nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #265

The auditor used sampling to ensure that event logs recording information security events are maintained and regularly reviewed. Sampling was based on the audit objectives, whereas the sample…

The correct answer is A. Statistical sampling. The use of probability theory in the sample selection process indicates that "statistical sampling" was used. Statistical sampling allows auditors to make inferences about the population based on the properties of the sample, relying on the principles of probability to select…

Conducting the audit

Question

The auditor used sampling to ensure that event logs recording information security events are maintained and regularly reviewed. Sampling was based on the audit objectives, whereas the sample selection process was based on the probability theory. What type of sampling was used?

Options

  • AStatistical sampling
  • BJudgment-based sampling
  • CSystematic sampling

How the community answered

(26 responses)
  • A
    96% (25)
  • C
    4% (1)

Explanation

The use of probability theory in the sample selection process indicates that "statistical sampling" was used. Statistical sampling allows auditors to make inferences about the population based on the properties of the sample, relying on the principles of probability to select representative

Topics

#statistical sampling#audit sampling techniques#probability-based sampling#audit evidence collection

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice