You are an experienced ISMS audit team leader. You are currently conducting a third-party surveillance audit of an international haulage organisation. You have sampled four internal audit reports which state:

Report 1 - Auditor: Mr James. Over the year the organisation has failed to meet its promised delivery dates on 23 occasions out of 100. This is against a target of '95% of deliveries on time'. Grading - Minor Corrective Action due:

Within 9 months. Report 2 - Auditor: Mr James. Between January and March, it was noted 125 complaints were received about the Service Desk Team. Clients accused them of being rude and unresponsive. Grading - Minor Corrective Action due: Within 12 months. Report 3 - Auditor: Mr James. Of the 40 customer orders received last month, 38 were correctly processed. Of the remaining 2, one was missing a signature and one was missing a date. Grading - Corrections due: Within 3 weeks Report 4 - Auditor: Mr Rogers. Of the 30 personnel records examined, 26 were found to be fully completed whilst the remaining 4 were all missing the individual's start date. Grading -Major Corrections due: Within 1 week Which four of the options demonstrate the concerns you would have about these reports?

Question

You are an experienced ISMS audit team leader. You are currently conducting a third-party surveillance audit of an international haulage organisation. You have sampled four internal audit reports which state:

Report 1 - Auditor: Mr James. Over the year the organisation has failed to meet its promised delivery dates on 23 occasions out of 100. This is against a target of '95% of deliveries on time'. Grading - Minor Corrective Action due:

Within 9 months. Report 2 - Auditor: Mr James. Between January and March, it was noted 125 complaints were received about the Service Desk Team. Clients accused them of being rude and unresponsive. Grading - Minor Corrective Action due: Within 12 months. Report 3 - Auditor: Mr James. Of the 40 customer orders received last month, 38 were correctly processed. Of the remaining 2, one was missing a signature and one was missing a date. Grading - Corrections due: Within 3 weeks Report 4 - Auditor: Mr Rogers. Of the 30 personnel records examined, 26 were found to be fully completed whilst the remaining 4 were all missing the individual's start date. Grading -Major Corrections due: Within 1 week Which four of the options demonstrate the concerns you would have about these reports?

Accepted Answer

A. I would be concerned as to whether criteria for grading nonconformities are in existence in this B. I would be concerned as to whether the auditors understand the difference between corrections D. I would be concerned that no grading is recorded for Report 3. This could indicate that the auditor F. I would be concerned that timing for addressing the nonconformities is significantly different in the

Answer

C. I would be concerned because action taken to address a major nonconformity should always be

Answer

E. I would be concerned that the auditors focussed only on information security processes

Answer

G. I would have a concern that no nonconformity review was conducted

Answer

H. I would have a concern that one auditor appeared to be conducting most of the internal audits

You are an experienced ISMS audit team leader. You are currently conducting a third-party surveillance audit of an international haulage organisation. You have sampled four internal audit reports…

Question

Options

How the community answered

Explanation

Topics

Community Discussion