In the context of a third-party certification audit, which two options state the management responsibilities of the audit team leader in managing the audit and the audit team?

Question

Options

• AInterviewing the ISMS manager
• BAdopting a risk-based approach to planning the audit
• CAuditing top management
• DEstablishing contact with the auditee
• EIssuing the management system certificate
• FPreparing the audit nonconformity reports

• A
  2% (1)
• B
  81% (47)
• C
  10% (6)
• E
  2% (1)
• F
  5% (3)

Explanation

In the context of a third-party certification audit, the management responsibilities of the audit team leader in managing the audit and the audit team include adopting a risk-based approach to planning the audit and establishing contact with the auditee. A risk-based approach to planning the audit means that the team leader should consider the risks and opportunities that may affect the achievement of the audit objectives, the scope and criteria, the audit methods and techniques, the allocation of resources and the assignment of tasks to the audit team members. Establishing contact with the auditee means that the team leader should communicate with the auditee before, during and after the audit, to confirm the audit arrangements, to obtain relevant information, to address any issues or concerns, to provide feedback and to report the audit results and conclusions.

No community discussion yet for this question.