PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 3 Question 44 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam

Question #: 44
Topic #: 3

[All ISO-IEC-27001-Lead-Implementer Questions]

Company X restricted the access of the internal auditor of some of its documentation taking into account its confidentiality. Is this acceptable?

AYes. it is up to the company to determine what an internal auditor can access

BYes. confidential information should not be increased by internal auditors

CNo. restricting the internal auditor's access to offices and documentation can negatively affect the internal audit process

Show Suggested Answer

Suggested Answer: A

by Maybelle at Sep 11, 2024, 07:37 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Helga

6 months ago

Yeah, but auditors need to see everything to do a proper job!

upvoted 0 times

...

Dulce

6 months ago

I don't know, restricting access sounds like a red flag to me.

upvoted 0 times

...

Vivan

6 months ago

Totally agree, confidentiality is key for sensitive data.

upvoted 0 times

...

Reuben

7 months ago

Wait, how can an auditor do their job without full access?

upvoted 0 times

...

Billy

7 months ago

Seems fair, companies have the right to protect sensitive info.

upvoted 0 times

...

Vi

7 months ago

I recall a case study where limited access led to incomplete audits. It makes me think that restricting access could really hurt the audit process.

upvoted 0 times

...

Miesha

7 months ago

I feel like I read that internal auditors should have unrestricted access to ensure a thorough audit. So, option C seems right to me.

upvoted 0 times

...

Reta

7 months ago

I'm not entirely sure, but I think there was a practice question about auditor independence that mentioned confidentiality. Maybe that means some restrictions are okay?

upvoted 0 times

...

Francine

8 months ago

I remember discussing how internal auditors need access to all relevant information to perform their duties effectively. So, I think restricting access might not be acceptable.

upvoted 0 times

...

Anglea

8 months ago

Okay, let me break this down. The company's perspective versus the auditor's needs - I need to find the right balance.

upvoted 0 times

...

Diego

8 months ago

Ah, this is a good one. I think I know the right approach here, but I'll double-check my understanding before answering.

upvoted 0 times

...

Pearly

8 months ago

I've got a strategy for this - I'll focus on the principles of internal auditing and weigh that against the company's confidentiality requirements.

upvoted 0 times

...

Salina

8 months ago

Hmm, I'm a bit unsure about this. I'll need to think through the potential impacts on the internal audit process before deciding.

upvoted 0 times

...

Maira

8 months ago

This seems like a tricky one. I'll need to carefully consider the company's confidentiality concerns versus the internal auditor's need for access.

upvoted 0 times

...

Shawnna

8 months ago

I remember studying the Offering Pattern Reference Model, but I'm not sure if 'opportunity paradigms' were part of it.

upvoted 0 times

...

Staci

2 years ago

As an internal auditor myself, I can tell you that option C is the way to go. Limiting our access is a big no-no and can seriously undermine the audit process.

upvoted 0 times

...

Sherman

2 years ago

Haha, the company trying to hide something, maybe? I'd go with option C. Restricting the auditor's access is a red flag.

upvoted 0 times

...

Oretha

2 years ago

Option B is just plain wrong. Internal auditors need to review all documentation, including confidential information, to ensure the company's compliance and effectiveness.

upvoted 0 times

Nell

2 years ago

Option B is just plain wrong. Internal auditors need to review all documentation, including confidential information, to ensure the company's compliance and effectiveness.

upvoted 0 times

...

Cassie

2 years ago

C) No. restricting the internal auditor's access to offices and documentation can negatively affect the internal audit process

upvoted 0 times

...

Nohemi

2 years ago

B) Yes. confidential information should not be increased by internal auditors

upvoted 0 times

...

Delsie

2 years ago

A) Yes. it is up to the company to determine what an internal auditor can access

upvoted 0 times

...

Wade

2 years ago

I believe Company X should trust their internal auditors and provide necessary access.

upvoted 0 times

...

Irma

2 years ago

I agree with Haydee, internal auditors need access to all relevant information.

upvoted 0 times

...

Hobert

2 years ago

Hmm, I'm not sure. The company might have a valid reason to restrict access to certain confidential information. Option A seems reasonable.

upvoted 0 times

...

Haydee

2 years ago

I disagree, restricting access can hinder the internal audit process.

upvoted 0 times

...

Ciara

2 years ago

I think it's acceptable for Company X to restrict access.

upvoted 0 times

...

Dong

2 years ago

I think option C is the correct answer. The internal auditor should have access to all relevant documentation to properly evaluate the company's processes and controls.

upvoted 0 times