During a follow-up audit, you notice that a nonconformity identified for completion before the follow-up audit is still outstanding. Which four of the following actions should you take?

Question

Options

• AReport the failure to address the corrective action for the outstanding nonconformity to the
• BImmediately raise an nonconformity as the date for completion has been exceeded
• CIf the delay is justified agree on a revised date for clearing the nonconformity with the
• DContact the individuals) managing the audit programme to seek their advice as to how to proceed
• EDecide whether the delay in addressing the nonconformity is justified. This is part of the
• FCancel the follow-up audit and return when an assurance has been received that the
• GNote the nonconformity is still outstanding and follow audit trails to determine why. This is part
• HIf the delay is unjustified advise the auditee /audit client and agree on remedial action

• A
  76% (22)
• B
  14% (4)
• F
  7% (2)
• H
  3% (1)

Explanation

According to the ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) course, the following actions should be taken when a nonconformity identified for completion before the follow-up audit is still outstanding: organisation's top management. This is part of the auditor's responsibility to communicate the audit results and ensure that the audit objectives are met12. auditee/audit client. This is part of the auditor's responsibility to verify the effectiveness of the corrective actions taken by the auditee and to close the nonconformity when the evidence is auditor's responsibility to evaluate the evidence presented by the auditee and to use professional judgement and objectivity to determine the validity of the reasons for the delay12. of the auditor's responsibility to collect and verify audit evidence and to identify the root causes of the nonconformity12.

No community discussion yet for this question.