What is the certification audit primarily based on?

A.
personnel records

B.
process descriptions

C.
reports by certified financial auditors

D.
specifications

Explanation:

A) Incorrect. ISO/IEC 20000 is a process-based standard. Although various records and documents
may be used as evidence in a certification audit, process-related documents (e.g. process
descriptions) will form the basis of the evidence.
B) Correct. ISO/IEC 20000 is a process-based standard. The certification audit will be primarily based
upon process-related documentation (such as process descriptions) which can be used to assess the
range of processes covered in the standard.
C) Incorrect. ISO/IEC 20000 is a process-based standard, and therefore process-related documents
(e.g. process descriptions) will form the basis of the evidence. Reports by certified financial auditors
will provide relevant evidence to audit Budgeting and Accounting for IT Services, but will not provide
information across all processes.
D) Incorrect. ISO/IEC 20000 is a process-based standard. Although various records and documents
may be used as evidence in a certification audit, process-related documents (e.g. process
descriptions) will form the basis of the evidence.