ISO-IEC-27001-LEAD-AUDITOR · Question #176
An audit team leader is planning a follow-up audit after the completion of a third-party surveillance audit earlier in the year. They have decided they will verify the nonconformities that require…
The correct answer is A. A signature missing from a client's contract for the supply of data services was added B. A software installation guide which had not been sent to the client along with their new system C. An incorrectly dated purchase order for a new network switch was rectified E. Hard drive HD302 which had been colour-coded green (available for use) instead of red (to be. According to the PECB Candidate Handbook for ISO/IEC 27001 Lead Auditor, a correction is an action to eliminate a detected nonconformity, such as rework, repair, or replacement1. The examples of A, B, C, and E are corrections because they fix the errors or defects that caused…
Question
An audit team leader is planning a follow-up audit after the completion of a third-party surveillance audit earlier in the year. They have decided they will verify the nonconformities that require corrections before they move on to consider corrective actions. Based on the descriptions below, which four of the following are corrections for nonconformities identified at the surveillance?
Options
- AA signature missing from a client's contract for the supply of data services was added
- BA software installation guide which had not been sent to the client along with their new system
- CAn incorrectly dated purchase order for a new network switch was rectified
- DData centre staff not carrying out backups in accordance with specified procedures were retrained
- EHard drive HD302 which had been colour-coded green (available for use) instead of red (to be
- FScheduled management reviews, having been missed, were prioritised by the General Manager
- GThe documented process for product shipment, which did not reflect how this activity was
- HThe organisation, having failed to maintain its Schedule of Applicability, re-allocated responsibility
How the community answered
(19 responses)- A42% (8)
- D16% (3)
- F5% (1)
- G32% (6)
- H5% (1)
Explanation
According to the PECB Candidate Handbook for ISO/IEC 27001 Lead Auditor, a correction is an action to eliminate a detected nonconformity, such as rework, repair, or replacement1. The examples of A, B, C, and E are corrections because they fix the errors or defects that caused the nonconformities, such as a missing signature, a missing guide, a wrong date, or a wrong colour
Topics
Community Discussion
No community discussion yet for this question.