You are carrying out your first third-party ISMS surveillance audit as an audit team leader.

Determine if requirements for recording fire extinguisher checks have been revised within the last year. If so, suggest these are referenced on the existing labels as an opportunity for improvement

Make a note to ask the site maintenance manager for evidence that a fire extinguishing system test was carried out 6 months ago

Providing water-based extinguishers are accessible in the room, take no further action as these provide an alternative means to put out a fire

Raise a nonconformity against control A.5.7 'threat intelligence' as the organisation has not identified the need to take action against the threat of fire

Raise a nonconformity against control A.7.11 'supporting utilities' as information processing facilities are not adequately protected against possible disruption

Require the guide to initiate the organisation's information security incident process