ISO-IEC-42001-LEAD-AUDITOR · Question #137
Which statement regarding the confidentiality of documented information related to or collected from the auditee is NOT accurate?
The correct answer is C. Information from external sources, like regulators or complaints, is automatically public and can be. The statement "Information from external sources, like regulators or complaints, is automatically public and can be disclosed without restriction" is NOT accurate. Even if information is sourced externally (e.g., from a regulator or complaint), it is not considered public by…
Question
Which statement regarding the confidentiality of documented information related to or collected from the auditee is NOT accurate?
Options
- AThe certification body notifies the auditee before disclosing information, considering all types of
- BConfidential information related to the auditee's AIMS can be disclosed without prior notice if
- CInformation from external sources, like regulators or complaints, is automatically public and can be
- DAuditors and certification bodies must protect the confidentiality of auditee information unless legal
How the community answered
(25 responses)- A16% (4)
- B8% (2)
- C72% (18)
- D4% (1)
Explanation
The statement "Information from external sources, like regulators or complaints, is automatically public and can be disclosed without restriction" is NOT accurate. Even if information is sourced externally (e.g., from a regulator or complaint), it is not considered public by default and cannot be disclosed freely. Certification bodies and auditors are bound to confidentiality requirements as per ISO/IEC 17021-1 and ISO/IEC 42001 unless legally or contractually obligated to disclose.
Topics
Community Discussion
No community discussion yet for this question.