PECB ISO-9001-Lead-Auditor QMS ISO 9001:2015 Lead Auditor Exam Exam Practice Test

Relevant ISO 9001 Requirement

Clause 7.3 – Awareness states that persons doing work under the organisation’s control shall be aware of:

The quality policy;

Relevant quality objectives;

Their contribution to the effectiveness of the QMS;

The implications of not conforming with QMS requirements.

A critical point is that ISO 9001 uses the phrase:

“persons doing work under the organisation ' s control”

This includes:

Employees,

Temporary personnel,

Agency personnel,

Subcontractors performing work on behalf of the organisation.

Why Option B is Correct

In the scenario:

The refrigeration engineers performing the actual maintenance and repair services are all subcontractors.

The Managing Director states that these subcontractors have not been informed of:

the Quality Policy,

quality objectives,

plans to address risks and opportunities.

The justification given is that the subcontractors themselves have ISO 9001-certified management systems.

However, ISO 9001 certification of a subcontractor does not remove the organisation ' s responsibility to ensure persons working under its control are aware of the organisation ' s own QMS requirements.

Therefore, the organisation has failed to demonstrate compliance with Clause 7.3 Awareness .

Why the Other Options Are Incorrect

A. Clause 7.4 – Communication

The scenario does not primarily indicate a failure of communication processes.

The issue is not whether communication methods exist, but whether the subcontractors have the required awareness.

C. Clause 7.2 – Competence

The Managing Director explicitly states that competence requirements are applied to both full-time staff and subcontractors.

No evidence is presented that competence has not been determined or evaluated.

Therefore, a competence failure is not the strongest conclusion.

D. Clause 7.5 – Documented Information

The scenario indicates documented information exists and was reviewed by the auditor.

No evidence suggests documented information is missing, uncontrolled, or unavailable.

Therefore, Clause 7.5 is not the most likely issue.

ISO-Aligned Conclusion

The organisation relies entirely on subcontracted refrigeration engineers to deliver its certified services. Because these personnel perform work under the organisation ' s control, ISO 9001 requires them to be aware of the organisation ' s quality policy, objectives, and relevant QMS requirements.

The evidence shows this awareness has not been established.

Answer: B. 7.3 Awareness

===========

Comprehensive and Detailed In-Depth Explanation:

Discussing audit findings before the closing meeting ensures that:

The audit objectives have been met (ISO 19011:2018, Clause 6.4.10).

The auditee has an opportunity to clarify misunderstandings or provide additional evidence.

The audit team and the auditee agree on the accuracy of findings before finalizing the report.

While encouraging corrective actions (B) is beneficial, the primary purpose of discussing findings is to ensure that the audit was conducted effectively and aligned with objectives. Identifying responsible persons (C) is not the auditor’s role.

A screenshot of a chat Description automatically generated

According to the ISO 9000:2015 document, the seven quality management principles are:

Customer focus

Leadership

Engagement of people

Process approach

Improvement

Evidence-based decision making

Relationship management

For each principle, the document provides a statement, a rationale, key benefits, and actions you can take to apply the principle in your organization.

Based on the document, here is a possible way to match a potential benefit to each of the four quality management principles you mentioned:

Table

Quality management principle

Potential benefit

Customer focus

Increased revenue and market share

Engagement of people

Enhanced trust and collaboration throughout the organization

Improvement

Enhanced drive for innovation

Evidence-based decision making

Increased ability to demonstrate effectiveness of past actions

Comprehensive and Detailed In-Depth Explanation:

A technical expert is someone with specialized knowledge that helps the audit team understand specific technical aspects of the auditee’s processes.

Clause References:

ISO 19011:2018, Clause 7.3.4 – Use of Technical Experts:

Technical experts support the audit team with specialized knowledge but do not perform the audit themselves.

Why is the Correct Answer B?

A technical expert is needed when auditors lack deep expertise in specific areas, such as engineering, software, or medical devices.

They assist in interpreting complex technical requirements but do not act as auditors.

Why are the Other Options Incorrect?

A (Observer) → Observers do not contribute expertise; they only watch the audit (e.g., trainees).

C (Guide) → Guides help with logistics but do not provide technical expertise.

According to ISO 9001:2015, clause 7.2, an auditor shall have the competence to:

Understand the requirements of ISO 9001 and how they relate to the audit

Understand the organization’s quality management system and its processes

Understand the applicable legal, regulatory, contractual and other requirements that affect the audit

Understand the needs and expectations of interested parties other than customers

Plan and conduct audits in accordance with ISO 19011

Evaluate audit evidence and draw appropriate conclusions

Communicate audit findings effectively1

Therefore, knowledge of ISO 9001 requirements and ISO 19011 audit principles are essential for every member of an audit team auditing an ISO 9001 quality management system.

When an organization wishes to extend the scope of their current certification to include new services or activities, such as the printing and compilation of computer documentation packages, it requires an extension to the scope of the audit. This involves a formal application process with the certification body to ensure that the new activities are included in the audit plan and that the organization’s quality management system encompasses these new processes12. References: = The answer is based on the ISO 9001 Auditing Practices Group guidance on scope and applicability, which outlines the need for a formal application process when there is a change in the scope of the quality management system that affects the certification1. Additionally, the UKAS guide on the extension to scope (ETS) process provides information on how changes to the scope, including the addition of new services, require a formal application2.

Comprehensive and Detailed In-Depth Explanation:

An autocratic management style is characterized by:

Top management making all decisions without delegation.

Strict control over employees.

A lack of employee input in decision-making.

Centralized management (Answer C) refers to decision-making being concentrated at the top, but it does not necessarily imply strict control. Laissez-faire management (Answer B) allows employees high independence, which contradicts the scenario.

Clause 8.3 may still apply because ABC is introducing the GX-1 into a new market. Even if the original design was done in the USA, ABC in Brazil must ensure that the specifications used for the Brazilian market are appropriate, verified, and validated where applicable.

Option C is best because it focuses on whether ABC Brazil has verified and validated the specifications for use in Brazil. This may include local regulatory, customer, environmental, safety, production, or market requirements.

Option A is not best because the auditor of ABC Brazil should not simply audit the USA design process. Option B is incorrect because design and development cannot automatically be excluded just because the original design was performed elsewhere. Option D relates more to production conformity against existing specifications, not design and development verification/validation under clause 8.3.

Clause 8.3.4.d of ISO 9001:2015 requires that design and development validation be performed to ensure that the resulting products or services meet the requirements for their specified application or intended use. Validation is critical to confirm that the product works as intended in real-world conditions.

In this case, Noitol omitted the design validation step approximately 50% of the time, which is a direct violation of Clause 8.3.4.d. Although they collect feedback after the fact, this is not a substitute for formal validation before the product is released. The nonconformity arises because the process of validation was neglected, not the recording of improvements or feedback.

Other options, such as documenting improvements (A) or issues with planning verification (B), are important but do not directly address the primary concern: the lack of consistent design validation before product release. Option D (8.6) concerns product release, but this nonconformity focuses on the validation stage, not just approval for release​.

Nonconformity report

ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met.” Evidence: 40 cleaning records are available for 63 batches.

Clause 8.2.4 of ISO 9001:2015 – Changes to Requirements for Products and Services:ISO 9001:2015 Clause 8.2.4 states that when changes to requirements for products or services are made, they must be communicated and agreed upon with relevant interested parties (in this case, the Health Trust). The lack of communication and agreement for substituting the cleaning chemical represents a clear violation of this clause.

Analysis of the Corrective Action Proposed:The organization proposed " obtaining a concession from the Health Trust for the use of the new chemical. " This action is reactive and assumes approval from the Health Trust without addressing the systemic issue: the lack of a defined change control process for managing contract changes.

Option Analysis:

A. The substitute chemical has not been used before in the Health Trust:Incorrect. While this may be a concern, it is not directly relevant to the root cause of the nonconformity, which is the absence of a process to handle contract changes.

B. The action assumes that the Health Trust will agree to the change:Incorrect. Although this is true, it is not the primary issue. The nonconformity lies in the lack of a structured approach to obtain agreement, not whether the Health Trust agrees.

C. Staff have not been trained in the use of the new chemical:Incorrect. This is a separate issue related to staff competence (Clause 7.2), but it is not the main reason why the corrective action is unacceptable under Clause 8.2.4.

D. The process for making changes to the contract has not been addressed:Correct. The fundamental issue is the organization ' s failure to follow or establish a change control process for amending contracts, including gaining formal agreement from the Health Trust. The proposed corrective action does not ensure that such issues will be systematically prevented in the future.

E. The substitute chemical may not be as effective as the original:Incorrect. The effectiveness of the substitute chemical is secondary to the primary issue, which is the lack of a change management process.

ISO 9001 References Supporting the Correct Answer:

Clause 8.2.4: Requires that changes to product/service requirements be reviewed, communicated, and agreed upon with the customer.

Clause 10.2 (Nonconformity and Corrective Action): Requires the organization to address the root cause of the nonconformity and take actions to ensure it does not recur. In this case, the root cause is the absence of a change control process.

Why D is the Best Answer:The core issue is that the organization did not have a formalized process for managing and agreeing upon changes to contract requirements. Addressing this process gap is essential to prevent recurrence of similar nonconformities. Merely seeking a concession from the Health Trust is a one-off solution that does not address the systemic issue.

According to ISO 19011:2018, clause 6.7, the audit follow-up is the process of verifying the completion and effectiveness of corrective actions taken by the auditee as a result of an audit. The audit follow-up can include two main activities:

Verifying the effectiveness of the implemented corrective actions: this means checking whether the actions taken by the auditee have addressed the root causes of the nonconformities and prevented their recurrence or occurrence in other areas. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.

Verifying corrections taken to fix the reported non-conformities: this means checking whether the auditee has corrected the nonconformities identified during the audit and eliminated their immediate effects. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.

The audit follow-up can be conducted as a separate audit or as part of a subsequent audit, depending on the audit programme, the audit objectives, the audit criteria, the audit scope, the audit risks, and the audit findings. The audit follow-up should be planned and conducted in accordance with the same principles and processes as the initial audit, and the results should be documented and reported accordingly. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.7

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.7.1 and 6.7.2

Conducting the Audit Follow-Up: When to Verify - The Auditor, section “Conducting the audit follow-up”

Comprehensive and Detailed Explanation: = According to the web search results from my internal tool, a witness audit is a technique used during an accreditation audit, where the accreditation body observes the performance and competence of the certification body auditors in conducting an audit12. A witness audit can also be used by a certification body to monitor and evaluate its own auditors3. During a witness audit, the following roles can be defined:

•An auditor: This is the person who is being witnessed by the accreditation body or the certification body. The auditor is responsible for conducting the audit according to the audit plan, criteria, and standards, and for providing audit evidence and findings123.

•An assessor for the accreditation body: This is the person who witnesses the auditor on behalf of the accreditation body. The assessor is responsible for evaluating the auditor’s performance and competence, and for providing feedback and recommendations to the accreditation body123.

The other options are not defined as witnesses during a witness audit, according to the web search results from my internal tool. They are:

•Someone with a qualification from the certification body: This is not a specific role in a witness audit, as anyone who is involved in the audit process should have a qualification from the certification body. Moreover, having a qualification does not necessarily mean that the person is a witness or an auditor4.

•An existing member of the audit team: This is not a specific role in a witness audit, as the audit team consists of the auditors who are conducting the audit, not the ones who are witnessing it. The witness audit is a separate activity from the audit itself, and the witness should not interfere with the audit process or influence the audit outcome123.

Therefore, the correct answer is B and D.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 promotes the process approach, which allows organizations to structure their activities into interrelated processes. This approach helps ensure that processes effectively achieve intended results.

Clause 0.3.1 (Process Approach) states that " The application of the process approach in a quality management system enables understanding and consistency in meeting requirements, considering processes in terms of added value, and achieving effective process performance. "

This aligns directly with option C, making it the correct answer. The other options are either partially correct or do not fully capture the purpose of the process approach:

Option A (Improvement based on interested parties) is a benefit but does not define the main goal.

Option B (Financial value) is not the primary focus of the process approach.

Option D (Reduction of resource consumption) may be an indirect benefit but is not a core objective.

Comprehensive and Detailed In-Depth Explanation:

Before accepting an audit, the certification body must assess the integrity of the auditee and the nature of its operations to ensure compliance feasibility.

Clause References:

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning:

The certification body must review the auditee’s background, reputation, and operational complexity before accepting the audit.

Why is the Correct Answer C?

The auditee’s integrity and reputation impact the credibility of certification.

The nature of operations determines audit complexity and resource allocation.

Why are the Other Options Incorrect?

A (Integrity and reputation only) → Correct but incomplete; nature of operations is equally important.

B (Nature of operations only) → Integrity is also a factor, not just operations.

D (No previous major nonconformities required) → Auditees with past major nonconformities can still be audited if corrective actions are taken.

In this scenario, the time allocated by the audit team leader for the Human Resources audit is fixed, and as an auditor, you must work within that constraint. Although the sampling criteria suggests reviewing 25 personnel files, it is acceptable to adjust the sample size based on time and resource limitations. ISO 9001:2015 emphasizes risk-based thinking and practical resource management (Clause 7.1), so it is reasonable to review a smaller sample if the time is insufficient.

Option B is a pragmatic approach, allowing you to focus on quality over quantity by reviewing as many cases as time allows without compromising the audit schedule.

Options like extending the audit (A, C, D) are impractical in a structured audit environment, especially for second-party audits where maintaining the agreed schedule is important​​.

An auditor undertaking their first third-party audit is normally treated as an auditor under supervision. They may participate in audit activities, but should be monitored and supported by the audit team leader.

They should therefore review their auditing performance with the audit team leader and conduct interviews only with the audit team leader present.

They should not lead the closing meeting, independently interview auditees, or decide nonconformity grading alone. ISO 9001:2015 requires audits to be conducted objectively and by competent auditors, and ISO 9001 refers to ISO 19011 for audit guidance.

According to the ISO 9001:2015 standard, clause 8.7 requires that an organization identify and control any nonconforming outputs that do not conform to the requirements of the customer or other relevant requirements. Nonconforming outputs are any outputs from the process, product or service that do not meet the specified quality criteria. Nonconforming outputs must be dealt with in one or more of the following ways:

Correction of the nonconformity

Segregation, containment, return or suspension of provision of products and services

Informing the customer

Authorisation for acceptance under concession

The organization must also retain documented information on the description of the nonconformity, the actions taken, any concessions obtained, and the identification of the authority deciding the action to resolve the nonconformity.

In this scenario, you have interviewed a line supervisor who is responsible for managing a manual picking line where operators are removing contaminant materials from incoming products. The supervisor has explained that these plastic items are rejected at this stage because they do not meet their processing standards and they can damage their machinery and compromise their quality standards. The supervisor has also mentioned that some of these rejected items are melted down in another process later on and some are disposed of as waste products that cannot be recycled.

Based on this information, you can investigate further by taking two actions:

A. Check the process for handling nonconforming items: You can verify whether there is a documented procedure for identifying, segregating, containing, returning or suspending provision of nonconforming items at this stage. You can also check whether there is a system for informing customers about any nonconforming items that may affect their satisfaction or expectations.

D. Determine what happens to the waste products: You can verify whether there is a documented procedure for disposing of waste products that cannot be recycled as per environmental regulations and customer requirements.

These two actions would help you to determine whether there are any nonconforming outputs at this stage and how they are controlled by the organization.

According to ISO 19011:2018, clause 6.3.2, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the following information1:

•the audit objectives, scope and criteria

•the audit team members and their roles and responsibilities

•the audit schedule, including the date, time and location of each audit activity

•the expected time and duration of meetings and interviews

•the allocation of appropriate resources to critical areas of the audit

•the identification of the audit client and the auditee

•the identification of the guides and observers, if any

•the documents and records to be reviewed before and during the audit

•the audit methods and tools to be used

•the audit language and terminology

•the audit report content, format, distribution and expected completion date

•the risk to achieving audit objectives and the contingency plan, if any

Therefore, the issue which is not expected to be included in the audit plan is C, expectations of the organisation’s management. This issue is not relevant to the conduct of the audit, as the audit is based on the audit criteria, not on the management’s expectations. The management’s expectations may be considered during the audit initiation or the audit programme management, but they are not part of the audit plan.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 9001:2015, Clause 9.2 (Internal Audit):

Internal audits are conducted by employees of the company who are trained as auditors.

External auditors are not mandatory unless required by the organization.

Thus, A is the correct answer.

D. I would look for evidence that the actions resulting from the risk assessment had been taken.

According to ISO 9001:2015, Clause 6.1.2 requires the organization to plan actions to address risks and opportunities. The organization must integrate and implement these actions into its quality management system and evaluate their effectiveness. The auditor should seek evidence that the organization has assessed the risks and taken appropriate actions.

B. I would ask to audit the Technical Manager by phone.

As the Technical Manager is responsible for this process and is absent due to illness, it is reasonable to attempt to contact him to obtain accurate information. This ensures that the audit process is not unduly delayed and that the information is obtained from the appropriate person.

A. I would not accept the legal compliance expert answering the question.

While the legal compliance expert might not be the best source for technical details, outright rejecting their input is not appropriate. It is better to first verify if the expert can provide relevant information.

C. I would delay the audit until the return of the Technical Manager.

This would be an inefficient approach. Contacting the Technical Manager by phone is a more practical and reasonable option.

E. I would ask for a different guide instead of the legal compliance expert.

The guide ' s role is not necessarily to answer technical questions but to facilitate the audit. Since Jack is already familiar with the situation, replacing him may not add value.

F. I would ask the consultant to leave the meeting since he is not an employee of the organization.

This is inappropriate and could disrupt the audit process. There is no rule in ISO 9001 preventing a consultant from assisting in the audit if authorized by the organization.

Why Not the Other Options:

ISO 9001 Clause Number:

8.5.2

Nature of problem:

Tyre batch numbers have not been recorded in the Work Schedule.

ISO 9001 requirement that has not been fulfilled:

ISO 9001 – “The organization shall retain the documented information necessary to enable traceability.”

This is a traceability issue. The organisation requires tyre batch numbers to be recorded in the Work Schedule, but sampled records showed that batch numbers were missing for multiple completed jobs.

ISO 9001 clause 8.5.2 Identification and traceability requires the organisation to control unique identification when traceability is required and retain the documented information necessary to enable traceability.

Clause 7.2 competence and clause 7.3 awareness are not the best fit because the evidence shows the Workshop Supervisor and Tyre Fitter were aware of the missing records. The issue is the failure to retain required traceability information.

A white background with black text Description automatically generated

Comprehensive and Detailed In-Depth Explanation:

ISO 9000:2015 defines quality as " the degree to which a set of inherent characteristics of an object fulfills requirements. "

Clause 3.6.2 (Quality) confirms this definition.

Quality is determined by how well an object (product, service, or process) meets defined requirements (customer, regulatory, or internal).

The other options do not align with the official ISO definition:

Option A refers to performance capability but does not define quality.

Option C describes work conditions, not quality.

Option D focuses on efficiency rather than fulfilling requirements.

ISO 9001 requires corrective action to address the cause of a nonconformity and prevent recurrence. The issue is repeated complaints about food being too cold, supported by evidence that the trolley thermometer is unreliable and calibration evidence is missing.

B is correct because replacing an unreliable thermometer supports effective monitoring.

E is correct because preheating plates helps maintain food temperature during service.

F is correct because calibrated measuring equipment is needed to ensure valid temperature readings.

H is correct because checking food temperature before serving verifies that service requirements are met.

A may introduce uncontrolled local reheating and is not the best preventive action. C is only investigation, not prevention. D is reactive after complaint. G is useful contingency but does not directly ensure food is served at the correct temperature.

===========

In ISO 9001:2015, the responsibility for managing the audit program lies with those overseeing the entire audit process rather than the Audit Team Leader. During the planning stage, before involving the Audit Team Leader, key actions for managing the audit program include:

1. Providing the Resources Needed: According to clause 7.1 (Resources), the audit program manager must ensure that the necessary resources are in place to conduct the audit effectively. This encompasses logistical support, personnel, and other required resources for the audit to proceed smoothly.

2. Reviewing Reports of Previous Audits: As per clause 9.2.2 (Internal Audit), it is essential to consider the results of previous audits to plan effectively for the upcoming audit. This helps identify areas that require particular attention, ensuring continuity and focusing on recurring issues or improvements since the last audit.

These actions ensure that the audit is thoroughly prepared and that there is continuity and focus on any areas that might need closer inspection. The other options, such as preparing the audit plan, assigning responsibilities, preparing checklists, and selecting the audit team members, generally fall under the duties of the Audit Team Leader once they are appointed and engaged in the planning process.

Comprehensive and Detailed In-Depth Explanation:

During communication with top management, the auditor should discuss:

The quality policy (ISO 9001:2015, Clause 5.2.1), ensuring that it is established, communicated, and understood.

Internal audits (ISO 9001:2015, Clause 9.2), verifying that they are planned and effectively implemented.

These discussions help assess leadership commitment and the effectiveness of the QMS.

A second-party audit is typically performed by an organization (often a customer) on an external provider (supplier) to evaluate their capability and performance—i.e., to determine whether they can consistently meet requirements.

ISO 9001:2015 supports this purpose through its requirements for control of externally provided processes, products and services , where the organization must evaluate and monitor external providers :

ISO 9001 requires the organization to “ determine and apply criteria for the evaluation, selection, monitoring of performance and re-evaluation of external providers based on their ability to provide processes or products and services in accordance with requirements.” ➜ This aligns directly with Option B (evaluate an external provider’s management system) , because evaluating a provider’s system/process controls is a primary way to confirm their ability to meet requirements.

ISO 9001 also requires analysis/evaluation of data including “ the performance of external providers .” ➜ This reinforces that ISO 9001 expects organizations to evaluate suppliers , which is the practical purpose of a second-party audit.

Why the other options are not correct under ISO 9001 context:

A (certify) is not the purpose of a second-party audit; certification is done by an independent third-party certification body , not by a customer/supplier relationship.

C (inspect products) can be one control activity, but ISO 9001’s requirement is broader— evaluate/monitor/re-evaluate the provider’s capability and performance, not only inspect output.

D (approve processes) may occur as a result of evaluation, but ISO 9001 explicitly emphasizes evaluation and monitoring , making B the best definition.

The appropriate response in this situation would be:

C. I will raise it as a minor nonconformity; you have the option to appeal to our Certification Body.

This response acknowledges the restaurant manager’s point that the shortage of some hamburgers may not constitute a management system failure. However, the fact remains that the menu was not updated to reflect the current availability of products, which led to customer dissatisfaction. This is a deviation from the ISO 9001 standard, which requires that the organization ensures the availability of resources needed to provide products and services as promised1. Raising it as a minor nonconformity allows the organization to address the issue within a specified timeframe and provides an opportunity for appeal if the organization disagrees with the auditor’s decision2.

The activities that are specifically required by ISO 17021-1 as part of third-party (Certification Body) surveillance audit processes are:

•Option A: Audit use of certification marks on marketing materials. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to audit the client’s use of marks and/or any other reference to certification, as applicable, to ensure conformity with the certification requirements.

•Option B: Review changes to the QMS since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review any changes affecting the client’s quality management system and its ability to continue to fulfil the requirements of the standard used for certification.

•Option C: Confirm effectiveness of internal audit and management review. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to confirm the continuing effectiveness of the client’s quality management system, including the effectiveness of the internal audit and management review processes.

•Option F: Review the status of previously raised findings and audit effectiveness of any outstanding findings. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the status of findings and any corrective actions taken by the client in response to previous audits, and to verify the effectiveness of the implemented corrective actions.

•Option H: Verify legal compliance. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to verify the client’s compliance with applicable statutory and regulatory requirements related to the scope of certification.

•Option I: Handling of customer complaints since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the client’s handling of customer complaints related to the certified activities since the last audit.

The following options are not correct:

•Option D: Complete a full document review of the quality management system. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to complete a full document review of the quality management system during surveillance audits. A full document review is only required during the initial certification audit or when there are significant changes to the quality management system or the certification requirements.

•Option E: Failing to meet financial responsibilities. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to audit the client’s financial responsibilities during surveillance audits. The certification body may have contractual arrangements with the client regarding the payment of fees, but this is not part of the surveillance audit process.

•Option G: Review the calibration status of the instrumentation. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to review the calibration status of the instrumentation during surveillance audits. The certification body may audit the client’s monitoring and measuring resources as part of the quality management system requirements, but this is not a specific activity required by ISO 17021-1.

•Option J: Conduct a minimum number of annual surveillance audits during the certification period. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to conduct a minimum number of annual surveillance audits during the certification period. The certification body may determine the frequency and duration of surveillance audits based on the risk and performance of the client, but this is not a specific activity required by ISO 17021-1.

In the context of ISO 9001:2015 audits, it is the audit team leader who holds the responsibility for assigning work to the audit team. According to ISO 19011:2018 (Guidelines for auditing management systems, which complements ISO 9001:2015), the audit team leader is responsible for the organization and direction of the audit, including assigning specific roles and responsibilities to audit team members. This includes preparation of the audit plan, leading the audit, and ensuring that each team member understands their tasks.

Approve Certification Body: Accreditation Body

Award certification: Certification Body

Recommend certification: Audit Team Leader

Maintain certification:

Comprehensive Detailed Explanation

In the context of a third-party ISO 9001 audit, different entities play specific roles in the certification process. Here ' s a detailed explanation of the responsibilities:

Approve Certification Body: Accreditation BodyThe Accreditation Body is responsible for approving Certification Bodies. Accreditation Bodies are independent entities that evaluate the competence of Certification Bodies, ensuring they meet international standards like ISO/IEC 17021, which sets out the criteria for bodies providing audit and certification of management systems. In this role, they confirm that the Certification Body is capable of conducting ISO 9001 audits and granting certifications in accordance with international guidelines.

Award Certification: Certification BodyThe Certification Body is the entity that ultimately awards the certification to an organization after verifying that it meets the ISO 9001 standards. Certification Bodies conduct audits, either directly or through a team of auditors, and based on the audit outcomes, they issue the certification, indicating that the organization complies with ISO 9001.

Recommend Certification: Audit Team LeaderThe Audit Team Leader is responsible for leading the audit and making a recommendation to the Certification Body. This recommendation is based on the audit findings—whether the organization meets the ISO 9001 requirements or if there are areas of non-compliance that need corrective action. The final decision on certification is not made by the Audit Team Leader but by the Certification Body.

Maintain Certification: Certification BodyMaintaining certification refers to the ongoing process of ensuring that an organization continues to comply with ISO 9001 requirements. The Certification Body conducts regular surveillance audits (e.g., annually) and may also perform recertification audits (typically every three years). This ongoing monitoring ensures that the certified organization continues to adhere to the quality management standards over time.

This breakdown clearly assigns responsibility based on the defined roles of Accreditation Bodies, Certification Bodies, and Audit Teams in the ISO 9001 certification process.

Comprehensive and Detailed In-Depth Explanation:

As per ISO 9001:2015, Clause 10.2 (Nonconformity and Corrective Action), all identified nonconformities, including minor ones, must be documented and communicated to the auditee.

Minor nonconformities can lead to major issues if left unaddressed. The auditor must inform the organization before moving to the next audit phase so that corrective actions can be taken. Clause 9.2.2 (Internal Audit) states that audit findings should be reported without undue delay.

Since Li Na did not report the minor nonconformities immediately, her decision was incorrect. Minor nonconformities should always be documented and communicated before proceeding to the next phase.

According to ISO 9001:2015, clause 9.2.2.e, the organization is required to retain documented information as evidence of the implementation of the audit programme and the audit results. This includes the records of the nonconformities identified during the internal audits and the corrective actions taken to address them. The organization is also required to verify the effectiveness of the corrective actions, as per clause 10.2.2.

Therefore, in the scenario given, the Quality Manager’s decision to automatically close any nonconformance over 3 years old without obtaining any confirmation from the relevant departments or verifying the effectiveness of the corrective actions is a clear violation of the requirements of clause 9.2.2.e. This indicates a lack of control and follow-up of the internal audit process, as well as a potential risk of recurrence or occurrence of the nonconformities in other areas. This also undermines the credibility and value of the internal audit programme, as well as the risk-based approach claimed by the Quality Manager.

Hence, the best course of action to take is D, to raise a nonconformance report against clause 9.2.2.e of ISO 9001, and to communicate the audit findings to the relevant management. The other options are either insufficient or irrelevant to address the issue, as they do not directly relate to the noncompliance with clause 9.2.2.e.

The individual(s) managing the audit programme and the auditee are both roles that contribute to the audit outcomes. The individual(s) managing the audit programme are responsible for planning, conducting, and reporting on the audit activities, as well as ensuring that they are aligned with the organization’s quality objectives and risk management processes1. The auditee is the person or entity that is subject to an audit, and their participation, cooperation, and feedback are essential for achieving a successful audit outcome2. References:

ISO 9001 Lead Auditor Reference Materials

ISO 9001 Lead Auditor Candidate Handbook

ISO 9001 Lead Auditor Course Material

ISO 9001 Lead Auditor Training Course IRCA Certified

In this scenario, the audit team leader must balance maintaining the integrity of the audit plan while considering the auditee’s request. The two best responses allow for flexibility without compromising the audit ' s rigor:

A. I could audit the other laboratories virtually at the end of this audit: Virtual audits can be a valid option, especially in multi-site audits. ISO 9001:2015 does not prohibit virtual audits, and in certain situations, they are practical for reviewing documentation or observing operations remotely.

C. I could try to revise the audit programme to see if I can audit all laboratories: Revising the audit programme to accommodate additional site visits is a reasonable compromise. ISO 9001:2015 audits are based on risk and sampling, but the audit team leader has the flexibility to adjust the audit scope if it fits within the audit duration and resources.

The other options, such as extending the audit duration (B, F) or strictly adhering to the original plan (D, E), may not be practical or necessary. Revising the plan to audit all laboratories or using virtual auditing ensures that the audit remains efficient while addressing the organization ' s concerns​.

Comprehensive and Detailed In-Depth Explanation:

ISO 19011:2018 requires auditors to conduct audits professionally and diligently.

Clause References:

ISO 19011:2018, Clause 4.4 – Professional Care: Auditors must exercise due diligence in conducting audits.

ISO 9001:2015, Clause 9.2 – Internal Audit: Requires objective and systematic audits to evaluate QMS effectiveness.

Why is the Correct Answer A?

The audit team followed best practices by gathering verifiable audit evidence through interviews, document reviews, and observations.

They ensured fair presentation of findings in the final audit report.

They complied with ISO 9001 and ISO 19011 guidelines for audit procedures.

Why are the Other Options Incorrect?

B (Ordinary negligence) → No evidence of negligence; the team followed structured audit processes.

C (Gross negligence) → No indication that the auditors ignored important responsibilities.

D (Willful misconduct) → The auditors acted professionally and did not intentionally disregard rules.

The purpose of conducting a document review is to determine the conformity of the system, as far as documented, with audit criteria and to gather information to support the audit activities. A document review is a systematic and objective examination of the documented information that is relevant to the audit objectives and scope. It can help the auditor to verify if the documented information is complete, accurate, consistent, and up-to-date. It can also help the auditor to identify any gaps, errors, or nonconformities in the documented information that may affect the audit findings or conclusions.

The other options are not correct because they do not reflect the true purpose of a document review. Option A describes the purpose of an audit report, which is to communicate the audit results and recommendations to the management and other interested parties. Option B describes the purpose of an audit plan, which is to define the scope, objectives, criteria, methods, resources, and schedule of an audit. Option C describes the purpose of an audit evidence report, which is to provide evidence of nonconformities or opportunities for improvement identified during an audit. Option D describes the purpose of an audit decision report, which is to justify or explain why certain decisions were made during an audit.

I hope this answer helps you understand why option F is correct and why options A-C-D are incorrect. If you want to learn more about ISO 9001 Lead Auditor exam questions and answers, you can check out some of these resources:

ISO 9001 Lead Auditor Sample Exam Questions and Answers: This article provides some sample questions and answers for each section of the ISO 9001 Lead Auditor exam.

ISO 9001 (QMS) Lead Auditor Quiz Questions and Answers: This article provides some quiz questions and answers on various topics related to ISO 9001 QMS.

ISO 9001 Lead Auditor - Exam Practice Tests: This course offers practice tests with explanations for each question.

Irca Lead Auditor Exam Questions And Answers Pdf: This document contains some exam questions and answers in PDF format.

Non-conformity Report

ISO 9001 Clause Number:

7.2

Nature of problem:

Documented information is not retained on the necessary competence of consultants with respect to relevant regulatory and ISO 9001 requirements.

ISO 9001 requirement that has not been fulfilled:

ISO 9001 – “The organization shall retain appropriate documented information as evidence of competence.”

ISO 9001:2015 places a clear requirement on organisations to ensure that persons doing work under its control that affects performance and conformity are competent , and that this competence is demonstrated and evidenced .

Relevant ISO 9001 requirements

Clause 7.2 – Competence requires the organisation to:

determine the necessary competence of persons doing work under its control,

ensure that these persons are competent on the basis of appropriate education, training, or experience, and

retain appropriate documented information as evidence of competence .

In the scenario:

Competence decisions are entirely delegated to a subcontracted lead consultant.

No documented information is retained to demonstrate individual consultant competence.

A recent event could not be resolved specifically due to the absence of documented competence records , which directly confirms non-fulfilment of Clause 7.2.

Reliance on customer satisfaction results or the personal judgement of a consultant does not replace the ISO 9001 requirement for objective evidence .

Why other clauses are not applicable:

Clause 7.1 relates to provision of resources, not evidence of competence.

Clause 7.3 relates to awareness of quality objectives, not competence records.

Statements such as “consultants are not aware of customer satisfaction objectives” or “persons necessary are not determined” are not supported by the scenario evidence.

ISO-aligned conclusion:

The organisation has failed to retain documented information as evidence of competence for consultants providing ISO 9001 and regulatory consultancy services. This is a clear and justified nonconformity against ISO 9001:2015 Clause 7.2 .

Here is the correct matching of ISO 9001:2015 clauses to the steps mentioned in the change management process:

We identified risks and opportunities and fed these into our risk management processes.

Clause 6.1 (Actions to address risks and opportunities)

We found a suitable supplier.

Clause 8.4 (Control of externally provided processes, products, and services)

We monitored customer feedback and noticed an increase in negative feedback about lead times.

Clause 9.1.2 (Customer satisfaction)

We put together a plan for implementation.

Clause 6.2.2 (Planning to achieve quality objectives)

We monitored the performance of the new supplier.

Clause 8.4.2 (Type and extent of control of external providers)

We noticed that productivity targets were being missed.

Clause 9.1.1 (Monitoring, measurement, analysis, and evaluation)

We communicated the plan internally.

Clause 7.4 (Communication)

We looked at the data at the management review and decided we needed to do something different.

Clause 9.3.2 (Management review inputs)

We reorganised the staffing and implemented redundancies.

Clause 7.1.2 (People)

We set an objective to effectively implement the transition and outsource manufacturing.

Clause 6.2.1 (Quality objectives and planning to achieve them)

This aligns the steps of the change process with relevant ISO 9001:2015 clauses related to risk, planning, communication, and monitoring.

The “Check” stage of the PDCA cycle is about monitoring, measuring, analysing and evaluating performance against objectives, requirements and planned activities.

B is correct because reviewing data at management review is part of evaluating QMS performance.

C is correct because monitoring customer feedback is checking whether customer needs and expectations are being met.

D is correct because monitoring supplier performance checks whether the outsourced manufacturing process is effective.

A, E, F and H are mainly “Plan/Do” activities. G may be a monitoring result, but the strongest three “Check” activities are B, C and D because they directly involve review, monitoring and evaluation of QMS performance.

===========

Here is the correct matching of the activities with the responsible parties in the context of a second-party audit:

Define the audit scope: Customer

Develop the audit plan: Audit team leader

Respond to the audit findings: External provider

Conduct the audit: Audit team

This reflects the typical division of responsibilities in a second-party audit, where the customer (the party commissioning the audit) sets the scope, the audit team leader manages the planning, the external provider responds to findings, and the audit team carries out the audit.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires specific roles and responsibilities for audit leaders and certification bodies.

Clause References:

ISO 19011:2018, Clause 5.5 – Conducting the Audit: Defines audit team leader responsibilities.

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning: Defines certification body responsibilities, including the certification agreement.

Why is the Correct Answer D?

The certification agreement is signed between the certification body and the auditee (TD Advertising).

Anne (audit team leader) does NOT have authority to sign the agreement—that is the responsibility of the certification body’s management.

Why are the Other Options Incorrect?

A (Establishing audit criteria and objectives) → Correct responsibility of the audit leader as per ISO 19011.

B (Determining audit feasibility) → Audit leaders assess feasibility but do not sign agreements.

C (Assigning responsibilities for the audit team) → This is part of the audit leader’s role in planning audits.

Corrective action must eliminate the cause of a nonconformity and prevent recurrence. In this case, the problem is process variability causing bruised and over-ripe fruit and increasing complaints.

Option C is acceptable because applying improved process controls aligned with customer criteria directly addresses the cause and prevents recurrence.

A may help only if competence is the cause, which is not established. B is investigation, not corrective action itself. D disposes of rejected product but does not prevent recurrence.

===========

Comprehensive and Detailed In-Depth Explanation:

A guide is assigned by the auditee to assist the audit team by:

Managing logistics, such as ensuring that relevant documents are available and arranging interviews.

Assisting in the coordination of meetings and access to facilities.

Helping the auditors navigate the organization during the audit.

However, the guide does not fill gaps in the auditor’s knowledge or witness the audit for the certification body. Their primary function is logistical support, not providing interpretations or assessments.

According to ISO 9001:2015, clause 8.4, an organization is required to control the processes, products and services provided by external providers, including those that affect the quality of the organization’s own products and services. This includes determining the controls to be applied to the external provision of processes, products and services, as well as the information to be communicated to the external providers. The organization is also required to monitor, measure, and evaluate the performance of the external providers and retain documented information of these activities.

Therefore, in the scenario given, ABC Ltd is responsible for controlling the processes, products and services provided by Teak Ltd, as they affect the quality of ABC Ltd’s own products and services. This means that ABC Ltd should have established criteria and methods for evaluating the performance of Teak Ltd, as well as documented information of the results of such evaluation. ABC Ltd should also have defined the supply arrangements with Teak Ltd, including the specifications, requirements, and verification activities related to the products and services provided by Teak Ltd.

Hence, the best options to describe how to plan the audit of the interrelationship with Teak Ltd during the Stage 2 audit at ABC Ltd are A and D, as they are aligned with the requirements of ISO 9001:2015, clause 8.4. The other options are either irrelevant or beyond the scope of the audit, as they do not pertain to the control of external provision by ABC Ltd.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 17021-1:2015, Clause 9.4.8 (Audit Reporting):

The audit report must be submitted to the certification body regardless of corrective actions.

Corrective actions are reviewed after the audit, but the audit process should not be delayed.

Certification decisions should be made based on the audit findings and evidence, not pending corrective actions.

Thus, delaying audit activities until corrective actions are submitted is not acceptable.

The responsibilities of an Audit Team Leader in a third-party certification audit are defined primarily in ISO 19011:2018 and reinforced by ISO/IEC 17021-1 for certification audits.

The Audit Team Leader is responsible for managing the audit process, coordinating the audit team, and maintaining communication with the auditee.

Correct Responsibilities

A. Holding the audit team meeting

The Audit Team Leader is responsible for:

Organising and leading audit team meetings.

Ensuring auditors understand their assignments.

Reviewing findings and audit conclusions.

Preparing the team for opening and closing meetings.

Therefore, this is a responsibility of the Audit Team Leader.

B. Adopting a risk-based approach to planning the audit

ISO 19011 promotes the use of a risk-based approach when:

Developing the audit programme.

Planning audit activities.

Allocating resources and audit time.

Determining audit priorities.

The Audit Team Leader applies this approach when preparing and managing the audit.

Therefore, this is a responsibility of the Audit Team Leader.

D. Chairing the audit opening and audit closing meeting

The Audit Team Leader normally:

Conducts the opening meeting.

Explains audit objectives, scope and methods.

Conducts the closing meeting.

Presents audit conclusions and findings.

Therefore, this is a responsibility of the Audit Team Leader.

F. Establishing contact with the auditee

Before and during the audit, the Audit Team Leader:

Establishes communication channels.

Confirms audit arrangements.

Coordinates schedules and logistics.

Clarifies audit activities.

Therefore, this is a responsibility of the Audit Team Leader.

Why the Other Options Are Incorrect

C. Issuing the management system certificate

Certification decisions and certificate issuance are the responsibility of the Certification Body , not the Audit Team Leader.

ISO/IEC 17021 requires certification decisions to be made independently of the audit team.

E. Auditing top management

The Audit Team Leader may audit top management, but this is not a management responsibility of leading the audit team . It is simply an audit assignment that could be performed by any competent auditor.

G. Selecting the audit team

Selection of auditors is normally the responsibility of the:

Audit Programme Manager,

Certification Body,

Individual(s) managing the audit programme.

Not the Audit Team Leader.

H. Preparing the audit nonconformity reports

Each auditor normally prepares and documents their own findings and nonconformities. The Audit Team Leader reviews, coordinates, and approves them, but does not necessarily prepare all nonconformity reports.

Therefore, this is not considered one of the key management responsibilities listed.

ISO-Aligned Summary

Option

Audit Team Leader Responsibility?

Holding the audit team meeting

Yes

Adopting a risk-based approach to planning the audit

Yes

Issuing the management system certificate

No

Chairing the audit opening and audit closing meeting

Yes

Auditing top management

No

Establishing contact with the auditee

Yes

Selecting the audit team

No

Preparing the audit nonconformity reports

No

Answer: A, B, D, F

===========

According to ISO 9001:2015, clause 4.3, the organization is required to determine the scope of its quality management system (QMS) by considering the external and internal issues referred to in clause 4.1. Clause 4.1 requires the organization to determine the external and internal issues that are relevant to its purpose and strategic direction, and that affect its ability to achieve the intended results of its QMS. These issues can include positive and negative factors or conditions for consideration, such as legal, technological, competitive, market, cultural, social, and economic environments, whether international, national, regional, or local. The organization is also required to monitor and review these issues.

Therefore, the correct answer is C, as external issues of the organization’s context are one of the factors that must be considered when determining the scope of the QMS. The other options are either not directly related to the scope of the QMS, or are not explicitly mentioned in clause 4.3.

 Responsibilities of the Audit Team Leader:

ISO 19011:2018 (guidelines for auditing management systems), which supports the principles in ISO 9001:2015, specifies the responsibilities of an audit team leader. These responsibilities include:

Planning the audit and establishing effective communication between the audit team and auditee.

Ensuring that formal communication channels are agreed upon and followed.

Reporting the audit progress, significant findings, and any concerns to the auditee or audit client as necessary.

Managing the audit team and ensuring adherence to the defined objectives and scope.

 Analysis of Options:

A. Reporting unattainable audit objectives to the accreditation body:Incorrect. This is not the responsibility of the audit team leader. The accreditation body oversees the certification body and is not directly involved in specific audits. If objectives are unattainable, the audit team leader would report them to the audit client (the certification body), not the accreditation body.

B. Planning formal communication arrangements:Correct. This is one of the responsibilities of the audit team leader. They ensure auditees can communicate with auditors as needed during the audit process.

C. Confirming communication channels during the opening meeting:Correct. During the opening meeting, the audit team leader must establish clear communication protocols to ensure effective information exchange between the audit team and auditee.

D. Communicating progress, findings, and concerns:Correct. Keeping the auditee and audit client informed about progress and significant findings is a critical responsibility of the audit team leader to maintain transparency and ensure the audit objectives are met.

 Why Option A is Correct:

The audit team leader does not have any obligation to report unattainable objectives to the accreditation body. Instead, they are responsible for communicating issues to the audit client (typically the certification body). The accreditation body operates at a higher level and is concerned with overseeing certification bodies, not individual audits.

 Relevant References:

ISO 19011:2018, Clause 6.4 (Conducting the Audit): Emphasizes the responsibilities of the audit team leader, including communication with the auditee and client.

ISO 9001:2015, Clause 9.2 (Internal Audit): Highlights the importance of planning and communication during audits, which is reflected in third-party audits as well.

Comprehensive and Detailed In-Depth Explanation:

The audit team selected 4 out of 45 customer complaints for electrical services, which is too low based on standard statistical sampling methods. According to ISO 19011:2018 (Guidelines for Auditing Management Systems), for a population size between 13 and 52, a minimum sample size should be 5 to achieve a reasonable level of confidence.

This means the selected sample (4 complaints) was insufficient and did not align with standard sampling procedures. Therefore, the correct answer is A.

A Stage 1 audit is a preliminary assessment to evaluate the readiness of the organisation for the Stage 2 certification audit. The audit scope is defined by the audit client and the certification body based on the application and the contract. If the organisation wants to include a new work area that was not part of the original scope, the auditor should advise the Quality Manager that an extension of the scope is possible but will have to go through established procedures, such as submitting a formal request, providing relevant information, and paying additional fees. The auditor should also suggest that the Quality Manager will advise the programme manager, who is responsible for managing the audit programme, that the audit scope should be revised to include the new work area. The programme manager will then decide whether to approve or reject the request, and communicate the decision to the auditor and the Quality Manager. The auditor should not proceed with the audit of the new work area without the approval of the programme manager and the confirmation of the audit scope. 1234 References:

1: ISO 19011:2018 - Guidelines for auditing management systems

2: ISO 9001 Certification Audits | Stage 1 and Stage 2 - 9001. Simplified

3: What is the difference between Stage 1 and Stage 2 Audits? - ISO Update

4: Getting Certified to ISO 9001 - the Stage 1 Audit

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 5.1 (Impartiality):

Internal auditors must not audit areas where they have direct responsibilities to avoid conflicts of interest.

Outsourcing (C) is not required, as long as impartiality is maintained internally.

Thus, B is the correct answer.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.4.11 (Closing Meeting):

The audit team must proceed with the audit report, even if the auditee disagrees with findings.

Disagreements do not invalidate audit results.

The auditee has the right to file a complaint or appeal, but this is handled after the audit report is submitted.

Thus, the audit team acted correctly by proceeding with the audit report despite top management’s disagreement.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires collaboration between the auditee (TD Advertising), the certification body, and the audit leader when making changes to audit scope.

Clause References:

ISO/IEC 17021-1:2015, Clause 9.2.3 – Conducting the Audit: Any change in audit scope must be agreed upon by all parties before proceeding.

Why is the Correct Answer C?

TD cannot unilaterally change the scope without agreement from the certification body and audit leader.

The certification body must ensure the scope remains relevant and that resources are allocated properly.

Why are the Other Options Incorrect?

A (Anne cannot withdraw) → Incorrect, Anne CAN withdraw if the changes make the audit unfeasible, but she must consult with the certification body first.

B (TD cannot change the scope) → Incorrect, scope changes are allowed but must be formally approved.

D (Anne has full authority to reject scope changes) → Incorrect, scope changes require mutual agreement among all parties.

According to ISO 9001:2015, clause 9.1.1, the organization is required to determine what needs to be monitored and measured, the methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid results, and when the monitoring and measuring shall be performed. The organization is also required to retain appropriate documented information as evidence of the results.

Therefore, in the scenario given, the organization should have planned for monitoring and measuring the billet temperature, as it is a critical factor for the quality of the product and the process. The organization should also have established a procedure that provides instruction in taking billet temperature, using the pyrometer or other suitable methods, to ensure consistency and accuracy. The organization should also have performed periodic analysis of the results of temperature checks, to identify trends, problems, and opportunities for improvement.

Hence, the options that would provide evidence of conformance with clause 9.1.1 of ISO 9001 are A, E, and F, as they are aligned with the requirements of the clause. The other options are either irrelevant or not directly related to clause 9.1.1, as they do not pertain to the monitoring and measurement of the billet temperature.

Understanding Clause 6.2 of ISO 9001:2015:Clause 6.2 (Quality Objectives and Planning to Achieve Them) specifies that organizations must:

Establish measurable and relevant quality objectives consistent with the quality policy (Clause 6.2.1).

Include objectives applicable to product/service conformity and customer satisfaction.

Document these objectives and their planning as documented information (Clause 6.2.1 & 6.2.2).

Plan how to achieve the objectives, including defining actions, resources, responsibilities, timelines, and methods for evaluation.

Analysis of Options:

A. Quality objectives are not being implemented by the organisation ' s personnel:Incorrect. While implementation is critical, this relates more to operational aspects rather than the direct requirements of Clause 6.2. Implementation issues would typically raise concerns under Clause 9.1 (Performance Evaluation).

B. The consultant has not interpreted ISO 9001 correctly:Incorrect. The consultant ' s interpretation of ISO 9001 is irrelevant in terms of Clause 6.2 compliance. The focus is on whether the organization aligns with the requirements, not the consultant ' s role.

C. Establishing quality objectives did not include top management:Incorrect. While top management involvement is vital for QMS effectiveness (Clause 5.1), this is not a direct requirement of Clause 6.2. Top management alignment is implied but not explicitly mandated for establishing quality objectives.

D. Quality objectives were not established in alignment with the organisation ' s quality policy:Correct. Clause 6.2.1 requires that quality objectives be consistent with the organization’s quality policy, ensuring they reflect its purpose, strategic direction, and commitment to continual improvement. Misalignment would constitute a nonconformity.

E. The organisation cannot afford to undertake quality objectives all at once:Incorrect. Financial constraints are not directly addressed in Clause 6.2. The clause focuses on planning to achieve objectives, which includes defining the necessary resources but does not demand achieving all objectives simultaneously.

F. Quality objectives are not maintained as documented information:Correct. Clause 6.2.1 specifically requires that quality objectives be maintained as documented information. Failure to document the objectives is a direct violation of this clause.

Why Options D and F Are Correct:

D: Misalignment between the quality objectives and the quality policy directly violates Clause 6.2.1, which mandates that objectives support the strategic direction of the organization.

F: Lack of documentation for quality objectives breaches the requirement to maintain them as documented information under Clause 6.2.1.

Relevant References:

Clause 6.2.1: Establishing quality objectives aligned with the quality policy.

Clause 6.2.2: Maintaining documented information for quality objectives and planning to achieve them.

Clause 5.1.1: Top management ' s responsibility to ensure alignment between the QMS and strategic direction.

According to the ISO 9001 Auditing Practices Group Guidance on Improvement Opportunities1, an improvement opportunity is a suggestion made by the auditor for the auditee to consider that, if implemented, may enhance the performance of the QMS. Improvement opportunities are not mandatory, but they should be based on objective evidence and aligned with the audit criteria and objectives. Improvement opportunities should also be realistic, feasible, and beneficial for the auditee. In this case, the evidence statements that represent acceptable improvement opportunities in the report are A, C, and E, because they address the potential causes and effects of the spelling errors in the print run, and propose possible actions that may improve the quality of the products and services, and the effectiveness of the QMS. These options are consistent with the requirements and principles of ISO 9001, such as clause 6.1 on actions to address risks and opportunities, clause 8.1 on operational planning and control, clause 8.5.1 on control of production and service provision, and clause 10.2 on nonconformity and corrective action. The other options are not appropriate improvement opportunities, because they are either irrelevant, unrealistic, or unhelpful for the auditee. For example, option B may contradict the audit objective and scope, option D may imply a lack of auditor competence or impartiality, option F may not address the root cause of the problem, option G may not be applicable or effective, and option H may not be feasible or justified. References: ISO 9001 Auditing Practices Group Guidance on Improvement Opportunities, ISO 9001:2015, ISO 9001 Auditing Practices Group Guidance on Audit Evidence

Identifying the source of information

Sampling available data

Gathering audit evidence

Verifying objective evidence

Evaluating evidence against the audit criteria

Making audit conclusions

Evaluating against the audit criteria

According to ISO 19011:2018, clause 6.4, the process of collecting and verifying information during an audit involves the following steps1:

Identifying the source of information: The audit team should identify the sources of information that are relevant to the audit objectives, scope and criteria. These sources may include documents, records, personnel, processes, activities, facilities, equipment, etc. The audit team should also determine the methods and tools for accessing and collecting the information, such as interviews, observations, document review, sampling, etc.

Sampling available data: The audit team should select a representative sample of the available data to verify the conformity and effectiveness of the management system. The sample size and selection method should be based on the audit objectives, scope and criteria, as well as the level of confidence and risk. The audit team should also consider the validity, reliability, relevance and sufficiency of the data.

Gathering audit evidence: The audit team should use the methods and tools identified in the previous step to collect audit evidence, which is the records, statements of fact or other information that are relevant to the audit criteria and verifiable. The audit team should record the audit evidence in a clear, concise and objective manner, using notes, checklists, photographs, audio or video recordings, etc.

Verifying objective evidence: The audit team should verify the accuracy, completeness and authenticity of the audit evidence collected. This may involve cross-checking different sources of information, confirming the identity and authority of the persons providing the information, examining the original documents or records, etc. The audit team should also identify any discrepancies, inconsistencies or gaps in the audit evidence.

Evaluating evidence against the audit criteria: The audit team should compare the audit evidence with the audit criteria to determine the extent of conformity and nonconformity. The audit team should also identify any opportunities for improvement, best practices, positive aspects or potential risks. The audit team should use professional judgement and apply the principles of auditing when evaluating the audit evidence.

Making audit conclusions: The audit team should consolidate the audit findings and evaluate the overall performance and effectiveness of the management system. The audit team should also consider the audit objectives, scope and criteria, as well as the context and expectations of the auditee and other interested parties. The audit team should provide a clear, concise and objective statement of the audit conclusions, which may include the degree of conformity, the achievement of the intended outcomes, the need for corrective actions, the suitability for certification, etc.

Evaluating against the audit criteria: The audit team should review the audit conclusions and ensure that they are consistent with the audit criteria and supported by sufficient and appropriate audit evidence. The audit team should also ensure that the audit conclusions are communicated to the auditee and other relevant parties in a timely and effective manner, using the agreed audit report format and distribution method.

The actions that should be taken in the context of the audit are:

•Option B: Call the individual(s) managing the audit programme to explain the situation and recommend immediate suspension of certification to protect the integrity of the Certification Body. This option is correct because the auditor has found serious and significant gaps in the QMS processes that affect the health and safety of the patients, which is a major nonconformity that may warrant suspension of certification. The auditor should inform the individual(s) managing the audit programme of the situation and the audit findings, and recommend immediate suspension of certification to protect the integrity of the Certification Body and the credibility of the certification scheme. The auditor should also follow the Certification Body’s procedures and rules for suspension of certification and communicate the decision and the consequences to the auditee.

•Option C: Continue with the meeting, present the audit conclusions and inform the DCM that the organisation will receive the audit report in due course. This option is correct because the auditor should not terminate or postpone the closing meeting due to the absence of the Catering Manager, as the DCM is the auditee’s nominated representative for the audit. The auditor should continue with the meeting, present the audit conclusions and the audit findings, and inform the DCM that the organisation will receive the audit report in due course. The auditor should also explain the audit outcome recommendation and the suspension of certification, and request the DCM to acknowledge the receipt and understanding of the audit results.

The following options are not correct:

•Option A: Close the meeting immediately after the DCM’s response and advise that the issues will be addressed at the next surveillance visit. This option is not correct because the auditor should not close the meeting without presenting the audit conclusions and the audit findings, as this would violate the audit principles of fairness and transparency. The auditor should also not advise that the issues will be addressed at the next surveillance visit, as this would imply that the auditor is accepting the auditee’s delay and inaction, and that the auditor is not taking the major nonconformity seriously.

•Option D: Conclude the meeting early and advise that it will be rescheduled once the Catering Manager has returned to work. This option is not correct because the auditor should not conclude the meeting early or reschedule it due to the absence of the Catering Manager, as this would disrupt the audit process and the audit schedule. The auditor should also not wait for the Catering Manager to return to work, as this would delay the communication and resolution of the major nonconformity, and potentially compromise the health and safety of the patients.

•Option E: Recommend that all personnel should be given urgent in-depth training in the QMS. This option is not correct because the auditor should not recommend or prescribe specific corrective actions to the auditee, as this would violate the audit principles of independence and objectivity. The auditor should only report the audit findings and the audit outcome recommendation, and leave the responsibility and authority for determining and implementing the corrective actions to the auditee.

•Option F: Thank the DCM for his time and express an expectation that improvements will be made in the QMS. This option is not correct because the auditor should not thank the DCM for his time and express an expectation that improvements will be made in the QMS, as this would imply that the auditor is satisfied and optimistic with the auditee’s performance and response, and that the auditor is not taking the major nonconformity seriously. The auditor should instead express the concern and dissatisfaction with the auditee’s QMS processes and the impact on the health and safety of the patients, and communicate the suspension of certification and the need for urgent and effective corrective actions.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 emphasizes risk-based thinking, which helps organizations identify factors that could prevent achieving planned results and take preventive action. Clause 6.1 (Actions to Address Risks and Opportunities) requires organizations to determine risks and opportunities and implement actions to mitigate potential negative impacts.

In the scenario, AL-TAX identified potential risks and implemented preventive actions, aligning with risk-based thinking. ISO 9001:2015 integrates risk management throughout the standard, ensuring processes are designed to minimize uncertainties.

Comprehensive and Detailed In-Depth Explanation:

Completeness ensures that all necessary audit evidence, observations, and findings are properly documented, which is critical for traceability and accountability in an audit.

While transparency and fair presentation are principles of auditing, completeness is specifically related to maintaining audit work documents, as required in ISO 19011:2018, Clause 6.5.4 (Preparing Audit Work Documents).

The purpose of a Stage 1 third-party audit is to determine an organization’s readiness for their Stage 2 Certification Audit. During the Stage 1, the auditor will review the organization’s management system documented information, evaluate the site-specific conditions, and have discussions with personnel. The objective is to assess the alignment of the organization’s design with ISO 9001 requirements and to identify any areas of concern that could be classified as a nonconformance during the Stage 2 Audit. The auditor will also use the Stage 1 Audit to complete Stage 2 Audit planning, including a review of the allocation of resources and details for the next phase of the audit. Therefore, the option that best describes the purpose of a Stage 1 third-party audit is A, to determine the auditees understanding of ISO 9001. The other options are not correct, as they are not the main focus of a Stage 1 audit:

•B. To get to know the organization’s customers: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s customers, but rather in the organization’s ability to meet customer and applicable statutory and regulatory requirements.

•C. To learn about the organization’s procurement processes: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s procurement processes, but rather in the organization’s ability to control externally provided processes, products and services.

•D. To introduce the audit team to the client: This is not the purpose of a Stage 1 audit, as the auditor is not there to make introductions, but rather to conduct a preliminary examination of the organization’s compliance with ISO 9001 standards.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015, Clause 5.2.1 (Establishing the Quality Policy) states that top management must establish, implement, and maintain a quality policy.

In the scenario, the quality manager (Leslie) created the policy, but top management did not establish it themselves, which violates Clause 5.2.1. While the policy can be drafted by a team, top management must take full ownership of its development and approval.

Comprehensive and Detailed In-Depth Explanation:

Audit risks are categorized into different types based on where failures may occur in the QMS audit process.

Clause References:

ISO 19011:2018, Clause 6.3 – Managing Audit Risk: Defines different audit risks, including control risk.

Why is the Correct Answer A?

Control risk occurs when internal controls fail to prevent or detect nonconformities.

Even if controls exist, the risk remains if the QMS fails to identify or correct defects.

Why are the Other Options Incorrect?

B (Inherent risk) → This refers to risks naturally present in processes, even before controls are applied.

C (Detection risk) → This is the risk that an auditor fails to detect nonconformities.

D (Operational risk) → This refers to risks related to day-to-day business operations, not QMS audits.

Establishing the audit programme objectives

Determining and evaluating the audit programme risks and opportunities

Establishing the audit programme

Initiating the audit

Preparing all audit activity

Conducting the audit activities

To complete the sequence, you can drag and drop the options to the appropriate blank section.

Here is a brief explanation of each stage:

Establishing the audit programme objectives: This is the first stage of the audit process, where the purpose, scope, and criteria of the audit programme are defined. The audit programme objectives should be aligned with the strategic direction and policies of the organization, and should address the needs and expectations of the interested parties12.

Determining and evaluating the audit programme risks and opportunities: This is the second stage of the audit process, where the factors that can affect the achievement of the audit programme objectives are identified and assessed. The audit programme risks and opportunities should consider the internal and external issues, the requirements and changes of the interested parties, and the results and feedback from previous audits12.

Establishing the audit programme: This is the third stage of the audit process, where the audit programme is designed and implemented. The audit programme should include the audit programme procedures, the audit programme resources, the audit methods and techniques, the audit frequency and schedule, and the audit programme performance indicators12.

Initiating the audit: This is the fourth stage of the audit process, where the audit is prepared and planned. The audit initiation involves selecting the audit team, establishing the contact with the auditee, defining the audit objectives, scope, and criteria, developing the audit plan, and conducting the document review123.

Preparing all audit activity: This is the fifth stage of the audit process, where the audit activities are organized and coordinated. The audit preparation involves assigning the audit tasks, communicating with the auditee and the audit team, arranging the logistics, preparing the working documents, and conducting the opening meeting123.

Conducting the audit activities: This is the sixth and final stage of the audit process, where the audit evidence is collected and evaluated. The audit conduct involves performing the audit activities, such as interviews, observations, document reviews, and tests, documenting the audit findings, preparing the audit conclusions, and conducting the closing meeting123.

I hope this helps you with your ISO 9001 Lead Auditor objectives and content. If you have any further questions, please feel free to ask. ????

Comprehensive and Detailed In-Depth Explanation:

ISO 17021-1:2015, Clause 9.4.9 (Corrective Actions) states:

The auditor can set a reasonable deadline for corrective actions.

10 to 60 days is a best practice timeframe for the auditee to respond.

The auditee must propose corrective actions, but the audit team has the authority to set the deadline.

A 7-day deadline (A) is too short, and the audit team—not the auditee—determines the timeframe (B).

A screenshot of a computer AI-generated content may be incorrect.

Clause 8.5.3 – Property Belonging to Customers or External Providers:This clause requires the organization to care for customer property while it is under their control. If there is damage, they must inform the customer and retain documented information. Thus, informing customers of the reason for laundry damage relates directly to this clause.???? Reference: ISO 9001:2015 Clause 8.5.3

Clause 7.1.3 b – Infrastructure:It refers to the provision and maintenance of infrastructure necessary for the operation of processes. This includes equipment. If resources are not allocated for outdated equipment, it directly breaches this clause.???? Reference: ISO 9001:2015 Clause 7.1.3 b

Clause 10.2.1 b – Corrective Action:This clause covers actions to eliminate the causes of nonconformities to prevent recurrence, including evaluating and correcting customer complaints.???? Reference: ISO 9001:2015 Clause 10.2.1 b

Clause 5.1.2 b – Customer Focus (Top Management):Top management must ensure risks to customer satisfaction, including property damage, are addressed. This aligns with addressing the risk of damaging customer laundry.???? Reference: ISO 9001:2015 Clause 5.1.2 b

Clause 6.2 – Quality Objectives and Planning to Achieve Them:Setting objectives for reducing customer complaints (like those about laundry damage) falls under this clause.???? Reference: ISO 9001:2015 Clause 6.2

Comprehensive and Detailed In-Depth Explanation:

ISO 19011:2018, Clause 5.4 (Audit Records Management) states that the audit schedule must be maintained as a key record.

Thus, C is the correct answer.