During a third-party certification audit you are presented with a list of issues by an auditee. Which four of the following constitute 'external' issues in the context of a management system to…

Question

Options

• AA rise in interest rates in response to high inflation
• BA reduction in grants as a result of a change in government policy
• CPoor levels of staff competence as a result of cuts in training expenditure
• DIncreased absenteeism as a result of poor management
• EHigher labour costs as a result of an aging population
• FInability to source raw materials due to government sanctions
• GPoor morale as a result of staff holidays being reduced
• HA fall in productivity linked to outdated production equipment

• A
  73% (22)
• C
  13% (4)
• D
  7% (2)
• G
  3% (1)
• H
  3% (1)

Explanation

According to ISO/IEC 27001:2022, which specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS), clause 4.1 requires an organization to determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcomes of its ISMS2. External issues are those that originate from outside the organization, such as legal, regulatory, cultural, social, political, economic, natural and competitive factors2. Internal issues are those that originate from within the organization, such as governance, structure, roles and responsibilities, policies, objectives, culture, capabilities, resources and information systems2. Therefore, based on this definition, four examples of external issues in the context of a management system to ISO/IEC 27001:2022 are a rise in interest rates in response to high inflation (which affects the economic environment of the organization), a reduction in grants as a result of a change in government policy (which affects the political and legal environment of the organization), higher labour costs as a result of an aging population (which affects the social and demographic environment of the organization), and inability to source raw materials due to government sanctions (which affects the trade and supply environment of the organization)2.

No community discussion yet for this question.