PECB ISO-IEC-27001-Lead-Auditor Exam - Topic 4 Question 47 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Auditor exam

Question #: 47
Topic #: 4

[All ISO-IEC-27001-Lead-Auditor Questions]

The auditor discovered that two out of 15 employees of the IT Department have not received adequate information security training. What does this represent?

AAudit finding

BAudit evidence

CInformation source

Show Suggested Answer

Suggested Answer: A

This scenario represents an 'audit finding.' An audit finding refers to results that indicate a deviation from the expected performance or standards. Discovering that two employees have not received the required training is an audit finding indicating noncompliance with the organization's training requirements.

by Armando at Sep 14, 2024, 08:27 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lanie

3 months ago

Not sure if it's just an audit finding, could be more than that.

upvoted 0 times

...

Staci

3 months ago

Sounds like a serious oversight to me!

upvoted 0 times

...

Emerson

3 months ago

Wait, only 2 out of 15? That seems low for a department like IT.

upvoted 0 times

...

Celestina

4 months ago

I agree, it shows a gap in training.

upvoted 0 times

...

Ceola

4 months ago

That's definitely an audit finding.

upvoted 0 times

...

King

4 months ago

I definitely recall that audit findings point out issues, so I would go with option A for this one.

upvoted 0 times

...

Hershel

4 months ago

I’m leaning towards audit finding too, but could it also be considered an information source? I’m a bit confused.

upvoted 0 times

...

Lilli

4 months ago

I remember a practice question where we discussed audit evidence, but this feels more like a finding to me.

upvoted 0 times

...

Glenna

5 months ago

I think this might be an audit finding since it highlights a gap in training, but I'm not completely sure.

upvoted 0 times

...

Cherry

5 months ago

I'm confident the answer is A. Audit finding. The question is clearly describing a finding from the auditor's work, so that's the best fit among the options provided.

upvoted 0 times

...

Raul

5 months ago

Okay, I've got this. The question is asking what the information about the two employees who didn't receive training represents. Since it's directly related to the audit, the answer must be "Audit finding."

upvoted 0 times

...

Leandro

5 months ago

Hmm, I'm a bit unsure about this one. I need to make sure I understand the difference between an audit finding, audit evidence, and information source. Let me think this through step-by-step.

upvoted 0 times

...

Titus

5 months ago

This seems like a straightforward audit finding question. I'll carefully read through the options and think about what the information provided represents.

upvoted 0 times

...

Georgene

5 months ago

Okay, let's see. We need to ensure all the apps can access the resources in Vnet1 without going through the internet. I'm guessing the number of integration subnets has something to do with that.

upvoted 0 times

...

Catalina

1 year ago

I'd say this is a classic case of 'security through obscurity' - out of sight, out of mind. Time to shine a light on that dark corner of the IT department!

upvoted 0 times