Biography

ISO-IEC-27001-Lead-Auditor Online Training Materials & Test ISO-IEC-27001-Lead-Auditor Pass4sure

What's more, part of that NewPassLeader ISO-IEC-27001-Lead-Auditor dumps now are free: https://drive.google.com/open?id=12hvEdsUzR4U28GGxuBxIIbOyFInSK_Jl

If you want to practice the ISO-IEC-27001-Lead-Auditor exam questions with different eletronic devices. We believe our APP version of ISO-IEC-27001-Lead-Auditor training braindump will be very convenient for you. In addition, the online version of our ISO-IEC-27001-Lead-Auditor training materials can work in an offline state. If you buy our ISO-IEC-27001-Lead-Auditor Study Guide, you have the chance to use our ISO-IEC-27001-Lead-Auditor study materials for preparing your exam when you are in an offline state. We believe that you will like the online version of our ISO-IEC-27001-Lead-Auditor exam questions.

Our company has been putting emphasis on the development and improvement of ISO-IEC-27001-Lead-Auditor test prep over ten year without archaic content at all. So we are bravely breaking the stereotype of similar content materials of the exam, but add what the exam truly tests into our ISO-IEC-27001-Lead-Auditor exam guide. So we have adamant attitude to offer help rather than perfunctory attitude. All ISO-IEC-27001-Lead-Auditor Test Prep is made without levity and the passing rate has up to 98 to 100 percent now. We esteem your variant choices so all these versions of ISO-IEC-27001-Lead-Auditor exam guides are made for your individual preference and inclination.

>> ISO-IEC-27001-Lead-Auditor Online Training Materials <<

Test ISO-IEC-27001-Lead-Auditor Pass4sure & Valid ISO-IEC-27001-Lead-Auditor Test Sample

You can use your smart phones, laptops, the tablet computers or other equipment to download and learn our ISO-IEC-27001-Lead-Auditor study materials. Moreover, our customer service team will reply the clients’ questions patiently and in detail at any time and the clients can contact the online customer service even in the midnight. The clients at home and abroad can purchase our ISO-IEC-27001-Lead-Auditor Study Materials online. Our service covers all around the world and the clients can receive our ISO-IEC-27001-Lead-Auditor study materials as quickly as possible.

PECB Certified ISO/IEC 27001 Lead Auditor exam Sample Questions (Q17-Q22):

NEW QUESTION # 17
The audit lifecycle describes the ISO 19011 process for conducting an individual audit. Drag and drop the steps of the audit lifecycle into the correct sequence.

Answer:

Explanation:

Explanation
The correct sequence of the steps of the audit lifecycle according to ISO 19011:2018 is:
Step 1: Audit initiation
Step 2: Audit preparation
Step 3: Conducting the audit
Step 4: Preparing and distributing the audit report
Step 5: Audit completion
Step 6: Audit follow-up
This sequence reflects the logical order of the audit activities, from establishing the audit objectives, scope and criteria, to verifying the implementation and effectiveness of the corrective actions. However, ISO 19011:2018 also recognizes that some audit activities can be iterative or concurrent, depending on the nature and complexity of the audit. For example, audit preparation and conducting the audit can overlap when new information or changes occur during the audit. Similarly, audit follow-up can be integrated with audit completion when the corrective actions are verified shortly after the audit. Therefore, the audit lifecycle should be adapted to the specific context and needs of each audit.

 

NEW QUESTION # 18
You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security incident management process. The IT Security Manager presents the information security incident management procedure (Document reference ID: ISMS_L2_16, version 4).
You review the document and notice a statement "Any information security weakness, event, and incident should be reported to the Point of Contact (PoC) within 1 hour after identification". When interviewing staff, you found that there were differences in the understanding of the meaning of the phrase "weakness, event, and incident".
The IT Security Manager explained that an online "information security handling" training seminar was conducted 6 months ago. All the people interviewed participated in and passed the reporting exercise and course assessment.
You would like to investigate other areas further to collect more audit evidence. Select three options that would not be valid audit trails.

• A. Collect more evidence on how information security incidents are reported via appropriate channels (relevant to control A.6.8)
• B. Collect more evidence to determine if ISO 27035 (Information security incident management) is used as internal audit criteri
• C. Collect more evidence on how the organisation learns from information security incidents and makes improvements. (Relevant to control A.5.27)
• D. Collect more evidence on whether terms and definitions are contained in the information security policy. (Relevant to control 5.32)
• E. Collect more evidence on how areas subject to information security incidents are quarantined to maintain information security during disruption (relevant to control A.5.29)
• F. Collect more evidence on how the organisation tests the business continuity plan. (Relevant to control A.5.30)
• G. Collect more evidence on how the organisation manages the Point of Contact (PoC) which monitors vulnerabilities. (Relevant to clause 8.1)
• H. Collect more evidence on how the organisation conducts information security incident training and evaluates its effectiveness. (Relevant to clause 7.2)

Answer: B,D,G

Explanation:
a. (Relevant to clause 8.13)
Explanation:
The three options that would not be valid audit trails are:
* Collect more evidence on how the organisation manages the Point of Contact (PoC) which monitors vulnerabilities. (Relevant to clause 8.1)
* Collect more evidence on whether terms and definitions are contained in the information security policy. (Relevant to control 5.32)
* Collect more evidence to determine if ISO 27035 (Information security incident management) is used as internal audit criteria. (Relevant to clause 8.13) These options are not valid audit trails because they are not directly related to the information security incident management process, which is the focus of the audit. The audit trails should be relevant to the objectives, scope, and criteria of the audit, and should provide sufficient and reliable evidence to support the audit findings and conclusions1.
Option E is not valid because the PoC is not a part of the information security incident management process, but rather a role that is responsible for reporting and escalating information security incidents to the appropriate authorities2. The audit trail should focus on how the PoC performs this function, not how the organisation manages the PoC.
Option G is not valid because the terms and definitions are not a part of the information security incident management process, but rather a part of the information security policy, which is a high-level document that defines the organisation's information security objectives, principles, and responsibilities3. The audit trail should focus on how the information security policy is communicated, implemented, and reviewed, not whether it contains terms and definitions.
Option H is not valid because ISO 27035 is not a part of the information security incident management process, but rather a guidance document that provides best practices for managing information security incidents4. The audit trail should focus on how the organisation follows the requirements of ISO/IEC 27001:2022 for information security incident management, not whether it uses ISO 27035 as an internal audit criteria.
The other options are valid audit trails because they are related to the information security incident management process, and they can provide useful evidence to evaluate the conformity and effectiveness of the process. For example:
* Option A is valid because it relates to control A.5.29, which requires the organisation to establish procedures to isolate and quarantine areas subject to information security incidents, in order to prevent further damage and preserve evidence5. The audit trail should collect evidence on how the organisation implements and tests these procedures, and how they ensure the continuity of information security during disruption.
* Option B is valid because it relates to control A.6.8, which requires the organisation to establish mechanisms for reporting information security events and weaknesses, and to ensure that they are communicated in a timely manner to the appropriate levels within the organisation6. The audit trail should collect evidence on how the organisation defines and uses these mechanisms, and how they monitor and review the reporting process.
* Option C is valid because it relates to clause 7.2, which requires the organisation to provide information security awareness, education, and training to all persons under its control, and to evaluate the effectiveness of these activities7. The audit trail should collect evidence on how the organisation identifies the information security training needs, how they deliver and record the training, and how they measure the learning outcomes and feedback.
* Option D is valid because it relates to control A.5.27, which requires the organisation to learn from information security incidents and to implement corrective actions to prevent recurrence or reduce impact8. The audit trail should collect evidence on how the organisation analyses and documents the root causes and consequences of information security incidents, how they identify and implement corrective actions, and how they verify the effectiveness of these actions.
* Option F is valid because it relates to control A.5.30, which requires the organisation to establish and maintain a business continuity plan to ensure the availability of information and information processing facilities in the event of a severe information security incident9. The audit trail should collect evidence on how the organisation develops and updates the business continuity plan, how they test and review the plan, and how they communicate and train the relevant personnel on the plan.

 

NEW QUESTION # 19
You are performing an ISMS audit at a residential nursing home called ABC that provides healthcare services.
The next step in your audit plan is to verify the information security of ABC's healthcare mobile app development, support, and lifecycle process. During the audit, you learned the organisation outsourced the mobile app development to a professional software development organisation with CMMI Level 5, ITSM (ISO/IEC 20000-1), BCMS (ISO 22301) and ISMS (ISO/IEC 27001) certified.
The IT Manager presents the software security management procedure and summarises the process as follows:
The mobile app development shall adopt "security-by-design" and "security-by-default" principles, as a minimum. The following security functions for personal data protection shall be available:
Access control.
Personal data encryption, i.e., Advanced Encryption Standard (AES) algorithm, key lengths: 256 bits; and Personal data pseudonymization.
Vulnerability checked and no security backdoor
You sample the latest Mobile App Test report - Reference ID: 0098, details as follows:

You would like to investigate other areas further to collect more audit evidence. Select three options that will not be in your audit trail.

• A. Collect more evidence to determine the number of users of ABC's healthcare mobile app. (relevant to clause 4.2)
• B. Collect more evidence on the organisation's business continuity policy. (Relevant to control A.5.30)
• C. Collect more evidence on how the developer trains its product support personnel. (Relevant to clause 7.2)
• D. Collect more evidence on how the organisation performs testing of personal data handling. (Relevant to control A.5.34)
• E. Collect more evidence on how the organisation manages information security in the selection of an external service provider. (Relevant to control A.5.19)
• F. Collect more evidence by downloading and testing the mobile app on your phone. (Relevant to control A.8.1)
• G. Collect more evidence to verify the developer's CMMI Level 5, ITSM (ISO/IEC 20000-1), BCMS (ISO 22301) and ISMS (ISO/IEC 27001) certification. (Relevant to control A.5.21)
• H. Collect more evidence on how much residents' family members pay to install ABC's healthcare mobile app. (Relevant to clause 4.2)

Answer: A,G,H

Explanation:
The three options that will not be in your audit trail are A, C, and H. These options are either not relevant to the information security of ABC's healthcare mobile app development, support, and lifecycle process, or not within the scope of your audit. The amount of money that residents' family members pay to install the app (A) and the number of users of the app are not related to the information security aspects or objectives of the ISMS1. The verification of the developer's certifications (H) is not your responsibility as an ISMS auditor, as you should rely on the competence and impartiality of the certification bodies that issued them2. The other options are relevant and within the scope of your audit, as they relate to the security functions, testing, policies, and procedures of the mobile app development, support, and lifecycle process13. Reference: 1: ISO/IEC 27001:2022, Information technology - Security techniques - Information security management systems - Requirements, Clause 4.2 2: ISO/IEC 27006:2022, Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems, Clause 4.1 3: PECB Certified ISO/IEC 27001 Lead Auditor Exam Preparation Guide, Domain 5: Conducting an ISO/IEC 27001 audit

 

NEW QUESTION # 20
During a follow-up audit, you notice that a nonconformity identified for completion before the follow-up audit is still outstanding.
Which four of the following actions should you take?

• A. If the delay is justified agree on a revised date for clearing the nonconformity with the auditee/audit client
• B. Decide whether the delay in addressing the nonconformity is justified
• C. Report the failure to address the corrective action for the outstanding nonconformity to the organisation's top management
• D. If the delay is unjustified advise the auditee /audit client and agree on remedial action
• E. Cancel the follow-up audit and return when an assurance has been received that the nonconformity has been cleared
• F. Contact the individuals) managing the audit programme to seek their advice as to how to proceed
• G. Note the nonconformity is still outstanding and follow audit trails to determine why
• H. Immediately raise an nonconformity as the date for completion has been exceeded

Answer: A,B,C,G

Explanation:
Explanation
According to the ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) course, the following actions should be taken when a nonconformity identified for completion before the follow-up audit is still outstanding:
* A. Report the failure to address the corrective action for the outstanding nonconformity to the organisation's top management. This is part of the auditor's responsibility to communicate the audit results and ensure that the audit objectives are met12.
* C. If the delay is justified agree on a revised date for clearing the nonconformity with the auditee/audit client. This is part of the auditor's responsibility to verify the effectiveness of the corrective actions taken by the auditee and to close the nonconformity when the evidence is satisfactory12.
* E. Decide whether the delay in addressing the nonconformity is justified. This is part of the auditor's responsibility to evaluate the evidence presented by the auditee and to use professional judgement and objectivity to determine the validity of the reasons for the delay12.
* G. Note the nonconformity is still outstanding and follow audit trails to determine why. This is part of the auditor's responsibility to collect and verify audit evidence and to identify the root causes of the nonconformity12.
References:
* 1: ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) course, CQI and IRCA Certified Training, 1
* 2: ISO/IEC 27001 Lead Auditor Training Course, PECB, 2

 

NEW QUESTION # 21
You are an experience ISMS audit team leader carrying out a third-party certification audit of an organization specialising in the secure disposal of confidential documents and removable media. Both documents and media are shredded in military grade devices which make it impossible to reconstruct the original.
The audit has gone well and you are just about to start to write the audit report, 30 minutes before the closing meeting. At this point one of the organization's employees knocks on your door and asks if they can speak to you. They tell you that when things get busy her manager tells her to use a lower grade industrial shredder instead as the organisation has more of these and they operate faster. You were not informed about the existence or use of these machines by the auditee.
Select three options for how you should respond to this information.

• A. Consider the need for a subsequent audit within 4 weeks based on the additional information that has come to light
• B. Extend the certification audit duration to create additional time to audit the use of the lower grade machines
• C. Cancel the production of the audit report and instead review the organization's contracts with its clients to determine whether they have permitted the use of lower grade machines
• D. Verify with the auditee that lower grade machines are used in certain circumstances
• E. Raise a nonconformity against 8.1 Operational Planning and Control as the organization has not been open about its processes
• F. Advise the individual managing the audit programme of any recommendation by you to conduct a further auditprior to certification
• G. Do nothing. All audits are based on a sample and the sample you took did not include a planned review of the lower grade machines

Answer: A,D,F

Explanation:
According to ISO/IEC 27001:2022 clause 8.1, the organization must plan, implement and control the processes needed to meet the information security requirements, and to implement the actions determined in clause 6.1. The organization must also ensure that the outsourced processes are controlled or influenced.
According to control A.5.24, the organization must establish and maintain an information security incident management process that includes reporting information security events and weaknesses. Therefore, the use of lower grade machines for the secure disposal of confidential documents and media could pose a significant information security risk and a potential breach of contract with the clients. The auditor should respond to this information by:
A. Advising the individual managing the audit programme of any recommendation by you to conduct a further audit prior to certification. This is in accordance with ISO/IEC 27006:2022 clause 7.4.3, which states that the audit team leader shall report to the certification body any situation that may significantly affect the audit conclusions or the certification decision, and propose any necessary changes to the audit plan.
C. Considering the need for a subsequent audit within 4 weeks based on the additional information that has come to light. This is in accordance with ISO/IEC 27006:2022 clause 7.5.2, which states that the audit team leader shall review the audit findings and any other appropriate information collected during the audit to determine the audit conclusions, and to identify any need for a subsequent audit.
G. Verifying with the auditee that lower grade machines are used in certain circumstances. This is in accordance with ISO/IEC 27006:2022 clause 7.4.2, which states that the audit team leader shall ensure that the audit is conducted in accordance with the audit plan, and that any changes to the plan are agreed upon and documented.
The other options are not appropriate responses, as they either ignore the information, exceed the scope of the audit, or prematurely raise a nonconformity without sufficient evidence. For example:
B. Cancelling the production of the audit report and instead reviewing the organization's contracts with its clients to determine whether they have permitted the use of lower grade machines. This is not a suitable response, as it would delay the audit process and the certification decision, and it would involve reviewing documents that are outside the scope of the ISMS audit. The auditor should focus on verifying the information security risk assessment and treatment process, and the information security incident management process, as they relate to the use of lower grade machines.
D. Doing nothing. All audits are based on a sample and the sample you took did not include a planned review of the lower grade machines. This is not a suitable response, as it would disregard a significant information security risk and a potential nonconformity that could affect the audit conclusions and the certification decision. The auditor should follow up on the information provided by the employee and verify its validity and impact.
E. Extending the certification audit duration to create additional time to audit the use of the lower grade machines. This is not a suitable response, as it would disrupt the audit schedule and the availability of the audit team and the auditee. The auditor should report the situation to the certification body and propose any necessary changes to the audit plan, such as conducting a subsequent audit.
F. Raising a nonconformity against 8.1 Operational Planning and Control as the organization has not been open about its processes. This is not a suitable response, as it would be based on a single source of information that has not been verified or corroborated. The auditor should collect sufficient and appropriate audit evidence to support any nonconformity, and should also consider the root cause and the severity of the nonconformity.
References:
ISO/IEC 27001:2022, clauses 8.1 and Annex A control A.5.24
ISO/IEC 27006:2022, clauses 7.4.2, 7.4.3, and 7.5.2
[PECB Candidate Handbook ISO/IEC 27001 Lead Auditor], pages 18-19, 23-24 A Step-by-Step Guide to Conducting an ISO 27001 Internal Audit ISO 27001 - Annex A.16: Information Security Incident Management

 

NEW QUESTION # 22
......

We provide you with the latest prep material which is according to the content of PECB ISO-IEC-27001-Lead-Auditor certification exam and enhances your knowledge to crack the test. NewPassLeader practice material is made by keeping in focus all the sections of the current syllabus. Our primary objective is to provide you with PECB Certified ISO/IEC 27001 Lead Auditor exam (ISO-IEC-27001-Lead-Auditor) actual questions to complete preparation for the test in few days. Our product includes PECB Certified ISO/IEC 27001 Lead Auditor exam real questions, desktop practice test software, and web-based practice exam. Keep reading to find out what are the specifications of these formats.

Test ISO-IEC-27001-Lead-Auditor Pass4sure: https://www.newpassleader.com/PECB/ISO-IEC-27001-Lead-Auditor-exam-preparation-materials.html

Get your Test ISO-IEC-27001-Lead-Auditor Pass4sure - PECB Certified ISO/IEC 27001 Lead Auditor exam dumps exam preparation questions in form of Test ISO-IEC-27001-Lead-Auditor Pass4sure - PECB Certified ISO/IEC 27001 Lead Auditor exam PDF, PECB ISO-IEC-27001-Lead-Auditor Online Training Materials There is always a fear of losing exam and this causes you loss of money and waste time, When you pass the ISO-IEC-27001-Lead-Auditor exam test at last, you will find your investment is worthy and valid, You just need take the spare time to study ISO-IEC-27001-Lead-Auditor best prep dumps, the effects are obvious.

This overview gives you the opportunity to use Django to generate a basic project ISO-IEC-27001-Lead-Auditor that you'll use throughout the book, But there's a dark side to stretch goals, Get your PECB Certified ISO/IEC 27001 Lead Auditor exam dumps exam preparation questions in form of PECB Certified ISO/IEC 27001 Lead Auditor exam PDF.

2025 ISO-IEC-27001-Lead-Auditor Online Training Materials 100% Pass | Latest Test PECB Certified ISO/IEC 27001 Lead Auditor exam Pass4sure Pass for sure

There is always a fear of losing exam and this causes you loss of money and waste time, When you pass the ISO-IEC-27001-Lead-Auditor Exam Test at last, you will find your investment is worthy and valid.

You just need take the spare time to study ISO-IEC-27001-Lead-Auditor best prep dumps, the effects are obvious, They can immediately use our ISO-IEC-27001-Lead-Auditor training guide after they pay successfully.

• ISO-IEC-27001-Lead-Auditor PDF Guide 🟨 ISO-IEC-27001-Lead-Auditor Actual Exams 🥿 New ISO-IEC-27001-Lead-Auditor Practice Questions 🧱 Search for [ ISO-IEC-27001-Lead-Auditor ] on ➠ www.dumpsquestion.com 🠰 immediately to obtain a free download ♻ISO-IEC-27001-Lead-Auditor Exam Collection
• Valid Test ISO-IEC-27001-Lead-Auditor Tips 🆘 Valid Test ISO-IEC-27001-Lead-Auditor Tips 🛩 ISO-IEC-27001-Lead-Auditor Exam Simulator Free 👶 Open ▷ www.pdfvce.com ◁ and search for ➽ ISO-IEC-27001-Lead-Auditor 🢪 to download exam materials for free 🔇ISO-IEC-27001-Lead-Auditor Sample Test Online
• PECB ISO-IEC-27001-Lead-Auditor PECB Certified ISO/IEC 27001 Lead Auditor exam Dumps - Easy To Prepare Exam [2025] 🔻 Search for （ ISO-IEC-27001-Lead-Auditor ） and easily obtain a free download on “ www.real4dumps.com ” 🍏ISO-IEC-27001-Lead-Auditor Reliable Exam Tips
• ISO-IEC-27001-Lead-Auditor Sample Test Online 🥬 Reliable ISO-IEC-27001-Lead-Auditor Test Questions ⚫ ISO-IEC-27001-Lead-Auditor Exam Collection 🤸 Enter ➽ www.pdfvce.com 🢪 and search for ⏩ ISO-IEC-27001-Lead-Auditor ⏪ to download for free 🍗Latest ISO-IEC-27001-Lead-Auditor Test Sample
• PECB Certified ISO/IEC 27001 Lead Auditor exam exam dumps - ISO-IEC-27001-Lead-Auditor training pdf - PECB Certified ISO/IEC 27001 Lead Auditor exam valid torrent 🦮 Search for 【 ISO-IEC-27001-Lead-Auditor 】 on ☀ www.exam4pdf.com ️☀️ immediately to obtain a free download 🥉100% ISO-IEC-27001-Lead-Auditor Accuracy
• 100% ISO-IEC-27001-Lead-Auditor Accuracy 😂 Training ISO-IEC-27001-Lead-Auditor Kit 🌌 100% ISO-IEC-27001-Lead-Auditor Accuracy 🔑 Easily obtain free download of ⏩ ISO-IEC-27001-Lead-Auditor ⏪ by searching on { www.pdfvce.com } 🚦Detailed ISO-IEC-27001-Lead-Auditor Study Plan
• ISO-IEC-27001-Lead-Auditor Actual Exams 🤾 ISO-IEC-27001-Lead-Auditor Sample Test Online 🖌 Latest ISO-IEC-27001-Lead-Auditor Test Sample 📹 Download [ ISO-IEC-27001-Lead-Auditor ] for free by simply searching on ➤ www.pdfdumps.com ⮘ 😻ISO-IEC-27001-Lead-Auditor Test Sample Online
• ISO-IEC-27001-Lead-Auditor Exam Simulator Free ⏫ ISO-IEC-27001-Lead-Auditor Valid Test Answers 🍍 ISO-IEC-27001-Lead-Auditor Test Sample Online 🐲 Enter ➥ www.pdfvce.com 🡄 and search for “ ISO-IEC-27001-Lead-Auditor ” to download for free ✅Training ISO-IEC-27001-Lead-Auditor Kit
• Reliable ISO-IEC-27001-Lead-Auditor Test Questions 🛕 ISO-IEC-27001-Lead-Auditor Exam Collection 🐘 Latest ISO-IEC-27001-Lead-Auditor Test Sample 💰 Open website ➠ www.prep4pass.com 🠰 and search for ☀ ISO-IEC-27001-Lead-Auditor ️☀️ for free download 😼100% ISO-IEC-27001-Lead-Auditor Accuracy
• PECB ISO-IEC-27001-Lead-Auditor Dumps - Try Free ISO-IEC-27001-Lead-Auditor Exam Questions and Answer 🥭 Simply search for ▶ ISO-IEC-27001-Lead-Auditor ◀ for free download on ➽ www.pdfvce.com 🢪 📱ISO-IEC-27001-Lead-Auditor Sample Test Online
• Valid Test ISO-IEC-27001-Lead-Auditor Tips 🐬 ISO-IEC-27001-Lead-Auditor Actual Exams 👆 ISO-IEC-27001-Lead-Auditor Exam Collection 🦁 Open website ➠ www.dumps4pdf.com 🠰 and search for 【 ISO-IEC-27001-Lead-Auditor 】 for free download 🍃ISO-IEC-27001-Lead-Auditor Test Sample Online
• ISO-IEC-27001-Lead-Auditor Exam Questions
• virtualmentor.com.ng oneforexglobal.com imanitraining.com omegaglobeacademy.com techdrugsolution.com ahc.itexxiahosting.com iqedition.com academy.medditai.com mavenmarg.com bacsihoangoanh.com

2025 Latest NewPassLeader ISO-IEC-27001-Lead-Auditor PDF Dumps and ISO-IEC-27001-Lead-Auditor Exam Engine Free Share: https://drive.google.com/open?id=12hvEdsUzR4U28GGxuBxIIbOyFInSK_Jl