ISO-9001-Lead-Auditor Practice Exam Questions with Answers QMS ISO 9001:2015 Lead Auditor Exam Certification

Here is the correct matching of ISO 9001:2015 clauses to the steps mentioned in the change management process:

We identified risks and opportunities and fed these into our risk management processes.

Clause 6.1 (Actions to address risks and opportunities)

We found a suitable supplier.

Clause 8.4 (Control of externally provided processes, products, and services)

We monitored customer feedback and noticed an increase in negative feedback about lead times.

Clause 9.1.2 (Customer satisfaction)

We put together a plan for implementation.

Clause 6.2.2 (Planning to achieve quality objectives)

We monitored the performance of the new supplier.

Clause 8.4.2 (Type and extent of control of external providers)

We noticed that productivity targets were being missed.

Clause 9.1.1 (Monitoring, measurement, analysis, and evaluation)

We communicated the plan internally.

Clause 7.4 (Communication)

We looked at the data at the management review and decided we needed to do something different.

Clause 9.3.2 (Management review inputs)

We reorganised the staffing and implemented redundancies.

Clause 7.1.2 (People)

We set an objective to effectively implement the transition and outsource manufacturing.

Clause 6.2.1 (Quality objectives and planning to achieve them)

This aligns the steps of the change process with relevant ISO 9001:2015 clauses related to risk, planning, communication, and monitoring.

? Responsibilities of the Audit Team Leader:ISO 19011:2018 (guidelines for auditing management systems), which supports the principles in ISO 9001:2015, specifies the responsibilities of an audit team leader. These responsibilities include:

Planning the audit and establishing effective communication between the audit team and auditee.

Ensuring that formal communication channels are agreed upon and followed.

Reporting the audit progress, significant findings, and any concerns to the auditee or audit client as necessary.

Managing the audit team and ensuring adherence to the defined objectives and scope.

? Analysis of Options:

A. Reporting unattainable audit objectives to the accreditation body:Incorrect. This is not the responsibility of the audit team leader. The accreditation body oversees the certification body and is not directly involved in specific audits. If objectives are unattainable, the audit team leader would report them to the audit client (the certification body), not the accreditation body.

B. Planning formal communication arrangements:Correct. This is one of the responsibilities of the audit team leader. They ensure auditees can communicate with auditors as needed during the audit process.

C. Confirming communication channels during the opening meeting:Correct. During the opening meeting, the audit team leader must establish clear communication protocols to ensure effective information exchange between the audit team and auditee.

D. Communicating progress, findings, and concerns:Correct. Keeping the auditee and audit client informed about progress and significant findings is a critical responsibility of the audit team leader to maintain transparency and ensure the audit objectives are met.

? Why Option A is Correct:The audit team leader does not have any obligation to report unattainable objectives to the accreditation body. Instead, they are responsible for communicating issues to the audit client (typically the certification body). The accreditation body operates at a higher level and is concerned with overseeing certification bodies, not individual audits.

? Relevant References:

ISO 19011:2018, Clause 6.4 (Conducting the Audit): Emphasizes the responsibilities of the audit team leader, including communication with the auditee and client.

ISO 9001:2015, Clause 9.2 (Internal Audit): Highlights the importance of planning and communication during audits, which is reflected in third-party audits as well.

According to the ISO 9001:2015 standard, clause 4.1 requires organizations to determine the external and internal issues that are relevant to their purpose and that affect their ability to achieve the intended outcomes of their quality management system. Clause 6.1 requires organizations to plan actions to address the risks and opportunities associated with these issues. These actions must be integrated into the quality management system processes and evaluated for effectiveness.

In this scenario, the General Manager of the pharmaceutical organization has shown a lack of understanding and involvement in the process of identifying and addressing the external and internal issues that affect their quality management system. The General Manager has relied on the legal compliance expert, who is not an employee of the organization, to guide them on this process. The General Manager has also admitted that they did not document these issues, which is contrary to the requirement of retaining documented information on the context of the organization. The General Manager has also delegated the responsibility of determining and planning the actions to address the risks and opportunities to the Technical Manager, who is absent due to COVID-19.

Based on this information, you can respond to the General Manager’s suggestion by taking two options:

B. I would ask for a different guide instead of the legal compliance expert: You can request to have a different guide who is an employee of the organization and who is familiar with the quality management system processes and the external and internal issues that affect them. The legal compliance expert may not have the necessary knowledge and authority to answer your questions or provide you with the relevant evidence.

C. I would look for evidence that the actions resulting from the risk assessment had been taken: You can verify whether the organization has implemented and evaluated the actions to address the risks and opportunities associated with the external and internal issues. You can look for evidence such as records of risk analysis, action plans, monitoring and review results, and improvement measures.

These two options would help you to assess the conformity and effectiveness of the organization’s quality management system with respect to the requirements of clauses 4.1 and 6.1.

According to ISO 19011:2018, clause 6.7, the audit follow-up is the process of verifying the completion and effectiveness of corrective actions taken by the auditee as a result of an audit. The audit follow-up can include two main activities:

Verifying the effectiveness of the implemented corrective actions: this means checking whether the actions taken by the auditee have addressed the root causes of the nonconformities and prevented their recurrence or occurrence in other areas. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.

Verifying corrections taken to fix the reported non-conformities: this means checking whether the auditee has corrected the nonconformities identified during the audit and eliminated their immediate effects. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.

The audit follow-up can be conducted as a separate audit or as part of a subsequent audit, depending on the audit programme, the audit objectives, the audit criteria, the audit scope, the audit risks, and the audit findings. The audit follow-up should be planned and conducted in accordance with the same principles and processes as the initial audit, and the results should be documented and reported accordingly. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.7

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.7.1 and 6.7.2

Conducting the Audit Follow-Up: When to Verify - The Auditor, section “Conducting the audit follow-up”

Table

Statement

First-party audits

Second-party audits

Third-party audits

The audit scope is typically determined by the organisation being audited.

Yes

No

No

The outcome of the audit is typically certification to a recognised standard.

No

No

Yes

The audit scope is typically confined to service/product provision capability.

No

Yes

No

Here is a brief explanation of each statement:

The audit scope is typically determined by the organisation being audited: This statement applies to first-party audits, also known as internal audits, where the organisation audits its own processes and activities to ensure conformity and improvement1. The organisation can decide the scope of the audit based on its own needs and objectives2. This statement does not apply to second-party audits, where the customer audits the supplier, or third-party audits, where an independent body audits the organisation. In these cases, the audit scope is determined by the customer or the certification body, respectively34.

The outcome of the audit is typically certification to a recognised standard: This statement applies to third-party audits, where an independent body audits the organisation to verify that it meets the requirements of a specific standard, such as ISO 9001, and issues a certificate of conformity if the audit is successful34. This statement does not apply to first-party audits or second-party audits, where the outcome of the audit is not certification, but rather self-improvement or supplier qualification13.

The audit scope is typically confined to service/product provision capability: This statement applies to second-party audits, where the customer audits the supplier to ensure that they are meeting the requirements specified in the contract, such as service or product quality, delivery, or performance34. The audit scope is usually focused on the specific aspects of the service or product that are of interest to the customer3. This statement does not apply to first-party audits or third-party audits, where the audit scope is broader and covers the entire quality management system or the relevant clauses of the standard14.

Establishing the audit programme objectives

Determining and evaluating the audit programme risks and opportunities

Establishing the audit programme

Initiating the audit

Preparing all audit activity

Conducting the audit activities

According to ISO 19011:2018, clause 5, the audit programme is a set of one or more audits planned for a specific time frame and directed towards a specific purpose. The audit programme includes all activities necessary to plan, organize, and conduct the audits. The audit programme management involves the following steps1:

Establishing the audit programme objectives: The audit programme objectives define the intended outcomes of the audit programme, such as verifying conformity, evaluating performance, identifying improvement opportunities, etc. The audit programme objectives should be aligned with the strategic direction and policies of the organization and the needs and expectations of the interested parties.

Determining and evaluating the audit programme risks and opportunities: The audit programme risks and opportunities are the factors that can affect the achievement of the audit programme objectives, such as changes in the internal or external context, availability of resources, competence of auditors, etc. The audit programme risks and opportunities should be identified, analyzed, and evaluated to determine the appropriate actions to address them.

Establishing the audit programme: The audit programme is established by defining the audit programme scope, criteria, methods, and resources. The audit programme scope defines the extent and boundaries of the audit programme, such as the processes, functions, sites, activities, etc. that will be audited. The audit programme criteria are the set of policies, procedures, or requirements used as a reference for the audits. The audit programme methods are the techniques used to conduct the audits, such as interviews, observations, document review, sampling, etc. The audit programme resources are the human, technical, and financial resources needed to implement the audit programme.

Initiating the audit: The audit initiation is the process of formally establishing the arrangements for an individual audit within the audit programme. The audit initiation involves contacting the auditee and the audit client, confirming the audit objectives, scope, and criteria, and obtaining the necessary information and access for the audit.

Preparing all audit activity: The audit preparation is the process of developing the audit plan and the audit work documents for an individual audit. The audit plan is a document that provides the basis for agreement regarding the conduct of the audit, such as the audit schedule, the audit team, the audit methods, the audit language, the audit report, etc. The audit work documents are the records that provide evidence of the audit activities, such as the audit checklist, the audit notes, the audit findings, etc.

Conducting the audit activities: The audit activities are the processes of collecting and verifying audit evidence and evaluating it against the audit criteria to make the audit conclusions. The audit activities include the opening meeting, the communication during the audit, the roles and responsibilities of the audit team and the auditee, the audit evidence collection and verification, the audit findings generation and recording, the closing meeting, and the audit report preparation and distribution.

References: ISO 19011:2018(en), Guidelines for auditing management systems

In this scenario, the organisation A has two plants, A1 and A2, but the production in A2 was discontinued due to the COVID-19 pandemic and the plant was rented to another organisation B. There are no A employees working in A2, and the organisation A expects to reassume production in A2 as soon as possible. Therefore, the appropriate action to plan the internal audit of A’s quality management system is:

•Interview the A2 plant manager, now working in Plant A1: This action involves interviewing the person who is responsible for the management and operation of the plant A2, and who is currently working in the plant A1. The interview should aim to gather information about the status and condition of the plant A2, the impact of the COVID-19 pandemic on the quality management system, the arrangements and agreements with the organisation B, and the plans and actions to resume production in the plant A25 . This action is relevant and necessary for the internal audit, as it can help to assess the readiness and effectiveness of the quality management system, and to identify any gaps or nonconformities that need to be addressed.

The other options are not appropriate actions to plan the internal audit of A’s quality management system, according to the web search results from my internal tool. They are:

•Visit Plant A2 to interview personnel of company B: This action involves visiting the plant A2 and interviewing the personnel of the organisation B, who are not related to the organisation A and who are not part of the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .

•Visit Plant A2 to interview B’s quality manager: This action involves visiting the plant A2 and interviewing the quality manager of the organisation B, who is not related to the organisation A and who is not part of the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .

•Visit Plant A2 to interview A’s security personnel and B’s maintenance department: This action involves visiting the plant A2 and interviewing the security personnel of the organisation A and the maintenance department of the organisation B, who are not directly involved in the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .

Therefore, the correct answer is D.

References: 1: Quality audit - Wikipedia 2: A step-by-step guide to internal quality audits 3: ISO 9001:2015 - Quality management systems — Requirements 4: ISO 19011:2018 - Guidelines for auditing management systems 5: Audit Process | Flowchart | Summary - Accountinguide : What are the Stages of the Auditing Process & Why it is Important …

As the audit team leader, it is crucial to manage differing opinions constructively and ensure that the correct clause is selected for the nonconformity based on solid evidence. Here’s how the situation should be handled:

E. Invite you and the second auditor to fully explain your point of view and then decide which clause to select: This promotes collaboration and transparency, allowing both auditors to present their rationale for choosing the specific clause.

F. Review the evidence with you and the second auditor, and then decide which clause of ISO 9001 would best apply: Reviewing the evidence in relation to the specific requirements of ISO 9001 is essential for determining which clause is most appropriate.

H. Try to obtain a consensus between you and the second auditor after a discussion of the different opinions: Consensus-building is a crucial skill for an audit team leader. Achieving agreement ensures the nonconformity is addressed accurately and with full team support.

Options such as overruling immediately (D) or deferring the decision without full discussion (B) could undermine team dynamics and the audit process. Consulting the quality manager (A) or selecting an entirely different clause (G) is unnecessary, as the team should resolve the issue internally??.

Establishing the audit programme objectives

Determining and evaluating the audit programme risks and opportunities

Establishing the audit programme

Initiating the audit

Preparing all audit activity

Conducting the audit activities

To complete the sequence, you can drag and drop the options to the appropriate blank section.

Here is a brief explanation of each stage:

Establishing the audit programme objectives: This is the first stage of the audit process, where the purpose, scope, and criteria of the audit programme are defined. The audit programme objectives should be aligned with the strategic direction and policies of the organization, and should address the needs and expectations of the interested parties12.

Determining and evaluating the audit programme risks and opportunities: This is the second stage of the audit process, where the factors that can affect the achievement of the audit programme objectives are identified and assessed. The audit programme risks and opportunities should consider the internal and external issues, the requirements and changes of the interested parties, and the results and feedback from previous audits12.

Establishing the audit programme: This is the third stage of the audit process, where the audit programme is designed and implemented. The audit programme should include the audit programme procedures, the audit programme resources, the audit methods and techniques, the audit frequency and schedule, and the audit programme performance indicators12.

Initiating the audit: This is the fourth stage of the audit process, where the audit is prepared and planned. The audit initiation involves selecting the audit team, establishing the contact with the auditee, defining the audit objectives, scope, and criteria, developing the audit plan, and conducting the document review123.

Preparing all audit activity: This is the fifth stage of the audit process, where the audit activities are organized and coordinated. The audit preparation involves assigning the audit tasks, communicating with the auditee and the audit team, arranging the logistics, preparing the working documents, and conducting the opening meeting123.

Conducting the audit activities: This is the sixth and final stage of the audit process, where the audit evidence is collected and evaluated. The audit conduct involves performing the audit activities, such as interviews, observations, document reviews, and tests, documenting the audit findings, preparing the audit conclusions, and conducting the closing meeting123.

I hope this helps you with your ISO 9001 Lead Auditor objectives and content. If you have any further questions, please feel free to ask. ????

References: 1: ISO 19011:2018 - Guidelines for auditing management systems 2: Audit Process | Flowchart | Summary - Accountinguide 3: What are the Stages of the Auditing Process & Why it is Important …

According to the ISO 9001:2015 standard, clause 8.7 requires that an organization identify and control any nonconforming outputs that do not conform to the requirements of the customer or other relevant requirements. Nonconforming outputs are any outputs from the process, product or service that do not meet the specified quality criteria. Nonconforming outputs must be dealt with in one or more of the following ways:

Correction of the nonconformity

Segregation, containment, return or suspension of provision of products and services

Informing the customer

Authorisation for acceptance under concession

The organization must also retain documented information on the description of the nonconformity, the actions taken, any concessions obtained, and the identification of the authority deciding the action to resolve the nonconformity.

In this scenario, you have interviewed a line supervisor who is responsible for managing a manual picking line where operators are removing contaminant materials from incoming products. The supervisor has explained that these plastic items are rejected at this stage because they do not meet their processing standards and they can damage their machinery and compromise their quality standards. The supervisor has also mentioned that some of these rejected items are melted down in another process later on and some are disposed of as waste products that cannot be recycled.

Based on this information, you can investigate further by taking two actions:

A. Check the process for handling nonconforming items: You can verify whether there is a documented procedure for identifying, segregating, containing, returning or suspending provision of nonconforming items at this stage. You can also check whether there is a system for informing customers about any nonconforming items that may affect their satisfaction or expectations.

D. Determine what happens to the waste products: You can verify whether there is a documented procedure for disposing of waste products that cannot be recycled as per environmental regulations and customer requirements.

These two actions would help you to determine whether there are any nonconforming outputs at this stage and how they are controlled by the organization.

Evaluate the effectiveness of the management system: This objective involves verifying that the quality management system meets the requirements of a specific standard, such as ISO 9001:2015, and that it achieves the intended results and outcomes. The audit team will collect and analyse audit evidence to determine the degree of conformity and performance of the quality management system23.

•Evaluate the capability of the management system to establish and achieve objectives: This objective involves verifying that the quality management system supports the strategic direction and policies of the organization, and that it addresses the needs and expectations of the interested parties. The audit team will assess the suitability, adequacy, and alignment of the quality management system objectives, and the effectiveness of the planning and implementation processes to achieve them23.

The other options are not the most relevant objectives of a third-party audit, according to the web search results from my internal tool. They may be related to other aspects or types of audits, but they are not the focus of a third-party audit.

Therefore, the correct answer is B and D.

References: 1: Safeguarding Your Business: The Power of Third-Party Security Audits 2: ISO 19011:2018 - Guidelines for auditing management systems 3: Third Party Audit – QMSGurus.com

The tasks that are expected to be completed at the audit team meeting of a third-party audit team leader and his audit team in preparation for a Closing meeting for a four-day initial certification audit are:

•Option C: Final audit team meeting to agree findings and categories including clarification of any uncertainties. This option is correct because the audit team meeting is an opportunity for the audit team leader and the audit team members to review and consolidate the audit findings, to ensure that they are clear, accurate, objective, and supported by sufficient audit evidence. The audit team should also agree on the categories of the findings, such as nonconformity, observation, or opportunity for improvement, and resolve any uncertainties or disagreements among the audit team members.

•Option D: Agree the roles of each audit team member for the closing meeting. This option is correct because the audit team meeting is an opportunity for the audit team leader to assign the roles and responsibilities of each audit team member for the closing meeting, such as presenting the audit findings, answering questions, or taking notes. The audit team leader should also ensure that the audit team members are prepared and confident to perform their roles and to communicate effectively with the auditee.

•Option E: Audit team review any points raised by the auditee nominated representative. This option is correct because the audit team meeting is an opportunity for the audit team to review any points raised by the auditee nominated representative during the audit, such as requests for clarification, feedback, or complaints. The audit team should consider the validity and relevance of the points raised and decide how to address them in the closing meeting or in the audit report.

•Option F: Audit team agree final audit outcome recommendation. This option is correct because the audit team meeting is an opportunity for the audit team to agree on the final audit outcome recommendation, based on the audit findings and the audit criteria. The audit team should also consider the implications and consequences of the audit outcome recommendation for the auditee and the certification body, and ensure that the recommendation is consistent and justified.

•Option H: Audit team complete final version of their individual findings. This option is correct because the audit team meeting is an opportunity for the audit team to complete the final version of their individual findings, based on the agreement and feedback from the audit team meeting. The audit team should ensure that their individual findings are written in a clear, concise, and factual manner, and that they include the audit criteria, the audit evidence, and the audit conclusion. The audit team should also submit their individual findings to the audit team leader for review and approval.

•Option I: Re-audit corrective actions taken to correct findings found during the audit. This option is correct because the audit team meeting is an opportunity for the audit team to re-audit the corrective actions taken by the auditee to correct the findings found during the audit, if applicable and feasible. The audit team should verify the effectiveness and adequacy of the corrective actions and update the audit findings accordingly. The audit team should also document the results of the re-audit and communicate them to the auditee.

The following options are not correct:

•Option A: Audit team leader informs the individual(s) managing the audit programme that the closing meeting is ready to be held. This option is not correct because this task is not part of the audit team meeting, but part of the communication between the audit team leader and the individual(s) managing the audit programme. The audit team leader should inform the individual(s) managing the audit programme that the closing meeting is ready to be held after the audit team meeting, when the audit team has completed all the tasks and is ready to present the audit results to the auditee.

•Option B: Hold daily audit team meeting to review any timetable issues and potential findings and their impact on the audit for other team members. This option is not correct because this task is not part of the final audit team meeting, but part of the daily audit team meetings that are held during the audit. The daily audit team meetings are opportunities for the audit team to review the progress and performance of the audit, to identify and resolve any issues or problems, and to coordinate and adjust the audit plan and activities as needed.

•Option G: Audit team leader completes final report, including individual findings and certification recommendation. This option is not correct because this task is not part of the audit team meeting, but part of the audit reporting process. The audit team leader should complete the final report, including the individual findings and the certification recommendation, after the closing meeting, when the audit team has received and considered the feedback and comments from the auditee. The audit team leader should also ensure that the final report is reviewed and approved by the appropriate authorities before issuing it to the auditee and the certification body.

•Option J: Write the audit finding report out when detected and obtain signature of the auditee. This option is not correct because this task is not part of the audit team meeting, but part of the audit evidence collection and documentation process. The audit team should write the audit finding report out when detected and obtain the signature of the auditee during the audit, when the audit team has observed and verified the audit evidence and has communicated the audit finding to the auditee. The signature of the auditee does not indicate acceptance or agreement with the audit finding, but only acknowledgement of receipt.

References:

•ISO 19011:2018 Guidelines for auditing management systems, Clause 6.4.2: Conducting audit activities, Subclause i) and j)

•ISO 9001 Lead Auditor Course Material, Module 5: Conducting an Audit, Slide 19: Audit Team Meeting

•ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 5.4: Audit Team Meeting

•Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies

The purpose of conducting a document review is to determine the conformity of the system, as far as documented, with audit criteria and to gather information to support the audit activities. A document review is a systematic and objective examination of the documented information that is relevant to the audit objectives and scope. It can help the auditor to verify if the documented information is complete, accurate, consistent, and up-to-date. It can also help the auditor to identify any gaps, errors, or nonconformities in the documented information that may affect the audit findings or conclusions.

The other options are not correct because they do not reflect the true purpose of a document review. Option A describes the purpose of an audit report, which is to communicate the audit results and recommendations to the management and other interested parties. Option B describes the purpose of an audit plan, which is to define the scope, objectives, criteria, methods, resources, and schedule of an audit. Option C describes the purpose of an audit evidence report, which is to provide evidence of nonconformities or opportunities for improvement identified during an audit. Option D describes the purpose of an audit decision report, which is to justify or explain why certain decisions were made during an audit.

I hope this answer helps you understand why option F is correct and why options A-C-D are incorrect. If you want to learn more about ISO 9001 Lead Auditor exam questions and answers, you can check out some of these resources:

ISO 9001 Lead Auditor Sample Exam Questions and Answers: This article provides some sample questions and answers for each section of the ISO 9001 Lead Auditor exam.

ISO 9001 (QMS) Lead Auditor Quiz Questions and Answers: This article provides some quiz questions and answers on various topics related to ISO 9001 QMS.

ISO 9001 Lead Auditor - Exam Practice Tests: This course offers practice tests with explanations for each question.

Irca Lead Auditor Exam Questions And Answers Pdf: This document contains some exam questions and answers in PDF format.

Identifying the source of information

Sampling available data

Gathering audit evidence

Verifying objective evidence

Evaluating evidence against the audit criteria

Making audit conclusions

Evaluating against the audit criteria

According to ISO 19011:2018, clause 6.4, the process of collecting and verifying information during an audit involves the following steps1:

Identifying the source of information: The audit team should identify the sources of information that are relevant to the audit objectives, scope and criteria. These sources may include documents, records, personnel, processes, activities, facilities, equipment, etc. The audit team should also determine the methods and tools for accessing and collecting the information, such as interviews, observations, document review, sampling, etc.

Sampling available data: The audit team should select a representative sample of the available data to verify the conformity and effectiveness of the management system. The sample size and selection method should be based on the audit objectives, scope and criteria, as well as the level of confidence and risk. The audit team should also consider the validity, reliability, relevance and sufficiency of the data.

Gathering audit evidence: The audit team should use the methods and tools identified in the previous step to collect audit evidence, which is the records, statements of fact or other information that are relevant to the audit criteria and verifiable. The audit team should record the audit evidence in a clear, concise and objective manner, using notes, checklists, photographs, audio or video recordings, etc.

Verifying objective evidence: The audit team should verify the accuracy, completeness and authenticity of the audit evidence collected. This may involve cross-checking different sources of information, confirming the identity and authority of the persons providing the information, examining the original documents or records, etc. The audit team should also identify any discrepancies, inconsistencies or gaps in the audit evidence.

Evaluating evidence against the audit criteria: The audit team should compare the audit evidence with the audit criteria to determine the extent of conformity and nonconformity. The audit team should also identify any opportunities for improvement, best practices, positive aspects or potential risks. The audit team should use professional judgement and apply the principles of auditing when evaluating the audit evidence.

Making audit conclusions: The audit team should consolidate the audit findings and evaluate the overall performance and effectiveness of the management system. The audit team should also consider the audit objectives, scope and criteria, as well as the context and expectations of the auditee and other interested parties. The audit team should provide a clear, concise and objective statement of the audit conclusions, which may include the degree of conformity, the achievement of the intended outcomes, the need for corrective actions, the suitability for certification, etc.

Evaluating against the audit criteria: The audit team should review the audit conclusions and ensure that they are consistent with the audit criteria and supported by sufficient and appropriate audit evidence. The audit team should also ensure that the audit conclusions are communicated to the auditee and other relevant parties in a timely and effective manner, using the agreed audit report format and distribution method.

References: ISO 19011:2018(en), Guidelines for auditing management systems

According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1.

According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit. The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1.

Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard:

•A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1.

•C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization’s management system, or part of the audit programme, if they are part of the certification body’s or registrar’s requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1.

•E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1.

•F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria. Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1.

References: ISO 19011:2018(en), Guidelines for auditing management systems

According to the definition in ISO 9000, a nonconformity is “non-fulfillment of a requirement”. There are three parts to a well-documented nonconformity: the audit evidence to support auditor findings; a record of the requirement against which the nonconformity is detected; and the statement of nonconformity1. In this case, the audit evidence is the dispatch records that show the same batch number of the product being delivered by two different trucks at different times. The requirement is the procedure P-02 Rev.3 that says that trucks should carry a complete batch. The statement of nonconformity is that the batch 33555 was delivered split in two different trucks (011 and 025), which does not conform to the procedure. Therefore, option C best describes the identified nonconformity, as it includes all three parts of a well-documented nonconformity. Option A is not correct, as it does not state the audit evidence or the requirement. Option B is not correct, as it does not specify the audit evidence or the statement of nonconformity. Option D is not correct, as it does not match the audit evidence or the requirement. References: 1: ISO 9001 Auditing Practices Group Guidance on Nonconformity - Documenting.

According to clause 10.2.1.b of ISO 9001:2015, the organization should evaluate the need for action to eliminate the causes of nonconformities, in order to prevent their recurrence. This means that the organization should identify and address the root causes and contributing factors of the nonconformities, and implement appropriate corrective actions that are effective and proportional to the impact of the nonconformities. In this case, the evidence statement that supports the finding of nonconformance is C, because it shows that the organization did not take effective actions to prevent the recurrence of the spelling errors in the print run, which resulted in repeated customer rejections and dissatisfaction. The other options are not directly related to clause 10.2.1.b, although they may indicate other nonconformities or weaknesses in the organization’s QMS. For example, option A may relate to clause 7.2 on competence, option B may relate to clause 8.6 on release of products and services, and option D may relate to clause 7.1 on resources. References: ISO 9001:2015, [ISO 9001 Auditing Practices Group Guidance on Nonconformity and Corrective Action], ISO 9001 Clause 10. Improvement - ISO-templates.com

The audit team leader should deal with this situation in a professional and ethical manner, while maintaining the integrity and credibility of the audit process and the audit findings. The audit team leader should also try to resolve the conflict with the Quality Manager in a constructive and respectful way, without compromising the audit objectives or the audit team’s independence and impartiality. According to the ISO 9001 Lead Auditor Reference Materials guides and documents, the possible actions that the audit team leader might take are:

•A. Insist that the nonconformities must stand since they have been agreed by the team from other evidence gathered. This action is consistent with the principle of evidence-based approach, which states that the audit team should collect and verify information that is appropriate, sufficient, and reliable to support the audit findings and conclusions. The audit team leader should explain to the Quality Manager that the nonconformities are not based solely on the photographs, but on other audit evidence that corroborates them. The audit team leader should also remind the Quality Manager that the nonconformities are subject to review and approval by the certification body, and that any attempt to influence or interfere with the audit results would be considered a breach of the audit agreement and the certification rules.

•D. State that the auditor will take no further part in the audit and all his photographs will be deleted. This action is consistent with the principle of confidentiality, which states that the audit team should exercise discretion in the use and protection of information acquired during the audit. The audit team leader should acknowledge that the auditor’s behavior was inappropriate and unprofessional, and that he violated the audit rules and the auditee’s rights. The audit team leader should apologize for the inconvenience and the discomfort caused by the auditor, and assure the Quality Manager that the auditor will be removed from the audit team and that his photographs will be erased from his phone and any other device or media. The audit team leader should also inform the auditor of his misconduct and the consequences, and report the incident to the audit program manager and the certification body.

•F. Advise the Quality Manager that he, as audit team leader, needs to speak to the auditor about the situation and he will report back to the Quality Manager once this is done. This action is consistent with the principle of communication, which states that the audit team should exchange information with the auditee in a timely, open, honest, and respectful manner. The audit team leader should express his concern and his willingness to address the issue with the auditor, and ask for the Quality Manager’s patience and cooperation. The audit team leader should also explain that the audit process is not finished yet, and that the Closing meeting is an opportunity to present and discuss the audit findings and conclusions, and to seek feedback and clarification from the auditee. The audit team leader should then speak to the auditor privately, and follow the steps described in action D.

The other options are not appropriate or effective ways to deal with this situation, because they either:

•B. Delay the Closing meeting until the audit team leader has consulted his audit program manager at Head Office. This action would disrupt the audit schedule and the audit plan, and create unnecessary delays and costs for both the audit team and the auditee. It would also show a lack of leadership and decision-making skills from the audit team leader, and undermine his authority and credibility. The audit team leader should be able to handle the situation on site, and consult his audit program manager only if the situation escalates or becomes unmanageable.

•C. Advise the Quality Manager that the auditor will be reported to Head Office. This action would escalate the conflict and create a hostile and defensive atmosphere between the audit team and the auditee. It would also imply that the audit team leader is not capable or willing to resolve the issue himself, and that he is threatening or punishing the auditee for raising a legitimate concern. The audit team leader should try to defuse the tension and restore the trust and the rapport with the Quality Manager, and report the auditor to Head Office only after the audit is completed and the audit report is submitted.

•E. Apologise for the situation and ensure the Quality Manager that all photographs will be deleted during the Closing meeting. This action would not address the root cause of the problem, and would not prevent the auditor from taking more photographs or using them for other purposes. It would also expose the audit team and the auditee to unnecessary risks and liabilities, and compromise the confidentiality and the security of the audit information. The audit team leader should delete the photographs as soon as possible, and not wait until the Closing meeting.

References: ISO 9001:2015, ISO 19011:2018, PECB Certified ISO 9001 Lead Auditor, Common Audit Problems and How to Deal with Them, The Auditor’s Guide to Conflict Resolution, Conflict Resolution in your Audit Career, How to Be a Good Auditor as a Team Leader

The table below shows the possible matching of the ISO 9001 Clause 8 extract to the audit evidence.

Table

Audit evidence

ISO 9001 Clause 8 extract

Four of the 10 pallets of stock sampled in the warehouse were not labelled.

“8.5.2 … shall use suitable means to identify outputs …”

A damaged pallet of stock seen in the quarantine area was leaking liquid onto the floor.

“8.7.1 … shall ensure that outputs that do not conform to their requirements are identified and controlled …”

One of the fork-lift truck drivers had no fork-lift truck driving licence.

“8.5.1 e … shall include, as applicable … the appointment of competent persons …”

There was no pest control provision in the warehouse.

“8.5.4 … shall preserve the outputs during production and service provision …”

Two pallets of temperature-sensitive stock items were being stored at ambient as the chilled storage facility was full.

“8.1 … shall plan, implement and control the processes …”

Nonconformity report

ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met.” Evidence: 40 cleaning records are available for 63 batches.

According to the ISO 9001:2015 standard, clause 10.2.1 defines nonconformity as the non-fulfilment of a requirement. A requirement can be related to the quality management system, the products and services, the customer expectations, or the applicable statutory and regulatory requirements. Nonconformities can be detected through various sources, such as audits, inspections, tests, customer complaints, or internal reviews. Nonconformities must be addressed by taking appropriate actions to correct them and prevent their recurrence.

In this scenario, the auditee has shown several issues that indicate nonconformities in their quality management system. Two statements that apply to the term nonconformity are:

A. No quality objectives planned for the top management team: According to ISO 9001, clause 6.2.1, the organization must establish quality objectives at relevant functions, levels, and processes. The quality objectives must be consistent with the quality policy and the strategic direction of the organization. The top management team is responsible for providing leadership and direction for the quality management system and ensuring its alignment with the organization’s purpose and context. Therefore, the absence of quality objectives for the top management team is a nonconformity as it violates the requirement of clause 6.2.1.

E. Quality improvements not aligning with the quality policy: According to ISO 9001, clause 5.2.1, the quality policy is a statement of the organization’s intentions and direction regarding quality, as formally expressed by top management. The quality policy must provide a framework for setting quality objectives and be compatible with the context and strategic direction of the organization. The quality policy must also be communicated, understood, and applied within the organization. Therefore, if the quality improvements are not aligned with the quality policy, it is a nonconformity as it violates the requirement of clause 5.2.1.

Here is the correct matching of the activities with the responsible parties in the context of a second-party audit:

Define the audit scope: Customer

Develop the audit plan: Audit team leader

Respond to the audit findings: External provider

Conduct the audit: Audit team

This reflects the typical division of responsibilities in a second-party audit, where the customer (the party commissioning the audit) sets the scope, the audit team leader manages the planning, the external provider responds to findings, and the audit team carries out the audit.

A screenshot of a computer Description automatically generated

The following table shows the possible matching of the records to the requirements of clause 8.4:

Table

Requirements

Records

Define product requirements

Product specification

Criteria for selection

List of requirements to be met by the external provider

Evaluation of potential external provider

External provider questionnaire

External provider selection

Approved external provider list

Communicate requirements

Purchase order

Monitoring of performance

External provider delivery times and quality issues

Comprehensive and Detailed Explanation: = According to clause 8.4 of ISO 9001:2015, the organization should ensure that externally provided processes, products, and services conform to the specified requirements. To do so, the organization should:

Define the product requirements that are relevant for the external provision, such as specifications, drawings, standards, codes, etc. These should be documented and communicated to the external provider. A record of the product specification can be used as evidence of this requirement.

Establish the criteria for the selection, evaluation, and re-evaluation of external providers, based on their ability to provide processes, products, and services in accordance with the requirements. The criteria should be documented and applied consistently. A record of the list of requirements to be met by the external provider can be used as evidence of this requirement.

Evaluate the potential external providers before selecting them, using the established criteria. The evaluation methods may include questionnaires, audits, references, samples, etc. The results of the evaluation should be documented and reviewed. A record of the external provider questionnaire can be used as evidence of this requirement.

Select the external providers that have demonstrated their competence and conformity to the requirements. The selection should be based on the evaluation results and the organization’s needs. The selection should be documented and approved. A record of the approved external provider list can be used as evidence of this requirement.

Communicate the requirements for the processes, products, and services to be provided by the external provider, including the verification and validation activities, the acceptance criteria, the documentation requirements, the changes control, etc. The communication methods may include purchase orders, contracts, agreements, etc. The communication should be clear, complete, and timely. A record of the purchase order can be used as evidence of this requirement.

Monitor the performance and conformity of the external provider, using the established criteria and methods. The monitoring methods may include inspections, tests, audits, feedback, complaints, etc. The monitoring results should be documented and analyzed. A record of the external provider delivery times and quality issues can be used as evidence of this requirement.

References: ISO 9001:2015, [ISO 9001 Auditing Practices Group Guidance on Scope], Mastering the Scope of ISO 9001 Quality Management Systems

The auditor could raise the following nonconformities to ISO 9001 based on the scenario:

•Option A: 10.3 - The organisation did not continuously improve. Reject rates were unchanged. This option is correct because ISO 9001:2015 clause 10.3 requires the organization to improve the suitability, adequacy and effectiveness of the quality management system. The organization did not demonstrate any improvement in reducing the reject rate of the finished product, which was a stated objective of top management. The corrective action taken by the organization was not effective in addressing the root cause of the problem and preventing its recurrence.

•Option B: 7.1.4 - The factory environment is not suitably maintained to prevent dirty products. This option is correct because ISO 9001:2015 clause 7.1.4 requires the organization to determine, provide and maintain the environment necessary for the operation of its processes and to achieve conformity of products and services. The organization did not ensure that the factory floor was clean and dry, which affected the quality of the products and increased the risk of nonconformity.

•Option C: 7.1.1 - The organization failed to provide the required resources to prevent nonconforming products. This option is correct because ISO 9001:2015 clause 7.1.1 requires the organization to determine and provide the resources needed for the establishment, implementation, maintenance and continual improvement of the quality management system. The organization did not provide adequate collection baskets for the products ejecting from the moulding machines, which resulted in products falling onto the factory floor and becoming nonconforming.

The following options are not correct:

•Option D: 9.2.2 - Report IA202 contained a poorly worded nonconformity (NC 3). This option is not correct because ISO 9001:2015 clause 9.2.2 does not specify the requirements for the wording of nonconformities in internal audit reports. The nonconformity (NC 3) stated by the internal auditor was clear and relevant to the audit criteria and audit evidence. The issue is not with the report, but with the corrective action taken by the organization.

•Option E: 8.6 - Dirty products were released to the customer. This option is not correct because ISO 9001:2015 clause 8.6 requires the organization to implement planned arrangements, at appropriate stages, to verify that the product and service requirements have been met. The scenario does not indicate that the dirty products were released to the customer, but that they were recalled and repaired then returned to the customers. The issue is not with the release, but with the production process and the environment.

•Option F: 7.3 - Staff were not aware that products were falling onto the factory floor. This option is not correct because ISO 9001:2015 clause 7.3 requires the organization to ensure that the persons doing work under its control are aware of the quality policy, relevant quality objectives, their contribution to the effectiveness of the quality management system, and the implications of not conforming with the quality management system requirements. The scenario does not indicate that the staff were not aware of these aspects, but that the management did not provide adequate resources and environment for the staff to perform their work. The issue is not with the awareness, but with the management responsibility and resource provision.

•Option G: 10.2.1 - Conduct of an investigation was not sufficient to understand the cause of the nonconformity. This option is not correct because ISO 9001:2015 clause 10.2.1 requires the organization to react to the nonconformity and, as applicable, take action to control and correct it and deal with the consequences. The scenario indicates that the Quality Manager conducted an investigation into the reject rates and identified the cause of the nonconformity. The issue is not with the investigation, but with the corrective action taken by the management.

•Option H: 8.5.1 - Production operations were not properly controlled to avoid reject products. This option is not correct because ISO 9001:2015 clause 8.5.1 requires the organization to implement production and service provision under controlled conditions. The scenario indicates that the production operations were controlled by the moulding machines, which ejected the products into the collection baskets. The issue is not with the production operations, but with the size of the collection baskets and the condition of the factory floor.

References:

•ISO 9001:2015 Quality management systems - Requirements

•ISO 9001 Lead Auditor Course Material, Module 6: Reporting Audit Findings, Slide 14: Writing Nonconformity Statements

•ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 6.2: Reporting Audit Findings

•Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies

According to the ISO - Management system standards page, the key benefits of an effective management system include improved operational effectiveness and efficiency, improved risk management and protection of people and the environment, and enhanced drive for innovation. The Integrated Use of Management System Standards (IUMSS) handbook also states that the purpose and objectives of management system standards are to help organizations improve their performance by specifying repeatable steps that organizations consciously implement to achieve their goals and objectives.

Therefore, the complete sentence is:

“The purpose of a management system standard is to improve the performance of an organisation.”

Match the process descriptions below to the process names:

The process by which the accuracy of test equipment is checked against a known standard. = Calibration

The process by which a product or service is visually examined to determine conformity to requirements. = Evaluation

The process by which data is examined in detail to reach a specific answer or answers. = Analysis

The process by which a parameter of a product or service is examined to determine a specific value. = Measurement

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, the definitions of the process names are as follows:

Calibration: operation that, under specified conditions, in a first step, establishes a relation between the quantity values with measurement uncertainties provided by measurement standards and corresponding indications with associated measurement uncertainties and, in a second step, uses this information to establish a relation for obtaining a measurement result from an indication.

Evaluation: determination of the suitability, adequacy or effectiveness of an object to achieve established objectives.

Analysis: detailed examination of the elements or structure of something.

Measurement: process to experimentally obtain one or more quantity values that can reasonably be attributed to a quantity.

Therefore, the process descriptions can be matched to the process names based on these definitions.

References:

ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary

? Clause Reference – ISO 9001:2015 Clause 8.6 (Release of Products and Services):ISO 9001 requires that products and services are not released to the customer until:

All planned verification activities have been completed.

Acceptance criteria have been met.

Any necessary approvals have been obtained.

In this scenario:

The sacrificial anodes for Project DK were shipped before the galvanic efficiency test results were analyzed.

This constitutes a nonconformity against Clause 8.6 because the products were released without completing the required tests.

? Option Analysis:

A. A retrospective concession was not sought from the customer once the test results had been approved by the Quality Manager:Incorrect. While obtaining a concession might mitigate the situation, the nonconformity pertains to the process failure of releasing the products without completing required tests, not the absence of a concession.

B. Release of the product without acceptable test results has been accepted by the customer for Project DK:Incorrect. The customer was not informed before the release, and there is no indication that this was accepted beforehand. Furthermore, ISO 9001 requires planned processes to be followed, regardless of later acceptance.

C. Products for Project DK have been released before product approval through the quality control process:Correct. This description accurately reflects the nonconformity. The quality control process required test results to be analyzed and verified before release, which did not happen.

D. The untested product was not recalled until the galvanic efficiency of the anodes was verified:Incorrect. The issue is not about recalling the product but about releasing it without completing the required tests. Recalling the product is not mentioned in the scenario.

? Why C is Correct:

The nonconformity is a clear breach of Clause 8.6, where the products were released without meeting the planned verification requirements.

This demonstrates a failure in adhering to quality control processes, which is a critical aspect of ISO 9001 compliance.

? Key ISO 9001 Reference:

Clause 8.6: Products and services shall not be released to the customer until all planned activities (e.g., testing) have been satisfactorily completed, or the customer has approved the release with knowledge of deviations.