Câu 28: Lead Auditor: ISO/IEC 27001 Lead Auditor

You are an experienced ISMS audit team leader guiding an auditor in training. You are testing her understanding of follow-up audits by asking her a series of questions to which the answer is either 'true' or 'false'.Which two of the following questions should the answer be 'true'? (Choose two.)

1. A. A follow-up audit is required in all instances where nonconformities have been identified
2. B. A follow-up audit is required only in instances where a major nonconformity has been identified
3. C. A follow-up audit may be carried out where nonconformities are major — đáp án hiện tại
4. D. The outcome of a follow-up audit could change an original major nonconformity into a minor nonconformity
5. E. The outcomes of a follow-up audit should be reported to the audit team leader who carried out the original audit
6. F. The outcomes of a follow-up audit should be reported to the individual managing the audit programme and the audit client — đáp án hiện tại