Which two of the following statements are true? (Choose two.)
Answer(s): A,E
An audit plan details arrangements for one or more audits within a specific time frame and purpose.An audit programme outlines the overall arrangements for multiple audits planned for a particular period and purpose.
Which two of the following options do not participate in a second-party audit to ISO/IEC 27001? (Choose two.)
Answer(s): B,D
Auditors from certification bodies conduct third-party audits, not second-party audits.Auditors from accreditation bodies are involved in accrediting certification bodies and do not participate in second-party audits.
An organization has ISO/IEC 27001 Information Security Management System (ISMS) certification from a third-party certification body. Which one of the following represents an advantage of having accredited certification?
Answer(s): D
Accredited certification provides recognized credibility that the certification process meets international standards, assuring stakeholders of its reliability.
An audit finding is the result of the evaluation of the collected audit evidence against audit criteria. Evaluate the following potential formats of audit evidence and select the two that are acceptable. (Choose two.)
Answer(s): B,C
Documented information on audit results provides verifiable and objective evidence.Observation of a recorded video offers concrete evidence of activity performance that can be reviewed.
In the context of a third-party certification audit, it is very important to have effective communication. Select an option that contains the correct answer about communication in an audit context.
Answer(s): C
The audit team leader is responsible for ensuring effective communication throughout the audit process, including managing interactions with the auditee and audit client.
Post your Comments and Discuss PECB ISO-IEC-27001-Lead-Auditor exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISO-IEC-27001-Lead-Auditor content, but please register or login to continue.