nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #74

Which two of the following are examples of audit methods that 'do not' involve human interaction?

The correct answer is B. Performing a review of auditees procedures in preparation for an audit D. Analysing data by remotely accessing the auditee's server. Audit methods are the techniques and procedures that auditors use to collect and evaluate audit evidence. Audit methods can be classified into two categories: those that involve human interaction and those that do not. Human interaction methods are those that require direct or…

Audit Methods and Techniques

Question

Which two of the following are examples of audit methods that 'do not' involve human interaction?

Options

  • AConducting an interview using a teleconferencing platform
  • BPerforming a review of auditees procedures in preparation for an audit
  • CReviewing the auditee's response to an audit finding
  • DAnalysing data by remotely accessing the auditee's server
  • EObserving work performed by remote surveillance
  • FConfirming the date and time of the audit

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    94% (16)

Explanation

Audit methods are the techniques and procedures that auditors use to collect and evaluate audit evidence. Audit methods can be classified into two categories: those that involve human interaction and those that do not. Human interaction methods are those that require direct or indirect communication with the auditee or other relevant parties, such as interviews, questionnaires, surveys, observations, or walkthroughs. Non-human interaction methods are those that do not require any communication with the auditee or other parties, such as document reviews, data analysis, or remote surveillance. Some examples of audit methods that do not involve human interaction are: Performing a review of auditee's procedures in preparation for an audit: This method involves examining the auditee's documented information, such as policies, processes, records, or reports, to verify their adequacy and effectiveness in meeting the audit criteri a. The auditor does not need to interact with the auditee or anyone else to perform this method. Analysing data by remotely accessing the auditee's server: This method involves accessing and processing the auditee's data, such as performance indicators, logs, metrics, or statistics, to verify their accuracy and reliability in meeting the audit criteria. The auditor does not need to interact with the auditee or anyone else to perform this method.

Topics

#audit methods#remote audit#document review#data analysis without interaction

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice