Free ISO-IEC-27001-LEAD-AUDITOR Web TestEngine Demo

Q22 Multiple choice

You are an experienced audit team leader guiding an auditor in training.

Your team is currently conducting a third-party surveillance audit of an organisation that stores data on behalf of external clients. The auditor in training has been tasked with reviewing the TECHNOLOGICAL controls listed in the Statement of Applicability (SoA) and implemented at the site.

Select four controls from the following that would you expect the auditor in training to review.

Select all that apply.

A
Confidentiality and nondisclosure agreements
B
How access to source code and development tools are managed
C
How power and data cables enter the building
D
How protection against malware is implemented
E
How the organisation evaluates its exposure to technical vulnerabilities
F
Information security awareness, education and training
G
The organisation's arrangements for information deletion
H
The organisation's business continuity arrangements

ISO-IEC-27001-LEAD-AUDITOR Web TestEngine demo