Which one of the following options best describes the main purpose of a Stage 1 third-party audit?

Which one of the following options best describes the main purpose of a Stage 1 third-party audit?
A . To introduce the audit team to the client
B . To learn about the organisation’s procurement
C . To determine redness for a stage 2 audit
D . To check for legal compliance by the organisation
E . To prepare an independent audit report
F . To get to know the organisation’s customers

View Answer

Answer: C

Explanation:

The main purpose of a Stage 1 third-party audit is to determine readiness for a Stage 2 audit. A Stage 1 audit is a preliminary assessment that evaluates the organization’s ISMS documentation, scope, context, and objectives, and identifies any major gaps or nonconformities that need to be addressed before the Stage 2 audit. A Stage 1 audit does not introduce the audit team to the client, as this is done during the audit planning phase. A Stage 1 audit does not check for legal compliance by the organization, as this is done during the Stage 2 audit. A Stage 1 audit does not prepare an independent audit report, as this is done after the Stage 2 audit.

Reference: CQI & IRCA ISO 27001:2022 Lead Auditor Course Handbook, page 70. : ISO/IEC 27001 LEAD AUDITOR – PECB, page 23.