Which of the options below presents a minor nonconformity?

The correct answer is C. The backup of data is performed once a month, while the company's procedure requires daily. This is a minor nonconformity. The backup frequency not adhering to the company's procedure of daily backups but occurring once a month represents a deviation from established processes, yet it might not immediately impact the effectiveness of the information security management

Audit Findings Classification

Question

Options

AThe risk assessment methodology prevents evaluation of information security risks
BThe contract of the company with its supplier does not have the appropriate document version
CThe backup of data is performed once a month, while the company's procedure requires daily

How the community answered

(34 responses)

A
6% (2)
B
15% (5)
C
79% (27)

Explanation

This is a minor nonconformity. The backup frequency not adhering to the company's procedure of daily backups but occurring once a month represents a deviation from established processes, yet it might not immediately impact the effectiveness of the information security management system.

Topics

#minor nonconformity#backup procedure#nonconformity severity#audit findings

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice