You are an experienced audit team leader guiding an auditor in training.

PECB ISO-IEC-27001-Lead-Auditor Full Course Access

PECB ISO-IEC-27001-Lead-Auditor View All Questions

PECB ISO-IEC-27001-Lead-Auditor Question Answer

Your team is currently conducting a third-party surveillance audit of an organisation that stores data on behalf of external clients. The auditor in training has been tasked with reviewing the ORGANISATIONAL controls listed in the Statement of Applicability (SoA) and implemented at the site.

Select four controls from the following that would you expect the auditor in training to review.

Access to and from the loading bay

Confidentiality and nondisclosure agreements

How information security has been addressed within supplier agreements

How power and data cables enter the building

Rules for transferring information within the organisation and to other organisations

The development and maintenance of an information asset inventory

The operation of the site CCTV and door control systems