Practice Free ISO-9001-Lead-Auditor QMS ISO 9001:2015 Lead Auditor Exam Exam Questions Answers With Explanation

According to clause 8.4 of ISO 9001:2015, the organization should ensure that externally provided processes, products, and services conform to the specified requirements. To do so, the organization should:

•Establish the criteria for the selection, evaluation, and re-evaluation of external providers, based on their ability to provide processes, products, and services in accordance with the requirements. The criteria should be documented and applied consistently.

•Evaluate the potential external providers before selecting them, using the established criteria. The evaluation methods may include questionnaires, audits, references, samples, etc. The results of the evaluation should be documented and reviewed.

•Select the external providers that have demonstrated their competence and conformity to the requirements. The selection should be based on the evaluation results and the organization’s needs. The selection should be documented and approved.

•Communicate the requirements for the processes, products, and services to be provided by the external provider, including the verification and validation activities, the acceptance criteria, the documentation requirements, the changes control, etc. The communication methods may include purchase orders, contracts, agreements, etc. The communication should be clear, complete, and timely.

•Monitor the performance and conformity of the external provider, using the established criteria and methods. The monitoring methods may include inspections, tests, audits, feedback, complaints, etc. The monitoring results should be documented and analyzed.

In this case, the evidence statements that demonstrate a nonconformity with clause 8.4 are A and C, because they show that the organization did not retain documented information of the selection and evaluation of the external provider, and the monitoring of the external provider’s performance. These are requirements of the standard and essential for ensuring the quality of the externally provided processes, products, and services. The other options are not directly related to clause 8.4, although they may indicate other nonconformities or weaknesses in the organization’s QMS. For example, option B may relate to clause 7.1.3 on contingency planning, option D may relate to clause 8.2.3 on review of requirements, option E may relate to clause 8.6 on release of products and services, and option F may relate to clause 5.1.1 on leadership and commitment. References: ISO 9001:2015, [ISO 9001 Auditing Practices Group Guidance on Scope], Mastering the Scope of ISO 9001 Quality Management Systems

According to ISO 9001:2015, clause 4.1, the organisation must determine the external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended results of its quality management system. The organisation must also monitor and review the information about these issues. SWOT analysis is a tool that can help the organisation to identify its strengths, weaknesses, opportunities, and threats. However, the SWOT analysis alone is not sufficient to comply with the requirement, as the organisation also needs to review the information periodically and update it as necessary. Therefore, one audit trail would be to establish how the organisation reviews information about external and internal issues, such as how often, by whom, using what criteria, and with what results. 123

According to ISO 9001:2015, clause 10.3, the organisation must continually improve the suitability, adequacy, and effectiveness of the quality management system. The organisation must also consider the results of analysis and evaluation, and the outputs from management review, to determine if there are any needs or opportunities for improvement. SWOT analysis can help the organisation to identify the areas where improvement is needed or possible, such as addressing the weaknesses and threats, or exploiting the strengths and opportunities. However, the SWOT analysis alone is not sufficient to comply with the requirement, as the organisation also needs to take actions to implement the improvement, such as setting objectives, allocating resources, assigning responsibilities, and evaluating the effectiveness. Therefore, another audit trail would be to establish what actions were taken to improve the QMS, such as what, when, by whom, how, and with what results. 124 References:

1: ISO 9001:2015 - Quality management systems — Requirements

2: Advisera, “Context of the organization in ISO 9001:2015 explained”, https://advisera.com/9001academy/knowledgebase/how-to-identify-the-context-of-the-organization-in-iso-90012015/

3: ISO Templates, “ISO 9001 - Clause 4: Context of the organisation explained”, https://resources.iso-templates.com/blog/iso-9001-clause-4-context-of-the-organisation-explained

4: Advisera, “How to implement continual improvement in ISO 9001”, https://advisera.com/9001academy/knowledgebase/how-to-implement-continual-improvement-in-iso-9001/

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015, Clause 5.2.1 (Establishing the Quality Policy) states that top management must establish, implement, and maintain a quality policy.

In the scenario, the quality manager (Leslie) created the policy, but top management did not establish it themselves, which violates Clause 5.2.1. While the policy can be drafted by a team, top management must take full ownership of its development and approval.

Comprehensive and Detailed Explanation From Exact Extract:

Correct Option B – “Communicate a policy commitment to continual improvement”

This aligns directly with Clause 5.2.1(d) of ISO 9001:2015, which states that the quality policy shall include a commitment to continual improvement of the QMS:

“Top management shall establish, implement and maintain a quality policy that... includes a commitment to continual improvement of the quality management system.”

A clearly communicated policy sets expectations and a strategic direction that cascades throughout the organization, promoting a culture that values ongoing enhancement.

Correct Option F – “Use the management review process to identify improvements”

This is based on Clause 9.3.3 of ISO 9001:2015, which specifies that outputs of management reviews must include decisions and actions related to:

“a) opportunities for improvement;

b) any need for changes to the quality management system;

c) resource needs.”

The management review process is a structured mechanism to analyze data, monitor performance, assess risks and opportunities, and drive continual improvement initiatives.

Why the Other Options Are Incorrect:

A (Appoint external consultants to train staff): While training may help improve competence, ISO 9001 emphasizes internal process evaluation and strategic improvement. This option is not directly aligned with the systematic improvement of the QMS.

C (Require higher standards): Higher standards alone don’t ensure continual improvement unless supported by a structured QMS approach involving evaluation, planning, and measurement.

D (Require fewer mistakes): Unrealistic or unqualified demands like " make fewer mistakes " don’t support structured process-based improvement and may conflict with ISO’s emphasis on risk-based thinking and root cause analysis.

E (Send Chief Executive on a course): While leadership involvement is vital (Clause 5), this action by itself does not constitute a continual improvement mechanism for the QMS.

A screenshot of a chat Description automatically generated

According to the ISO 9000:2015 document, the seven quality management principles are:

Customer focus

Leadership

Engagement of people

Process approach

Improvement

Evidence-based decision making

Relationship management

For each principle, the document provides a statement, a rationale, key benefits, and actions you can take to apply the principle in your organization.

Based on the document, here is a possible way to match a potential benefit to each of the four quality management principles you mentioned:

Table

Quality management principle

Potential benefit

Customer focus

Increased revenue and market share

Engagement of people

Enhanced trust and collaboration throughout the organization

Improvement

Enhanced drive for innovation

Evidence-based decision making

Increased ability to demonstrate effectiveness of past actions

The purpose of conducting a document review is to determine the conformity of the system, as far as documented, with audit criteria and to gather information to support the audit activities. A document review is a systematic and objective examination of the documented information that is relevant to the audit objectives and scope. It can help the auditor to verify if the documented information is complete, accurate, consistent, and up-to-date. It can also help the auditor to identify any gaps, errors, or nonconformities in the documented information that may affect the audit findings or conclusions.

The other options are not correct because they do not reflect the true purpose of a document review. Option A describes the purpose of an audit report, which is to communicate the audit results and recommendations to the management and other interested parties. Option B describes the purpose of an audit plan, which is to define the scope, objectives, criteria, methods, resources, and schedule of an audit. Option C describes the purpose of an audit evidence report, which is to provide evidence of nonconformities or opportunities for improvement identified during an audit. Option D describes the purpose of an audit decision report, which is to justify or explain why certain decisions were made during an audit.

I hope this answer helps you understand why option F is correct and why options A-C-D are incorrect. If you want to learn more about ISO 9001 Lead Auditor exam questions and answers, you can check out some of these resources:

ISO 9001 Lead Auditor Sample Exam Questions and Answers: This article provides some sample questions and answers for each section of the ISO 9001 Lead Auditor exam.

ISO 9001 (QMS) Lead Auditor Quiz Questions and Answers: This article provides some quiz questions and answers on various topics related to ISO 9001 QMS.

ISO 9001 Lead Auditor - Exam Practice Tests: This course offers practice tests with explanations for each question.

Irca Lead Auditor Exam Questions And Answers Pdf: This document contains some exam questions and answers in PDF format.

ISO 9001:2015 Clause 7.5 – Documented Information establishes requirements for the creation, updating, and control of documented information within the Quality Management System (QMS).

Relevant ISO 9001 Requirements

Clause 7.5.2 – Creating and Updating

When creating and updating documented information, the organization shall ensure appropriate:

Identification and description (e.g., title, date, author, reference number)

Format and media

Review and approval for suitability and adequacy

This supports the requirement that documented information be identifiable .

Clause 7.5.3 – Control of Documented Information

Documented information required by the QMS and by ISO 9001 shall be controlled to ensure:

It is available and suitable for use where and when it is needed

It is adequately protected

Control activities include:

Distribution, access, retrieval and use

Storage and preservation

Control of changes (version control)

Retention and disposition

These requirements support:

Retrievable ? Required by Clause 7.5.3

Under change control ? Required by Clause 7.5.3

Identifiable ? Required by Clause 7.5.2

Why " Translatable to Other Languages " is Incorrect

ISO 9001:2015 does not require documented information to be translated into other languages.

An organization may choose to translate documents where necessary for operational effectiveness, multinational operations, or legal requirements, but this is not a requirement of Clause 7.5 .

Therefore, being translatable to other languages is not a characteristic that documented information must demonstrate to conform to ISO 9001.

Evaluation of Each Option

Option

Required by ISO 9001 Clause 7.5?

Retrievable

Yes

Under change control

Yes

Translatable to other languages

No

Identifiable

Yes

ISO-Aligned Conclusion

Clause 7.5 requires documented information to be identifiable , retrievable , and controlled against unauthorized or uncontrolled changes . There is no ISO 9001 requirement that documented information be translatable into other languages .

Answer: C

===========

According to ISO 9001:2015, clause 9.1.1, the organization is required to determine what needs to be monitored and measured, the methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid results, and when the monitoring and measuring shall be performed. The organization is also required to retain appropriate documented information as evidence of the results.

Therefore, in the scenario given, the organization should have planned for monitoring and measuring the billet temperature, as it is a critical factor for the quality of the product and the process. The organization should also have established a procedure that provides instruction in taking billet temperature, using the pyrometer or other suitable methods, to ensure consistency and accuracy. The organization should also have performed periodic analysis of the results of temperature checks, to identify trends, problems, and opportunities for improvement.

Hence, the options that would provide evidence of conformance with clause 9.1.1 of ISO 9001 are A, E, and F, as they are aligned with the requirements of the clause. The other options are either irrelevant or not directly related to clause 9.1.1, as they do not pertain to the monitoring and measurement of the billet temperature.

Comprehensive and Detailed In-Depth Explanation:

Completeness ensures that all necessary audit evidence, observations, and findings are properly documented, which is critical for traceability and accountability in an audit.

While transparency and fair presentation are principles of auditing, completeness is specifically related to maintaining audit work documents, as required in ISO 19011:2018, Clause 6.5.4 (Preparing Audit Work Documents).

Comprehensive and Detailed In-Depth Explanation:

Stratified sampling is the best method when the population consists of different groups or categories. In this case:

ME has two areas of operations (electrical and mechanical services).

Complaints were collected separately for each area.

By choosing representative samples from each category (electrical & mechanical complaints), Li Na ensured a balanced approach.

Systematic sampling selects samples at fixed intervals, which does not ensure proportional representation of both groups.

Block selection sampling is used when focusing on a specific time period or section, which does not apply here.

Thus, stratified sampling (B) is the correct answer.

According to the guidance on conducting the audit closing meeting1, the audit team leader should provide a summary of the audit findings and conclusions, invite discussions, and agree on timelines for any corrective actions. The audit team leader should also be respectful, constructive, and objective when presenting the nonconformities, and avoid any personal or emotional comments. The audit team leader should also consider the impact of the disruptive event (such as the Covid-19 pandemic) on the auditee’s context, interested parties, and risks2, and acknowledge any good practices or improvements observed during the audit. Therefore, option D is the best option, as it follows the best practices for the closing meeting and allows the auditee to understand the nonconformities and their implications, and to participate in the analysis and resolution of the issues. Option A is not correct, as it is not respectful, constructive, or objective, and it does not invite any discussion or feedback from the auditee. It also assumes that the audit team leader has the authority to recommend the removal of the supplier from the approved list, which may not be the case. Option B is not correct, as it does not provide enough information or explanation to the auditee, and it does not allow any discussion or feedback from the auditee. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, acknowledging any good practices, and agreeing on timelines for corrective actions. Option C is not correct, as it does not involve the other managers who are responsible for the functions or processes that were audited, and who may have valuable input or information to share. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, inviting discussions, and agreeing on timelines for corrective actions. References: 1: Conducting the Audit Closing Meeting: Sharing the Results2: Auditing ISO 9001:2015 in the Context of a Disruptive Event.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 promotes the process approach, which allows organizations to structure their activities into interrelated processes. This approach helps ensure that processes effectively achieve intended results.

Clause 0.3.1 (Process Approach) states that " The application of the process approach in a quality management system enables understanding and consistency in meeting requirements, considering processes in terms of added value, and achieving effective process performance. "

This aligns directly with option C, making it the correct answer. The other options are either partially correct or do not fully capture the purpose of the process approach:

Option A (Improvement based on interested parties) is a benefit but does not define the main goal.

Option B (Financial value) is not the primary focus of the process approach.

Option D (Reduction of resource consumption) may be an indirect benefit but is not a core objective.

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, correction is defined as “action to eliminate a detected nonconformity”. A nonconformity is defined as “non-fulfilment of a requirement”. Therefore, the process of modifying a non-conforming product to bring it within acceptance criteria is a correction, as it eliminates the non-fulfilment of the product specification. The other options are not correct, as they have different definitions and purposes:

•Concession: permission to release or use a nonconforming product, service or process

•Corrective action: action to eliminate the cause of a nonconformity and to prevent recurrence

•Preventive action: action to eliminate the cause of a potential nonconformity or other undesirable potential situation

In this scenario, the audit team leader must balance maintaining the integrity of the audit plan while considering the auditee’s request. The two best responses allow for flexibility without compromising the audit ' s rigor:

A. I could audit the other laboratories virtually at the end of this audit: Virtual audits can be a valid option, especially in multi-site audits. ISO 9001:2015 does not prohibit virtual audits, and in certain situations, they are practical for reviewing documentation or observing operations remotely.

C. I could try to revise the audit programme to see if I can audit all laboratories: Revising the audit programme to accommodate additional site visits is a reasonable compromise. ISO 9001:2015 audits are based on risk and sampling, but the audit team leader has the flexibility to adjust the audit scope if it fits within the audit duration and resources.

The other options, such as extending the audit duration (B, F) or strictly adhering to the original plan (D, E), may not be practical or necessary. Revising the plan to audit all laboratories or using virtual auditing ensures that the audit remains efficient while addressing the organization ' s concerns?.

Comprehensive and Detailed In-Depth Explanation:

A combined audit is when multiple management systems (e.g., ISO 9001 for Quality, ISO 14001 for Environmental Management, and ISO 45001 for Occupational Health & Safety) are audited together in a single organization.

Clause References:

ISO 19011:2018, Clause 5.4 – Combined Audits:

A combined audit is performed when two or more management systems are assessed simultaneously at the same auditee.

Why is the Correct Answer A?

A combined audit reduces duplication of effort by auditing multiple standards together at a single organization.

Example: A company certified to both ISO 9001 and ISO 14001 can have one audit covering both standards.

Why are the Other Options Incorrect?

B (Two or more auditing organizations cooperating on a single auditee) ? This is a joint audit, not a combined audit.

C (Two or more management systems audited at multiple auditees) ? This is a multiple-site audit, not a combined audit.

Comprehensive and Detailed In-Depth Explanation:

Understanding Audit Stages Based on ISO/IEC 17021-1:2015

ISO certification audits consist of two main stages:

Stage 1 Audit (Readiness Review)

The organization’s documented information is reviewed to assess readiness for Stage 2.

This ensures that the QMS is developed, implemented, and prepared for full assessment.

Stage 2 Audit (On-Site Evaluation)

Auditors assess process implementation and effectiveness through interviews, observations, and evidence collection.

The audit team verifies if the organization meets ISO 9001 requirements in practice.

Why is the Correct Answer B?

The audit team reviewed ME’s documents, which is a Stage 1 activity.

The audit team performed interviews, sampling, and on-site verification, which is a Stage 2 activity.

There was no mention of an audit follow-up or a surveillance audit, which occur post-certification.

Why are the Other Options Incorrect?

A (Audit follow-up and Stage 1 Audit) ? Follow-up audits occur after certification, which was not the case here.

C (Stage 2 Audit and Surveillance Audit) ? Surveillance audits are post-certification audits and were not conducted yet.

According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:

•ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc.

•Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation

•Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities

•Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation’s legal obligations, policies, or procedures

•Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved

•Organisation’s documented information, such as policies, procedures, manuals, records, etc., that describe the organisation’s management system and its processes

•Commitment to follow principles issued by an NGO, such as the United Nations Global Compact, the International Labour Organization, etc., as long as they are relevant to the organisation’s context and objectives

•Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation’s activities, products, and services

Therefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation’s management system. Commercial advertisements and claims made on the organisation’s website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 emphasizes the importance of communication as part of an effective Quality Management System (QMS).

Clause References:

Clause 7.4 (Communication): This requires organizations to establish what, when, with whom, and how communication should take place to ensure effectiveness.

Quality Management Principle – Engagement of People: Effective communication allows stakeholders (employees, suppliers, customers) to fully participate and contribute to quality objectives.

Why is the Correct Answer A?

Appropriate communication means ensuring that messages are clear, relevant, and accessible to the intended audience.

Different stakeholders (employees, customers, regulatory bodies, suppliers) may require different formats, languages, or media to ensure they fully understand and engage.

This aligns with ISO 9001:2015, which emphasizes that communication must be tailored to the needs of the recipient for maximum effectiveness.

Why are the Other Options Incorrect?

B (Timely responses) ? Important but does not specifically refer to appropriateness in communication.

C (Communicating processes and assumptions to all interested parties) ? Communication should be relevant; sharing all details might not be necessary or appropriate.

D (Only top management handling external communication) ? Communication must be distributed across relevant functions, not restricted to leadership.

•

Reviews the client’s management system documented information: This activity involves checking the documentation of the quality management system, such as the quality policy, the quality objectives, the scope, the processes, and the procedures, to ensure that they meet the requirements of ISO 9001:2015123. The audit team also evaluates the client’s understanding and implementation of the standard, and identifies any gaps or nonconformities that need to be addressed before the Stage 2 audit123.

•Reviews the processes with high level of risk: This activity involves assessing the processes that have a significant impact on the quality of the products or services, or that pose a high risk of nonconformity or customer dissatisfaction123. The audit team also verifies the client’s risk management approach, and evaluates the effectiveness of the controls and actions taken to mitigate the risks123.

The other options are not statements that are true for the Stage 1 audit, according to the web search results from my internal tool. They may be related to other stages or types of audits, but they are not the focus of the Stage 1 audit.

Therefore, the correct answer is D and G.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 5.3.2 (Access to Information), internal auditors must have unrestricted access to:

Employees and executives for interviews and observations.

Documented information to verify compliance with ISO 9001.

This ensures a transparent and objective audit process. The CEO’s approval (B) is not required unless restricted information is involved.

ISO 9001:2015 clause 8.2.3 requires the organisation to review requirements for products and services before committing to supply them to the customer. This review must include customer-specified requirements, applicable statutory and regulatory requirements, and confirmation that the organisation has the ability to meet the requirements.

In this case, the contract required Category A fire safety performance, but the Technical Director stated the order was never technically reviewed. Also, the organisation had never produced Category A cable before and had no Category A test results, meaning it accepted the order without confirming its ability to meet the customer and regulatory requirements.

Option C is supported because the order was not reviewed technically. Option E is supported because the organisation accepted the order without confirming it could meet the specified Category A requirements.

Options A, B, D and F are not the best answers because the scenario does not prove Category B fails national standards, does not require the customer to reissue the order, does not mainly concern missing documentation for Category A tests, and does not show failure to determine intended use.

===========

The ISO 9001 Lead Auditor exam requires the auditor to have a thorough understanding of the ISO 9001:2015 standard and its requirements, as well as the organization’s context, processes, risks, opportunities, and performance. Therefore, the auditor needs to ask for additional information that can help them verify these aspects during the audit planning stage. Some of the information that can be useful are:

A description of responsibilities and authorities of the key roles of XYZ: This can help the auditor to identify who is accountable for what in the organization and how they communicate with each other.

The number of personnel involved in activities related to the quality management system: This can help the auditor to assess if there are enough resources and competencies to support the QMS implementation and operation.

Information to understand XYZ’s operations: This can help the auditor to understand how XYZ produces or delivers its products or services and what are its main processes and inputs.

The results of XYZ’s last internal audit: This can help the auditor to evaluate if XYZ has implemented corrective actions based on previous audit findings and if it has maintained its QMS effectiveness.

The results of the last two management reviews: This can help the auditor to determine if XYZ has monitored its QMS performance against its objectives and if it has identified any significant changes or opportunities for improvement.

The quality manual (B) is not a required document for ISO 9001 certification, but it may be useful for internal reference or training purposes. It is not necessary for audit planning.

The key expected results of a quality management system that conforms to the requirements of ISO 9001:2015 are stated in clause 0.1 of the standard, which says: “The adoption of a quality management system is a strategic decision for an organization that can help to improve its overall performance and provide a sound basis for sustainable development initiatives. The potential benefits to an organization of implementing a quality management system based on this International Standard are: a) the ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements; b) facilitating opportunities to enhance customer satisfaction; c) addressing risks and opportunities associated with its context and objectives; d) the ability to demonstrate conformity to specified quality management system requirements.” Therefore, the two options that best match these benefits are A and E, as they directly relate to providing products and services that meet customer requirements and enhancing customer satisfaction. The other options are not explicitly mentioned as key expected results, although they may be possible outcomes of implementing a quality management system. References: ISO 9001:2015 - Quality management systems — Requirements, Key Elements of an ISO 9001:2015 Quality Management System, What is ISO 9001 2015 as a Quality Management Systems?

Nonconformity report

ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met.” Evidence: 40 cleaning records are available for 63 batches.

The correct answer is:

Event

Selecting audit team = Individual(s) managing the audit programme

Conducting the audit = Audit team

Preparing the audit plan = Audit team leader

Requesting the audit = Audit client

To complete the table, click on the blank section you want to complete so that it is highlighted in red, and then click on the applicable text from the options below. Alternatively, drag and drop each option to the appropriate blank section. Responsibility:- Individual(s) managing the audit programme

Audit team

Audit team leader

Audit client

According to ISO 19011:2018, clause 5.3, the individual(s) managing the audit programme are responsible for selecting the audit team, taking into account the competence and availability of the auditors and any experts needed. 1

According to clause 6.2, the audit team is responsible for conducting the audit, which includes collecting and verifying audit evidence, evaluating audit findings, and preparing the audit report. 1

According to clause 6.1, the audit team leader is responsible for preparing the audit plan, which includes defining the audit objectives, scope, criteria, and duration, as well as assigning roles and responsibilities to the audit team members. 1

According to clause 5.2, the audit client is the person or organization that requests the audit, which can be the auditee (the person or organization being audited) or any other person or organization that has an interest in the audit results. 1

The “Check” stage of the PDCA cycle is about monitoring, measuring, analysing and evaluating performance against objectives, requirements and planned activities.

B is correct because reviewing data at management review is part of evaluating QMS performance.

C is correct because monitoring customer feedback is checking whether customer needs and expectations are being met.

D is correct because monitoring supplier performance checks whether the outsourced manufacturing process is effective.

A, E, F and H are mainly “Plan/Do” activities. G may be a monitoring result, but the strongest three “Check” activities are B, C and D because they directly involve review, monitoring and evaluation of QMS performance.

===========

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires organizations to identify and control nonconforming outputs to prevent unintended use or delivery.

Clause References:

Clause 8.7 (Control of Nonconforming Outputs): Organizations must ensure that nonconforming outputs are identified and controlled to prevent unintended use or delivery.

Clause 10.2 (Nonconformity and Corrective Action): Requires organizations to take appropriate actions when nonconformities are found, including during or after service provision.

Why is the Correct Answer C?

If nonconforming products or services are identified after delivery or during service, organizations must take corrective actions to protect customers and stakeholders.

Actions may include recalls, rework, customer notifications, compensation, or process improvements.

This approach aligns with ISO 9001:2015, ensuring that products/services consistently meet requirements.

Why are the Other Options Incorrect?

A (Retaining documentation only) ? While documentation is required, it alone does not ensure proper handling of nonconforming outputs.

B (Verifying conformity before correction) ? While verification is good practice, ISO 9001 prioritizes corrective action over mere verification.

D (Allowing employees to handle nonconformities without structure) ? ISO 9001 requires documented procedures for handling nonconformities (Clause 8.7).

According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1.

According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit. The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1.

Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard:

•A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1.

•C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization’s management system, or part of the audit programme, if they are part of the certification body’s or registrar’s requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1.

•E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1.

•F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria. Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1.

According to the ISO 19011:2018 document, the audit plan should provide the basis for agreement regarding the conduct and scheduling of the audit activities. The amount of detail provided in the audit plan should reflect the scope and complexity of the audit, as well as the risk of not achieving the audit objectives1. The scope of the audit refers to the extent and boundaries of the audit, such as the audit criteria, the audit objectives, the organizational and functional units, and the processes to be audited1. The complexity of the audit refers to the degree of difficulty or intricacy of the audit, such as the number and diversity of the auditees, the audit criteria, the audit methods, and the audit team composition2. The risk of not achieving the audit objectives refers to the possibility that the audit may fail to provide reliable and sufficient audit evidence to support the audit conclusions and report1.

Therefore, the complete sentence is:

In the context of a third-party audit, the amount of detail provided in the audit plan should reflect the scope and complexity of the audit, as well as the risk of not achieving the audit objectives.

? Clause: 8.5.4

? Nature of Problem: Cleaning and sanitising records are not available for every batch.

? Unfulfilled Requirement: " The organization shall implement production provision under controlled conditions. "

According to ISO 19011:2018, clause 6.3.2, an audit plan should include the following information:

The audit objectives, scope, and criteria

The audit team members and their roles and responsibilities

The audit schedule, including the sequence and timings of audit activities, such as opening meeting, document review, interviews, observations, closing meeting, etc.

The expected time and duration of each audit activity and location

The name and contact details of the auditee’s representative and other relevant parties

The allocation of appropriate resources to support the audit activities

The audit methods and techniques to be used, such as interviews, observations, sampling, etc.

The audit documents and records to be prepared and retained

The audit language and communication methods

The audit risks and opportunities and how to address them

The audit follow-up arrangements, if applicable

Therefore, the correct answer is D and F, as they are essential elements of an audit plan. The other options are either irrelevant or optional for an audit plan. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.2

ISO 19011: Guidelines for Auditing Management Systems | ASQ, section “Making audit arrangements”

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.3.2

Comprehensive and Detailed In-Depth Explanation:

The audit team selected 4 out of 45 customer complaints for electrical services, which is too low based on standard statistical sampling methods. According to ISO 19011:2018 (Guidelines for Auditing Management Systems), for a population size between 13 and 52, a minimum sample size should be 5 to achieve a reasonable level of confidence.

This means the selected sample (4 complaints) was insufficient and did not align with standard sampling procedures. Therefore, the correct answer is A.

Comprehensive and Detailed In-Depth Explanation:

A guide is assigned by the auditee to assist the audit team by:

Managing logistics, such as ensuring that relevant documents are available and arranging interviews.

Assisting in the coordination of meetings and access to facilities.

Helping the auditors navigate the organization during the audit.

However, the guide does not fill gaps in the auditor’s knowledge or witness the audit for the certification body. Their primary function is logistical support, not providing interpretations or assessments.

Comprehensive and Detailed In-Depth Explanation:

Stage 1 Audit (ISO 9001:2015, Clause 9.2.2) is a documentation review to assess the readiness for a Stage 2 Audit. The auditor must document:

Observations that could lead to nonconformities, ensuring they are addressed before Stage 2.

Areas needing improvement, such as missing documented information or unclear process definitions.

While understanding the auditee’s main processes is important, documenting interviews is not a requirement at Stage 1.

The purpose of a Stage 1 third-party audit is to determine an organization’s readiness for their Stage 2 Certification Audit. During the Stage 1, the auditor will review the organization’s management system documented information, evaluate the site-specific conditions, and have discussions with personnel. The objective is to assess the alignment of the organization’s design with ISO 9001 requirements and to identify any areas of concern that could be classified as a nonconformance during the Stage 2 Audit. The auditor will also use the Stage 1 Audit to complete Stage 2 Audit planning, including a review of the allocation of resources and details for the next phase of the audit. Therefore, the option that best describes the purpose of a Stage 1 third-party audit is A, to determine the auditees understanding of ISO 9001. The other options are not correct, as they are not the main focus of a Stage 1 audit:

•B. To get to know the organization’s customers: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s customers, but rather in the organization’s ability to meet customer and applicable statutory and regulatory requirements.

•C. To learn about the organization’s procurement processes: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s procurement processes, but rather in the organization’s ability to control externally provided processes, products and services.

•D. To introduce the audit team to the client: This is not the purpose of a Stage 1 audit, as the auditor is not there to make introductions, but rather to conduct a preliminary examination of the organization’s compliance with ISO 9001 standards.

A ? 8.4.3.a

B ? 7.2.b

C ? 10.2.2

D ? 10.2.1

E ? 6.2

F ? 5.2.2.c

8.4.3.a – No specification is issued to the suppliers of waste plastic:This clause refers to the information provided to external providers, including requirements for products and services. If no specification is issued, it means the organization is not complying with this clause, which states:

“The organization shall ensure that the requirements for the products and services to be provided are adequately defined prior to communication to the external provider.”

7.2.b – The picking operators have been trained:This falls under Competence requirements. Clause 7.2(b) requires that persons are competent on the basis of education, training, or experience:

“Ensure that these persons are competent on the basis of appropriate education, training, or experience.”

10.2.2 – No documentation is retained for rejected materials:This relates to corrective action documentation. Clause 10.2.2 requires organizations to retain documented information as evidence of nonconformities and actions taken:

“The organization shall retain documented information as evidence of: the nature of the nonconformities and any subsequent actions taken…”

10.2.1 – The rejected materials are segregated:This links to the treatment of nonconforming outputs. Clause 10.2.1 discusses actions such as containment or segregation for nonconforming outputs:

“Deal with nonconforming outputs in one or more of the following ways: correction; segregation, containment…”

6.2 – Management has set an objective for the level of recycling:This refers to quality objectives. Clause 6.2 requires that measurable quality objectives be established, and this includes setting performance targets:

“The organization shall establish quality objectives at relevant functions… The quality objectives shall be measurable…”

5.2.2.c – The quality policy appears in promotional material:Clause 5.2.2(c) requires the quality policy to be available to relevant interested parties. Using it in promotional material ensures that it is communicated externally:

“The quality policy shall be… available to relevant interested parties, as appropriate.”

Here is the correct matching of actions to the statements in the context of leading the internal audit:

If practicablecarry out a formal opening meeting

You should notaudit production (as you are a supervisor in that area, and this would compromise audit objectivity)

You need notchange the audit team (unless there is a specific reason, such as conflict of interest)

You mustraise audit findings if necessary (this is a key responsibility of an auditor when nonconformities are found)

You must notsend the audit report to the Quality Manager (the audit report must be reviewed first; it is typically part of the internal audit process to go through necessary channels before final submission)

You shouldsend the audit report to the Quality Manager (after appropriate reviews and approvals)

This reflects key principles of conducting an internal audit according to ISO 9001:2015, ensuring objectivity, proper documentation, and clear reporting procedures.

According to the ISO 9001:2015 standard, clause 8.7 requires that an organization identify and control any nonconforming outputs that do not conform to the requirements of the customer or other relevant requirements. Nonconforming outputs are any outputs from the process, product or service that do not meet the specified quality criteria. Nonconforming outputs must be dealt with in one or more of the following ways:

Correction of the nonconformity

Segregation, containment, return or suspension of provision of products and services

Informing the customer

Authorisation for acceptance under concession

The organization must also retain documented information on the description of the nonconformity, the actions taken, any concessions obtained, and the identification of the authority deciding the action to resolve the nonconformity.

In this scenario, you have interviewed a line supervisor who is responsible for managing a manual picking line where operators are removing contaminant materials from incoming products. The supervisor has explained that these plastic items are rejected at this stage because they do not meet their processing standards and they can damage their machinery and compromise their quality standards. The supervisor has also mentioned that some of these rejected items are melted down in another process later on and some are disposed of as waste products that cannot be recycled.

Based on this information, you can investigate further by taking two actions:

A. Check the process for handling nonconforming items: You can verify whether there is a documented procedure for identifying, segregating, containing, returning or suspending provision of nonconforming items at this stage. You can also check whether there is a system for informing customers about any nonconforming items that may affect their satisfaction or expectations.

D. Determine what happens to the waste products: You can verify whether there is a documented procedure for disposing of waste products that cannot be recycled as per environmental regulations and customer requirements.

These two actions would help you to determine whether there are any nonconforming outputs at this stage and how they are controlled by the organization.

ISO 9001:2015 clause 7.3 requires persons doing work under the organisation’s control to be aware of their contribution to the effectiveness of the quality management system, including the benefits of improved performance.

The subcontract refrigeration engineers are performing work under the organisation’s control because they deliver the maintenance and repair services included in the certification scope. Their own ISO 9001 certification does not remove the organisation’s responsibility to ensure they understand their contribution to the QMS.

The evidence shows that two subcontract engineers stated they were not sure how they could contribute because they had not been told. This directly indicates a failure of clause 7.3 Awareness.

A is less accurate because the issue is not simply communication method; it is the required awareness outcome. B is not supported because there is no evidence that the engineers lack technical competence. D is not the best answer because ISO 9001 does not specifically require “QMS awareness training records” in this scenario.

===========

Relevant ISO 9001 Requirements

Clause 9.1.2 – Customer Satisfaction

The organisation shall monitor customers’ perceptions of the degree to which their needs and expectations have been fulfilled.

Clause 10.3 – Continual Improvement

The organisation shall continually improve the suitability, adequacy and effectiveness of the quality management system.

Why C is Correct

C. ABC monitors the improvements it makes.

The Quality Manager stated:

“These actions reduced the complaints by 90%.”

This demonstrates that ABC monitored the effectiveness of the actions taken by comparing complaint levels before and after implementation.

This aligns with:

Clause 9.1 (Monitoring and measurement)

Clause 10.3 (Improvement)

Why F is Correct

F. ABC takes actions to improve customer satisfaction.

ABC analysed customer feedback and complaints and then implemented:

Cameras to monitor the process.

A coffee machine in the waiting room.

These are actions taken in response to customer feedback with the objective of improving customer satisfaction.

This aligns with:

Clause 9.1.2 Customer Satisfaction

Clause 10.3 Continual Improvement

Why H is Correct

H. ABC obtains customer feedback.

The Quality Manager stated:

“We always ask them two questions about their needs and expectations.”

and

“We discuss a summary of the answers and the complaints.”

This is direct evidence that customer feedback is obtained.

This aligns with:

Clause 9.1.2 Customer Satisfaction

Why the Other Options Are Incorrect

A. ABC trains its employees in customer care.

No evidence of training is provided.

B. ABC records the answers to the questions asked when customers get the car back.

The scenario mentions a summary is discussed monthly, but does not state that all answers are recorded.

D. ABC reviews the feedback every day.

The scenario states feedback is reviewed once per month , not daily.

E. ABC documents all customer feedback.

No evidence is provided that all feedback is documented.

G. ABC responds to customer expectations.

While actions were taken, the scenario does not provide sufficient objective evidence that customer expectations themselves were specifically addressed or fulfilled.

ISO-Aligned Conclusion

The scenario provides objective evidence that ABC:

Obtains customer feedback,

Takes actions based on that feedback,

Monitors the effectiveness of those actions.

Therefore, the three correct statements are:

C. ABC monitors the improvements it makes.

F. ABC takes actions to improve customer satisfaction.

H. ABC obtains customer feedback.

===========

Comprehensive and Detailed In-Depth Explanation:

ISO 17021-1:2015, Clause 9.4.9 (Corrective Actions) states:

The auditor can set a reasonable deadline for corrective actions.

10 to 60 days is a best practice timeframe for the auditee to respond.

The auditee must propose corrective actions, but the audit team has the authority to set the deadline.

A 7-day deadline (A) is too short, and the audit team—not the auditee—determines the timeframe (B).

Comprehensive and Detailed In-Depth Explanation:

Minor nonconformities are isolated issues that do not significantly impact the QMS but still require correction.

Failure to close nonconformities on time (Answer A) is a procedural issue and is considered minor unless it leads to repeated failures.

Major nonconformities include:

Lack of top management commitment (Answer B), which affects leadership and strategic direction.

Failure to take corrective actions for recurrent issues (Answer C), which indicates systemic failure.

Quality management principles:

Customer focus = Increased revenue and market share

Engagement of people = Enhanced trust and collaboration throughout the organisation

Improvement = Enhanced drive for innovation

Evidence-based decision-making = Increased ability to demonstrate effectiveness of past actions

According to the Quality management principles document published by ISO, each quality management principle has a statement, a rationale, key benefits, and actions you can take to apply it. Based on these descriptions, the potential benefits can be matched to the corresponding principles as follows:

Customer focus: The primary focus of quality management is to meet customer requirements and to strive to exceed customer expectations. The key benefits of this principle include increased customer value, customer satisfaction, customer loyalty, repeat business, reputation, customer base, revenue and market share.

Engagement of people: Competent, empowered and engaged people at all levels throughout the organization are essential to enhance its capability to create and deliver value. The key benefits of this principle include improved understanding of the organization’s objectives and values, increased involvement in improvement activities, enhanced personal development, increased motivation and empowerment, enhanced trust and collaboration, and increased recognition and rewards.

Improvement: Successful organizations have an ongoing focus on improvement. The key benefits of this principle include improved organizational capabilities, alignment of improvement activities at all levels, increased ability to anticipate and react to opportunities and threats, enhanced drive for innovation, and increased levels of satisfaction.

Evidence-based decision-making: Decisions based on the analysis and evaluation of data and information are more likely to produce desired results. The key benefits of this principle include improved decision-making processes, increased ability to demonstrate the effectiveness of past decisions, increased ability to review, challenge and change opinions and decisions, and increased ability to improve performance.

A white background with black text Description automatically generated

? Understanding " Context of the Organization " :

The term " context of the organization " is defined in ISO 9001:2015 Clause 4.1, which states:

" The organization shall determine external and internal issues that are relevant to its purpose and its strategic direction and that affect its ability to achieve the intended result(s) of its quality management system. "

The definition emphasizes identifying both internal and external issues that influence the organization ' s approach to developing and achieving its objectives.

? Option Analysis:

Option A:Correct. This option aligns with the standard definition as it explicitly mentions the combination of internal and external issues that affect the organization’s approach to achieving its objectives, which is the essence of Clause 4.1.

Option B:Incorrect. The term " comparison of internal and external issues " does not reflect the ISO 9001 requirements. The standard does not require a comparison but rather an understanding of these issues.

Option C:Incorrect. Although it mentions " complexity, " the focus of ISO 9001:2015 is on identifying relevant issues rather than the complexity of those issues.

Option D:Incorrect. This option mentions " coordination " and focuses only on the positive or negative effects. ISO 9001 requires identifying issues but does not emphasize coordination.

? Clause Reference and Relevance:

ISO 9001:2015 requires organizations to understand their context because internal and external factors can influence the Quality Management System ' s effectiveness. Understanding this context helps in:

Addressing risks and opportunities (Clause 6.1).

Aligning the QMS with the organization’s strategic direction.

? Why A is Correct:

" Combination of internal and external issues " captures the essence of Clause 4.1, making it the accurate definition of the context of the organization.

Comprehensive and Detailed In-Depth Explanation:

As per ISO 9001:2015, Clause 10.2 (Nonconformity and Corrective Action), all identified nonconformities, including minor ones, must be documented and communicated to the auditee.

Minor nonconformities can lead to major issues if left unaddressed. The auditor must inform the organization before moving to the next audit phase so that corrective actions can be taken. Clause 9.2.2 (Internal Audit) states that audit findings should be reported without undue delay.

Since Li Na did not report the minor nonconformities immediately, her decision was incorrect. Minor nonconformities should always be documented and communicated before proceeding to the next phase.

? Responsibilities of the Audit Team Leader:

ISO 19011:2018 (guidelines for auditing management systems), which supports the principles in ISO 9001:2015, specifies the responsibilities of an audit team leader. These responsibilities include:

Planning the audit and establishing effective communication between the audit team and auditee.

Ensuring that formal communication channels are agreed upon and followed.

Reporting the audit progress, significant findings, and any concerns to the auditee or audit client as necessary.

Managing the audit team and ensuring adherence to the defined objectives and scope.

? Analysis of Options:

A. Reporting unattainable audit objectives to the accreditation body:Incorrect. This is not the responsibility of the audit team leader. The accreditation body oversees the certification body and is not directly involved in specific audits. If objectives are unattainable, the audit team leader would report them to the audit client (the certification body), not the accreditation body.

B. Planning formal communication arrangements:Correct. This is one of the responsibilities of the audit team leader. They ensure auditees can communicate with auditors as needed during the audit process.

C. Confirming communication channels during the opening meeting:Correct. During the opening meeting, the audit team leader must establish clear communication protocols to ensure effective information exchange between the audit team and auditee.

D. Communicating progress, findings, and concerns:Correct. Keeping the auditee and audit client informed about progress and significant findings is a critical responsibility of the audit team leader to maintain transparency and ensure the audit objectives are met.

? Why Option A is Correct:

The audit team leader does not have any obligation to report unattainable objectives to the accreditation body. Instead, they are responsible for communicating issues to the audit client (typically the certification body). The accreditation body operates at a higher level and is concerned with overseeing certification bodies, not individual audits.

? Relevant References:

ISO 19011:2018, Clause 6.4 (Conducting the Audit): Emphasizes the responsibilities of the audit team leader, including communication with the auditee and client.

ISO 9001:2015, Clause 9.2 (Internal Audit): Highlights the importance of planning and communication during audits, which is reflected in third-party audits as well.

The table below shows the possible matching of the ISO 9001 Clause 8 extract to the audit evidence.

Table

Audit evidence

ISO 9001 Clause 8 extract

Four of the 10 pallets of stock sampled in the warehouse were not labelled.

“8.5.2 … shall use suitable means to identify outputs …”

A damaged pallet of stock seen in the quarantine area was leaking liquid onto the floor.

“8.7.1 … shall ensure that outputs that do not conform to their requirements are identified and controlled …”

One of the fork-lift truck drivers had no fork-lift truck driving licence.

“8.5.1 e … shall include, as applicable … the appointment of competent persons …”

There was no pest control provision in the warehouse.

“8.5.4 … shall preserve the outputs during production and service provision …”

Two pallets of temperature-sensitive stock items were being stored at ambient as the chilled storage facility was full.

“8.1 … shall plan, implement and control the processes …”

In the context of ISO 9001:2015 audits, it is the audit team leader who holds the responsibility for assigning work to the audit team. According to ISO 19011:2018 (Guidelines for auditing management systems, which complements ISO 9001:2015), the audit team leader is responsible for the organization and direction of the audit, including assigning specific roles and responsibilities to audit team members. This includes preparation of the audit plan, leading the audit, and ensuring that each team member understands their tasks.

Reduced incoming inspection ? A. Quality

Improved communication with suppliers ? B. Procurement

Purchased materials received on time ? C. Logistics

Reduced variability within processes ? D. Production

According to ISO 9001:2015, Clause 8.4 - Control of externally provided processes, products and services, organisations are required to ensure that externally provided products and services conform to specified requirements. When an organisation sources from ISO 9001 certified suppliers, there is greater assurance of consistency in quality, delivery, and communication. This enhances internal operations across various functions:

Reduced incoming inspection (Quality): ISO 9001 certified suppliers have robust quality controls (Clause 8.4.2), reducing the need for repeated inspections upon receipt. This aligns with Quality’s responsibility for incoming inspection and verification.

Improved communication with suppliers (Procurement): Clause 8.4.3 emphasizes the communication of detailed requirements to external providers. Procurement plays a key role in ensuring these requirements are understood and met.

Purchased materials received on time (Logistics): Timely deliveries are often a result of structured supplier evaluation and selection (Clause 8.4.1). Logistics benefits through fewer delays and better scheduling of internal processes.

Reduced variability within processes (Production): Consistency of supplied materials supports stable and predictable production processes, which is a key aspect of Clause 8.5 – Production and service provision.

ISO 9001:2015 requires organisations to determine external and internal issues relevant to their purpose and strategic direction and to use this understanding to support planning and achievement of intended QMS results .

The key requirement is Clause 4.1 – Understanding the organisation and its context , supported by Clause 4.2 – Understanding the needs and expectations of interested parties .

Explanation of the correct audit trails:

A. Establish how the organisation determines its relevant interested parties

Clause 4.2 requires the organisation to determine interested parties that are relevant to the QMS and their requirements. Understanding interested parties is essential to identifying external and internal issues that influence strategic direction and QMS outcomes.

C. Establish how the organisation documents its external and internal issues

Clause 4.1 requires the organisation to determine relevant external and internal issues. While documented information is not explicitly mandated, auditors must verify how these issues are identified and captured to demonstrate systematic application and use in planning.

D. Establish how the organisation reviews information about external and internal issues

Clause 4.1 also requires the organisation to monitor and review information relating to external and internal issues. This audit trail confirms that context analysis is not static and is actively used to support QMS planning and intended results.

Explanation of why the other options are not selected:

B : Determining scope (Clause 4.3) uses context as an input, but does not itself demonstrate how issues are determined and used.

E and G : Trainer competence relates to Clause 7.2, not to determination and use of organisational context.

F : Maintaining training products relates to operational control, not context analysis.

H : Training room structure is an operational detail unrelated to external and internal issues.

ISO-aligned conclusion:

To explore how external and internal issues are determined and used to achieve intended QMS results, the auditor must follow audit trails that confirm:

Identification of relevant interested parties,

Determination and capture of issues affecting the organisation, and

Ongoing review of those issues to support planning and performance.

ISO 9001:2015 requires organisations to control production processes and ensure that personnel performing work affecting product conformity are competent and follow defined operational controls , particularly where objective measurement is available and specified.

Relevant ISO 9001 requirements include:

Clause 8.5.1 – Control of production and service provision Production shall be carried out under controlled conditions, including the availability and use of suitable monitoring and measuring resources and the implementation of monitoring and measurement activities at appropriate stages.

Clause 7.2 – Competence The organisation shall determine the necessary competence of persons doing work that affects product conformity and ensure that these persons are competent on the basis of appropriate education, training, or experience.

Explanation of the correct checkpoints:

A. How is the unloading process controlled and managed?

The operator is relying on personal judgement rather than consistently using the specified measuring equipment (infrared pyrometer). This raises a clear audit concern about whether the unloading process is defined, standardised, and controlled in accordance with Clause 8.5.1, and whether required measurement methods are being followed.

C. What training does an operator need for the unloading task?

The operator’s reliance on experience rather than defined criteria indicates the need to verify whether the organisation has formally defined competence requirements and training for this task, including the correct use of temperature-measuring equipment, as required by Clause 7.2.

Explanation of why the other options are not selected:

B : Measurement of finished products occurs later and does not address the immediate process control issue identified at unloading.

D : While risk-based thinking is important, the primary concern here is operational control and competence at the process level, not higher-level risk analysis.

E : Customers do not define how internal furnace unloading operations are performed.

F : The issue relates to operator behaviour and process control, not process design staff qualifications.

ISO-aligned conclusion:

In this scenario, the most relevant audit follow-up checkpoints are those that confirm:

The process is controlled and defined , and

The operator is competent and trained to perform the task in line with defined requirements.

Therefore, the correct answers are A and C .

An auditor undertaking their first third-party audit is normally treated as an auditor under supervision. They may participate in audit activities, but should be monitored and supported by the audit team leader.

They should therefore review their auditing performance with the audit team leader and conduct interviews only with the audit team leader present.

They should not lead the closing meeting, independently interview auditees, or decide nonconformity grading alone. ISO 9001:2015 requires audits to be conducted objectively and by competent auditors, and ISO 9001 refers to ISO 19011 for audit guidance.

Table

Statement

First-party audits

Second-party audits

Third-party audits

The audit scope is typically determined by the organisation being audited.

Yes

No

No

The outcome of the audit is typically certification to a recognised standard.

No

No

Yes

The audit scope is typically confined to service/product provision capability.

No

Yes

No

Here is a brief explanation of each statement:

The audit scope is typically determined by the organisation being audited: This statement applies to first-party audits, also known as internal audits, where the organisation audits its own processes and activities to ensure conformity and improvement1. The organisation can decide the scope of the audit based on its own needs and objectives2. This statement does not apply to second-party audits, where the customer audits the supplier, or third-party audits, where an independent body audits the organisation. In these cases, the audit scope is determined by the customer or the certification body, respectively34.

The outcome of the audit is typically certification to a recognised standard: This statement applies to third-party audits, where an independent body audits the organisation to verify that it meets the requirements of a specific standard, such as ISO 9001, and issues a certificate of conformity if the audit is successful34. This statement does not apply to first-party audits or second-party audits, where the outcome of the audit is not certification, but rather self-improvement or supplier qualification13.

The audit scope is typically confined to service/product provision capability: This statement applies to second-party audits, where the customer audits the supplier to ensure that they are meeting the requirements specified in the contract, such as service or product quality, delivery, or performance34. The audit scope is usually focused on the specific aspects of the service or product that are of interest to the customer3. This statement does not apply to first-party audits or third-party audits, where the audit scope is broader and covers the entire quality management system or the relevant clauses of the standard14.

Comprehensive and Detailed In-Depth Explanation:

Auditors must report findings truthfully and accurately to ensure an unbiased assessment of the QMS.

Clause References:

ISO 19011:2018, Clause 4 – Principles of Auditing:

Fair Presentation ? Requires auditors to report truthfully and accurately, without bias or omission.

Integrity ? Ensures auditors adhere to ethical conduct.

Why is the Correct Answer A?

The audit team reported findings truthfully, based on collected evidence.

Fair presentation ensures that both positive and negative findings are included in the audit report.

Objective evidence was gathered through interviews, document reviews, and observations.

Why are the Other Options Incorrect?

B (Integrity) ? Related to ethics and professional conduct, but not specifically about presenting findings.

C (Confidentiality) ? Important, but does not apply to the principle of reporting findings accurately.

D (Objectivity) ? Ensures impartiality, but " fair presentation " directly addresses accurate reporting of findings.

Potential threats to impartiality in an audit context include familiarity (having a close relationship with the auditee), intimidation (being coerced or feeling pressured), and self-audit (auditing one’s own work). These factors can compromise the auditor’s objectivity and the audit’s integrity. References: = The information is based on the ISO 9001 Auditing Practices Group documents which discuss threats to auditor impartiality and how they may compromise an auditor’s objectivity123.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 5.1 (Impartiality):

Internal auditors must not audit areas where they have direct responsibilities to avoid conflicts of interest.

Outsourcing (C) is not required, as long as impartiality is maintained internally.

Thus, B is the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Clause 9.1.1 – Monitoring, measurement, analysis and evaluation (General) requires the organization to:

“Determine what needs to be monitored and measured, the methods for monitoring, measurement, analysis and evaluation needed to ensure valid results, and when results shall be analyzed and evaluated.”

The goal is to ensure valid, reliable, and consistent measurement of process and product performance. Here ' s how each correct option supports compliance:

? B. Analysis of the results of sensory tests

This directly aligns with the requirement for analysis and evaluation of monitoring results. Clause 9.1.3 also supports the use of such data for evaluating product conformity and process effectiveness.

? G. Sensory testing results are recorded

This supports documented evidence of monitoring results, as required under 9.1.1(e), to verify that quality checks (such as flavor and aroma assessments) are being done consistently.

? H. The Hedonic Method is used to monitor the quality of the product

Use of a standardized measurement method like the Hedonic Scale aligns with 9.1.1(b), which requires defined methods to ensure valid and reproducible results.

Why the Other Options Are Incorrect or Less Relevant:

A. University degrees ? Related to competence (Clause 7.2), not monitoring and measurement (Clause 9.1.1).

C. Independent expert review ? Not part of regular monitoring unless it’s built into the process.

D. Respiratory testing ? Irrelevant to product quality monitoring.

E. Outsourcing ? Would shift responsibility but doesn’t demonstrate internal conformance.

F. Safe disposal ? Pertains to Clause 8.5.4 (Preservation), not Clause 9.1.1.

In the context of a third-party certification audit, match the roles with the following responsibilities:

Responsibilities:

Conduct the audit to the assigned area.= Auditors

Assist the auditors in identifying personnel to participate in the audit.= Guide

Assign each team member’s responsibility for the audit.= Audit team leader

Respond to questions and provide evidence to the auditor.= Auditee

According to ISO 19011:2018, clause 3, the definitions of the roles are as follows1:

Auditors: persons with the competence to conduct an audit

Guide: person appointed by the auditee to assist the audit team

Auditee: organization being audited

Audit team leader: member of an audit team appointed to manage the audit or an audit team

Therefore, the roles can be matched to the responsibilities based on these definitions and the description of the audit process in clause 6 of the standard1.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015, Clause 4.3 (Determining the Scope of the Quality Management System) states that when determining the QMS scope, an organization must consider:

External and internal issues (Clause 4.1)

The needs and expectations of interested parties (Clause 4.2)

The products and services provided by the organization

In the scenario, Bell only considered top management ' s input, which fails to address Clause 4.2 (interested parties ' expectations)—such as customers, suppliers, and regulatory authorities.

ISO 9001 requires corrective action to address the cause of a nonconformity and prevent recurrence. The issue is repeated complaints about food being too cold, supported by evidence that the trolley thermometer is unreliable and calibration evidence is missing.

B is correct because replacing an unreliable thermometer supports effective monitoring.

E is correct because preheating plates helps maintain food temperature during service.

F is correct because calibrated measuring equipment is needed to ensure valid temperature readings.

H is correct because checking food temperature before serving verifies that service requirements are met.

A may introduce uncontrolled local reheating and is not the best preventive action. C is only investigation, not prevention. D is reactive after complaint. G is useful contingency but does not directly ensure food is served at the correct temperature.

===========

ISO/IEC 17021-1 is the standard that specifies requirements for bodies providing audit and certification of management systems. It includes provisions for determining audit time for third-party certification audits, ensuring that the audits are conducted in a consistent, comparable, and reliable manner, which can be applied to a variety of management systems, including ISO 9001.

According to ISO 19011:2018, clause 6.6.2, a nonconformity is the non-fulfilment of a requirement. A nonconformity can be classified as either major or minor, depending on the nature and extent of the deviation from the audit criteria. A major nonconformity is a nonconformity that affects the ability or the integrity of the organization’s management system to achieve the intended results. A minor nonconformity is a nonconformity that does not affect the ability or the integrity of the organization’s management system to achieve the intended results, but is a deviation from the audit criteria1.

According to ISO/IEC 17021-1:2015, clause 9.4.9, the organization is required to analyze the cause and describe the specific correction and corrective actions taken, or planned to be taken, to eliminate detected nonconformities, within a defined time. The organization is also required to provide the certification body with records and evidence of the implementation and effectiveness of the correction and corrective actions taken. The certification body will then verify the correction and corrective actions taken by the organization and decide on the certification status2.

Therefore, the two options of when the organization is required to act in response to reported findings are D and F, as they indicate the presence of nonconformities that need to be corrected and prevented from recurring. The other options are not correct, as they do not require the organization to act in response to reported findings:

•A. A recommendation is given in the report: A recommendation is a suggestion for improvement that is not related to a nonconformity. A recommendation is not binding for the organization and does not affect the certification status. The organization may choose to accept or reject the recommendation, but it is not required to act on it.

•B. A finding of good practice is reported: A finding of good practice is a positive observation that indicates a strength or a best practice of the organization’s management system. A finding of good practice is not related to a nonconformity and does not affect the certification status. The organization may choose to acknowledge or share the finding of good practice, but it is not required to act on it.

•C. An opportunity for improvement is raised: An opportunity for improvement is a potential area where the organization’s management system can be enhanced or optimized. An opportunity for improvement is not related to a nonconformity and does not affect the certification status. The organization may choose to pursue or ignore the opportunity for improvement, but it is not required to act on it.

•E. A finding of conformity is reported: A finding of conformity is a confirmation that the organization’s management system fulfils the audit criteria. A finding of conformity is not related to a nonconformity and does not affect the certification status. The organization may choose to celebrate or communicate the finding of conformity, but it is not required to act on it.