Guest user Created: Oct 25, 2016 Last commented: Oct 25, 2016

To whom will the auditor speak to?

In the process of ISMS Audit , with whom the auditor will ask questions? Is he/she going to ask queries with CEO (a non-tech person) or to the Information security guy?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Oct 25, 2016

Answer: During the ISMS audit both internal and external (certification) auditor has the right to speak to anyone in the company, so he can speak to people from IT department, security department, to the CEO or to any business department.

The point of the audit is to find out whether the employees are complying to the policies and procedures, and these documents are not only applicable to security department.

This free online training explains the whole audit process: ISO 27001 Internal Auditor Course https://advisera.com/training/iso-27001-internal-auditor-course/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Oct 24, 2016

Expert Advice Community