Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam ISO-IEC-27001-Lead-Auditor Topic 2 Question 281 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Auditor exam
Question #: 281
Topic #: 2
Which two of the following options do not participate in a second-party audit to ISO/IEC 27001?

Suggested Answer: D,E Vote an answer

*Second-Party Audits: These involve an organization (the customer) auditing another organization with which it has a relationship (such as a supplier). The focus is on ensuring the supplier meets the customer's information security requirements.
*Accreditation Bodies: These assess the competence of certification bodies but don't directly participate in second-party audits.
*CQI and IRCA: These organizations provide auditor certifications but their training alone doesn't automatically qualify someone for second-party ISO/IEC 27001 audits. The auditor should have specific knowledge of the standard.
References:
*ISO/IEC 17021-1:2015 Conformity assessment - Requirements for bodies providing audit and certification of management systems: Provides requirements for certification bodies but also outlines how first-, second-, and third-party audits work.
*PECB Candidate Handbook, ISO/IEC 27001 Lead Auditor: Explains the distinctions between first, second, and third-party audits, clarifying that second-party audits are usually between organizations with a prior relationship.

by Merle at Mar 26, 2026, 12:26 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.