Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

APMG-International ISO-IEC-27001-Foundation Exam - Topic 5 Question 15 Discussion

Which statement describes a requirement of an internal audit programme?
C) The programme must consider the importance of the target processes
A) The programme must use third party auditors to ensure impartiality
B) Previous audit results are disregarded to ensure objectivity
D) All processes must be audited within a 3-year cycle

APMG-International ISO-IEC-27001-Foundation Exam - Topic 5 Question 15 Discussion

Actual exam question for APMG-International's ISO-IEC-27001-Foundation exam
Question #: 15
Topic #: 5
[All ISO-IEC-27001-Foundation Questions]

Which statement describes a requirement of an internal audit programme?

Show Suggested Answer Hide Answer
Suggested Answer: C

Clause 9.2.2 of ISO/IEC 27001:2022 specifies requirements for the internal audit programme. It requires organizations to:

''Plan, establish, implement and maintain an audit programme(s) including the frequency, methods, responsibilities, planning requirements and reporting, which shall take into consideration the importance of the processes concerned, changes affecting the organization, and the results of previous audits.''

This makes option C correct, since importance of the processes is a required factor. Option A is incorrect because audits do not need third-party auditors; objectivity can be maintained internally if independence is respected. Option B is wrong because previous audit results must be considered, not disregarded. Option D is also incorrect --- the standard does not specify a 3-year cycle; frequency depends on risks and needs.

Thus, the correct verified answer is C.


by Dana at May 12, 2026, 08:49 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ashanti
4 hours ago
I think C is the best choice. Importance matters!
upvoted 0 times
...
Lawanda
5 days ago
D is a common standard, 3-year cycles are typical.
upvoted 0 times
...
Kanisha
10 days ago
Wait, are we really disregarding previous results? Sounds risky.
upvoted 0 times
...
Paola
16 days ago
Totally agree with C! Target processes are crucial.
upvoted 0 times
...
Paz
21 days ago
Really? I thought A was the key for impartiality.
upvoted 0 times
...
Audry
26 days ago
C is definitely a requirement! Importance matters.
upvoted 0 times
...
Ty
1 month ago
Not sure about B, seems like ignoring past audits could lead to issues.
upvoted 0 times
...
Aleshia
1 month ago
D is a solid standard to follow for thoroughness.
upvoted 0 times
...
Catina
1 month ago
Wait, are we really disregarding previous results? That seems off.
upvoted 0 times
...
Jenifer
2 months ago
I disagree, A is more important for impartiality.
upvoted 0 times
...
Shaun
2 months ago
C is definitely a key requirement!
upvoted 0 times
...
Arlen
2 months ago
I recall that impartiality is important, but I don't think third-party auditors are a strict requirement. So, I'm leaning away from option A.
upvoted 0 times
...
Izetta
2 months ago
I feel like we practiced a question similar to this, and I think the cycle for auditing was mentioned. Maybe option D is correct?
upvoted 0 times
...
Dorthy
2 months ago
I'm not entirely sure, but I remember something about the importance of not disregarding previous results. That might relate to option B?
upvoted 0 times
...
Johnetta
4 months ago
I think option C sounds familiar because we discussed how understanding the processes is crucial for effective audits.
upvoted 0 times
...

Save Cancel