ITSMS IA Exam

ISO 20000 Internal Audit Training Evaluation

* Indicates required field

Name *

First

Last

Email *

1. What are the 3 characteristics of an Audit based on its definition i.e. the _____,_____, and_____ process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled?

Choose all that apply *

Independent Ethical Documented Systematic

2. What are the 3 most important factors that an Auditor requires to formulate his/her Audit Opinion?

3. Which Auditing Principles relate to the responsibility of the Auditor to exercise care in the task they perform and in the confidence entrusted to them by the audit client?

4. As per ISO 20000, what do Internal Audit intend to determine?

Choose all that apply. *

Fulfill the requirements of ISO/IEC 20000 Fulfill the service requirements Fulfill the SMS requirements identified by the service provider The ITSMS is effectively implemented and maintained

5. Which among the following does ISO 20000 require to be documented?

6. Which among the following is not a requirement of ISO 20000?

Choose all that apply. *

Management shall ensure that internal information security audits are conducted. The service provider shall audit the records stored in the CMDB at planned intervals. Management Reviews shall include results and follow-up actions from audits. The selection of auditors and conduct of audits shall ensure independence and integrity of the audit. Non-conformities shall be communicated, prioritized and responsibility allocated for actions. Management shall ensure that audit results are reviewed to identify opportunities for improvement.

7. In establishing Audit Programme Objectives, what factor is given less consideration?

Choose One *

8. What skills and knowledge should ITSMS Internal Auditors ideally possess?

Choose all that apply. *

Strategic priorities of the organization Organizational culture including existing problems Auditing principles ISO 20000 and other relevant standards Laws and regulations that can affect the ITSMS

9. What is NOT a direct responsibility of the Lead Auditor?

Choose One *

Formulate audit conclusions Prevent and resolve conflicts Prepare and complete the audit report Represent the audit team to the audit client and auditees

10. What are the 2 conditions that will indicate that the Audit is formally concluded?

Choose Two *

When all activities articulated in the audit plan are carried out. When the Closing Meeting is done. When the approved audit report has been distributed. When all the Non Conformances have been addressed.

11. Which among the following should be included in the Audit Plan?

Choose all that apply. *

Audit Objectives, Criteria and Scope Dates and Places of the on-site audit activities will be conducted The expected Time and Duration of on-site audit activities Audit Artifacts and the manner by which they will be collected The name of the Manager where the audit will be conducted

12. Audit Findings are based on the comparison of what factors?

Choose One *

Audit Plan and Audit Evidence Audit Criteria and Audt Conclusion Audit Evidence and Audit Criteria Audit Criteria and Audit Conclusion

13. Which among the following are NOT TRUE about the Closing Meeting?

Choose One *

The Closing Meeting is chaired by the Lead Auditor Ensure Audit Findings and Conclusions are clearly understood and duly acknowledged by the Auditee Solicit agreement from the Auditee about the timeframe of corrective and preventing actions Present the Recommendations and stress the point that recommendations are binding

14. What are some best practices while conducting interviews with Auditees?

Choose all that apply. *

Conducted during the normal working hours and workplace Put the interviewee at ease prior to and during the interview The reason for the interview is explained May be initiated by asking the interviewee to describe their work Interview results are summarized and reviewed with the guide Thank the interviewee for their participation and cooperation

15. The Audit Criteria is the basis for creating what?

Choose One *

Audit Objective Audit Schedule Audit Scope Audit Checklist

​ISO 20000 Internal Audit Training Evaluation

ISO 20000 Internal Audit Training Evaluation