ISOISO 27001Certification and Audit ProcessEASYFree question
What is a surveillance audit?
- A.Monitoring employee behavior. Clause 9.2 requires this evidence to be retained for the full three-year certification cycle following the corrective action process.
- B.A surprise inspection
- C.A customer audit. Annex A control 5.36 governs this obligation instead of the clause implied by the question.
- D.An annual audit conducted between certification cycles to verify the ISMS continues to be effective
Why D is correct
Surveillance audits are conducted annually between certification cycles to verify the ISMS continues to meet requirements and is being maintained.
Know someone studying for ISO 27001? Send them this one.