ISO 19011

Which principle ensures that information acquired during the audit is protected from unauthorized use?

The principle of confidentiality applies to all information gathered during the audit, including non-sensitive information.

Audit evidence must be verifiable to be considered valid

During the audit, the audit team should gather evidence through:

The audit team should always report their findings to the highest level of management within the organization

When establishing the programme, the audit programme manager should consider:

An evidence-based approach means the audit conclusion must be based on :

Which principle is primarily concerned with an auditor's professional conduct and judgment?

During the audit, the team must communicate with the auditee to:

The audit programme manager is responsible for the approval of the final audit report.

The audit programme manager is responsible for ensuring that all audit activities are documented

The principle of confidentiality requires auditors to:

A closing meeting is always required at the conclusion of an audit

The principle of confidentiality requires auditors to:

The audit process begins with a formal opening meeting

The audit team must always follow the audit plan exactly as written, without any changes

When establishing the audit programme, the audit programme manager must consider the risks and opportunities associated with:

The audit programme manager should monitor the programme to ensure:

The competence of an auditor is based on their personal attributes and experience, but not their formal education

The evaluation of an auditor's competence should be based on:

An auditor must be completely independent from the process they are auditing to be objective.

The maintenance of an auditor's competence can be demonstrated through participating in audits, even without formal training

The skills required for an auditor include being able to communicate effectively and listen well

A key part of maintaining competence is an auditor's ongoing professional development

The principle of due professional care means auditors should always seek to find as many nonconformities as possible

To adhere to the principle of due professional care, an auditor must be:

The audit report must include:

The competence of an audit team is determined by the competence of the lead auditor alone

The methods for evaluating an auditor's competence include:

The principle of integrity requires auditors to be honest and responsible in their work.

The criteria for competence should be established by the audit programme manager

A risk-based approach to auditing means the auditor should only focus on the most critical risks to the organization.

The principle of fair presentation requires auditors to report:

The monitoring of the audit programme should include:

The audit programme manager should review the programme to ensure:

The overall responsibility for managing an audit programme rests with top management

The evaluation of an auditor's competence should include an assessment of:

An auditor's knowledge and skills can be gained through: Work experience and participation in audits.

The audit programme should be designed to focus only on a specific department, like sales or marketing

The closing meeting is where the audit team leader:

The competence of a technical expert should be evaluated to ensure they can:

Auditors should possess personal attributes like being ethical, open-minded, and culturally sensitive

Which of the following is a step in preparing for an audit?

The audit programme must include the criteria for selecting auditors.

The principle of integrity means auditors must always agree with the auditee

The lead auditor should possess additional skills, such as the ability to:

The establishment of an audit programme should involve consideration of:

The audit programme should be updated to address risks and opportunities identified during its implementation.

The audit plan should contain:

The principles of auditing are only applicable to auditors who work for third-party firms.

During the opening meeting, the audit team leader should:

The opening meeting is optional for internal audits

The principle of evidence-based approach is directly linked to the concept of:

The audit programme manager is responsible for defining the audit programme's scope

The principle of independence can be compromised if an auditor has a personal relationship with the person being interviewed

The audit programme manager's responsibilities include:

If a nonconformity is found, the audit team must investigate its root cause

The audit report should contain only nonconformities

An audit programme must be documented to include the methods used to manage it

The competence of a technical expert who assists an audit team is the responsibility of the audit programme manager

The competence of an audit team as a whole should be sufficient to achieve:

The competence of an auditor is evaluated to ensure they can:

The closing meeting should include a discussion of:

An audit finding is the result of evaluating collected audit evidence against the:

The audit programme must be established to achieve:

An audit programme can be managed by a team instead of a single person

The principle of fair presentation means audit reports must be:

An auditor's competence should be evaluated against:

Auditors who work for a third-party audit firm are assumed to be competent and do not need to maintain their competence

An auditor's competence needs to be maintained and improved over time to stay current

The implementation of the audit programme includes assigning responsibilities to the audit team.

Auditors should keep a record of the audit evidence to ensure the principle of fair presentation is upheld

The auditor must always conduct the audit on-site

An auditor must be completely independent from the process they are auditing to be objective.

A key part of the risk-based approach is focusing on:

The audit programme should be reviewed to identify opportunities for improvement

The improvement of the audit programme should be based on:

A risk-based approach requires the auditor to identify every single risk in the organization

An auditor's competence should be evaluated to ensure they have the ability to:

The lead auditor is responsible for deciding when the audit activities are completed

The audit team leader is primarily responsible for: