ISOISO 27001Certification and Audit ProcessEASYFree question
What is an observation (or opportunity for improvement) in an audit?
- A.A finding that does not constitute a nonconformity but identifies an area where improvement is possible
- B.A finding graded below a minor nonconformity but still closed before the certificate is issued
- C.A mandatory requirement that the auditor records but the organization is free to ignore
- D.A formal complaint that the client raises but the certification body is not able to resolve
Why A is correct
An observation identifies an area where the ISMS could be improved but does not constitute a nonconformity requiring corrective action.
Know someone studying for ISO 27001? Send them this one.