ISO-9001-Lead-Auditor QMS ISO 9001:2015 Lead Auditor Exam Question and Answers

The actions that should be taken in the context of the audit are:

•Option B: Call the individual(s) managing the audit programme to explain the situation and recommend immediate suspension of certification to protect the integrity of the Certification Body. This option is correct because the auditor has found serious and significant gaps in the QMS processes that affect the health and safety of the patients, which is a major nonconformity that may warrant suspension of certification. The auditor should inform the individual(s) managing the audit programme of the situation and the audit findings, and recommend immediate suspension of certification to protect the integrity of the Certification Body and the credibility of the certification scheme. The auditor should also follow the Certification Body’s procedures and rules for suspension of certification and communicate the decision and the consequences to the auditee.

•Option C: Continue with the meeting, present the audit conclusions and inform the DCM that the organisation will receive the audit report in due course. This option is correct because the auditor should not terminate or postpone the closing meeting due to the absence of the Catering Manager, as the DCM is the auditee’s nominated representative for the audit. The auditor should continue with the meeting, present the audit conclusions and the audit findings, and inform the DCM that the organisation will receive the audit report in due course. The auditor should also explain the audit outcome recommendation and the suspension of certification, and request the DCM to acknowledge the receipt and understanding of the audit results.

The following options are not correct:

•Option A: Close the meeting immediately after the DCM’s response and advise that the issues will be addressed at the next surveillance visit. This option is not correct because the auditor should not close the meeting without presenting the audit conclusions and the audit findings, as this would violate the audit principles of fairness and transparency. The auditor should also not advise that the issues will be addressed at the next surveillance visit, as this would imply that the auditor is accepting the auditee’s delay and inaction, and that the auditor is not taking the major nonconformity seriously.

•Option D: Conclude the meeting early and advise that it will be rescheduled once the Catering Manager has returned to work. This option is not correct because the auditor should not conclude the meeting early or reschedule it due to the absence of the Catering Manager, as this would disrupt the audit process and the audit schedule. The auditor should also not wait for the Catering Manager to return to work, as this would delay the communication and resolution of the major nonconformity, and potentially compromise the health and safety of the patients.

•Option E: Recommend that all personnel should be given urgent in-depth training in the QMS. This option is not correct because the auditor should not recommend or prescribe specific corrective actions to the auditee, as this would violate the audit principles of independence and objectivity. The auditor should only report the audit findings and the audit outcome recommendation, and leave the responsibility and authority for determining and implementing the corrective actions to the auditee.

•Option F: Thank the DCM for his time and express an expectation that improvements will be made in the QMS. This option is not correct because the auditor should not thank the DCM for his time and express an expectation that improvements will be made in the QMS, as this would imply that the auditor is satisfied and optimistic with the auditee’s performance and response, and that the auditor is not taking the major nonconformity seriously. The auditor should instead express the concern and dissatisfaction with the auditee’s QMS processes and the impact on the health and safety of the patients, and communicate the suspension of certification and the need for urgent and effective corrective actions.

References:

•ISO 19011:2018 Guidelines for auditing management systems, Clause 6.4.2: Conducting audit activities, Subclause k) and l)

•ISO 9001 Lead Auditor Course Material, Module 5: Conducting an Audit, Slide 20: Closing Meeting

•ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 5.5: Closing Meeting

•Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies

A white background with black text Description automatically generated

The table below shows the possible matching of the ISO 9001 Clause 8 extract to the audit evidence.

Table

Audit evidence

ISO 9001 Clause 8 extract

Four of the 10 pallets of stock sampled in the warehouse were not labelled.

“8.5.2 … shall use suitable means to identify outputs …”

A damaged pallet of stock seen in the quarantine area was leaking liquid onto the floor.

“8.7.1 … shall ensure that outputs that do not conform to their requirements are identified and controlled …”

One of the fork-lift truck drivers had no fork-lift truck driving licence.

“8.5.1 e … shall include, as applicable … the appointment of competent persons …”

There was no pest control provision in the warehouse.

“8.5.4 … shall preserve the outputs during production and service provision …”

Two pallets of temperature-sensitive stock items were being stored at ambient as the chilled storage facility was full.

“8.1 … shall plan, implement and control the processes …”

According to ISO 9001:2015, clause 9.2.2.e, the organization is required to retain documented information as evidence of the implementation of the audit programme and the audit results. This includes the records of the nonconformities identified during the internal audits and the corrective actions taken to address them. The organization is also required to verify the effectiveness of the corrective actions, as per clause 10.2.2.

Therefore, in the scenario given, the Quality Manager’s decision to automatically close any nonconformance over 3 years old without obtaining any confirmation from the relevant departments or verifying the effectiveness of the corrective actions is a clear violation of the requirements of clause 9.2.2.e. This indicates a lack of control and follow-up of the internal audit process, as well as a potential risk of recurrence or occurrence of the nonconformities in other areas. This also undermines the credibility and value of the internal audit programme, as well as the risk-based approach claimed by the Quality Manager.

Hence, the best course of action to take is D, to raise a nonconformance report against clause 9.2.2.e of ISO 9001, and to communicate the audit findings to the relevant management. The other options are either insufficient or irrelevant to address the issue, as they do not directly relate to the noncompliance with clause 9.2.2.e.

References:

• ISO 9001:2015(en), Quality management systems — Requirements, clause 9.2.2 and 10.2.2
• ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2
• ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section “Learning objectives”
• ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

The audit team leader should deal with this situation in a professional and ethical manner, while maintaining the integrity and credibility of the audit process and the audit findings. The audit team leader should also try to resolve the conflict with the Quality Manager in a constructive and respectful way, without compromising the audit objectives or the audit team’s independence and impartiality. According to the ISO 9001 Lead Auditor Reference Materials guides and documents, the possible actions that the audit team leader might take are:

•A. Insist that the nonconformities must stand since they have been agreed by the team from other evidence gathered. This action is consistent with the principle of evidence-based approach, which states that the audit team should collect and verify information that is appropriate, sufficient, and reliable to support the audit findings and conclusions. The audit team leader should explain to the Quality Manager that the nonconformities are not based solely on the photographs, but on other audit evidence that corroborates them. The audit team leader should also remind the Quality Manager that the nonconformities are subject to review and approval by the certification body, and that any attempt to influence or interfere with the audit results would be considered a breach of the audit agreement and the certification rules.

•D. State that the auditor will take no further part in the audit and all his photographs will be deleted. This action is consistent with the principle of confidentiality, which states that the audit team should exercise discretion in the use and protection of information acquired during the audit. The audit team leader should acknowledge that the auditor’s behavior was inappropriate and unprofessional, and that he violated the audit rules and the auditee’s rights. The audit team leader should apologize for the inconvenience and the discomfort caused by the auditor, and assure the Quality Manager that the auditor will be removed from the audit team and that his photographs will be erased from his phone and any other device or media. The audit team leader should also inform the auditor of his misconduct and the consequences, and report the incident to the audit program manager and the certification body.

•F. Advise the Quality Manager that he, as audit team leader, needs to speak to the auditor about the situation and he will report back to the Quality Manager once this is done. This action is consistent with the principle of communication, which states that the audit team should exchange information with the auditee in a timely, open, honest, and respectful manner. The audit team leader should express his concern and his willingness to address the issue with the auditor, and ask for the Quality Manager’s patience and cooperation. The audit team leader should also explain that the audit process is not finished yet, and that the Closing meeting is an opportunity to present and discuss the audit findings and conclusions, and to seek feedback and clarification from the auditee. The audit team leader should then speak to the auditor privately, and follow the steps described in action D.

The other options are not appropriate or effective ways to deal with this situation, because they either:

•B. Delay the Closing meeting until the audit team leader has consulted his audit program manager at Head Office. This action would disrupt the audit schedule and the audit plan, and create unnecessary delays and costs for both the audit team and the auditee. It would also show a lack of leadership and decision-making skills from the audit team leader, and undermine his authority and credibility. The audit team leader should be able to handle the situation on site, and consult his audit program manager only if the situation escalates or becomes unmanageable.

•C. Advise the Quality Manager that the auditor will be reported to Head Office. This action would escalate the conflict and create a hostile and defensive atmosphere between the audit team and the auditee. It would also imply that the audit team leader is not capable or willing to resolve the issue himself, and that he is threatening or punishing the auditee for raising a legitimate concern. The audit team leader should try to defuse the tension and restore the trust and the rapport with the Quality Manager, and report the auditor to Head Office only after the audit is completed and the audit report is submitted.

•E. Apologise for the situation and ensure the Quality Manager that all photographs will be deleted during the Closing meeting. This action would not address the root cause of the problem, and would not prevent the auditor from taking more photographs or using them for other purposes. It would also expose the audit team and the auditee to unnecessary risks and liabilities, and compromise the confidentiality and the security of the audit information. The audit team leader should delete the photographs as soon as possible, and not wait until the Closing meeting.

References: ISO 9001:2015, ISO 19011:2018, PECB Certified ISO 9001 Lead Auditor, Common Audit Problems and How to Deal with Them, The Auditor’s Guide to Conflict Resolution, Conflict Resolution in your Audit Career, How to Be a Good Auditor as a Team Leader

Documented information is a means by which an organization demonstrates compliance. It communicates what we do and how we do things, it communicates what happened and what results were achieved. It is, essentially, a tool for communication. ISO 9001:2015 allows an organization flexibility in the way it chooses to document its quality management system (QMS). This enables each individual organization to determine the correct amount of documented information needed in order to demonstrate the effective planning, operation and control of its processes and the implementation and continual improvement of the effectiveness of its QMS. The standard states that the organization shall maintain documented information to the extent necessary to support the operation of processes and retain documented information to the extent necessary to have confidence that the processes are being carried out as planned. Therefore, the purpose of retaining documented information is to support the operation of the processes of the QMS, not to facilitate auditing, provide confidence or safeguard integrity, which are secondary benefits of documented information. References: Guidance on the requirements for Documented Information of ISO 9001:2015, ISO 9001:2015 documented information | CQI | IRCA, Documented Information Required by ISO 9001:2015 - 9000 Store

Match the process descriptions below to the process names:

The process by which the accuracy of test equipment is checked against a known standard. = Calibration

The process by which a product or service is visually examined to determine conformity to requirements. = Evaluation

The process by which data is examined in detail to reach a specific answer or answers. = Analysis

The process by which a parameter of a product or service is examined to determine a specific value. = Measurement

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, the definitions of the process names are as follows:

• Calibration: operation that, under specified conditions, in a first step, establishes a relation between the quantity values with measurement uncertainties provided by measurement standards and corresponding indications with associated measurement uncertainties and, in a second step, uses this information to establish a relation for obtaining a measurement result from an indication.
• Evaluation: determination of the suitability, adequacy or effectiveness of an object to achieve established objectives.
• Analysis: detailed examination of the elements or structure of something.
• Measurement: process to experimentally obtain one or more quantity values that can reasonably be attributed to a quantity.

Therefore, the process descriptions can be matched to the process names based on these definitions.

References:

ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary

•To evaluate the preparedness of the organisation for a Stage 2 audit: This objective involves assessing the readiness of the organisation to undergo the Stage 2 audit, where the conformity and effectiveness of the quality management system will be verified123. The audit team will check the level of implementation and understanding of the quality management system, identify any major gaps or nonconformities, and confirm the audit scope, criteria, and plan123.

•To review the quality manual: This objective involves reviewing the documented information of the quality management system, such as the quality policy, the quality objectives, the scope, the processes, and the procedures, to ensure that they meet the requirements of ISO 9001:2015123. The audit team will also evaluate the organisation’s understanding and application of the standard, and identify any areas of improvement or concern123.

The other options are not included in the objectives of the Stage 1 initial certification audit, according to the web search results from my internal tool. They may be related to other stages or types of audits, but they are not the focus of the Stage 1 audit.

Therefore, the correct answer is B and D.

References: 1: ISO 9001 Certification Audits | Stage 1 and Stage 2 - 9001. Simplified 2: Stage 1 of your Audit | NQA Blog 3: Getting Certified to ISO 9001 - the Stage 1 Audit

According to the ISO - Management system standards page, the key benefits of an effective management system include improved operational effectiveness and efficiency, improved risk management and protection of people and the environment, and enhanced drive for innovation. The Integrated Use of Management System Standards (IUMSS) handbook also states that the purpose and objectives of management system standards are to help organizations improve their performance by specifying repeatable steps that organizations consciously implement to achieve their goals and objectives.

Therefore, the complete sentence is:

“The purpose of a management system standard is to improve the performance of an organisation.”

In the context of a third-party certification audit, match the roles with the following responsibilities:

Responsibilities:

Conduct the audit to the assigned area.= Auditors

Assist the auditors in identifying personnel to participate in the audit.= Guide

Assign each team member’s responsibility for the audit.= Audit team leader

Respond to questions and provide evidence to the auditor.= Auditee

According to ISO 19011:2018, clause 3, the definitions of the roles are as follows1:

• Auditors: persons with the competence to conduct an audit
• Guide: person appointed by the auditee to assist the audit team
• Auditee: organization being audited
• Audit team leader: member of an audit team appointed to manage the audit or an audit team

Therefore, the roles can be matched to the responsibilities based on these definitions and the description of the audit process in clause 6 of the standard1.

References: ISO 19011:2018(en), Guidelines for auditing management systems

According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:

•ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc.

•Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation

•Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities

•Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation’s legal obligations, policies, or procedures

•Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved

•Organisation’s documented information, such as policies, procedures, manuals, records, etc., that describe the organisation’s management system and its processes

•Commitment to follow principles issued by an NGO, such as the United Nations Global Compact, the International Labour Organization, etc., as long as they are relevant to the organisation’s context and objectives

•Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation’s activities, products, and services

Therefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation’s management system. Commercial advertisements and claims made on the organisation’s website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.

References: ISO 19011:2018(en), Guidelines for auditing management systems, What are audit criteria? - ISO Update

According to the ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, correction is defined as “action to eliminate a detected nonconformity”. A nonconformity is defined as “non-fulfilment of a requirement”. Therefore, the process of modifying a non-conforming product to bring it within acceptance criteria is a correction, as it eliminates the non-fulfilment of the product specification. The other options are not correct, as they have different definitions and purposes:

•Concession: permission to release or use a nonconforming product, service or process

•Corrective action: action to eliminate the cause of a nonconformity and to prevent recurrence

•Preventive action: action to eliminate the cause of a potential nonconformity or other undesirable potential situation

References: ISO 9000:2015 - Quality management systems — Fundamentals and vocabulary, ISO 9001 nonconforming product: How to understand dispositions - Advisera

Nonconformity report

ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met.” Evidence: 40 cleaning records are available for 63 batches.

The action that the auditor would have accepted is:

•Option B: Apply the existing process of addressing the risks and opportunities of milk production. This option is correct because ISO 9001:2015 clause 8.1 requires the organization to plan, implement and control the processes needed to meet the requirements for the provision of products and services, and to implement actions determined in clause 6.1, which refers to the actions to address risks and opportunities. The organization should apply the existing process of addressing the risks and opportunities of milk production, which may include identifying the sources of variability, assessing the potential impacts and consequences, determining and implementing appropriate actions to reduce or eliminate the variability, monitoring and measuring the effectiveness of the actions, and reviewing and updating the actions as necessary.

The following options are not correct:

•Option A: Modify the contract with the current customer to provide them with only 1,500 litres of milk per day and make an agreement with a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.

•Option C: Retain the current contract and try to sell the occasional surplus milk to a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.

•Option D: Analyse the daily dispatch of milk for 7 days to determine its variability. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to implement actions to address risks and opportunities, as required by ISO 9001:2015 clause 8.1.

References:

•ISO 9001:2015 Quality management systems - Requirements, Clause 8: Operation, Subclause 8.1: Operational planning and control, Subclause 8.2: Requirements for products and services

•ISO 9001 Lead Auditor Course Material, Module 4: ISO 9001:2015 Requirements, Slide 23: Clause 8 - Operation

•ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 4.2: ISO 9001:2015 Requirements, Subsection 4.2.8: Clause 8 - Operation

•Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies