nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #78

During a Stage 1 audit opening meeting, the Management System Representative (MSR) asks to extend the audit scope to include a new site overseas which they have expanded into since the certification…

The correct answer is A. Advise the MSR that an extension of the scope may be incorporated but will have to go D. Determine whether the Management System covers the processes at the new site and, if so. The correct options for how the auditor should respond are: through established procedures proceed with the audit These options are consistent with the ISO/IEC 27006:2015 standard, which states that any changes to the scope of certification should be notified by the client to…

Audit Scope Management

Question

During a Stage 1 audit opening meeting, the Management System Representative (MSR) asks to extend the audit scope to include a new site overseas which they have expanded into since the certification application was made. Select two options for how the auditor should respond.

Options

  • AAdvise the MSR that an extension of the scope may be incorporated but will have to go
  • BAdvise the MSR that the audit scope has been determined based on their initial application so the
  • CSuggest that the MSR cancels the audit contract and reapplies for the new situation
  • DDetermine whether the Management System covers the processes at the new site and, if so,
  • EAdvise the MSR that, within the existing scope, the new work area can be included without any
  • FConfirm that the auditor will advise the auditee that the audit scope will be revised to include the

How the community answered

(27 responses)
  • A
    78% (21)
  • C
    7% (2)
  • E
    4% (1)
  • F
    11% (3)

Explanation

The correct options for how the auditor should respond are: through established procedures proceed with the audit These options are consistent with the ISO/IEC 27006:2015 standard, which states that any changes to the scope of certification should be notified by the client to the certification body, and that the certification body should evaluate and decide on these changes in accordance with its procedures1. The auditor should also verify that the ISMS is implemented and maintained at all sites included in the scope of certification1.

Topics

#audit scope#Stage 1 audit#scope extension#certification body notification

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice