Select two of the following options that are the responsibility of a legal technical expert on the audit team during a certification audit.

Question

Options

• Avaluating the auditee's legal knowledge
• BCriticising the organisation's legal compliance issues
• CDebating complex legal points with the auditee
• DAdvising on legal checkpoints for the audit team
• EVerifying the legal status of the organisation
• FMeeting the organisation's legal representative

• B
  4% (1)
• D
  96% (24)

Explanation

A legal technical expert (LTE) is a person who provides specific knowledge or expertise related to the legal aspects of the information security management system (ISMS) during a certification audit. The LTE is not an auditor, but a member of the audit team who supports the auditors in collecting and evaluating the audit evidence. The LTE is not responsible for evaluating the auditee's legal knowledge, criticising the organisation's legal compliance issues, or debating complex legal points with the auditee, as these tasks may be beyond the scope of the audit, or may compromise the objectivity and impartiality of the audit. The LTE is responsible for advising on legal checkpoints for the audit team, such as the applicable legal, regulatory, and contractual requirements, the relevant sources of information, the methods of verification, and the criteria of evaluation. The LTE is also responsible for verifying the legal status of the organisation, such as the registration, licensing, authorisation, or accreditation of the organisation, and the compliance with the relevant laws and regulations.

No community discussion yet for this question.