Jul 13, 2024 Detailed New ISO-9001-Lead-Auditor Exam Questions for Concept Clearance [Q20-Q43]

NO.20 Audit criteria are a set of requirements used as a reference against which objective evidence is compared.
Which two of the following are not potential audit criteria?

ISO management system standards

Verbal statements by the general manager

Verbal agreements with interested parties

Health and safety notices

Written agreements with interested parties

Commercial advertisements

Organisation’s documented information

Claims made on the organisation’s website

Commitment to follow principles issued by an NGO

Environmental aspects register

According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:
*ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc.
*Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation
*Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities
*Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation’s legal obligations, policies, or procedures
*Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved
*Organisation’s documented information, such as policies, procedures, manuals, records, etc., that describe the organisation’s management system and its processes
*Commitment to follow principles issued by an NGO, such as the United Nations Global Compact, the International Labour Organization, etc., as long as they are relevant to the organisation’s context and objectives
*Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation’s activities, products, and services Therefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation’s management system. Commercial advertisements and claims made on the organisation’s website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.
References: ISO 19011:2018(en), Guidelines for auditing management systems, What are audit criteria? – ISO Update

NO.21 In a third-party audit to ISO 9001, select two options of when the organisation is required to act in response to reported findings.

A recommendation is given in the report.

A finding of good practice is reported.

An opportunity for improvement is raised.

A major non-conformity is raised.

A finding of conformity is reported.

A minor non-conformity is raised.

According to ISO 19011:2018, clause 6.6.2, a nonconformity is the non-fulfilment of a requirement. A nonconformity can be classified as either major or minor, depending on the nature and extent of the deviation from the audit criteria. A major nonconformity is a nonconformity that affects the ability or the integrity of the organization’s management system to achieve the intended results. A minor nonconformity is a nonconformity that does not affect the ability or the integrity of the organization’s management system to achieve the intended results, but is a deviation from the audit criteria1.
According to ISO/IEC 17021-1:2015, clause 9.4.9, the organization is required to analyze the cause and describe the specific correction and corrective actions taken, or planned to be taken, to eliminate detected nonconformities, within a defined time. The organization is also required to provide the certification body with records and evidence of the implementation and effectiveness of the correction and corrective actions taken.
The certification body will then verify the correction and corrective actions taken by the organization and decide on the certification status2.
Therefore, the two options of when the organization is required to act in response to reported findings are D and F, as they indicate the presence of nonconformities that need to be corrected and prevented from recurring.
The other options are not correct, as they do not require the organization to act in response to reported findings:
*A. A recommendation is given in the report: A recommendation is a suggestion for improvement that is not related to a nonconformity. A recommendation is not binding for the organization and does not affect the certification status. The organization may choose to accept or reject the recommendation, but it is not required to act on it.
*B. A finding of good practice is reported: A finding of good practice is a positive observation that indicates a strength or a best practice of the organization’s management system. A finding of good practice is not related to a nonconformity and does not affect the certification status. The organization may choose to acknowledge or share the finding of good practice, but it is not required to act on it.
*C. An opportunity for improvement is raised: An opportunity for improvement is a potential area where the organization’s management system can be enhanced or optimized. An opportunity for improvement is not related to a nonconformity and does not affect the certification status. The organization may choose to pursue or ignore the opportunity for improvement, but it is not required to act on it.
*E. A finding of conformity is reported: A finding of conformity is a confirmation that the organization’s management system fulfils the audit criteria. A finding of conformity is not related to a nonconformity and does not affect the certification status. The organization may choose to celebrate or communicate the finding of conformity, but it is not required to act on it.
References: ISO 19011:2018(en), Guidelines for auditing management systems, ISO/IEC 17021-1:2015(en), Conformity assessment – Requirements for bodies providing audit and certification of management systems
– Part 1: Requirements

NO.22 Which two of the following are the key expected results of a quality management system that conforms to the requirements of ISO 9001:2015?

Decreased number of nonconforming products in all stages of the manufacturing cycle

Decreased number of management system nonconformities

Consistently provide products that meet customers’ requirements

Increased profits

Decreased number of warranty claims

Enhanced customer satisfaction

NO.23 Below are four of the seven principles on which ISO 9000 series are based. Match a potential benefit to each of the quality management principles (QMP).

NO.24 Which of the following two documents does an auditor need to prepare and complete prior to the on-site audit?

Audit Report

Audit Plan

Procedures

Checklist / Prompts

Risk Matrices

Findings

According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1.
According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit.
The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1.
Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard:
*A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1.
*C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization’s management system, or part of the audit programme, if they are part of the certification body’s or registrar’s requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1.
*E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1.
*F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria.
Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1.
References: ISO 19011:2018(en), Guidelines for auditing management systems

NO.25 In the context of a third-party audit, select the issue which is not expected to be included in the audit plan.

Number of sites to be audited

Risk to achieving audit objectives

Expectations of the organisation’s management

Scope of the audit

NO.26 Select the term that best describes the purpose of retaining documented information in a quality management system to ISO 9001.

To facilitate auditing for proof of conformity to the standard.

To safeguard the integrity of the quality management system.

To support the operation of the processes of the quality management system.

To provide confidence in the effectiveness of the quality management system.

NO.27 Who would be defined as a witness during a witness audit?
Choose two of the following options:

Someone with a qualification from the certification body

An auditor

An existing member of the audit team

An assessor for the accreditation body

Comprehensive and Detailed Explanation: = According to the web search results from my internal tool, a witness audit is a technique used during an accreditation audit, where the accreditation body observes the performance and competence of the certification body auditors in conducting an audit12. A witness audit can also be used by a certification body to monitor and evaluate its own auditors3. During a witness audit, the following roles can be defined:
*An auditor: This is the person who is being witnessed by the accreditation body or the certification body. The auditor is responsible for conducting the audit according to the audit plan, criteria, and standards, and for providing audit evidence and findings123.
*An assessor for the accreditation body: This is the person who witnesses the auditor on behalf of the accreditation body. The assessor is responsible for evaluating the auditor’s performance and competence, and for providing feedback and recommendations to the accreditation body123.
The other options are not defined as witnesses during a witness audit, according to the web search results from my internal tool. They are:
*Someone with a qualification from the certification body: This is not a specific role in a witness audit, as anyone who is involved in the audit process should have a qualification from the certification body. Moreover, having a qualification does not necessarily mean that the person is a witness or an auditor4.
*An existing member of the audit team: This is not a specific role in a witness audit, as the audit team consists of the auditors who are conducting the audit, not the ones who are witnessing it. The witness audit is a separate activity from the audit itself, and the witness should not interfere with the audit process or influence the audit outcome123.
Therefore, the correct answer is B and D.
References: 1: DQS Inc. | Witness Audits | Auditor Training 2: Have you ever been involved with a witness audit? – IFSQN 3: Certac – Witness Audit of Certification Bodies 4: ISO 19011:2018 – Guidelines for auditing management systems

NO.28 During a second-party audit, the auditor examines the records that are available for the external provider, ABC Forgings, to whom manufacturing has recently been outsourced.
There are standard external provider checklists for three competitors for the contract and there are inspection records from the trial manufacturing batches produced by ABC Forgings. There is no documented evidence of the criteria used to confirm the appointment of ABC Forgings, and no contract or terms and conditions.
Ongoing monitoring indicates that external provider performance is satisfactory, but no documented information has been retained.
Select two options for the evidence which demonstrates a nonconformity with clause 8.4 of ISO 9001.

There was no documentation which provided evidence of any monitoring of the external provider.

The auditee required the outsourced products on an urgent basis before the completion of the paperwork.

The auditee did not retain documentation on the selection and evaluation of the external provider.

The external provider asked for the contract details to be verbal only.

There were no receipt inspection records of the incoming materials.

The auditee trusted the external provider because of a long-standing relationship with them.

According to clause 8.4 of ISO 9001:2015, the organization should ensure that externally provided processes, products, and services conform to the specified requirements. To do so, the organization should:
*Establish the criteria for the selection, evaluation, and re-evaluation of external providers, based on their ability to provide processes, products, and services in accordance with the requirements. The criteria should be documented and applied consistently.
*Evaluate the potential external providers before selecting them, using the established criteria. The evaluation methods may include questionnaires, audits, references, samples, etc. The results of the evaluation should be documented and reviewed.
*Select the external providers that have demonstrated their competence and conformity to the requirements.
The selection should be based on the evaluation results and the organization’s needs. The selection should be documented and approved.
*Communicate the requirements for the processes, products, and services to be provided by the external provider, including the verification and validation activities, the acceptance criteria, the documentation requirements, the changes control, etc. The communication methods may include purchase orders, contracts, agreements, etc. The communication should be clear, complete, and timely.
*Monitor the performance and conformity of the external provider, using the established criteria and methods.
The monitoring methods may include inspections, tests, audits, feedback, complaints, etc. The monitoring results should be documented and analyzed.
In this case, the evidence statements that demonstrate a nonconformity with clause 8.4 are A and C, because they show that the organization did not retain documented information of the selection and evaluation of the external provider, and the monitoring of the external provider’s performance. These are requirements of the standard and essential for ensuring the quality of the externally provided processes, products, and services.
The other options are not directly related to clause 8.4, although they may indicate other nonconformities or weaknesses in the organization’s QMS. For example, option B may relate to clause 7.1.3 on contingency planning, option D may relate to clause 8.2.3 on review of requirements, option E may relate to clause 8.6 on release of products and services, and option F may relate to clause 5.1.1 on leadership and commitment.
References: ISO 9001:2015, [ISO 9001 Auditing Practices Group Guidance on Scope], Mastering the Scope of ISO 9001 Quality Management Systems

NO.29 Select the words that best complete the sentence:

NO.30 Below are four of the seven principles on which ISO 9000 series are based. Match a potential benefit to each of the quality management principles (QMP).

Explanation:
Quality management principles:
Customer focus = Increased revenue and market share
Engagement of people = Enhanced trust and collaboration throughout the organisation Improvement = Enhanced drive for innovation Evidence-based decision-making = Increased ability to demonstrate effectiveness of past actions According to the Quality management principles document published by ISO, each quality management principle has a statement, a rationale, key benefits, and actions you can take to apply it. Based on these descriptions, the potential benefits can be matched to the corresponding principles as follows:
Customer focus: The primary focus of quality management is to meet customer requirements and to strive to exceed customer expectations. The key benefits of this principle include increased customer value, customer satisfaction, customer loyalty, repeat business, reputation, customer base, revenue and market share.
Engagement of people: Competent, empowered and engaged people at all levels throughout the organization are essential to enhance its capability to create and deliver value. The key benefits of this principle include improved understanding of the organization’s objectives and values, increased involvement in improvement activities, enhanced personal development, increased motivation and empowerment, enhanced trust and collaboration, and increased recognition and rewards.
Improvement: Successful organizations have an ongoing focus on improvement. The key benefits of this principle include improved organizational capabilities, alignment of improvement activities at all levels, increased ability to anticipate and react to opportunities and threats, enhanced drive for innovation, and increased levels of satisfaction.
Evidence-based decision-making: Decisions based on the analysis and evaluation of data and information are more likely to produce desired results. The key benefits of this principle include improved decision-making processes, increased ability to demonstrate the effectiveness of past decisions, increased ability to review, challenge and change opinions and decisions, and increased ability to improve performance.

NO.31 The following are stages of an audit, put them in the order they would be conducted.

Explanation:

Establishing the audit programme objectives
Determining and evaluating the audit programme risks and opportunities
Establishing the audit programme
Initiating the audit
Preparing all audit activity
Conducting the audit activities
To complete the sequence, you can drag and drop the options to the appropriate blank section.
Here is a brief explanation of each stage:
Establishing the audit programme objectives: This is the first stage of the audit process, where the purpose, scope, and criteria of the audit programme are defined. The audit programme objectives should be aligned with the strategic direction and policies of the organization, and should address the needs and expectations of the interested parties12.
Determining and evaluating the audit programme risks and opportunities: This is the second stage of the audit process, where the factors that can affect the achievement of the audit programme objectives are identified and assessed. The audit programme risks and opportunities should consider the internal and external issues, the requirements and changes of the interested parties, and the results and feedback from previous audits12.
Establishing the audit programme: This is the third stage of the audit process, where the audit programme is designed and implemented. The audit programme should include the audit programme procedures, the audit programme resources, the audit methods and techniques, the audit frequency and schedule, and the audit programme performance indicators12.
Initiating the audit: This is the fourth stage of the audit process, where the audit is prepared and planned. The audit initiation involves selecting the audit team, establishing the contact with the auditee, defining the audit objectives, scope, and criteria, developing the audit plan, and conducting the document review123.
Preparing all audit activity: This is the fifth stage of the audit process, where the audit activities are organized and coordinated. The audit preparation involves assigning the audit tasks, communicating with the auditee and the audit team, arranging the logistics, preparing the working documents, and conducting the opening meeting123.
Conducting the audit activities: This is the sixth and final stage of the audit process, where the audit evidence is collected and evaluated. The audit conduct involves performing the audit activities, such as interviews, observations, document reviews, and tests, documenting the audit findings, preparing the audit conclusions, and conducting the closing meeting123.
I hope this helps you with your ISO 9001 Lead Auditor objectives and content. If you have any further questions, please feel free to ask.
References: 1: ISO 19011:2018 – Guidelines for auditing management systems 2: Audit Process | Flowchart | Summary – Accountinguide 3: What are the Stages of the Auditing Process & Why it is Important …

NO.32 According to ISO 19011, what two activities take place during the conduct of a audit follow-up?

Verify the effectiveness of the implemented corrective actions

Verify corrections taken to fix the reported non-conformities

Verify legal compliance

Plan the next audit

Determine feasibility of the audit

Assign roles and responsibilities of observers

NO.33 Select which one of the following statements is true.

The team leader shall be an auditor that is qualified in the scheme.

An audit team can include non-qualified auditors.

A technical expert can replace a qualified auditor on an audit team.

Audits leading to auditor qualification are undertaken annually.

NO.34 You are conducting a third-party Stage 1 audit at ABC Ltd, a single-site organisation that manufactures wooden furniture. You interview the Technical Director to learn more about the organisation. The Technical Director explains that they have had a successful year and that obtaining ISO 9001 certification will support the further growth of the business. You ask for an overview of the organisation’s structure and its interrelationships with external interested parties.
The Technical Director shows you a document detailing all business processes and interrelationships. You notice in this document that another organisation called Teak Ltd manufactures wooden furniture on behalf of ABC Ltd. The Technical Director confirms this capability has been accounted for in the scope of the quality management system. You learn that the furniture manufactured by Teak Ltd has accounted for 40% of the sales revenue over the previous 12 months.
Which two of the following options best describe how you would plan the audit of the interrelationship with Teak Ltd during the Stage 2 audit at ABC Ltd?

Verify Teak Ltd supply arrangements as described in the ABC Ltd quality management system

Verify if Teak Ltd are certified to ISO 9001

Verify the controls concerning customer property implemented by Teak Ltd

Verify how ABC Ltd evaluates the performance of Teak Ltd

Verify the quality management system at Teak Ltd by conducting an audit at their site

Verify whether the design processes of Teak Ltd comply with ISO 9001

NO.35 Match each of the following statements into the table below to show whether they apply to first-party audits, second-party audits or third-party audits:

NO.36 An audit team leader arrives at a printing organisation to carry out a Stage 2 audit for a certification body. At a meeting with the Quality Manager, she is told that they have won their biggest contract from a computer manufacturer to print and compile computer documentation packages. They have leased the unit next door for space reasons but have never worked in this sector before. The Quality Manager wants the ISO 9001 certificate to cover the new contract.
During the audit, a team member finds that a number of print jobs have been rejected by several clients over a number of months due to spelling errors in the print run. The Print Manager blames the new employees they had to take on because of a big contract. The auditor raises a nonconformance against clause 10.2.1.b of ISO
9001.
Which one of the evidence statements would support this finding?

There was no record that the organisation evaluated the effectiveness of the training given to new employees.

There was no evidence that a check of spelling took place before the release of printing to the client.

The actions taken to deal with customer complaints did not prevent recurrence of the problem.

The organisation did not provide the correct resources to prevent nonconformity.

NO.37 You are conducting an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organisation manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years You are interviewing the new Product Development Manager. You note that a software application called SWIFT is used to help control the product development process.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 clause 8.3 extracts to the audit evidence.

NO.38 Which two of the following aspects of a quality management system must the organisation continually improve?

Suitability

Adaptability

Effectiveness

Responsiveness

Efficiency

Applicability

NO.39 Which two of the following are the key expected results of a quality management system that conforms to the requirements of ISO 9001:2015?

Consistently provide products that meet customers’ requirements

Decreased number of management system nonconformities

Decreased number of warranty claims

Decreased number of nonconforming products in all stages of the manufacturing cycle

Enhanced customer satisfaction

Increased profits

NO.40 You work for organisation A. You are asked to lead an internal audit of A’s quality management system. It has a head office in Plant A1 and a second Plant A2 nearby. Due to the COVID-19 pandemic, production in A2 was discontinued and it was rented to a logistics organisation B, not related to A. There are no A employees working in A2. Organisation A expects to reassume production in A2 as soon as possible.
Which of the following actions would you consider appropriate when planning the internal audit of A’s quality management system?

Visit Plant A2 to interview personnel of company B

Visit Plant A2 to interview B’s quality manager

Visit Plant A2 to interview A’s security personnel and B’s maintenance department

Interview the A2 plant manager, now working in Plant A1

In this scenario, the organisation A has two plants, A1 and A2, but the production in A2 was discontinued due to the COVID-19 pandemic and the plant was rented to another organisation B. There are no A employees working in A2, and the organisation A expects to reassume production in A2 as soon as possible. Therefore, the appropriate action to plan the internal audit of A’s quality management system is:
*Interview the A2 plant manager, now working in Plant A1: This action involves interviewing the person who is responsible for the management and operation of the plant A2, and who is currently working in the plant A1. The interview should aim to gather information about the status and condition of the plant A2, the impact of the COVID-19 pandemic on the quality management system, the arrangements and agreements with the organisation B, and the plans and actions to resume production in the plant A25 . This action is relevant and necessary for the internal audit, as it can help to assess the readiness and effectiveness of the quality management system, and to identify any gaps or nonconformities that need to be addressed.
The other options are not appropriate actions to plan the internal audit of A’s quality management system, according to the web search results from my internal tool. They are:
*Visit Plant A2 to interview personnel of company B: This action involves visiting the plant A2 and interviewing the personnel of the organisation B, who are not related to the organisation A and who are not part of the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .
*Visit Plant A2 to interview B’s quality manager: This action involves visiting the plant A2 and interviewing the quality manager of the organisation B, who is not related to the organisation A and who is not part of the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .
*Visit Plant A2 to interview A’s security personnel and B’s maintenance department: This action involves visiting the plant A2 and interviewing the security personnel of the organisation A and the maintenance department of the organisation B, who are not directly involved in the quality management system. This action is irrelevant and unnecessary for the internal audit, as it can not provide any evidence or information about the conformity and improvement of the quality management system of the organisation A5 .
Therefore, the correct answer is D.
References: 1: Quality audit – Wikipedia 2: A step-by-step guide to internal quality audits 3: ISO 9001:2015 – Quality management systems – Requirements 4: ISO 19011:2018 – Guidelines for auditing management systems 5: Audit Process | Flowchart | Summary – Accountinguide : What are the Stages of the Auditing Process & Why it is Important …

NO.41 You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organisation manufactures
cosmetics for major retailers.
You are interviewing the Manufacturing Manager (MM).
You: “I would like to begin by looking at the cleaning controls.”
MM: “We record the cleaning of the equipment at the end of every batch. This document details the minimum cleaning frequency and the procedures to follow for all areas and each item of equipment. The person who carries out the cleaning puts their initial on the document and records the time and date alongside.” Narrative: You sample production records over 3-days and note down evidence of nonconformity as per the table below.

NO.42 Which two of the following should be included in an audit plan?

List of findings from the last audit

Name of the auditee general manager

Signature of Certification Body Technical Reviewer

Sequence and timings of audit activities

Date of next audit

Name of auditees and auditors

NO.43 You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organization manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years.
You are interviewing the new Product Development Manager. You note that a software application called SWIFT is used to help control the product development process.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 clause 8.3 extracts to the audit evidence.