問題文
A client asks that its own internal security standard be added to the audit criteria so that one visit covers both. The internal standard is stricter in places and vaguer in others. What does the team leader settle first?
選択肢
- Whether the internal standard can raise the bar, because the criteria have to be acknowledged openly for the consequence to be accepted and the additional findings have to be expected beforehand.
- Whether the internal standard can duplicate the requirement, because the criteria have to be matched closely for the overlap to be identified and the twin checks have to be avoided beforehand.
- Whether the internal standard can support the findings, because the criteria have to be expressed precisely for the evidence to be compared and the ambiguous passages have to be clarified beforehand.
- Whether the internal standard can bind the organization, because the criteria have to be endorsed formally for the obligation to be created and the absent signatures have to be obtained beforehand.