PECB Lead Implementer (ISO/IEC 27001) — Question 105

Based on scenario 8, did the nonconformity report include all the necessary aspects?

Answer options

• A. Yes, the report included all the necessary aspects
• B. No, the report must also specify the root cause of the nonconformity
• C. No, the report must also specify the audit criteria

Correct answer: C

Explanation

The correct answer is C, as specifying the audit criteria is essential for a comprehensive nonconformity report. Option A is incorrect because it implies completeness without the necessary details, and option B, while relevant, does not address the critical need for the audit criteria.