Free Access to PECB.ISO-IEC-27001-Lead-Auditor.v2026-01-12.q371 with Valid Practice Test (Page 66)

Question 321

You are an experienced ISMS audit team leader guiding an auditor in training. You decide to test her knowledge of follow-up audits by asking her a series of questions. Here are your questions and her answers.
Which four of your questions has she answered correctly?

A.Q: Should a follow-up audit seek to identify new nonconformities? A:YES
B.Q: Should follow-up audits seek to ensure nonconformities have been effectively addressed? A:YES
C.Q: Should follow-up audits consider agreed opportunities for improvement as well as corrective action?
A:No
D.Q: Is the purpose of a follow-up audit to verify the completion of corrections, corrective actions, and opportunities for improvement? A:YES
E.Q: Are follow-up audits required for all audits? A:No
F.Q: Should the outcome from a follow-up audit be reported to the audit team leader who carried out the audit at which the NCs were originally identified? A:YES
G.Q: Should the outcome from a follow-up audit be reported to the audit client? A:No
H.Q: Could an outcome from a follow-up audit be another follow-up audit if required? A:YES

Correct Answer: A,B,D,H

Explanation
The four questions that she answered correctly are:
Q: Should a follow-up audit seek to identify new nonconformities? A: YES Q: Should follow-up audits seek to ensure nonconformities have been effectively addressed? A: YES Q: Is the purpose of a follow-up audit to verify the completion of corrections, corrective actions, and opportunities for improvement? A: YES Q: Could an outcome from a follow-up audit be another follow-up A follow-up audit is an audit that is conducted after a previous audit to verify the implementation and effectiveness of the corrective actions and/or opportunities for improvement that were agreed upon as a result of the previous audit12. Therefore, a follow-up audit should seek to identify new nonconformities that may have arisen since the previous audit, as well as to ensure that the existing nonconformities have been effectively addressed.
A follow-up audit should also consider the agreed opportunities for improvement as well as the corrective actions, because both are intended to enhance the performance and conformity of the ISMS12. However, the follow-up audit should not treat the opportunities for improvement as mandatory requirements, but rather as suggestions that may or may not have been implemented by the auditee3.
The purpose of a follow-up audit is to verify the completion and effectiveness of the corrections, corrective actions, and opportunities for improvement that were agreed upon as a result of the previous audit12. A correction is the action taken to eliminate a detected nonconformity, while a corrective action is the action taken to eliminate the cause of a nonconformity and to prevent its recurrence4. An opportunity for improvement is a potential improvement that is identified during an audit, but is not a nonconformity3.
An outcome from a follow-up audit could be another follow-up audit if required, depending on the nature and severity of the nonconformities and the effectiveness of the corrective actions12. For example, if the follow-up audit reveals that the nonconformities have not been adequately addressed, or that new nonconformities have emerged, then another follow-up audit may be necessary to ensure that the ISMS is compliant and effective.
References:
1: PECB Candidate Handbook - ISO 27001 Lead Auditor, page 25 2: ISO 19011:2018 - Guidelines for auditing management systems, clause 6.7 3: ISO 27007:2017 - Guidelines for information security management systems auditing, clause 7.5.3 4: ISO 27000:2018 - Information technology - Security techniques - Information security management systems - Overview and vocabulary, clause 3.9 and 3.10

Question 322

What type of measure involves the stopping of possible consequences of security incidents?

A.Corrective
B.Repressive
C.Detective
D.Preventive

Question 323

Integrity of data means

A.Accuracy and completeness of the data
B.Data should be viewable at all times
C.Data should be accessed by only the right people

Question 324

You are performing an ISMS audit at a European-based residential
nursing home called ABC that provides healthcare services. You find all nursing home residents wear an electronic wristband for monitoring their location, heartbeat, and blood pressure always. You learned that the electronic wristband automatically uploads all data to the artificial intelligence (AI) cloud server for healthcare monitoring and analysis by healthcare staff.
The next step in your audit plan is to verify that the information security policy and objectives have been established by top management.
During the audit, you found the following audit evidence.
Match the audit evidence to the corresponding requirement in ISO/IEC 27001:2022.

Question 325

Scenario 9: Techmanic is a Belgian company founded in 1995 and currently operating in Brussels. It provides IT consultancy, software design, and hardware/software services, including deployment and maintenance. The company serves sectors like public services, finance, telecom, energy, healthcare, and education. As a customer-centered company, it prioritizes strong client relationships and leading security practices.
Techmanic has been ISO/IEC 27001 certified for a year and regards this certification with pride. During the certification audit, the auditor found some inconsistencies in its ISMS implementation. Since the observed situations did not affect the capability of its ISMS to achieve the intended results, Techmanic was certified after auditors followed up on the root cause analysis and corrective actions remotely During that year, the company added hosting to its list of services and requested to expand its certification scope to include that area The auditor in charge approved the request and notified Techmanic that the extension audit would be conducted during the surveillance audit Techmanic underwent a surveillance audit to verify its iSMS's continued effectiveness and compliance with ISO/IEC 27001. The surveillance audit aimed to ensure that Techmanic's security practices, including the recent addition of hosting services, aligned seamlessly with the rigorous requirements of the certification The auditor strategically utilized the findings from previous surveillance audit reports in the recertification activity with the purpose of replacing the need for additional recertification audits, specifically in the IT consultancy sector. Recognizing the value of continual improvement and learning from past assessments. Techmanic implemented a practice of reviewing previous surveillance audit reports. This proactive approach not only facilitated identifying and resolving potential nonconformities but also aimed to streamline the recertification process in the IT consultancy sector.
During the surveillance audit, several nonconformities were found. The ISMS continued to fulfill the ISO/IEC 27001*s requirements, but Techmanic failed to resolve the nonconformities related to the hosting services, as reported by its internal auditor. In addition, the internal audit report had several inconsistencies, which questioned the independence of the internal auditor during the audit of hosting services. Based on this, the extension certification was not granted. As a result. Techmanic requested a transfer to another certification body. In the meantime, the company released a statement to its clients stating that the ISO/IEC 27001 certification covers the IT services, as well as the hosting services.
Based on the scenario above, answer the following question:
According to Scenario 9, the auditor decided to conduct the extension audit during the surveillance audit. How do you define this situation?

A.Acceptable, as extension audits are conducted during the surveillance audit
B.Unacceptable, as the auditor cannot approve the extension audit
C.Unacceptable, as extension audits are only conducted after the second year of the initial certification audit

Question 321

Question 322

Question 323

Question 324

Question 325

Download PDF File