Q: 20
DRAG DROP
A key audit process is the way auditors gather information and determine the findings'
characteristics. Put the actions listed in the correct order to complete this process. The last one has
been done for you.
Your Answer
Discussion
Yeah, order matters here for audit trails. It should go: Determine source of information, Collect by sampling, Reviewing, Audit evidence, Evaluating against audit criteria, Audit findings, then Audit conclusions. Pretty sure that matches typical ISO 27001 audit flow from planning through reporting but if someone disagrees let me know since I've seen similar orders in practice questions.
Determine source of info, Collect samples, Reviewing, Audit evidence, Evaluate criteria, Findings, Audit conclusions (seen similar order on exam).
Be respectful. No spam.
