You are an experience ISMS audit team leader carrying out a third-party certification audit of an organization specialising in the secure disposal of confidential documents and removable medi a. Both documents and media are shredded in military grade devices which make it impossible to reconstruct the original. The audit has gone well and you are just about to start to write the audit report, 30 minutes before the closing meeting. At this point one of the organization's employees knocks on your door and asks if they can speak to you. They tell you that when things get busy her manager tells her to use a lower grade industrial shredder instead as the organisation has more of these and they operate faster. You were not informed about the existence or use of these machines by the auditee. Select three options for how you should respond to this information.

Question

Accepted Answer

A. Advise the individual managing the audit programme of any recommendation by you to conduct a C. Consider the need for a subsequent audit within 4 weeks based on the additional information that G. Verify with the auditee that lower grade machines are used in certain circumstances

Answer

B. Cancel the production of the audit report and instead review the organization's contracts with its

Answer

D. Do nothing. All audits are based on a sample and the sample you took did not include a planned

Answer

E. Extend the certification audit duration to create additional time to audit the use of the lower grade

Answer

F. Raise a nonconformity against 8.1 Operational Planning and Control as the organization has not

LEAD-AUDITOR Question #147: Real Exam Question with Answer & Explanation

Question

Options

Community Discussion