ISO-9001-Lead-Auditor QMS ISO 9001:2015 Lead Auditor Exam Question and Answers

Comprehensive and Detailed In-Depth Explanation:

ISO 9000:2015 defines quality as " the degree to which a set of inherent characteristics of an object fulfills requirements. "

Clause 3.6.2 (Quality) confirms this definition.

Quality is determined by how well an object (product, service, or process) meets defined requirements (customer, regulatory, or internal).

The other options do not align with the official ISO definition:

Option A refers to performance capability but does not define quality.

Option C describes work conditions, not quality.

Option D focuses on efficiency rather than fulfilling requirements.

Approve Certification Body: Accreditation Body

Award certification: Certification Body

Recommend certification: Audit Team Leader

Maintain certification:

Comprehensive Detailed Explanation

In the context of a third-party ISO 9001 audit, different entities play specific roles in the certification process. Here ' s a detailed explanation of the responsibilities:

Approve Certification Body: Accreditation BodyThe Accreditation Body is responsible for approving Certification Bodies. Accreditation Bodies are independent entities that evaluate the competence of Certification Bodies, ensuring they meet international standards like ISO/IEC 17021, which sets out the criteria for bodies providing audit and certification of management systems. In this role, they confirm that the Certification Body is capable of conducting ISO 9001 audits and granting certifications in accordance with international guidelines.

Award Certification: Certification BodyThe Certification Body is the entity that ultimately awards the certification to an organization after verifying that it meets the ISO 9001 standards. Certification Bodies conduct audits, either directly or through a team of auditors, and based on the audit outcomes, they issue the certification, indicating that the organization complies with ISO 9001.

Recommend Certification: Audit Team LeaderThe Audit Team Leader is responsible for leading the audit and making a recommendation to the Certification Body. This recommendation is based on the audit findings—whether the organization meets the ISO 9001 requirements or if there are areas of non-compliance that need corrective action. The final decision on certification is not made by the Audit Team Leader but by the Certification Body.

Maintain Certification: Certification BodyMaintaining certification refers to the ongoing process of ensuring that an organization continues to comply with ISO 9001 requirements. The Certification Body conducts regular surveillance audits (e.g., annually) and may also perform recertification audits (typically every three years). This ongoing monitoring ensures that the certified organization continues to adhere to the quality management standards over time.

This breakdown clearly assigns responsibility based on the defined roles of Accreditation Bodies, Certification Bodies, and Audit Teams in the ISO 9001 certification process.

According to ISO 19011:2018, clause 6.3.2, an audit plan should include the following information:

The audit objectives, scope, and criteria

The audit team members and their roles and responsibilities

The audit schedule, including the sequence and timings of audit activities, such as opening meeting, document review, interviews, observations, closing meeting, etc.

The expected time and duration of each audit activity and location

The name and contact details of the auditee’s representative and other relevant parties

The allocation of appropriate resources to support the audit activities

The audit methods and techniques to be used, such as interviews, observations, sampling, etc.

The audit documents and records to be prepared and retained

The audit language and communication methods

The audit risks and opportunities and how to address them

The audit follow-up arrangements, if applicable

Therefore, the correct answer is D and F, as they are essential elements of an audit plan. The other options are either irrelevant or optional for an audit plan. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.2

ISO 19011: Guidelines for Auditing Management Systems | ASQ, section “Making audit arrangements”

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.3.2

Comprehensive and Detailed In-Depth Explanation:

According to ISO 17021-1:2015, Clause 9.4.9 (Corrective Actions):

Minor nonconformities do not require a follow-up audit but must be corrected before the next surveillance audit.

Follow-up audits are required only for major nonconformities.

The audit team should recommend corrective actions, not enforce immediate follow-ups for minor nonconformities.

Thus, A is the correct answer.

Comprehensive and Detailed In-Depth Explanation:

Policies and guidelines are considered documentary evidence because they are written records that demonstrate how an organization complies with ISO 9001 requirements.

Clause References:

ISO 19011:2018, Clause 6.4.6 – Audit Evidence:

Documentary evidence includes manuals, procedures, and policies.

Why is the Correct Answer C?

Documentary evidence includes written records such as policies, procedures, and documented instructions that support QMS implementation.

Auditors review policies to verify conformance with ISO 9001.

Why are the Other Options Incorrect?

A (Confirmative evidence) → Not a recognized category in ISO auditing.

B (Technical evidence) → Technical evidence refers to measurements, test results, or product data, not policies.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 9001:2015, Clause 9.2 (Internal Audit):

Internal audits are conducted by employees of the company who are trained as auditors.

External auditors are not mandatory unless required by the organization.

Thus, A is the correct answer.

ISO 9001:2015 Clause 7.5 – Documented Information establishes requirements for the creation, updating, and control of documented information within the Quality Management System (QMS).

Relevant ISO 9001 Requirements

Clause 7.5.2 – Creating and Updating

When creating and updating documented information, the organization shall ensure appropriate:

Identification and description (e.g., title, date, author, reference number)

Format and media

Review and approval for suitability and adequacy

This supports the requirement that documented information be identifiable .

Clause 7.5.3 – Control of Documented Information

Documented information required by the QMS and by ISO 9001 shall be controlled to ensure:

It is available and suitable for use where and when it is needed

It is adequately protected

Control activities include:

Distribution, access, retrieval and use

Storage and preservation

Control of changes (version control)

Retention and disposition

These requirements support:

Retrievable → Required by Clause 7.5.3

Under change control → Required by Clause 7.5.3

Identifiable → Required by Clause 7.5.2

Why " Translatable to Other Languages " is Incorrect

ISO 9001:2015 does not require documented information to be translated into other languages.

An organization may choose to translate documents where necessary for operational effectiveness, multinational operations, or legal requirements, but this is not a requirement of Clause 7.5 .

Therefore, being translatable to other languages is not a characteristic that documented information must demonstrate to conform to ISO 9001.

Evaluation of Each Option

Option

Required by ISO 9001 Clause 7.5?

Retrievable

Yes

Under change control

Yes

Translatable to other languages

No

Identifiable

Yes

ISO-Aligned Conclusion

Clause 7.5 requires documented information to be identifiable , retrievable , and controlled against unauthorized or uncontrolled changes . There is no ISO 9001 requirement that documented information be translatable into other languages .

Answer: C

===========

According to the ISO 9001:2015 standard, clause 10.2.1 defines nonconformity as the non-fulfilment of a requirement. A requirement can be related to the quality management system, the products and services, the customer expectations, or the applicable statutory and regulatory requirements. Nonconformities can be detected through various sources, such as audits, inspections, tests, customer complaints, or internal reviews. Nonconformities must be addressed by taking appropriate actions to correct them and prevent their recurrence.

In this scenario, the auditee has shown several issues that indicate nonconformities in their quality management system. Two statements that apply to the term nonconformity are:

A. No quality objectives planned for the top management team: According to ISO 9001, clause 6.2.1, the organization must establish quality objectives at relevant functions, levels, and processes. The quality objectives must be consistent with the quality policy and the strategic direction of the organization. The top management team is responsible for providing leadership and direction for the quality management system and ensuring its alignment with the organization’s purpose and context. Therefore, the absence of quality objectives for the top management team is a nonconformity as it violates the requirement of clause 6.2.1.

E. Quality improvements not aligning with the quality policy: According to ISO 9001, clause 5.2.1, the quality policy is a statement of the organization’s intentions and direction regarding quality, as formally expressed by top management. The quality policy must provide a framework for setting quality objectives and be compatible with the context and strategic direction of the organization. The quality policy must also be communicated, understood, and applied within the organization. Therefore, if the quality improvements are not aligned with the quality policy, it is a nonconformity as it violates the requirement of clause 5.2.1.

Comprehensive and Detailed In-Depth Explanation:

A horizontal audit examines one process across multiple departments to assess consistency.

Thus, A is the correct answer.

Comprehensive and Detailed In-Depth Explanation:

As per ISO 9001:2015, Clause 10.2 (Nonconformity and Corrective Action), all identified nonconformities, including minor ones, must be documented and communicated to the auditee.

Minor nonconformities can lead to major issues if left unaddressed. The auditor must inform the organization before moving to the next audit phase so that corrective actions can be taken. Clause 9.2.2 (Internal Audit) states that audit findings should be reported without undue delay.

Since Li Na did not report the minor nonconformities immediately, her decision was incorrect. Minor nonconformities should always be documented and communicated before proceeding to the next phase.

According to ISO 9001:2015, clause 9.1.1, the organization is required to determine what needs to be monitored and measured, the methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid results, and when the monitoring and measuring shall be performed. The organization is also required to retain appropriate documented information as evidence of the results.

Therefore, in the scenario given, the organization should have planned for monitoring and measuring the billet temperature, as it is a critical factor for the quality of the product and the process. The organization should also have established a procedure that provides instruction in taking billet temperature, using the pyrometer or other suitable methods, to ensure consistency and accuracy. The organization should also have performed periodic analysis of the results of temperature checks, to identify trends, problems, and opportunities for improvement.

Hence, the options that would provide evidence of conformance with clause 9.1.1 of ISO 9001 are A, E, and F, as they are aligned with the requirements of the clause. The other options are either irrelevant or not directly related to clause 9.1.1, as they do not pertain to the monitoring and measurement of the billet temperature.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.4.9 (Audit Conclusions & Reporting):

One consolidated audit report should be drafted based on all team members’ findings.

Each auditor does not draft separate reports (B) unless explicitly required.

Thus, A is the correct answer.

According to ISO 19011:2018, clause 6.3.2, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the following information1:

•the audit objectives, scope and criteria

•the audit team members and their roles and responsibilities

•the audit schedule, including the date, time and location of each audit activity

•the expected time and duration of meetings and interviews

•the allocation of appropriate resources to critical areas of the audit

•the identification of the audit client and the auditee

•the identification of the guides and observers, if any

•the documents and records to be reviewed before and during the audit

•the audit methods and tools to be used

•the audit language and terminology

•the audit report content, format, distribution and expected completion date

•the risk to achieving audit objectives and the contingency plan, if any

Therefore, the issue which is not expected to be included in the audit plan is C, expectations of the organisation’s management. This issue is not relevant to the conduct of the audit, as the audit is based on the audit criteria, not on the management’s expectations. The management’s expectations may be considered during the audit initiation or the audit programme management, but they are not part of the audit plan.

Comprehensive and Detailed In-Depth Explanation:

Reliability in service quality refers to the consistent and dependable delivery of promised services.

ISO 9001:2015 emphasizes reliability through:

Clause 8.2.1 (Customer Communication) – Ensuring clarity in service commitments.

Clause 8.5.1 (Control of Service Provision) – Ensuring processes meet requirements consistently.

Other options do not fully define reliability:

Option A (Safe services) relates to safety, not reliability.

Option B (Readiness and goodwill) relates to responsiveness, not reliability.

Option D (Low cost) focuses on pricing, not quality.

When conducting a third-party audit to ISO 9001, especially in the context of training and corrective actions taken due to customer complaints, the most appropriate audit trails to follow would be:

A. Ask if customer complaints had ceased since the multi-skilled training finished. This audit trail is relevant because it directly relates to the effectiveness of the corrective action taken. If customer complaints have decreased or ceased, it could indicate that the additional training was effective1.

F. Review records to assess if all planned training has been completed. This trail is important to ensure that the training plan has been fully implemented and to verify that all staff members have received the necessary training. It also helps in assessing the adequacy of the training in terms of content, frequency, and outcomes1.

These two trails, A and F, are closely linked to the issue of customer complaints and the organization’s response to them. They provide insight into whether the actions taken were suitable and whether they have led to improvements in staff performance and customer satisfaction1. The other options, while potentially useful, do not directly address the immediate concern of the effectiveness of the corrective actions taken in response to the customer complaints1.

 Clause Reference – ISO 9001:2015 Clause 8.6 (Release of Products and Services):

ISO 9001 requires that products and services are not released to the customer until:

All planned verification activities have been completed.

Acceptance criteria have been met.

Any necessary approvals have been obtained.

In this scenario:

The sacrificial anodes for Project DK were shipped before the galvanic efficiency test results were analyzed.

This constitutes a nonconformity against Clause 8.6 because the products were released without completing the required tests.

ï‚· Option Analysis:

A. A retrospective concession was not sought from the customer once the test results had been approved by the Quality Manager:Incorrect. While obtaining a concession might mitigate the situation, the nonconformity pertains to the process failure of releasing the products without completing required tests, not the absence of a concession.

B. Release of the product without acceptable test results has been accepted by the customer for Project DK:Incorrect. The customer was not informed before the release, and there is no indication that this was accepted beforehand. Furthermore, ISO 9001 requires planned processes to be followed, regardless of later acceptance.

C. Products for Project DK have been released before product approval through the quality control process:Correct. This description accurately reflects the nonconformity. The quality control process required test results to be analyzed and verified before release, which did not happen.

D. The untested product was not recalled until the galvanic efficiency of the anodes was verified:Incorrect. The issue is not about recalling the product but about releasing it without completing the required tests. Recalling the product is not mentioned in the scenario.

ï‚· Why C is Correct:

The nonconformity is a clear breach of Clause 8.6, where the products were released without meeting the planned verification requirements.

This demonstrates a failure in adhering to quality control processes, which is a critical aspect of ISO 9001 compliance.

ï‚· Key ISO 9001 Reference:

Clause 8.6: Products and services shall not be released to the customer until all planned activities (e.g., testing) have been satisfactorily completed, or the customer has approved the release with knowledge of deviations.

D. I would look for evidence that the actions resulting from the risk assessment had been taken.

According to ISO 9001:2015, Clause 6.1.2 requires the organization to plan actions to address risks and opportunities. The organization must integrate and implement these actions into its quality management system and evaluate their effectiveness. The auditor should seek evidence that the organization has assessed the risks and taken appropriate actions.

B. I would ask to audit the Technical Manager by phone.

As the Technical Manager is responsible for this process and is absent due to illness, it is reasonable to attempt to contact him to obtain accurate information. This ensures that the audit process is not unduly delayed and that the information is obtained from the appropriate person.

A. I would not accept the legal compliance expert answering the question.

While the legal compliance expert might not be the best source for technical details, outright rejecting their input is not appropriate. It is better to first verify if the expert can provide relevant information.

C. I would delay the audit until the return of the Technical Manager.

This would be an inefficient approach. Contacting the Technical Manager by phone is a more practical and reasonable option.

E. I would ask for a different guide instead of the legal compliance expert.

The guide ' s role is not necessarily to answer technical questions but to facilitate the audit. Since Jack is already familiar with the situation, replacing him may not add value.

F. I would ask the consultant to leave the meeting since he is not an employee of the organization.

This is inappropriate and could disrupt the audit process. There is no rule in ISO 9001 preventing a consultant from assisting in the audit if authorized by the organization.

Why Not the Other Options:

ISO 9001:2015 does not define detailed audit role terminology itself, but it explicitly refers to ISO 19011 for audit guidance. This makes ISO 19011 authoritative for defining audit roles and responsibilities within ISO 9001 audits.

ISO 9001:2015, Clause 9.2.2 – NOTE:

“See ISO 19011 for guidance.”

Therefore, the correctness of the statements is determined using ISO 19011 (Auditing management systems) principles, which are fully applicable to second-party audits .

✅ B. An auditor is a person who conducts an audit

✔ Correct

ISO 19011 defines an auditor simply and clearly as “a person who conducts an audit.”

This definition applies equally to first-, second-, and third-party audits.

This statement is universally correct and fully aligned with ISO auditing terminology.

✅ F. When needed, a translator appointed by the auditee

✔ Correct

ISO 19011 allows the use of translators/interpreters to support communication during audits.

Translators are typically appointed by the auditee , not the audit team.

Translators are not members of the audit team and do not influence audit conclusions.

This is a valid and correct statement for second-party audits.

❌ Why the other options are incorrect

❌ A. Guide appointed by the audit team leader

In ISO 19011, a guide is appointed by the auditee , not by the audit team leader.

The guide assists with logistics and access, not audit execution.

❌ Incorrect appointment authority.

❌ C. The audit team cannot include auditors-in-training

ISO 19011 explicitly allows auditors-in-training to be part of the audit team under supervision .

❌ Incorrect restriction.

❌ D. Observer provides information about the organisation

An observer does not provide information or participate in the audit.

Observers may attend (e.g. regulators, accreditation bodies) but remain passive.

❌ Incorrect role description.

❌ E. A technical expert is part of the audit team

A technical expert supports the audit team , but is not considered an auditor .

They provide subject-matter expertise under the direction of auditors.

❌ The statement is misleading and therefore incorrect.

In ISO 9001:2015, the responsibility for managing the audit program lies with those overseeing the entire audit process rather than the Audit Team Leader. During the planning stage, before involving the Audit Team Leader, key actions for managing the audit program include:

1. Providing the Resources Needed: According to clause 7.1 (Resources), the audit program manager must ensure that the necessary resources are in place to conduct the audit effectively. This encompasses logistical support, personnel, and other required resources for the audit to proceed smoothly.

2. Reviewing Reports of Previous Audits: As per clause 9.2.2 (Internal Audit), it is essential to consider the results of previous audits to plan effectively for the upcoming audit. This helps identify areas that require particular attention, ensuring continuity and focusing on recurring issues or improvements since the last audit.

These actions ensure that the audit is thoroughly prepared and that there is continuity and focus on any areas that might need closer inspection. The other options, such as preparing the audit plan, assigning responsibilities, preparing checklists, and selecting the audit team members, generally fall under the duties of the Audit Team Leader once they are appointed and engaged in the planning process.

Analyzing Each Statement:

A.Incorrect. The audit team leader must communicate concerns as they arise, not just during the closing meeting. Per ISO 19011:2018 Clause 6.4.9, significant concerns should be shared promptly with the auditee and audit client during the audit process to allow for immediate understanding and potential resolution.

B.Incorrect. The auditor or team leader is not specifically required to inform the general manager about uncontrolled documents. Instead, the issue is communicated within the framework of the audit findings to the audit client or auditee, as appropriate.

ISO 9001:2015 requires audits to be conducted in an objective and impartial manner . Although ISO 9001 does not list specific threats to impartiality, it explicitly refers to ISO 19011 for guidance on auditing principles, including impartiality.

ISO 9001:2015, Clause 9.2.2 (NOTE) states that guidance on auditing is given in ISO 19011 .

According to ISO 19011:2018 , one of the fundamental auditing principles is impartiality , defined as the basis for the objectivity of audit conclusions. ISO 19011 identifies several threats to impartiality , including self-interest and familiarity.

Explanation of the correct options:

C. Self-interest

ISO 19011 identifies self-interest as a primary threat to impartiality. This occurs when an auditor has a personal, financial, or professional interest in the outcome of the audit, which could influence audit judgement or conclusions.

Examples include financial gain, career advantage, or personal benefit linked to the audit outcome.

E. Your spouse is working in the organisation being audited

This represents a familiarity or relationship threat. ISO 19011 highlights that close personal relationships with the auditee can compromise, or be perceived to compromise, auditor impartiality. Even if the auditor remains objective, the relationship creates a clear conflict of interest.

Explanation of why the other options are not selected:

A. Competence : Competence supports effective auditing and is not a threat to impartiality.

B. Lack of Experience : This affects audit effectiveness, not impartiality.

D. Consulting : Consulting can create a conflict of interest in certain contexts, but on its own it is not necessarily an impartiality threat unless it involves consulting for the same organisation or system being audited, which is not stated here.

F. Expert knowledge of the process : Technical expertise improves audit effectiveness and does not threaten impartiality.

Summary aligned to ISO guidance:

The most likely threats to auditor impartiality are those involving personal interest or close relationships with the auditee. Therefore, self-interest and a spouse working in the audited organisation are the correct answers under ISO 9001–aligned auditing guidance.

Comprehensive and Detailed In-Depth Explanation:

Understanding Audit Stages Based on ISO/IEC 17021-1:2015

ISO certification audits consist of two main stages:

Stage 1 Audit (Readiness Review)

The organization’s documented information is reviewed to assess readiness for Stage 2.

This ensures that the QMS is developed, implemented, and prepared for full assessment.

Stage 2 Audit (On-Site Evaluation)

Auditors assess process implementation and effectiveness through interviews, observations, and evidence collection.

The audit team verifies if the organization meets ISO 9001 requirements in practice.

Why is the Correct Answer B?

The audit team reviewed ME’s documents, which is a Stage 1 activity.

The audit team performed interviews, sampling, and on-site verification, which is a Stage 2 activity.

There was no mention of an audit follow-up or a surveillance audit, which occur post-certification.

Why are the Other Options Incorrect?

A (Audit follow-up and Stage 1 Audit) → Follow-up audits occur after certification, which was not the case here.

C (Stage 2 Audit and Surveillance Audit) → Surveillance audits are post-certification audits and were not conducted yet.

Comprehensive and Detailed In-Depth Explanation:

ISO 19011:2018 requires auditors to conduct audits professionally and diligently.

Clause References:

ISO 19011:2018, Clause 4.4 – Professional Care: Auditors must exercise due diligence in conducting audits.

ISO 9001:2015, Clause 9.2 – Internal Audit: Requires objective and systematic audits to evaluate QMS effectiveness.

Why is the Correct Answer A?

The audit team followed best practices by gathering verifiable audit evidence through interviews, document reviews, and observations.

They ensured fair presentation of findings in the final audit report.

They complied with ISO 9001 and ISO 19011 guidelines for audit procedures.

Why are the Other Options Incorrect?

B (Ordinary negligence) → No evidence of negligence; the team followed structured audit processes.

C (Gross negligence) → No indication that the auditors ignored important responsibilities.

D (Willful misconduct) → The auditors acted professionally and did not intentionally disregard rules.

According to the ISO 9001:2015 document, the organisation must continually improve the suitability, adequacy, and effectiveness of the quality management system1. However, among the six options given, only effectiveness is directly mentioned as an aspect of the quality management system that must be continually improved. Therefore, C is one of the correct answers.

Efficiency, on the other hand, is not explicitly stated as an aspect of the quality management system that must be continually improved, but it is implied by the quality management principle of improvement, which states that successful organisations have an ongoing focus on improvement2. One of the key benefits of applying this principle is improving operational effectiveness and efficiency2. Therefore, E is another correct answer.

Suitability, adaptability, responsiveness, and applicability are not aspects of the quality management system that must be continually improved, according to the ISO 9001:2015 document. They may be related to the quality management system, but they are not the focus of continual improvement.

Therefore, the correct answer is C and E.

In this scenario, the audit team leader must balance maintaining the integrity of the audit plan while considering the auditee’s request. The two best responses allow for flexibility without compromising the audit ' s rigor:

A. I could audit the other laboratories virtually at the end of this audit: Virtual audits can be a valid option, especially in multi-site audits. ISO 9001:2015 does not prohibit virtual audits, and in certain situations, they are practical for reviewing documentation or observing operations remotely.

C. I could try to revise the audit programme to see if I can audit all laboratories: Revising the audit programme to accommodate additional site visits is a reasonable compromise. ISO 9001:2015 audits are based on risk and sampling, but the audit team leader has the flexibility to adjust the audit scope if it fits within the audit duration and resources.

The other options, such as extending the audit duration (B, F) or strictly adhering to the original plan (D, E), may not be practical or necessary. Revising the plan to audit all laboratories or using virtual auditing ensures that the audit remains efficient while addressing the organization ' s concerns​.

Clause 8.3.4.d of ISO 9001:2015 requires that design and development validation be performed to ensure that the resulting products or services meet the requirements for their specified application or intended use. Validation is critical to confirm that the product works as intended in real-world conditions.

In this case, Noitol omitted the design validation step approximately 50% of the time, which is a direct violation of Clause 8.3.4.d. Although they collect feedback after the fact, this is not a substitute for formal validation before the product is released. The nonconformity arises because the process of validation was neglected, not the recording of improvements or feedback.

Other options, such as documenting improvements (A) or issues with planning verification (B), are important but do not directly address the primary concern: the lack of consistent design validation before product release. Option D (8.6) concerns product release, but this nonconformity focuses on the validation stage, not just approval for release​.

Corrective action must eliminate the cause of a nonconformity and prevent recurrence. In this case, the problem is process variability causing bruised and over-ripe fruit and increasing complaints.

Option C is acceptable because applying improved process controls aligned with customer criteria directly addresses the cause and prevents recurrence.

A may help only if competence is the cause, which is not established. B is investigation, not corrective action itself. D disposes of rejected product but does not prevent recurrence.

===========

The activities that are specifically required by ISO 17021-1 as part of third-party (Certification Body) surveillance audit processes are:

•Option A: Audit use of certification marks on marketing materials. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to audit the client’s use of marks and/or any other reference to certification, as applicable, to ensure conformity with the certification requirements.

•Option B: Review changes to the QMS since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review any changes affecting the client’s quality management system and its ability to continue to fulfil the requirements of the standard used for certification.

•Option C: Confirm effectiveness of internal audit and management review. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to confirm the continuing effectiveness of the client’s quality management system, including the effectiveness of the internal audit and management review processes.

•Option F: Review the status of previously raised findings and audit effectiveness of any outstanding findings. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the status of findings and any corrective actions taken by the client in response to previous audits, and to verify the effectiveness of the implemented corrective actions.

•Option H: Verify legal compliance. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to verify the client’s compliance with applicable statutory and regulatory requirements related to the scope of certification.

•Option I: Handling of customer complaints since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the client’s handling of customer complaints related to the certified activities since the last audit.

The following options are not correct:

•Option D: Complete a full document review of the quality management system. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to complete a full document review of the quality management system during surveillance audits. A full document review is only required during the initial certification audit or when there are significant changes to the quality management system or the certification requirements.

•Option E: Failing to meet financial responsibilities. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to audit the client’s financial responsibilities during surveillance audits. The certification body may have contractual arrangements with the client regarding the payment of fees, but this is not part of the surveillance audit process.

•Option G: Review the calibration status of the instrumentation. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to review the calibration status of the instrumentation during surveillance audits. The certification body may audit the client’s monitoring and measuring resources as part of the quality management system requirements, but this is not a specific activity required by ISO 17021-1.

•Option J: Conduct a minimum number of annual surveillance audits during the certification period. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to conduct a minimum number of annual surveillance audits during the certification period. The certification body may determine the frequency and duration of surveillance audits based on the risk and performance of the client, but this is not a specific activity required by ISO 17021-1.

According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:

•ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc.

•Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation

•Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities

•Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation’s legal obligations, policies, or procedures

•Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved

•Organisation’s documented information, such as policies, procedures, manuals, records, etc., that describe the organisation’s management system and its processes

•Commitment to follow principles issued by an NGO, such as the United Nations Global Compact, the International Labour Organization, etc., as long as they are relevant to the organisation’s context and objectives

•Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation’s activities, products, and services

Therefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation’s management system. Commercial advertisements and claims made on the organisation’s website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.

Comprehensive and Detailed In-Depth Explanation:

The audit team selected 4 out of 45 customer complaints for electrical services, which is too low based on standard statistical sampling methods. According to ISO 19011:2018 (Guidelines for Auditing Management Systems), for a population size between 13 and 52, a minimum sample size should be 5 to achieve a reasonable level of confidence.

This means the selected sample (4 complaints) was insufficient and did not align with standard sampling procedures. Therefore, the correct answer is A.

Relevant ISO 9001 Requirement

Clause 7.3 – Awareness states that persons doing work under the organisation’s control shall be aware of:

The quality policy;

Relevant quality objectives;

Their contribution to the effectiveness of the QMS;

The implications of not conforming with QMS requirements.

A critical point is that ISO 9001 uses the phrase:

“persons doing work under the organisation ' s control”

This includes:

Employees,

Temporary personnel,

Agency personnel,

Subcontractors performing work on behalf of the organisation.

Why Option B is Correct

In the scenario:

The refrigeration engineers performing the actual maintenance and repair services are all subcontractors.

The Managing Director states that these subcontractors have not been informed of:

the Quality Policy,

quality objectives,

plans to address risks and opportunities.

The justification given is that the subcontractors themselves have ISO 9001-certified management systems.

However, ISO 9001 certification of a subcontractor does not remove the organisation ' s responsibility to ensure persons working under its control are aware of the organisation ' s own QMS requirements.

Therefore, the organisation has failed to demonstrate compliance with Clause 7.3 Awareness .

Why the Other Options Are Incorrect

A. Clause 7.4 – Communication

The scenario does not primarily indicate a failure of communication processes.

The issue is not whether communication methods exist, but whether the subcontractors have the required awareness.

C. Clause 7.2 – Competence

The Managing Director explicitly states that competence requirements are applied to both full-time staff and subcontractors.

No evidence is presented that competence has not been determined or evaluated.

Therefore, a competence failure is not the strongest conclusion.

D. Clause 7.5 – Documented Information

The scenario indicates documented information exists and was reviewed by the auditor.

No evidence suggests documented information is missing, uncontrolled, or unavailable.

Therefore, Clause 7.5 is not the most likely issue.

ISO-Aligned Conclusion

The organisation relies entirely on subcontracted refrigeration engineers to deliver its certified services. Because these personnel perform work under the organisation ' s control, ISO 9001 requires them to be aware of the organisation ' s quality policy, objectives, and relevant QMS requirements.

The evidence shows this awareness has not been established.

Answer: B. 7.3 Awareness

===========

Comprehensive and Detailed In-Depth Explanation:

Stage 1 Audit (ISO 9001:2015, Clause 9.2.2) is a documentation review to assess the readiness for a Stage 2 Audit. The auditor must document:

Observations that could lead to nonconformities, ensuring they are addressed before Stage 2.

Areas needing improvement, such as missing documented information or unclear process definitions.

While understanding the auditee’s main processes is important, documenting interviews is not a requirement at Stage 1.

Comprehensive and Detailed In-Depth Explanation:

Audit evidence includes information collected through different methods to assess compliance with ISO 9001:2015 requirements.

Clause References:

ISO 19011:2018, Clause 6.4.6 – Audit Evidence: Audit evidence must be objective, verifiable, and based on facts.

ISO 9001:2015, Clause 9.1.1 – Monitoring, Measurement, Analysis, and Evaluation: Requires organizations to collect and analyze data from multiple sources to verify effectiveness.

Types of Audit Evidence Collected in Scenario 3:

Verbal Evidence – Employee interviews regarding training and awareness sessions.

Documentary Evidence – Organizational charts, job descriptions, training records.

Physical Evidence – Workplace observations to assess working conditions.

Why is the Correct Answer B?

The audit team used a combination of verbal (interviews), documentary (records), and physical (site observations) evidence.

This triangulation approach enhances audit reliability and ensures compliance verification.

Why are the Other Options Incorrect?

A (Confirmative evidence) → Not a formal audit term in ISO 9001 or ISO 19011.

C (Analytical evidence) → Incorrect, as analysis was not a primary method used.

D (Qualitative evidence only) → Incorrect because the audit involved both qualitative (interviews) and quantitative (documents, physical) evidence.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 5.3.2 (Access to Information), internal auditors must have unrestricted access to:

Employees and executives for interviews and observations.

Documented information to verify compliance with ISO 9001.

This ensures a transparent and objective audit process. The CEO’s approval (B) is not required unless restricted information is involved.

According to the guidance on conducting the audit closing meeting1, the audit team leader should provide a summary of the audit findings and conclusions, invite discussions, and agree on timelines for any corrective actions. The audit team leader should also be respectful, constructive, and objective when presenting the nonconformities, and avoid any personal or emotional comments. The audit team leader should also consider the impact of the disruptive event (such as the Covid-19 pandemic) on the auditee’s context, interested parties, and risks2, and acknowledge any good practices or improvements observed during the audit. Therefore, option D is the best option, as it follows the best practices for the closing meeting and allows the auditee to understand the nonconformities and their implications, and to participate in the analysis and resolution of the issues. Option A is not correct, as it is not respectful, constructive, or objective, and it does not invite any discussion or feedback from the auditee. It also assumes that the audit team leader has the authority to recommend the removal of the supplier from the approved list, which may not be the case. Option B is not correct, as it does not provide enough information or explanation to the auditee, and it does not allow any discussion or feedback from the auditee. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, acknowledging any good practices, and agreeing on timelines for corrective actions. Option C is not correct, as it does not involve the other managers who are responsible for the functions or processes that were audited, and who may have valuable input or information to share. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, inviting discussions, and agreeing on timelines for corrective actions. References: 1: Conducting the Audit Closing Meeting: Sharing the Results2: Auditing ISO 9001:2015 in the Context of a Disruptive Event.

An auditor undertaking their first third-party audit is normally treated as an auditor under supervision. They may participate in audit activities, but should be monitored and supported by the audit team leader.

They should therefore review their auditing performance with the audit team leader and conduct interviews only with the audit team leader present.

They should not lead the closing meeting, independently interview auditees, or decide nonconformity grading alone. ISO 9001:2015 requires audits to be conducted objectively and by competent auditors, and ISO 9001 refers to ISO 19011 for audit guidance.

Match the process descriptions below to the process names:

The process by which the accuracy of test equipment is checked against a known standard. = Calibration

The process by which a product or service is visually examined to determine conformity to requirements. = Evaluation

The process by which data is examined in detail to reach a specific answer or answers. = Analysis

The process by which a parameter of a product or service is examined to determine a specific value. = Measurement

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, the definitions of the process names are as follows:

Calibration: operation that, under specified conditions, in a first step, establishes a relation between the quantity values with measurement uncertainties provided by measurement standards and corresponding indications with associated measurement uncertainties and, in a second step, uses this information to establish a relation for obtaining a measurement result from an indication.

Evaluation: determination of the suitability, adequacy or effectiveness of an object to achieve established objectives.

Analysis: detailed examination of the elements or structure of something.

Measurement: process to experimentally obtain one or more quantity values that can reasonably be attributed to a quantity.

Therefore, the process descriptions can be matched to the process names based on these definitions.

To demonstrate top management’s leadership and commitment with respect to the quality management system, the following four actions would be indicative:

B. Briefing staff on the development of an improvement culture: This shows that top management is actively involved in promoting a culture of continuous improvement, which is a key aspect of the quality management system1.

C. Chairing management review meetings: By leading these meetings, top management demonstrates their involvement in the quality management system’s ongoing performance and commitment to its continual improvement1.

E. Investing time and money in corrective actions arising from nonconformities: This indicates that top management is committed to addressing issues and ensuring that the quality management system is effective and continually improving1.

G. Promoting the importance of following procedures: When top management emphasizes the importance of adherence to procedures, it reinforces the significance of the quality management system and its processes1.

These actions align with the requirements of ISO 9001:2015, which emphasizes the need for top management to take accountability for the effectiveness of the quality management system and to promote a focus on continual improvement and customer satisfaction123. Approving company car budgets, conducting disciplinary meetings, and not attending the audit closing meeting do not directly demonstrate leadership and commitment to the quality management system1.

ISO 9001:2015 makes it clear that an organisation remains responsible for conformity to requirements even when processes are outsourced . Certification audits must therefore evaluate not only the organisation’s internal activities, but also the control and effectiveness of externally provided processes .

ISO 9001:2015, Clause 8.4.1 requires that the organisation ensure externally provided processes, products and services conform to requirements. The organisation must determine controls to be applied to those outsourced processes.

ISO 9001:2015, Clause 4.4.1 further requires the organisation to determine processes needed for the quality management system and their application throughout the organisation, including outsourced processes.

For a third-party certification audit , sufficient objective evidence must be obtained to demonstrate that:

Outsourced processes are effectively controlled

The organisation’s quality management system achieves its intended results

Why option C is the best decision:

Proceeding with the audit in Bolivia and including all ABC personnel and all outsourced processes ensures that the certification audit:

Covers the full scope of the QMS , including outsourced production, maintenance, procurement, and HR activities

Allows direct evaluation of how ABC controls and manages its external providers in the location where those processes are actually performed

Provides sufficient objective evidence to support a valid certification decision

Reviewing only internal audits or auditing only planning activities would not provide adequate assurance of conformity for a high-risk, core operational activity such as lithium extraction.

Why the other options are not acceptable:

A : Auditing only the Planning function would exclude core operational and support processes that are within the scope of the QMS.

B : Reviewing internal audit results alone is insufficient for a third-party certification audit and does not replace direct assessment of outsourced processes.

D : ISO 9001 explicitly allows outsourcing of processes; the organisation remains responsible for control, not prohibited from outsourcing.

ISO-aligned conclusion:

In a third-party ISO 9001 certification audit, outsourced processes that are within scope must be audited , either directly or through appropriate controls. In this scenario, auditing the outsourced processes in Bolivia is necessary to ensure a complete, credible, and compliant certification audit.

Comprehensive and Detailed Explanation From ISO 9001 / ISO 19011 Guidance:

ISO 9001:2015 requires audits to be planned and conducted objectively, but it refers auditors to ISO 19011 for detailed guidance on audit activities, including audit team meetings and preparation for closing meetings .

ISO 19011:2018 describes the purpose of the audit team meeting before the closing meeting as ensuring alignment, consistency, and clarity of audit conclusions and messages to the auditee.

Explanation of the selected tasks:

C. The audit team review any points raised by the auditee-nominated representative during the audit.

ISO 19011 requires the audit team to consider and evaluate information and concerns raised by the auditee to ensure audit findings are accurate, fair, and evidence-based before the closing meeting.

E. The audit team agrees on the audit opportunities for improvement to be presented to the supplier.

Before the closing meeting, the audit team must align on opportunities for improvement so that these are presented consistently and clearly, without contradiction between auditors.

F. The audit team agrees on the roles of each audit team member for the closing meeting.

ISO 19011 requires clear allocation of responsibilities within the audit team. Agreeing who will present findings, nonconformities, or conclusions is a normal and expected preparation activity.

G. The audit team leader writes all audit finding reports, taking into account the inputs provided by each auditor.

The audit team leader is responsible for consolidating audit inputs and ensuring consistency of reporting, even though individual auditors contribute evidence and findings.

H. Each audit team member completes the report of their individual findings.

ISO 19011 expects each auditor to document their findings and provide them to the audit team leader for consolidation into the final audit report.

J. The audit team agrees on the conformities and non-conformities to be included in the final audit report.

Before the closing meeting, the audit team must reach consensus on audit conclusions to ensure findings are clear, justified, and consistently communicated.

Explanation of why the other options are not selected:

A : Daily meetings with the auditee’s Quality Manager are not part of an internal audit team meeting and may compromise independence.

B : The final audit report is not completed and signed during the audit team meeting prior to the closing meeting.

D : Refusing to review corrective actions is inappropriate; however, corrective actions are normally reviewed after the audit, not during preparation for the closing meeting.

I : Informing the Procurement Manager is an administrative action, not a task of the audit team meeting.

ISO-aligned conclusion:

An audit team meeting prior to the closing meeting focuses on alignment, consolidation of findings, agreement on conclusions, and preparation for clear communication . The six correct tasks are therefore C, E, F, G, H, and J .

According to ISO 9001:2015, clause 8.4, an organization is required to control the processes, products and services provided by external providers, including those that affect the quality of the organization’s own products and services. This includes determining the controls to be applied to the external provision of processes, products and services, as well as the information to be communicated to the external providers. The organization is also required to monitor, measure, and evaluate the performance of the external providers and retain documented information of these activities.

Therefore, in the scenario given, ABC Ltd is responsible for controlling the processes, products and services provided by Teak Ltd, as they affect the quality of ABC Ltd’s own products and services. This means that ABC Ltd should have established criteria and methods for evaluating the performance of Teak Ltd, as well as documented information of the results of such evaluation. ABC Ltd should also have defined the supply arrangements with Teak Ltd, including the specifications, requirements, and verification activities related to the products and services provided by Teak Ltd.

Hence, the best options to describe how to plan the audit of the interrelationship with Teak Ltd during the Stage 2 audit at ABC Ltd are A and D, as they are aligned with the requirements of ISO 9001:2015, clause 8.4. The other options are either irrelevant or beyond the scope of the audit, as they do not pertain to the control of external provision by ABC Ltd.

Comprehensive and Detailed In-Depth Explanation:

A guide is assigned by the auditee to assist the audit team by:

Managing logistics, such as ensuring that relevant documents are available and arranging interviews.

Assisting in the coordination of meetings and access to facilities.

Helping the auditors navigate the organization during the audit.

However, the guide does not fill gaps in the auditor’s knowledge or witness the audit for the certification body. Their primary function is logistical support, not providing interpretations or assessments.

Comprehensive and Detailed In-Depth Explanation:

Stratified sampling is the best method when the population consists of different groups or categories. In this case:

ME has two areas of operations (electrical and mechanical services).

Complaints were collected separately for each area.

By choosing representative samples from each category (electrical & mechanical complaints), Li Na ensured a balanced approach.

Systematic sampling selects samples at fixed intervals, which does not ensure proportional representation of both groups.

Block selection sampling is used when focusing on a specific time period or section, which does not apply here.

Thus, stratified sampling (B) is the correct answer.

ISO 9001:2015 is a management system standard , and third-party certification provides independent assurance that an organisation ' s quality management system has been assessed against ISO 9001 requirements.

Explanation of the Correct Answers

A. Demonstrates that the quality management system conforms to ISO 9001.

This is a primary purpose and benefit of third-party certification.

Certification by an accredited certification body demonstrates that the organisation ' s quality management system has been audited and found to conform to the requirements of ISO 9001.

Relevant ISO 9001 requirements include:

Clause 4 to Clause 10 , which define the requirements that must be met for certification.

Certification confirms conformity of the management system , not individual products.

Therefore, this statement is correct.

B. Demonstrates that the quality management system is capable of consistently achieving its stated quality policy and objectives.

ISO 9001 is designed to ensure that organisations establish, implement, maintain, and continually improve processes that support achievement of quality objectives and intended results.

Relevant requirements include:

Clause 5.2 – Quality Policy

Clause 6.2 – Quality Objectives

Clause 9.1 – Monitoring, measurement, analysis and evaluation

Clause 10.3 – Continual improvement

Certification provides confidence that the management system is capable of consistently achieving planned results when effectively implemented.

Therefore, this statement is correct.

Why the Other Options Are Incorrect

C. Demonstrates that the quality management system can ensure the quality of their supplier.

ISO 9001 requires organisations to control external providers under Clause 8.4 , but certification does not guarantee supplier quality.

The organisation remains responsible for supplier evaluation and control.

Therefore, this is not a benefit guaranteed by certification.

D. Demonstrates that the quality management system can ensure their product has also been certified.

ISO 9001 certification applies to the management system , not to products.

A product can only be certified under a separate product certification scheme where applicable.

Therefore, this statement is incorrect.

E. Demonstrates that the quality management system does not have any non-conformities.

Certification does not mean there are no nonconformities.

During certification and surveillance audits, organisations may still receive nonconformities and maintain certification provided they address them appropriately.

Therefore, this statement is incorrect.

F. Guarantees that the organisation will not be audited by their customers.

Many customers continue to perform supplier audits even when suppliers hold ISO 9001 certification.

Certification may reduce the frequency of customer audits, but it does not guarantee they will not occur.

Therefore, this statement is incorrect.

ISO-Aligned Conclusion

Third-party ISO 9001 certification provides independent confidence that:

The quality management system conforms to ISO 9001 requirements , and

The quality management system is capable of consistently achieving its quality policy and objectives.

Therefore, the correct answers are:

A. Demonstrates that the quality management system conforms to ISO 9001.

B. Demonstrates that the quality management system is capable of consistently achieving its stated quality policy and objectives.

Comprehensive and Detailed In-Depth Explanation:

An audit’s feasibility must be assessed using multiple factors, not just resource availability.

Clause References:

ISO 19011:2018, Clause 5.3 – Establishing the Audit Program: Requires consideration of logistical, technical, and cooperation factors when assessing audit feasibility.

ISO/IEC 17021-1:2015, Clause 9.1.3 – Determining Feasibility of the Audit: Requires evaluating more than just resources to ensure a successful audit.

Why is the Correct Answer B?

Audit feasibility should consider:

Availability of information (documents, records).

Cooperation from the auditee.

Operational conditions that might affect the audit.

Scope and complexity of the QMS being audited.

Resource availability alone is not enough to determine feasibility.

Why are the Other Options Incorrect?

A (Top management determines feasibility) → Incorrect because feasibility is determined by the certification body, not the auditee.

C (Resources alone are sufficient) → Incorrect because other key factors must be evaluated.

D (Final authority lies with the audit leader) → Incorrect because ISO requires multiple factors to be considered, not just an auditor’s decision.

The ISO 9001 Lead Auditor exam requires the auditor to have a thorough understanding of the ISO 9001:2015 standard and its requirements, as well as the organization’s context, processes, risks, opportunities, and performance. Therefore, the auditor needs to ask for additional information that can help them verify these aspects during the audit planning stage. Some of the information that can be useful are:

A description of responsibilities and authorities of the key roles of XYZ: This can help the auditor to identify who is accountable for what in the organization and how they communicate with each other.

The number of personnel involved in activities related to the quality management system: This can help the auditor to assess if there are enough resources and competencies to support the QMS implementation and operation.

Information to understand XYZ’s operations: This can help the auditor to understand how XYZ produces or delivers its products or services and what are its main processes and inputs.

The results of XYZ’s last internal audit: This can help the auditor to evaluate if XYZ has implemented corrective actions based on previous audit findings and if it has maintained its QMS effectiveness.

The results of the last two management reviews: This can help the auditor to determine if XYZ has monitored its QMS performance against its objectives and if it has identified any significant changes or opportunities for improvement.

The quality manual (B) is not a required document for ISO 9001 certification, but it may be useful for internal reference or training purposes. It is not necessary for audit planning.

•To evaluate the preparedness of the organisation for a Stage 2 audit: This objective involves assessing the readiness of the organisation to undergo the Stage 2 audit, where the conformity and effectiveness of the quality management system will be verified123. The audit team will check the level of implementation and understanding of the quality management system, identify any major gaps or nonconformities, and confirm the audit scope, criteria, and plan123.

•To review the quality manual: This objective involves reviewing the documented information of the quality management system, such as the quality policy, the quality objectives, the scope, the processes, and the procedures, to ensure that they meet the requirements of ISO 9001:2015123. The audit team will also evaluate the organisation’s understanding and application of the standard, and identify any areas of improvement or concern123.

The other options are not included in the objectives of the Stage 1 initial certification audit, according to the web search results from my internal tool. They may be related to other stages or types of audits, but they are not the focus of the Stage 1 audit.

Therefore, the correct answer is B and D.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 Clause 5.1.1 (Leadership and Commitment) states that top management must demonstrate leadership and commitment to the QMS by actively participating in QMS implementation, integration, and effectiveness.

In scenario 2, top management refused to be directly involved in the QMS implementation team, which violates Clause 5.1.1 because leadership involvement is essential for the system’s success.

Other options do not indicate nonconformance:

Option A (Middle managers in the QMS team) is acceptable.

Option C (Leslie assigning roles) is valid if competence is ensured (Clause 5.3 – Organizational Roles, Responsibilities, and Authorities).

Option D (Team reviewing the policy before approval) aligns with best practices.

Comprehensive and Detailed In-Depth Explanation:

Clause 5.1.1 of ISO 9001:2015 – Leadership and Commitment – specifically mandates that top management must take accountability for the effectiveness of the QMS. They are also responsible for ensuring:

Integration of the QMS into business processes (5.1.1 c)

Promotion of customer focus and continual improvement (5.1.1 d, i)

Availability of necessary resources (5.1.1 e)

That the QMS achieves its intended results (5.1.1 g)

Let’s analyze the selected options:

✅ A. Top management is not accountable for the effectiveness of the QMS.

This directly violates clause 5.1.1 a, which explicitly requires top management to take accountability for the effectiveness of the QMS. Delegating this to a middle-level Quality Manager, as described in the scenario, constitutes a nonconformity.

✅ F. The Quality Manager does not have access to the resources needed for the QMS.

According to clause 5.1.1 e, top management must ensure the availability of required resources for maintaining and improving the QMS. If the Quality Manager is resource-constrained, it indicates top management has failed to meet this requirement.

Now, why the other options are incorrect in terms of direct clause 5.1.1 nonconformity:

❌ B. Avoiding giving improvement actions to the Chief Executive – While this may reflect poor communication, it is not, by itself, a clear breach of 5.1.1 unless linked directly to top management’s lack of accountability or commitment.

❌ C. Chief Executive never attending meetings – ISO 9001 does not require physical attendance of the Chief Executive at management reviews. What matters is whether top management is fulfilling their roles, not how.

❌ D. Completing only half of improvement actions – This indicates performance issues but does not necessarily indicate top management’s lack of accountability, unless they failed to monitor progress entirely.

❌ E. Reporting to one designated senior manager – This is not inherently nonconforming unless that senior manager does not fulfill top management’s responsibilities under 5.1.1.

Relevant ISO 9001:2015 Reference:

Clause 5.1.1 a, e, g, h:

" Top management shall demonstrate leadership and commitment with respect to the quality management system by:

a) taking accountability for the effectiveness of the quality management system;

e) ensuring that the resources needed for the quality management system are available... "

Here is the correct matching of ISO 9001:2015 clauses to the steps mentioned in the change management process:

We identified risks and opportunities and fed these into our risk management processes.

Clause 6.1 (Actions to address risks and opportunities)

We found a suitable supplier.

Clause 8.4 (Control of externally provided processes, products, and services)

We monitored customer feedback and noticed an increase in negative feedback about lead times.

Clause 9.1.2 (Customer satisfaction)

We put together a plan for implementation.

Clause 6.2.2 (Planning to achieve quality objectives)

We monitored the performance of the new supplier.

Clause 8.4.2 (Type and extent of control of external providers)

We noticed that productivity targets were being missed.

Clause 9.1.1 (Monitoring, measurement, analysis, and evaluation)

We communicated the plan internally.

Clause 7.4 (Communication)

We looked at the data at the management review and decided we needed to do something different.

Clause 9.3.2 (Management review inputs)

We reorganised the staffing and implemented redundancies.

Clause 7.1.2 (People)

We set an objective to effectively implement the transition and outsource manufacturing.

Clause 6.2.1 (Quality objectives and planning to achieve them)

This aligns the steps of the change process with relevant ISO 9001:2015 clauses related to risk, planning, communication, and monitoring.

Comprehensive and Detailed In-Depth Explanation:

Clause References:

ISO 19011:2018 (Guidelines for Auditing Management Systems), Clause 5.3 – Establishing the Audit Objectives

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning

Why is the Correct Answer C?

Audit objectives must be clearly defined in the audit offer to ensure that the scope, criteria, and purpose are agreed upon in advance.

ISO/IEC 17021-1:2015 (which governs certification bodies) requires that audit objectives be established before the audit begins to ensure transparency and effectiveness.

Sending audit objectives after an agreement has been reached could lead to misalignment between the auditee’s expectations and the audit’s purpose.

Why are the Other Options Incorrect?

A (Audit objectives should be known only after agreement) → Incorrect because objectives must be pre-defined in the audit offer.

B (Only the auditee should know the objectives) → Incorrect because both the auditor and auditee must align on objectives.

D (Approval from the lead auditor is sufficient) → Incorrect because audit planning follows formal procedures defined by ISO/IEC 17021-1.

ISO 9001 audits (including second-party audits) must be conducted in line with audit principles of fairness, objectivity, and impartiality , with guidance provided by ISO 19011:2018 for audit activities, including closing meetings.

Relevant ISO guidance

ISO 19011 – Closing meeting guidance states that the purpose of the closing meeting is to:

present audit findings and conclusions,

ensure the auditee understands the non-conformities,

explain the next steps, including reporting and follow-up.

Auditors must not :

prescribe solutions,

analyse or design corrective actions,

make commercial or approval decisions on behalf of the audited organisation.

Explanation of the correct option:

C. Present the non-conformities and inform them that the report will be sent within ten working days, close the meeting and leave the site.

This option correctly reflects the auditor’s role:

The non-conformities are presented clearly and transparently in the closing meeting.

The auditee is informed of the reporting process and timeline.

The auditor does not analyse solutions, recommend actions, or influence supplier approval decisions.

The meeting is closed professionally and objectively, in line with ISO 19011.

Explanation of why the other options are incorrect:

A : Closing meetings must be conducted with the agreed auditee representatives; hiding findings undermines transparency and audit integrity.

B : Analysing how to overcome the situation constitutes consulting , which compromises auditor impartiality.

D : Recommending removal from an approved supplier list exceeds the auditor’s authority and violates audit independence.

ISO-aligned conclusion:

The auditor’s responsibility at the closing meeting is limited to presenting findings and explaining next steps , not advising, consulting, or making business decisions. Therefore, the correct and ISO-compliant option is C .

Comprehensive and Detailed In-Depth Explanation:

According to ISO 9001:2015, Clause 7.5.2 (Creating and Updating Documented Information), the criteria for reviewing documented information include:

Content – The accuracy and relevance of the information.

Format – Ensuring readability and proper structuring (e.g., language, versioning).

Procedure for managing documented information – Ensuring control, access, and updates.

Other options, such as internal audit reports and client feedback, are important for overall QMS evaluation but are not the main criteria for reviewing documented information.

The quality system failed to control the laundry services provided for customers in five shops. The equipment used was not capable of consistently producing the required service.

A screenshot of a computer AI-generated content may be incorrect.

Clause 8.5.3 – Property Belonging to Customers or External Providers:This clause requires the organization to care for customer property while it is under their control. If there is damage, they must inform the customer and retain documented information. Thus, informing customers of the reason for laundry damage relates directly to this clause.🔎 Reference: ISO 9001:2015 Clause 8.5.3

Clause 7.1.3 b – Infrastructure:It refers to the provision and maintenance of infrastructure necessary for the operation of processes. This includes equipment. If resources are not allocated for outdated equipment, it directly breaches this clause.🔎 Reference: ISO 9001:2015 Clause 7.1.3 b

Clause 10.2.1 b – Corrective Action:This clause covers actions to eliminate the causes of nonconformities to prevent recurrence, including evaluating and correcting customer complaints.🔎 Reference: ISO 9001:2015 Clause 10.2.1 b

Clause 5.1.2 b – Customer Focus (Top Management):Top management must ensure risks to customer satisfaction, including property damage, are addressed. This aligns with addressing the risk of damaging customer laundry.🔎 Reference: ISO 9001:2015 Clause 5.1.2 b

Clause 6.2 – Quality Objectives and Planning to Achieve Them:Setting objectives for reducing customer complaints (like those about laundry damage) falls under this clause.🔎 Reference: ISO 9001:2015 Clause 6.2

ï‚· Clause: 8.5.4

ï‚· Nature of Problem: Cleaning and sanitising records are not available for every batch.

ï‚· Unfulfilled Requirement: " The organization shall implement production provision under controlled conditions. "

Comprehensive and Detailed In-Depth Explanation:

According to ISO 9001:2015, Clause 9.2 (Internal Audit):

Internal audits can be conducted on an ongoing basis as part of continual improvement.

Audits consider both conformity and effectiveness (A is incorrect).

Thus, C is the correct answer.

When an organization wishes to extend the scope of their current certification to include new services or activities, such as the printing and compilation of computer documentation packages, it requires an extension to the scope of the audit. This involves a formal application process with the certification body to ensure that the new activities are included in the audit plan and that the organization’s quality management system encompasses these new processes12. References: = The answer is based on the ISO 9001 Auditing Practices Group guidance on scope and applicability, which outlines the need for a formal application process when there is a change in the scope of the quality management system that affects the certification1. Additionally, the UKAS guide on the extension to scope (ETS) process provides information on how changes to the scope, including the addition of new services, require a formal application2.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015, Clause 6.2 (Quality Objectives and Planning to Achieve Them) states that an organization must establish measurable and relevant quality objectives to improve QMS effectiveness.

Bell ' s strategy for handling customer complaints aligns with this requirement because it includes specific, measurable goals (biweekly customer surveys) to enhance customer satisfaction and service quality.

Other options are not directly related to defining quality objectives:

Option B (Implementing a QMS) refers to the overall system, not specific objectives.

Option C (Creating a QMS team) is an implementation step, not an objective.

Option D (Assigning responsibilities) is necessary for QMS but does not define objectives.

Comprehensive and Detailed In-Depth Explanation:

Before accepting an audit, the certification body must assess the integrity of the auditee and the nature of its operations to ensure compliance feasibility.

Clause References:

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning:

The certification body must review the auditee’s background, reputation, and operational complexity before accepting the audit.

Why is the Correct Answer C?

The auditee’s integrity and reputation impact the credibility of certification.

The nature of operations determines audit complexity and resource allocation.

Why are the Other Options Incorrect?

A (Integrity and reputation only) → Correct but incomplete; nature of operations is equally important.

B (Nature of operations only) → Integrity is also a factor, not just operations.

D (No previous major nonconformities required) → Auditees with past major nonconformities can still be audited if corrective actions are taken.

ISO/IEC 17021-1 is the standard that specifies requirements for bodies providing audit and certification of management systems. It includes provisions for determining audit time for third-party certification audits, ensuring that the audits are conducted in a consistent, comparable, and reliable manner, which can be applied to a variety of management systems, including ISO 9001.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.4.9 (Audit Conclusions):

Audit conclusions must be based on verified evidence.

The evidence must be evaluated both quantitatively and qualitatively to ensure accuracy.

Observations alone (A) are insufficient; conclusions must be supported by objective evidence.

Thus, B is the correct answer.

According to the ISO 9001:2015 standard, clause 8.7 requires that an organization identify and control any nonconforming outputs that do not conform to the requirements of the customer or other relevant requirements. Nonconforming outputs are any outputs from the process, product or service that do not meet the specified quality criteria. Nonconforming outputs must be dealt with in one or more of the following ways:

Correction of the nonconformity

Segregation, containment, return or suspension of provision of products and services

Informing the customer

Authorisation for acceptance under concession

The organization must also retain documented information on the description of the nonconformity, the actions taken, any concessions obtained, and the identification of the authority deciding the action to resolve the nonconformity.

In this scenario, you have interviewed a line supervisor who is responsible for managing a manual picking line where operators are removing contaminant materials from incoming products. The supervisor has explained that these plastic items are rejected at this stage because they do not meet their processing standards and they can damage their machinery and compromise their quality standards. The supervisor has also mentioned that some of these rejected items are melted down in another process later on and some are disposed of as waste products that cannot be recycled.

Based on this information, you can investigate further by taking two actions:

A. Check the process for handling nonconforming items: You can verify whether there is a documented procedure for identifying, segregating, containing, returning or suspending provision of nonconforming items at this stage. You can also check whether there is a system for informing customers about any nonconforming items that may affect their satisfaction or expectations.

D. Determine what happens to the waste products: You can verify whether there is a documented procedure for disposing of waste products that cannot be recycled as per environmental regulations and customer requirements.

These two actions would help you to determine whether there are any nonconforming outputs at this stage and how they are controlled by the organization.

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, correction is defined as “action to eliminate a detected nonconformity”. A nonconformity is defined as “non-fulfilment of a requirement”. Therefore, the process of modifying a non-conforming product to bring it within acceptance criteria is a correction, as it eliminates the non-fulfilment of the product specification. The other options are not correct, as they have different definitions and purposes:

•Concession: permission to release or use a nonconforming product, service or process

•Corrective action: action to eliminate the cause of a nonconformity and to prevent recurrence

•Preventive action: action to eliminate the cause of a potential nonconformity or other undesirable potential situation