# ISO/IEC 27001 Lead Auditor interview scorecard

Candidate: ______  Interviewer: ______  Date: ______

| # | Question | Listen for | Score 1 to 4 |
|---|---|---|---|
| 1 | How do you plan an audit? | Objectives, scope and criteria first, then a risk-based plan, the team and the timing. | |
| 2 | How do you decide what to sample? | Risk and the population size, a sample that can be defended, and the method written down. | |
| 3 | How do you interview without leading the auditee? | Open questions, listening, and asking to see the evidence. | |
| 4 | What makes a finding a nonconformity rather than an observation? | A requirement that is not met, backed by objective evidence. | |
| 5 | How do you write a nonconformity? | The requirement, the evidence and a clear statement of what is missing, without telling them how to fix it. | |
| 6 | An auditee disputes a finding. What do you do? | Go back to the evidence and the criteria, listen, and settle it before or at the closing meeting. | |
| 7 | How do you stay impartial? | No auditing of your own work, conflicts declared, and conclusions from evidence only. | |
| 8 | How do you follow up corrective actions? | Check the root cause analysis and verify the action worked, not just that it was done. | |

Source: https://credentialpress.com/guides/iso-27001-lead-auditor-interview-questions