You have to carry out a third-party virtual audit. Which two of the following issues would you need to inform the auditee about before you start conducting the audit?

Question

Options

• AYou will ask to see the ID card of the person that is on the screen.
• BYou will take photos of every person you interview.
• CYou will ask those being interviewed to state their name and position beforehand.
• DYou will ask for a 360-degree view of the room where the audit is being carried out.
• EYou will not record any part of the audit, unless permitted.
• FYou expect the auditee to have assessed all risks associated with online activities.

• A
  1% (1)
• B
  3% (2)
• C
  89% (62)
• E
  1% (1)
• F
  6% (4)

Explanation

A third-party virtual audit is an external audit conducted by an independent certification body using remote technology such as video conferencing, screen sharing, and electronic document exchange. The purpose of a third-party virtual audit is to verify the conformity and effectiveness of the information security management system (ISMS) and to issue a certificate of compliance12 Before you start conducting the audit, you would need to inform the auditee about the following You will ask those being interviewed to state their name and position beforehand, i.e., to confirm their identity and role in the ISMS. This is to ensure that you are interviewing the relevant personnel and that they are authorized to provide information and evidence for the audit. You will ask for a 360-degree view of the room where the audit is being carried out, i.e., to verify the physical and environmental security of the audit location. This is to ensure that there are no unauthorized persons or devices in the vicinity that could compromise the confidentiality, integrity, or availability of the information being audited.

No community discussion yet for this question.