問題文
An auditee's scope statement covers its two development sites but leaves out the sales office, where the customer contact database is used every day. The auditee says the sales office was left out to keep the first certification manageable. What does the auditor do with that answer?
選択肢
- Test the boundary carefully, because the auditor weighs the interfaces that the crossing dependencies reveal.
- Widen the boundary unilaterally, because the auditor sets the extent that the narrow statement demands.
- Accept the boundary immediately, because the auditor trusts the statement that the certified organization drew.
- Report the boundary directly, because the auditor faults the omission that the handling location creates.