ISO-IEC-27001-LEAD-AUDITOR practice question 5 of 35

Which six of the following actions are the individual(s) managing the audit programme responsible for?

Full set: 368 questions
Answer options
A: Selecting the audit team Correct answer
B: Retaining documented information of the audit results Correct answer
C: Defining the objectives, scope and criteria for an individual audit Correct answer
D: Defining the plan of an individual audit
E: Establishing the extent of the audit programme Correct answer
F: Establishing the audit programme Correct answer
G: Determining the resources necessary for the audit programme Correct answer
H: Communicating with the auditee during the audit
Correct Answer:
A. Selecting the audit team; B. Retaining documented information of the audit results; C. Defining the objectives, scope and criteria for an individual audit; E. Establishing the extent of the audit programme; F. Establishing the audit programme; G. Determining the resources necessary for the audit programme
Explanation

According to ISO 19011:2018, the individual(s) managing the audit programme hold comprehensive responsibility for its entire lifecycle. This includes establishing the programme's objectives, extent, and necessary resources (F, E, G). It also involves implementing the programme by defining objectives for individual audits, selecting audit teams, and ensuring proper retention of documented information (C, A, B). These responsibilities ensure the audit programme is properly planned, resourced, executed, and its outputs are managed effectively to support management system objectives.

Why Incorrect

D. Defining the plan of an individual audit: This is the responsibility of the appointed audit team leader, not the person managing the overall programme (ISO 19011:2018, Clause 6.3.1).
H. Communicating with the auditee during the audit: This is a primary responsibility of the audit team leader and the auditors during the execution of a specific audit (ISO 19011:2018, Clause 6.2.3).

References

1. ISO 19011:2018

Guidelines for auditing management systems

Clause 5

"Managing an audit programme".

2. ISO 19011:2018

Clause 5.4

"Establishing the audit programme"

covers responsibilities E

F

G.

3. ISO 19011:2018

Clause 5.5

"Implementing the audit programme"

covers responsibilities A

B

C. Specifically:

Clause 5.5.2 covers defining objectives

scope

and criteria (C).

Clause 5.5.4 covers selecting the audit team (A).

Clause 5.5.7 covers managing audit programme records (B).

Scroll to Top