Company X restricted the access of the internal auditor of some of its documentation taking...

PECB ISO-IEC-27001-Lead-Implementer Question Answer

Company X restricted the access of the internal auditor of some of its documentation taking into account its confidentiality. Is this acceptable?

Yes. it is up to the company to determine what an internal auditor can access

Yes. confidential information should not be increased by internal auditors

No. restricting the internal auditor's access to offices and documentation can negatively affect the internal audit process

ISO-IEC-27001-Lead-Implementer PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"