What is the certification audit primarily based on?

A.
personnel records

B.
process descriptions

C.
reports by certified financial auditors

D.
specifications

Explanation:

A) Incorrect. ISO/IEC 20000 is a process-based standard. Although various records and
documents may be used as evidence in a certification audit, process-related documents (e.g.
process descriptions) will form the basis of the evidence.
B) Correct. ISO/IEC 20000 is a process-based standard. The certification audit will be primarily
based upon process-related documentation (such as process descriptions) which can be used to
assess the range of processes covered in the standard.
C) Incorrect. ISO/IEC 20000 is a process-based standard, and therefore process-related
documents (e.g. process descriptions) will form the basis of the evidence. Reports by certified
financial auditors will provide relevant evidence to audit Budgeting and Accounting for IT Services,
but will not provide information across all processes.
D) Incorrect. ISO/IEC 20000 is a process-based standard. Although various records and
documents may be used as evidence in a certification audit, process-related documents (e.g.
process descriptions) will form the basis of the evidence.