PECB ISO-IEC-27001-Lead-Auditor Exam With Confidence Using Practice Dumps

Comprehensive and Detailed In-Depth Explanation:

A. Correct Answer:

Joint audits involve multiple teams but require only one designated audit team leader to ensure:

Consistent audit methodology

Coordination among teams

Unified reporting structure

B. Incorrect:

While each team may have a coordinator, there is only one main leader responsible for the audit.

C. Incorrect:

ISO 19011 mandates the presence of a designated audit team leader in all audits.

Relevant Standard Reference:

ISO 19011:2018 Clause 5.5.5 (Assigning Responsibility to the Audit Team Leader)

The correct answer is Previous audit experience within the audit scope, because judgement-based sampling relies heavily on the auditor’s professional judgment, knowledge, and experience. ISO 19011:2018 explicitly states that auditors may use judgmental (non-statistical) sampling when selecting audit samples, particularly when dealing with complex systems or limited audit time.

When applying judgement-based sampling, auditors consider factors such as areas with a history of nonconformities, previous audit findings, recurring weaknesses, and known high-risk processes. Prior audit experience within the same scope provides valuable insight into where problems are more likely to occur and where audit effort should be concentrated. This helps auditors select representative and meaningful samples that support reliable conclusions.

Option A is incorrect because monitoring activities prior to ISMS implementation may provide background context, but they are not a primary basis for judgement-based sampling in a certification audit. Option C is incorrect because the auditee’s general experience with management systems does not directly inform which specific records, processes, or controls should be sampled.

Judgement-based sampling is not random; it is risk-informed and experience-driven. Therefore, leveraging previous audit experience within the audit scope is the most appropriate and standards-aligned consideration.

A legal technical expert (LTE) is a person who provides specific knowledge or expertise related to the legal aspects of the information security management system (ISMS) during a certification audit. The LTE is not an auditor, but a member of the audit team who supports the auditors in collecting and evaluating the audit evidence. The LTE is not responsible for evaluating the auditee’s legal knowledge, criticising the organisation’s legal compliance issues, or debating complex legal points with the auditee, as these tasks may be beyond the scope of the audit, or may compromise the objectivity and impartiality of the audit. The LTE is responsible for advising on legal checkpoints for the audit team, such as the applicable legal, regulatory, and contractual requirements, the relevant sources of information, the methods of verification, and the criteria of evaluation. The LTE is also responsible for verifying the legal status of the organisation, such as the registration, licensing, authorisation, or accreditation of the organisation, and the compliance with the relevant laws and regulations. References:

What is the role of a technical expert in ISO audit?

Roles, Responsibilities & Authorities for ISO 27001 5.3

Guide to Become an ISO 27001 Lead Auditor