Question 1 of 30
Compliance review shows that during an interview regarding the implementation of access control policies, the auditee appears defensive and provides brief, unelaborated answers. The auditor needs to elicit more detailed information about the practical application of these policies. Which interviewing technique would be most effective in this situation?
Ask a series of open-ended questions that encourage the auditee to describe their processes and provide examples.
Interrupt the auditee to clarify points immediately and ask highly technical questions to test their knowledge.
Rephrase the questions to suggest the expected correct answer and move through the checklist rapidly.
Focus exclusively on yes/no questions to confirm adherence to documented procedures.

Preparing for ISO 27001 Lead Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free