You are carrying out your first third-party ISMS surveillance audit as an audit team leader. You are presently in the auditee's data centre with another member of your audit team and the organisation's guide. You request access to a locked room protected by a combination lock and iris scanner. The room contains several rows of uninterruptable power supplies along with several data cabinets containing client-supplied equipment, predominantly servers, and switches. You note that there is a gas-based fire extinguishing system in place. A label indicates that the system requires testing every 6 months however the most recent test recorded on the label was carried out by the manufacturer 12 months ago. Based on the scenario above which two of the following actions would you now take?

Question

Accepted Answer

B. Make a note to ask the site maintenance manager for evidence that a fire extinguishing system E. Raise a nonconformity against control A.7.11 'supporting utilities' as information processing

Answer

A. Determine if requirements for recording fire extinguisher checks have been revised within the last

Answer

C. Providing water-based extinguishers are accessible in the room, take no further action as these

Answer

D. Raise a nonconformity against control A.5.7 'threat intelligence' as the organisation has not

Answer

F. Require the guide to initiate the organisation's information security incident process

You are carrying out your first third-party ISMS surveillance audit as an audit team leader. You are presently in the auditee's data centre with another member of your audit team and the organisation'

Question

Options

How the community answered

Explanation

Topics

Community Discussion