ISOISO 27001Certification and Audit ProcessEASYFree question
What is the role of internal audits in ISO 27001?
- A.They replace the external certification audit once the ISMS has run for three years and met its objectives
- B.They are performed by the certification body to prepare the client for the Stage 1 and Stage 2 audits
- C.They measure employee performance and report it to the HR director
- D.They provide an independent assessment of ISMS effectiveness and conformity before external audits
Why D is correct
Internal audits provide independent assessment of ISMS conformity and effectiveness, identifying issues for correction before the external certification audit.
Know someone studying for ISO 27001? Send them this one.