Day#2 ISO 27001 Lead Auditor

What does ISO 19011 provide?

• Guidelines with regard to the necessary competencies that auditors must possess to audit an ISMS

• Guidance on managing an audit program and planning and conducting management system audits

• Requirements for bodies providing audit and certification services

Which of the following refers to a third party audit?

• The customer audits suppliers to make purchasing decisions

• The organization is audited by an independent organization to ensure conformity to the specified criteria

• The organization audits its external providers to ensure that they are fulfilling contractual obligations

Who determines the audit objectives?

• Auditee

• Audit team leader

• Certification body

Are auditors allowed to disclose the confidential information of the organizations they have audited in the past?

• No, the auditor cannot disclose information of the auditee under any circumstances

• Yes, the auditor can disclose the auditee’s confidential information only after a minimum of two years has passed

• Yes, if they are authorized or required by law

What is one of the purposes of the risk-based approach?

• To minimize the possibility of not meeting the audit objectives

• To reach reliable and reproducible audit conclusions in a systematic audit process

• Both A and B

Which of the following activities should an audit team member be able to undertake?

• Preparing the audit conclusions

• Preparing the audit report

• Documenting audit activities and audit findings

A group of customers from a pharmaceutical company are assessing the company's performance. What type of audit are the customers conducting?

• First-party audit

• Second-party audit

• Third-party audit

What does a joint audit refer to?

• Collaboration of two or more auditing organizations to audit a single auditee

• Simultaneous auditing of two or more management systems at a single auditee

• Auditing of two or more management systems concurrently by multiple auditing organizations

What is the role of an observer?

• To assist the audit team

• To accompany the audit team

• To help the auditor with the audit procedures

How do new technologies impact the auditing process?

• They increase audit efficiency and help in minimizing costs

• They reduce audit efficiency by increasing the need for quality control checks

• They increase the time needed to conduct technical tests