nerdexam
PECB

ISO-IEC-42001-LEAD-AUDITOR · Question #146

While preparing for an AIMS audit, a technology company faced an issue with the auditor assigned by the certification body. The auditor lacked a security clearance, which is mandatory for accessing…

The correct answer is A. Yes, the auditor not holding the security clearance required by the auditee is a valid reason to. According to ISO/IEC 17021-1:2015, Clause 9.1.7, an auditee has the right to object to the assignment of a particular auditor when justified. A legitimate reason includes lack of required security clearance, which may prevent the auditor from accessing essential audit evidence…

Managing an Audit Program – Audit Team Management

Question

While preparing for an AIMS audit, a technology company faced an issue with the auditor assigned by the certification body. The auditor lacked a security clearance, which is mandatory for accessing certain sensitive information involved in the audit due to the company's government contracts and proprietary technology. The company requested to replace the auditor with someone who meets the security requirements to ensure the audit can proceed without compromising sensitive information or violating government regulations. Is this acceptable?

Options

  • AYes, the auditor not holding the security clearance required by the auditee is a valid reason to
  • BNo, the auditee can request the replacement of the auditor only if the auditor is in a conflict of
  • CNo, the auditee can request the replacement of the auditor only if the auditor has audited the
  • DYes, only if the replacement is also certified for ISO/IEC 27001

How the community answered

(45 responses)
  • A
    82% (37)
  • B
    4% (2)
  • C
    2% (1)
  • D
    11% (5)

Explanation

According to ISO/IEC 17021-1:2015, Clause 9.1.7, an auditee has the right to object to the assignment of a particular auditor when justified. A legitimate reason includes lack of required security clearance, which may prevent the auditor from accessing essential audit evidence, especially where government regulations or confidentiality clauses apply. This is a valid and accepted reason to request a replacement.

Topics

#auditor replacement#security clearance#conflict of interest#audit team management

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-42001-LEAD-AUDITOR Practice