Exam ISO-IEC-27001-Lead-Auditor Topic 3 Question 150 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Auditor exam
Question #: 150
Topic #: 3

An audit team leader is planning a follow-up audit after the completion of a third-party surveillance audit earlier in the year. They have decided they will verify the nonconformities that require corrections before they move on to consider corrective actions.
Based on the descriptions below, which four of the following are corrections for nonconformities identified at the surveillance?

A. A signature missing from a client's contract for the supply of data services was added B. A software installation guide which had not been sent to the client along with their new system was posted out C. An incorrectly dated purchase order for a new network switch was rectified D. Data centre staff not carrying out backups in accordance with specified procedures were retrained E. Hard drive HD302 which had been colour-coded green (available for use) instead of red (to be destroyed) was removed from the system F. Scheduled management reviews, having been missed, were prioritised by the General Manager for holding on a specific date twice each following year G. The documented process for product shipment, which did not reflect how this activity was conducted by the despatch team, was re-written and the team trained accordingly H. The organisation, having failed to maintain its Schedule of Applicability, re-allocated responsibility for its updating to the Technical Director

Suggested Answer: A,B,C,E Vote an answer

According to the PECB Candidate Handbook for ISO/IEC 27001 Lead Auditor, a correction is an action to eliminate a detected nonconformity, such as rework, repair, or replacement1. The examples of A, B, C, and E are corrections because they fix the errors or defects that caused the nonconformities, such as a missing signature, a missing guide, a wrong date, or a wrong colour code. The other examples (D, F, G, and H) are not corrections, but corrective actions, because they address the root causes of the nonconformities, such as inadequate training, poor planning, ineffective documentation, or unclear responsibility2. References: 1: PECB Candidate Handbook for ISO/IEC 27001 Lead Auditor, page 35, section 4.5.12: PECB Candidate Handbook for ISO/IEC 27001 Lead Auditor, page 36, section 4.5.2.

by Wythe at Nov 08, 2025, 03:01 AM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Auditor Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business