LEAD-AUDITOR · Question #65
You are an experienced ISMS audit team leader providing guidance to an ISMS auditor in training. They have been asked to carry out an assessment of external providers and have prepared a checklist…
The correct answer is A. I will check the other data centres are treated as external providers, even though they are part of B. I will ensure external providers have a documented process in place to notify the organisation of E. I will ensure the organization is regularly monitoring, reviewing and evaluating external provider. You've hit your limit · resets 4am (America/New_York)
Question
You are an experienced ISMS audit team leader providing guidance to an ISMS auditor in training. They have been asked to carry out an assessment of external providers and have prepared a checklist containing the following activities. They have asked you to review their checklist to confirm that the actions they are proposing are appropriate. The audit they have been invited to participate in is a third-party surveillance audit of a data centre. The data centre agent is part of a wider telecommunication group. Each data centre within the group operates its own ISMS and holds its own certificate. Select three options that relate to ISO/IEC 27001:2022's requirements regarding external providers.
Options
- AI will check the other data centres are treated as external providers, even though they are part of
- BI will ensure external providers have a documented process in place to notify the organisation of
- CI will ensure that the organisation has a reserve external provider for each process it has identified
- DI will limit my audit activity to externally provided processes as there is no need to audit externally
- EI will ensure the organization is regularly monitoring, reviewing and evaluating external provider
- FI will ensure the organization is has determined the need to communicate with external providers
- GI will ensure that top management have assigned roles and responsibilities for those providing
- HI will ensure that the organisation ranks its external providers and allocates the majority of its work
How the community answered
(40 responses)- A48% (19)
- C30% (12)
- D3% (1)
- F10% (4)
- G8% (3)
- H3% (1)
Explanation
You've hit your limit · resets 4am (America/New_York)
Topics
Community Discussion
No community discussion yet for this question.