View All ISO-9001-Lead-Auditor Actual Exam Questions, Answers and Explanations for Free [Q19-Q43]

Topic	Details
Topic 1	Fundamental principles and concepts of a quality management system: The main objective of this domain is to evaluate your skills of explaining and applying ISO 9001 principles and concepts.
Topic 2	Fundamental audit concepts and principles: Questions about interpreting and applying the main concepts and principles related to a QMS audit appear in this topic.
Topic 3	Closing an ISO 9001 audit: The topic focuses on concluding a QMS audit and conducting audit follow-up activities.
Topic 4	Conducting an ISO 9001 audit: It evaluates your skills to conduct a QMS audit.
Topic 5	Managing an ISO 9001 audit program: This topic evaluates your abilities to establish and managing a QMS audit program.

Q19. Which one of the following options is the definition of the context of an organisation?

Combination of internal and external issues that can have an effect on an organisation’s approach to developing and achieving its objectives.

Comparison of internal and external issues that can have an effect on an organisation’s desire to achieve its objectives.

Complexity of internal and external issues that can have an effect on an organisation’s approach to developing and achieving its purpose.

Coordination of internal and external issues that can have a positive or negative effect on an organisation’s success.

Q20. According to ISO 19011, what two activities take place during the conduct of a audit follow-up?

Verify the effectiveness of the implemented corrective actions

Verify corrections taken to fix the reported non-conformities

Verify legal compliance

Plan the next audit

Determine feasibility of the audit

Assign roles and responsibilities of observers

Q21. In the context of a third-party audit, match the activity with the party responsible in relation to the audit process.

Explanation:
In the context of a third-party audit, the activities and the parties responsible can be matched as follows:
* Review the organization’s processes: This is typically the responsibility of the audit team. They examine the processes to ensure they comply with the specified standards1.
* Review the audit results: The audit team leader usually reviews the audit findings to ensure accuracy and completeness before they are finalized1.
* Issue the certificate: The certification body is responsible for issuing the certificate if the audit is successful and the organization meets the required standards1.
* Select the audit team: The individual(s) managing the audit programme are responsible for selecting the audit team. This ensures that the team has the appropriate skills and knowledge for the audit1.
These roles are essential to maintain the integrity and effectiveness of the audit process. The audit team conducts the actual audit, the team leader oversees the audit process, the certification body grants the certification, and the management of the audit program ensures that the right team is in place to conduct the audit1.
Based on the description of the image you’ve provided, here’s how the activities match with the responsible parties in the context of a third-party audit:
* Review the organization’s processes: This activity is typically the responsibility of the Audit Team.
They are tasked with examining the processes to ensure they meet the requirements of the standard being audited.
* Review the audit results: The Audit Team Leader is usually responsible for this activity. They oversee the audit process and are in charge of reviewing the findings and ensuring that the audit objectives are met.
* Issue the certificate: The Certification Body is responsible for issuing the certificate if the organization’s management system is found to be in compliance with the standard.
* Select the audit team: The Individual(s) managing the audit programme are responsible for selecting the audit team. They ensure that the team has the appropriate competence and resources to effectively conduct the audit.
These roles are defined within the framework of ISO 9001:2015 and are essential for the proper conduct of a third-party audit. The audit team and its leader play a critical role in the operational aspects of the audit, while the certification body and those managing the audit programme have overarching responsibilities for the audit’ s governance and integrity.

Q22. An audit team of three people is conducting a Stage 2 audit to ISO 9001 of an engineering organisation which manufactures sacrificial anodes for the oil and gas industry in marine environments. These are aluminium products designed to prevent corrosion of submerged steel structures. As one of the auditors, you find that the organisation has shipped anodes for Project DK in the Gulf of Mexico before the galvanic efficiency test results for the anodes have been fully analysed and reported as required by the customer. The Quality Manager explains that the Managing Director authorised the release of the anodes to avoid late delivery as penalties would be imposed. The customer was not informed since the tests rarely fall below the required efficiency. You raise a nonconformity against clause 8.6 of ISO 9001.
During the audit team meeting in preparation for the Closing meeting, the second auditor disagreed with the clause of ISO 9001 selected for the above nonconformity. He thinks it should be clause 9.1.1.
Choose three options for how the audit team leader should best respond to the situation:

The audit team leader will refer to the quality manager to determine which clause they agree with.

Advise that he will think about the clause and announce his decision during the Closing meeting.

Immediately agree with the second auditor that clause 9.1.1 would be better.

Immediately overule the objection of the second auditor with no discussion of the clause.

Invite you and the second auditor to fully explain your point of view and then decide which clause to select.

Review the evidence with you and the second auditor, and then decide which clause of ISO 9001 would best apply.

Suggest that neither clause is accurate and instead propose clause 9.1.3 as the best one for the nonconformity.

Try to obtain a consensus between you and the second auditor after a discussion of the different opinions.

Q23. Scenario 3:
Fin-Pro is a financial institution in Austria offering commercial banking, wealth management, and investment services. The company faced a significant loss of customers due to failing to improve service quality as they expanded.
To regain customer confidence, top management implemented a QMS based on ISO 9001. After a year, they contacted ACB, a local certification body, to pursue ISO 9001 certification.
The audit team was led by Emilia, an experienced lead auditor, and included three auditors. After an agreement was reached, ACB sent the audit objectives to the audit team.
The audit team began by gathering information about Fin-Pro’s understanding of ISO 9001 requirements.
While reviewing documented information, they noticed missing records of training and awareness sessions. They conducted employee interviews to verify attendance.
The team also reviewed the organizational chart and job descriptions to confirm employee competence.
They observed the company’s working environment (social, psychological, and physical conditions).
The audit team analyzed the evidence and prepared an audit report with findings and conclusions.
What type of evidence has been collected by the ACB’s audit team, as presented in scenario 3?

Documentary, confirmative, verbal.

Verbal, documentary, physical.

Physical, verbal, analytical.

Observational, secondary, qualitative.

Q24. How can an organization ensure the objectivity and impartiality of the internal audit function?

By having a representative of top management involved during the internal audit process

By assigning internal auditors that do not have operational roles related to the QMS

By always outsourcing the internal audit function to a third party

Q25. Scenario 1: AL-TAX is a company located in California which provides financial and accounting services. The company manages the finances of 17 companies and now is seeking to expand their business even more The CEO of AL-TAX, Liam Durham, claims that the company seeks to provide top- notch services to their clients Recently, there were a number of new companies interested in the services provided by AL-TAX.
In order to fulfill the requirements of new clients and further improve quality, Liam discussed with other top management members the idea of implementing a quality management system (QMS) based on ISO 9001. During the discussion, one of the members of the top management claimed that the size of the company was not large enough to implement a QMS. In addition, another member claimed that a QMS is not applicable for the industry in which AL TAX operates. However, as the majority of the members voted for implementing the QMS. Liam initiated the project.
Initially, Liam hired an experienced consultant to help AL-TAX with the implementation of the QMS.
They started by planning and developing processes and methods for the establishment of a QMS based on ISO 9001. Furthermore, they ensured that the quality policy is appropriate to the purpose and context of AL TAX and communicated to all employees. In addition, they also tried to follow a process that enables the company to ensure that its processes are adequately resourced and managed, and that improvement opportunities are determined.
During the implementation process, Liam and the consultant focused on determining the factors that could hinder their processes from achieving the planned results and implemented some preventive actions in order to avoid potential nonconformities Six months after the implementation of the QMS.
AL-TAX conducted an internal audit. The results of the internal audit revealed that the QMS was not fulfilling all requirements of ISO 9001. A serious issue was that the QMS was not fulfilling the requirements of clause 5.1.2 Customer focus and had also not ensured clear and open communication channels with suppliers.
Throughout the next three years, the company worked on improving its QMS through the PDCA cycle in the respective areas. To assess the effectiveness of the intended actions while causing minimal disruptions, they tested changes that need to be made on a smaller scale. After taking necessary actions, AL-TAX decided to apply for certification against ISO 9001.
Based on the scenario above, answer the following question:
According to scenario 1, AL-TAX determined the factors that could hinder their processes from achieving the planned results and implemented preventive actions. This means they employed:

Compliance requirements and regulations

Risk-based thinking

The process approach

Q26. Match the process descriptions below to the process names:

Q27. Match the process descriptions below to the process names:

Q28. The following are stages of an audit, put them in the order they would be conducted.

Explanation:
Establishing the audit programme objectives
Determining and evaluating the audit programme risks and opportunities
Establishing the audit programme
Initiating the audit
Preparing all audit activity
Conducting the audit activities
According to ISO 19011:2018, clause 5, the audit programme is a set of one or more audits planned for a specific time frame and directed towards a specific purpose. The audit programme includes all activities necessary to plan, organize, and conduct the audits. The audit programme management involves the following steps1:
Establishing the audit programme objectives: The audit programme objectives define the intended outcomes of the audit programme, such as verifying conformity, evaluating performance, identifying improvement opportunities, etc. The audit programme objectives should be aligned with the strategic direction and policies of the organization and the needs and expectations of the interested parties.
Determining and evaluating the audit programme risks and opportunities: The audit programme risks and opportunities are the factors that can affect the achievement of the audit programme objectives, such as changes in the internal or external context, availability of resources, competence of auditors, etc. The audit programme risks and opportunities should be identified, analyzed, and evaluated to determine the appropriate actions to address them.
Establishing the audit programme: The audit programme is established by defining the audit programme scope, criteria, methods, and resources. The audit programme scope defines the extent and boundaries of the audit programme, such as the processes, functions, sites, activities, etc. that will be audited. The audit programme criteria are the set of policies, procedures, or requirements used as a reference for the audits. The audit programme methods are the techniques used to conduct the audits, such as interviews, observations, document review, sampling, etc. The audit programme resources are the human, technical, and financial resources needed to implement the audit programme.
Initiating the audit: The audit initiation is the process of formally establishing the arrangements for an individual audit within the audit programme. The audit initiation involves contacting the auditee and the audit client, confirming the audit objectives, scope, and criteria, and obtaining the necessary information and access for the audit.
Preparing all audit activity: The audit preparation is the process of developing the audit plan and the audit work documents for an individual audit. The audit plan is a document that provides the basis for agreement regarding the conduct of the audit, such as the audit schedule, the audit team, the audit methods, the audit language, the audit report, etc. The audit work documents are the records that provide evidence of the audit activities, such as the audit checklist, the audit notes, the audit findings, etc.
Conducting the audit activities: The audit activities are the processes of collecting and verifying audit evidence and evaluating it against the audit criteria to make the audit conclusions. The audit activities include the opening meeting, the communication during the audit, the roles and responsibilities of the audit team and the auditee, the audit evidence collection and verification, the audit findings generation and recording, the closing meeting, and the audit report preparation and distribution.
References: ISO 19011:2018(en), Guidelines for auditing management systems

Q29. Among others, what does Clause 4.4 (Quality Management System and Its Processes) of ISO 9001 require from organizations?

To change the QMS quarterly

To review the QMS annually

To continually improve the QMS

To conduct a QMS gap analysis every two years

Q30. Scenario 3:
Fin-Pro is a financial institution in Austria offering commercial banking, wealth management, and investment services. The company faced a significant loss of customers due to failing to improve service quality as they expanded.
To regain customer confidence, top management implemented a QMS based on ISO 9001. After a year, they contacted ACB, a local certification body, to pursue ISO 9001 certification.
The audit team was led by Emilia, an experienced lead auditor, and included three auditors. After an agreement was reached, ACB sent the audit objectives to the audit team.
The audit team began by gathering information about Fin-Pro’s understanding of ISO 9001 requirements.
While reviewing documented information, they noticed missing records of training and awareness sessions.
They conducted employee interviews to verify attendance.
The team also reviewed the organizational chart and job descriptions to confirm employee competence. They observed the company’s working environment (social, psychological, and physical conditions).
The audit team analyzed the evidence and prepared an audit report with findings and conclusions.
ACB sent the audit objectives to the audit team after an agreement was reached. Is this acceptable?

Yes, the audit objectives should be known only after an agreement is reached.

No, only the auditee should know the audit objectives.

No, the audit objectives should be part of the audit offer.

Yes, as long as the audit team leader approves.

Q31. You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organization manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years.
You are interviewing the new Product Development Manager. You note that a software application called SWIFT is used to help control the product development process.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 clause 8.3 extracts to the audit evidence.

Q32. You are conducting an audit at an organisation seeking certification to ISO 9001 for the first time. The organisation offers health and safety training to customers. Training courses are offered either as open courses, delivered at a public venue, or online, or as courses that are tailored to meet specific requirements.
The business operates from a single office and those who deliver the training are either full-time employees or subcontractors.
You have gathered audit evidence as outlined below. Match the ISO 9001 Clause 8 extract to the audit evidence.

Q33. The following are stages of an audit, put them in the order they would be conducted.

Explanation:
Establishing the audit programme objectives
Determining and evaluating the audit programme risks and opportunities
Establishing the audit programme
Initiating the audit
Preparing all audit activity
Conducting the audit activities
According to ISO 19011:2018, clause 5, the audit programme is a set of one or more audits planned for a specific time frame and directed towards a specific purpose. The audit programme includes all activities necessary to plan, organize, and conduct the audits. The audit programme management involves the following steps1:
Establishing the audit programme objectives: The audit programme objectives define the intended outcomes of the audit programme, such as verifying conformity, evaluating performance, identifying improvement opportunities, etc. The audit programme objectives should be aligned with the strategic direction and policies of the organization and the needs and expectations of the interested parties.
Determining and evaluating the audit programme risks and opportunities: The audit programme risks and opportunities are the factors that can affect the achievement of the audit programme objectives, such as changes in the internal or external context, availability of resources, competence of auditors, etc. The audit programme risks and opportunities should be identified, analyzed, and evaluated to determine the appropriate actions to address them.
Establishing the audit programme: The audit programme is established by defining the audit programme scope, criteria, methods, and resources. The audit programme scope defines the extent and boundaries of the audit programme, such as the processes, functions, sites, activities, etc. that will be audited. The audit programme criteria are the set of policies, procedures, or requirements used as a reference for the audits. The audit programme methods are the techniques used to conduct the audits, such as interviews, observations, document review, sampling, etc. The audit programme resources are the human, technical, and financial resources needed to implement the audit programme.
Initiating the audit: The audit initiation is the process of formally establishing the arrangements for an individual audit within the audit programme. The audit initiation involves contacting the auditee and the audit client, confirming the audit objectives, scope, and criteria, and obtaining the necessary information and access for the audit.
Preparing all audit activity: The audit preparation is the process of developing the audit plan and the audit work documents for an individual audit. The audit plan is a document that provides the basis for agreement regarding the conduct of the audit, such as the audit schedule, the audit team, the audit methods, the audit language, the audit report, etc. The audit work documents are the records that provide evidence of the audit activities, such as the audit checklist, the audit notes, the audit findings, etc.
Conducting the audit activities: The audit activities are the processes of collecting and verifying audit evidence and evaluating it against the audit criteria to make the audit conclusions. The audit activities include the opening meeting, the communication during the audit, the roles and responsibilities of the audit team and the auditee, the audit evidence collection and verification, the audit findings generation and recording, the closing meeting, and the audit report preparation and distribution.
References: ISO 19011:2018(en), Guidelines for auditing management systems

Q34. In the context of a management system audit, identify the sequence of a typical process for collecting and verifying information. The first one has been done for you.
To complete the sequence click on the blank section you want to complete so it is highlighted in red and then click on the applicable text from the options below. Alternatively, drag and drop the options to the appropriate blank section.

Explanation:
Identifying the source of information
Sampling available data
Gathering audit evidence
Verifying objective evidence
Evaluating evidence against the audit criteria
Making audit conclusions
Evaluating against the audit criteria
According to ISO 19011:2018, clause 6.4, the process of collecting and verifying information during an audit involves the following steps1:
Identifying the source of information: The audit team should identify the sources of information that are relevant to the audit objectives, scope and criteria. These sources may include documents, records, personnel, processes, activities, facilities, equipment, etc. The audit team should also determine the methods and tools for accessing and collecting the information, such as interviews, observations, document review, sampling, etc.
Sampling available data: The audit team should select a representative sample of the available data to verify the conformity and effectiveness of the management system. The sample size and selection method should be based on the audit objectives, scope and criteria, as well as the level of confidence and risk. The audit team should also consider the validity, reliability, relevance and sufficiency of the data.
Gathering audit evidence: The audit team should use the methods and tools identified in the previous step to collect audit evidence, which is the records, statements of fact or other information that are relevant to the audit criteria and verifiable. The audit team should record the audit evidence in a clear, concise and objective manner, using notes, checklists, photographs, audio or video recordings, etc.
Verifying objective evidence: The audit team should verify the accuracy, completeness and authenticity of the audit evidence collected. This may involve cross-checking different sources of information, confirming the identity and authority of the persons providing the information, examining the original documents or records, etc. The audit team should also identify any discrepancies, inconsistencies or gaps in the audit evidence.
Evaluating evidence against the audit criteria: The audit team should compare the audit evidence with the audit criteria to determine the extent of conformity and nonconformity. The audit team should also identify any opportunities for improvement, best practices, positive aspects or potential risks. The audit team should use professional judgement and apply the principles of auditing when evaluating the audit evidence.
Making audit conclusions: The audit team should consolidate the audit findings and evaluate the overall performance and effectiveness of the management system. The audit team should also consider the audit objectives, scope and criteria, as well as the context and expectations of the auditee and other interested parties. The audit team should provide a clear, concise and objective statement of the audit conclusions, which may include the degree of conformity, the achievement of the intended outcomes, the need for corrective actions, the suitability for certification, etc.
Evaluating against the audit criteria: The audit team should review the audit conclusions and ensure that they are consistent with the audit criteria and supported by sufficient and appropriate audit evidence.
The audit team should also ensure that the audit conclusions are communicated to the auditee and other relevant parties in a timely and effective manner, using the agreed audit report format and distribution method.
References: ISO 19011:2018(en), Guidelines for auditing management systems

Q35. You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organization manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years.
You are interviewing the new Product Development Manager. You note that a software application called SWIFT is used to help control the product development process.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 clause 8.3 extracts to the audit evidence.

Q36. For each of the following scenarios, select four that are corrective actions.

The government enforces a lockdown against a virulent virus

The government increases payments to dentists for dental checks for children

A complaint about cold food was resolved by reheating food in the restaurant kitchen

After the loss of an important football match 4-0, the manager is sacked

Call out roadside assistance to a broken-down car

The government develops a vaccine against a virulent virus

The organization improves product identification to prevent customer complaints

The organization uses fertilizers to prevent plants dying in a section of a garden centre

Q37. Select the words that best complete the sentence:

Q38. An internal auditor of a manufacturer of polystyrene packaging products for the electronics industry raised a nonconformity against section 10.3 of ISO 9001 in Report IA202. The nonconformity (NC 3) stated:
“The reject rate of the finished product of 9.7% needs improvement as it doesn’t meet the stated objective of top management of 5%.” As the third-party auditor reviewing the internal audit process, you come across the nonconformity. For corrective action, the Quality Manager conducted an investigation into the reject rates. He reported that the collection baskets for products ejecting from the moulding machines were not large enough. About 6% of products fell onto the wet and dirty factory floor. Management stated that replacing the baskets was too costly and ordered the Maintenance Manager to ensure that the floor was kept clean and dry to prevent rejects. The auditor later checked the factory floor, which was wet and dirty in places.
From the following nonconformities, select three that the auditor could raise to ISO 9001.

10.3 – The organisation did not continuously improve. Reject rates were unchanged.

7.1.4 – The factory environment is not suitably maintained to prevent dirty products.

7.1.1 – The organisation failed to provide the required resources to prevent nonconforming products.

9.2.2 – Report IA202 contained a poorly worded nonconformity (NC 3).

8.6 – Dirty products were released to the customer.

7.3 – Staff were not aware that products were falling onto the factory floor.

10.2.1 – Conduct of an investigation was not sufficient to understand the cause of the nonconformity.

8.5.1 – Production operations were not properly controlled to avoid reject products.

The auditor could raise the following nonconformities to ISO 9001 based on the scenario:
*Option A: 10.3 – The organisation did not continuously improve. Reject rates were unchanged. This option is correct because ISO 9001:2015 clause 10.3 requires the organization to improve the suitability, adequacy and effectiveness of the quality management system. The organization did not demonstrate any improvement in reducing the reject rate of the finished product, which was a stated objective of top management. The corrective action taken by the organization was not effective in addressing the root cause of the problem and preventing its recurrence.
*Option B: 7.1.4 – The factory environment is not suitably maintained to prevent dirty products. This option is correct because ISO 9001:2015 clause 7.1.4 requires the organization to determine, provide and maintain the environment necessary for the operation of its processes and to achieve conformity of products and services.
The organization did not ensure that the factory floor was clean and dry, which affected the quality of the products and increased the risk of nonconformity.
*Option C: 7.1.1 – The organization failed to provide the required resources to prevent nonconforming products. This option is correct because ISO 9001:2015 clause 7.1.1 requires the organization to determine and provide the resources needed for the establishment, implementation, maintenance and continual improvement of the quality management system. The organization did not provide adequate collection baskets for the products ejecting from the moulding machines, which resulted in products falling onto the factory floor and becoming nonconforming.
The following options are not correct:
*Option D: 9.2.2 – Report IA202 contained a poorly worded nonconformity (NC 3). This option is not correct because ISO 9001:2015 clause 9.2.2 does not specify the requirements for the wording of nonconformities in internal audit reports. The nonconformity (NC 3) stated by the internal auditor was clear and relevant to the audit criteria and audit evidence. The issue is not with the report, but with the corrective action taken by the organization.
*Option E: 8.6 – Dirty products were released to the customer. This option is not correct because ISO 9001:
2015 clause 8.6 requires the organization to implement planned arrangements, at appropriate stages, to verify that the product and service requirements have been met. The scenario does not indicate that the dirty products were released to the customer, but that they were recalled and repaired then returned to the customers. The issue is not with the release, but with the production process and the environment.
*Option F: 7.3 – Staff were not aware that products were falling onto the factory floor. This option is not correct because ISO 9001:2015 clause 7.3 requires the organization to ensure that the persons doing work under its control are aware of the quality policy, relevant quality objectives, their contribution to the effectiveness of the quality management system, and the implications of not conforming with the quality management system requirements. The scenario does not indicate that the staff were not aware of these aspects, but that the management did not provide adequate resources and environment for the staff to perform their work. The issue is not with the awareness, but with the management responsibility and resource provision.
*Option G: 10.2.1 – Conduct of an investigation was not sufficient to understand the cause of the nonconformity. This option is not correct because ISO 9001:2015 clause 10.2.1 requires the organization to react to the nonconformity and, as applicable, take action to control and correct it and deal with the consequences. The scenario indicates that the Quality Manager conducted an investigation into the reject rates and identified the cause of the nonconformity. The issue is not with the investigation, but with the corrective action taken by the management.
*Option H: 8.5.1 – Production operations were not properly controlled to avoid reject products. This option is not correct because ISO 9001:2015 clause 8.5.1 requires the organization to implement production and service provision under controlled conditions. The scenario indicates that the production operations were controlled by the moulding machines, which ejected the products into the collection baskets. The issue is not with the production operations, but with the size of the collection baskets and the condition of the factory floor.
References:
*ISO 9001:2015 Quality management systems – Requirements
*ISO 9001 Lead Auditor Course Material, Module 6: Reporting Audit Findings, Slide 14: Writing Nonconformity Statements
*ISO 9001 Lead Auditor Training Course – IRCA Certified, Section 6.2: Reporting Audit Findings
*Lead Auditor Exam Preparation Guide (EPG) Template – PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 – Audit Fundamentals, Subsection 3.2.2: Section 2 – Audit Principles, Subsection
3.2.3: Section 3 – Audit Process, Subsection 3.2.4: Section 4 – Audit Competencies

Q39. What is a combined audit?

Two or more management systems audited together at a single auditee.

Two or more auditing organizations cooperating to audit a single auditee.

Two or more management systems audited simultaneously at several auditees.

Q40. Scenario 3:
Fin-Pro is a financial institution in Austria offering commercial banking, wealth management, and investment services. The company faced a significant loss of customers due to failing to improve service quality as they expanded.
To regain customer confidence, top management implemented a QMS based on ISO 9001. After a year, they contacted ACB, a local certification body, to pursue ISO 9001 certification.
The audit team was led by Emilia, an experienced lead auditor, and included three auditors. After an agreement was reached, ACB sent the audit objectives to the audit team.
The audit team began by gathering information about Fin-Pro’s understanding of ISO 9001 requirements.
While reviewing documented information, they noticed missing records of training and awareness sessions. They conducted employee interviews to verify attendance.
The team also reviewed the organizational chart and job descriptions to confirm employee competence.
They observed the company’s working environment (social, psychological, and physical conditions).
The audit team analyzed the evidence and prepared an audit report with findings and conclusions.
Based on the last paragraph of scenario 3, which audit principle did the audit team follow?

Fair presentation.

Integrity.

Confidentiality.

Objectivity.

Q41. You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The
organisation manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years. The organisation uses a software programme called SWIFT, which is used to record sales, plan production, purchase supplies, print despatch notes, track new product development, perform traceability exercises, carry out mass balance checks, raise invoices, create budgets, and support financial control.
You are nearing the end of the audit and you are reviewing your audit notes. You notice a recurring trend concerning the SWIFT database as shown below:

You ask the Quality Manager to explain how the SWIFT database is controlled. You learn that the Operations Director is responsible for determining and progressing SWIFT software updates. You decide to meet the Operations Director (OD).
You: “Good afternoon.”
OD: “Good afternoon.”
You: “What responsibility do you have concerning the SWIFT database?”
OD: “I maintain it. If anyone wishes to propose an update to the database, they send me an email with details of their proposal. I then either process the database update myself, or I send the request to the consultant who designed the database 20 years ago. The necessary software changes are made, and the amended software is immediately released to users.” You: “Would you explain how the software amendments are controlled?” OD: “Of course. I personally update every computer myself.” You: “Do you inform the database users of the changes?” OD: “No I don’t. They find out for themselves by using the software, or they come to see me if they have any questions.” You: “How do you ensure that the database users use the latest version?” OD: “That’s easy, I update every computer myself.” You: “During the audit, I noted there were several versions of SWIFT in use (you refer to your audit notes).” OD: “I know. That’s because some versions work better than others, and depending on user needs and experiences, we allow users to revert to using an earlier version if they find it works better for them.” Based on the scenario, which two of the following statements are true? There is evidence of nonconformity with a requirement defined in …

clause 7.1.3 Infrastructure

… clause 7.1.4 Environment for the operation of processes

clause 7.5.1 Documented information – General

… clause 7.5.2 Documented information – Creating and updating

… clause 7.5.3 Control of documented information

Q42. You have been nominated audit team leader of a third-party audit. Which of the following could be the two most relevant objectives of this audit?

Identify the need of resources

Evaluate the capability of the management system to establish and achieve objectives

Evaluate the satisfaction interested parties

Evaluate the benefits obtained since the implementation of the management system

Evaluate the effectiveness of the management system

Identify opportunities for improvement

Q43. Scenario 4:
TD Advertising is a print management company based in Chicago. The company offers design services, digital printing, storage, and distribution. As TD expanded, its management recognized that success depended on adopting new technologies and improving quality.
To ensure customer satisfaction and quality improvement, the company decided to pursue ISO 9001 certification.
After implementing the QMS, TD hired a well-known certification body for an audit. Anne Key was appointed as the audit team leader. She received a document listing the audit team members, audit scope, criteria, duration, and audit engagement limits.
Anne reviewed the document and approved the audit mandate. The certification body and TD’s top management signed the certification agreement.
Before contacting TD, Anne reviewed the audit scope and noticed that TD made changes to it due to the adoption of new printing equipment. However, Anne disagreed with the changes, stating they would affect the audit timeline. She considered withdrawing from the audit.
How do you assess the situation presented in the last paragraph of scenario 4?

Anne cannot withdraw from the audit once the audit mandate is accepted.

TD cannot make any change to the audit scope once it has been defined.

TD should have agreed with the certification body and Anne about any change in the audit scope.

Anne has full authority to reject any scope changes, even if TD and the certification body agree.