nerdexam
PECB

LEAD-AUDITOR · Question #143

You are an experienced audit team leader guiding an auditor in training. Your team is currently conducting a third-party surveillance audit of an organisation that stores data on behalf of external cl

The correct answer is A. Confidentiality and nondisclosure agreements C. Information security awareness, education and training D. Remote working arrangements E. The conducting of verification checks on personnel. You've hit your limit · resets 4am (America/New_York)

Audit Execution

Question

You are an experienced audit team leader guiding an auditor in training. Your team is currently conducting a third-party surveillance audit of an organisation that stores data on behalf of external clients. The auditor in training has been tasked with reviewing the PEOPLE controls listed in the Statement of Applicability (SoA) and implemented at the site. Select four controls from the following that would you expect the auditor in training to review.

Options

  • AConfidentiality and nondisclosure agreements
  • BHow protection against malware is implemented
  • CInformation security awareness, education and training
  • DRemote working arrangements
  • EThe conducting of verification checks on personnel
  • FThe operation of the site CCTV and door control systems
  • GThe organisation's arrangements for information deletion
  • HThe organisation's business continuity arrangements

How the community answered

(44 responses)
  • A
    93% (41)
  • F
    5% (2)
  • G
    2% (1)

Explanation

You've hit your limit · resets 4am (America/New_York)

Topics

#people controls#ISO 27002#Statement of Applicability#personnel security

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice