LEAD-AUDITOR · Question #246
You are performing an ISMS initial certification audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to conduct the closing meeting. During the f
The correct answer is C. Recommend that a partial audit is required within 3 months. Minor Nonconformities: The identified nonconformities are minor, meaning they don't pose a significant risk to the information security management system (ISMS). They are likely to be easily rectified with focused corrective actions. - Opportunity for Improvement: This is not a n
Question
You are performing an ISMS initial certification audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to conduct the closing meeting. During the final audit team meeting, as an audit team leader, you agree to report 2 minor nonconformities and 1 opportunity for improvement as below:
Select one option of the recommendation to the audit programme manager you are going to advise to the auditee at the closing meeting.
Options
- ARecommend certification after your approval of the proposed corrective action plan
- BRecommend that a full scope re-audit is required within 6 months
- CRecommend that a partial audit is required within 3 months
- DRecommend that the findings can be closed out at a surveillance audit in 1 year
How the community answered
(65 responses)- A17% (11)
- B3% (2)
- C74% (48)
- D6% (4)
Explanation
- Minor Nonconformities: The identified nonconformities are minor, meaning they don't pose a significant risk to the information security management system (ISMS). They are likely to be easily rectified with focused corrective actions. - Opportunity for Improvement: This is not a nonconformity but a suggestion for enhancing the ISMS. It doesn't require immediate corrective action but should be addressed in the organization's continual improvement efforts. - Initial Certification: As this is an initial certification audit, the organization is expected to demonstrate its commitment to addressing any gaps identified. A partial audit allows for a focused follow-up on the specific areas of nonconformity, ensuring they have been adequately
Topics
Community Discussion
No community discussion yet for this question.