct an unannounced follow-up audit on-site to review the one outstanding minor
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- E4% (1)
- H12% (3)
Explanation
The four options for the actions you could take are A, C, F, and G. These options are consistent with the guidance and requirements of ISO 19011:2018, Clause 6.712. You could agree with the auditee/audit client how the remaining nonconformity will be cleared, by when, and how its clearance will be verified (A), and document the agreement in the audit report1. You could close the follow-up audit as the organisation has demonstrated it is committed to clearing the nonconformities raised (C), and report the outcome to the audit client and other relevant parties1. You could note the progress made but hold the audit open until all corrective action has been cleared (F), and determine the need for another follow-up audit or other actions1. You could also advise the individual managing the audit programme of any decision taken regarding the outstanding nonconformity (G), as they are responsible for the overall management and coordination of the audit programme3.
Topics
Community Discussion
No community discussion yet for this question.