nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #232

Which is an example of a qualitative evidence?

The correct answer is C. An interview with the information security personnel to validate if the information security process. Qualitative evidence in an audit typically involves observations, interviews, and reviews that provide insights into the processes and compliance through subjective but informed assessments. An interview with information security personnel to validate compliance with the…

Audit Evidence and Sampling

Question

Which is an example of a qualitative evidence?

Options

  • AThe documented results of an intrusion-detection test from an information security expert from an
  • BA defined sample analysis of nonconformity reports drafted by the audited organization from the
  • CAn interview with the information security personnel to validate if the information security process

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    89% (25)

Explanation

Qualitative evidence in an audit typically involves observations, interviews, and reviews that provide insights into the processes and compliance through subjective but informed assessments. An interview with information security personnel to validate compliance with the standard requirements is an example of qualitative evidence, where the quality and effectiveness of processes are assessed based on expert judgments rather than measurable metrics.

Topics

#qualitative evidence#audit interviews#evidence types#information security processes

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice