nerdexam
PECB

LEAD-AUDITOR · Question #244

LEAD-AUDITOR Question #244: Real Exam Question with Answer & Explanation

The correct answer is B. Advise that any changes will impact the certified scope of the initial audit. The organisation has the. According to ISO/IEC 27001 guidelines, any significant changes to the scope of the ISMS, such as a merger, must be communicated to the certification body. This ensures that the certification remains valid and that all locations and processes are included in the scope. The certifi

Question

You are performing an ISMS initial certification audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to conduct the closing meeting. During the final audit team meeting, as an audit team leader, you agree to report 2 minor nonconformities and 1 opportunity for improvement as below: During the closing meeting, the Management System Representative (MSR) updates you with the information that ABC is going to merge with WeCare medical devices manufacture within the next 3 months. ABC will be the organisation's name after the merger. He asks if it is possible to include WeCare medical devices manufacture location in the follow-up audit so that the certification will include it. He says that WeCare is certified to ISO/IEC 27001:2022. Select one option for the correct response to the request of the MSR.

Options

  • AAdvise that an initial audit would need to be carried out on WeCare but this could be combined
  • BAdvise that any changes will impact the certified scope of the initial audit. The organisation has the
  • CAdvise that there are no issues. The new business can be included within the certified scope
  • DSuggest it would be better to postpone the certification process and wait until the business

Explanation

According to ISO/IEC 27001 guidelines, any significant changes to the scope of the ISMS, such as a merger, must be communicated to the certification body. This ensures that the certification remains valid and that all locations and processes are included in the scope. The certification body will then decide the appropriate actions to incorporate the new entity into the existing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full LEAD-AUDITOR Practice