Select two of the following options that are the responsibility of a legal technical expert on the audit team during a certification audit.

A legal technical expert (LTE) is a person who provides specific knowledge or expertise related to the

legal aspects of the information security management system (ISMS) during a certification audit. The

LTE is not an auditor, but a member of the audit team who supports the auditors in collecting and

evaluating the audit evidence. The LTE is not responsible for evaluating the auditee’s legal

knowledge, criticising the organisation’s legal compliance issues, or debating complex legal points

with the auditee, as these tasks may be beyond the scope of the audit, or may compromise the

objectivity and impartiality of the audit. The LTE is responsible for advising on legal checkpoints for

the audit team, such as the applicable legal, regulatory, and contractual requirements, the relevant

sources of information, the methods of verification, and the criteria of evaluation. The LTE is also

responsible for verifying the legal status of the organisation, such as the registration, licensing,

authorisation, or accreditation of the organisation, and the compliance with the relevant laws and

regulations. Reference:

What is the role of a technical expert in ISO audit?

Roles, Responsibilities & Authorities for ISO 27001 5.3

Guide to Become an ISO 27001 Lead Auditor