QUESTION: 41

You are conducting a third-party audit to ISO 9001 and the next item on your audit plan is 'internal auditing'.

When reviewing a sample of audit records up to 5 years previously, you find that many contain non- conformance reports and no actions have been taken. You interview the Quality Manager.

You: "I have noted that many of the older files contain non-conformances that have not had any corrective action taken."

Quality Manager: "Because the business is always changing, the departmental managers tell me that the non-conformances are no longer applicable. I made a decision that any non-conformance over 3 years old is automatically closed"

You: "Do you obtain any confirmation beforehand from the appropriate departments that the non- conformances are no longer applicable."

Quality Manager: " No, because they are so old I consider that they are no longer appropriate. Please remember that we take a risk-based approach which means we audit where and when it is considered important to do so.

Select one course of action you would now take from the options.

Interview Top management to determine whether they were aware of and agreed the actions of the Quality Manager
Review all non-conformances reports related to clause 9.2 of ISO 9001
Interview relevant Departmental managers to assess whether the older non-conformances are still valid.
Raise a non-conformance report against clause 9.2.2.e of ISO 9001

Answer(s): D

Explanation:

According to ISO 9001:2015, clause 9.2.2.e, the organization is required to retain documented information as evidence of the implementation of the audit programme and the audit results. This includes the records of the nonconformities identified during the internal audits and the corrective actions taken to address them. The organization is also required to verify the effectiveness of the corrective actions, as per clause 10.2.2.
Therefore, in the scenario given, the Quality Manager's decision to automatically close any nonconformance over 3 years old without obtaining any confirmation from the relevant departments or verifying the effectiveness of the corrective actions is a clear violation of the requirements of clause 9.2.2.e. This indicates a lack of control and follow-up of the internal audit process, as well as a potential risk of recurrence or occurrence of the nonconformities in other areas. This also undermines the credibility and value of the internal audit programme, as well as the risk-based approach claimed by the Quality Manager.
Hence, the best course of action to take is D, to raise a nonconformance report against clause 9.2.2.e of ISO 9001, and to communicate the audit findings to the relevant management. The other options are either insufficient or irrelevant to address the issue, as they do not directly relate to the noncompliance with clause 9.2.2.e.

Reference:

ISO 9001:2015(en), Quality management systems -- Requirements, clause 9.2.2 and 10.2.2 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

Reveal Solution Next Question

QUESTION: 42

During a third-party audit of a pharmaceutical organisation (CD9000) site of seven COVID-19 testing laboratories in various terminals at a major international airport, you interview the CD 9000's General Manager (GM), who was accompanied by Jack, the legal compliance expert. Jack is acting as the guide in the absence of the Technical Manager due to him contracting COVID-19.

You: "What external and internal issues have been identified that could affect CD9000 and its quality management system?"

GM: "Jack guided us on this. We identified issues like probable competition of another laboratory organisation in the airport, legal requirements on COVID-19 continuously changing, the shortage of competent laboratory analysists, the epidemic declining soon,

shortage of chemicals for the analysis. It was quite a good experience."

You: "Did you document these issues?"

GM: "No. Jack said that ISO 9001 does not require us to document these issues."

You: "How did you determine the risks associated with the issues and did you plan actions to address them?"

GM: "I am not sure. The Technical Manager is responsible for this process. Jack may be able to answer this question in his absence."

Select two options for how you would respond to the General Manager's suggestion:

I would not accept the legal compliance expert answering the question.
I would ask to audit the Technical Manager by phone.
I would delay the audit until the return of the technical manager
I would look for evidence that the actions resulting from the risk assessment had been taken.
I would ask for a different guide instead of the legal compliance expert.
I would ask the consultant to leave the meeting since he is not an employee of the organisation.

Answer(s): A,D

Explanation:

According to clause 4.1 of ISO 9001:2015, the organization should determine external and internal issues that are relevant to its purpose and its strategic direction and that affect its ability to achieve the intended results of its quality management system. The organization should monitor and review these issues and update them as necessary. Although the standard does not explicitly require documented information of these issues, it does require documented information as evidence of the implementation of the actions taken to address risks and opportunities, as per clause 6.1. The organization should also retain documented information as evidence of the results of the monitoring,

measurement, analysis and evaluation of its QMS, as per clause 9.1. Therefore, the auditor should not accept the legal compliance expert answering the question, as he is not the person responsible for the process and may not have the necessary competence or knowledge of the QMS. The auditor should also look for evidence that the actions resulting from the risk assessment had been taken, as this is a requirement of the standard and a way to verify the effectiveness of the QMS. The other options are not appropriate courses of action for the auditor, because they do not address the audit objective or criteria, or they may compromise the audit integrity or impartiality. For example, option B may not be feasible or reliable, as the Technical Manager may not be available or able to provide the necessary evidence by phone. Option C may cause unnecessary delay and inconvenience for the audit process and the auditee. Option E may not solve the problem, as the guide is not the main source of evidence or information for the audit. Option F may be disrespectful or unprofessional, as the consultant may have a legitimate role or interest in the audit.

Reference:

ISO 9001:2015, ISO

9001 Auditing Practices Group Guidance on Context of the Organization, ISO 9001 Auditing Practices Group Guidance on Audit Evidence

Reveal Solution Next Question

QUESTION: 43

During a second-party audit, the auditor examines the records that are available for the external provider, ABC Forgings, to whom manufacturing has recently been outsourced.

There are standard external provider checklists for three competitors for the contract and there are inspection records from the trial manufacturing batches produced by ABC Forgings. There is no documented evidence of the criteria used to confirm the appointment of ABC Forgings, and no contract or terms and conditions. Ongoing monitoring indicates that external provider performance is satisfactory, but no documented information has been retained.

Select two options for the evidence which demonstrates a nonconformity with clause 8.4 of ISO 9001.

There was no documentation which provided evidence of any monitoring of the external provider.
The auditee required the outsourced products on an urgent basis before the completion of the paperwork.
The auditee did not retain documentation on the selection and evaluation of the external provider.
The external provider asked for the contract details to be verbal only.
There were no receipt inspection records of the incoming materials.
The auditee trusted the external provider because of a long-standing relationship with them.

Answer(s): A,C

Explanation:

According to clause 8.4 of ISO 9001:2015, the organization should ensure that externally provided processes, products, and services conform to the specified requirements. To do so, the organization should:
· Establish the criteria for the selection, evaluation, and re-evaluation of external providers, based on their ability to provide processes, products, and services in accordance with the requirements. The criteria should be documented and applied consistently. · Evaluate the potential external providers before selecting them, using the established criteria. The evaluation methods may include questionnaires, audits, references, samples, etc. The results of the evaluation should be documented and reviewed.
· Select the external providers that have demonstrated their competence and conformity to the requirements. The selection should be based on the evaluation results and the organization's needs. The selection should be documented and approved.
· Communicate the requirements for the processes, products, and services to be provided by the external provider, including the verification and validation activities, the acceptance criteria, the documentation requirements, the changes control, etc. The communication methods may include purchase orders, contracts, agreements, etc. The communication should be clear, complete, and timely.
· Monitor the performance and conformity of the external provider, using the established criteria and methods. The monitoring methods may include inspections, tests, audits, feedback, complaints, etc. The monitoring results should be documented and analyzed. In this case, the evidence statements that demonstrate a nonconformity with clause 8.4 are A and C, because they show that the organization did not retain documented information of the selection and evaluation of the external provider, and the monitoring of the external provider's performance. These are requirements of the standard and essential for ensuring the quality of the externally provided processes, products, and services. The other options are not directly related to clause 8.4, although they may indicate other nonconformities or weaknesses in the organization's QMS. For example, option B may relate to clause 7.1.3 on contingency planning, option D may relate to clause 8.2.3 on review of requirements, option E may relate to clause 8.6 on release of products and services, and option F may relate to clause 5.1.1 on leadership and commitment.

Reference:

ISO 9001:2015, [ISO 9001 Auditing Practices Group Guidance on Scope], Mastering the Scope of ISO 9001 Quality Management Systems

Reveal Solution Next Question

QUESTION: 44

XYZ Corporation is an organisation that employs 100 people. As the audit team leader, you conduct a certification audit at Stage 1.
When reviewing the quality management system (QMS), you find that the objectives have been defined by an external consultant using those of a competitor, but nothing is documented. The Quality Manager complains that this has created a lot of resistance to the QMS, and the Chief Executive is asking questions about how much it will cost.

Which two options describe the circumstances in which you could raise a nonconformity against clause 6.2 of ISO 9001?

The consultant has not interpreted ISO 9001 correctly.
Quality objectives were not established in alignment with the organisation's quality policy.
Quality objectives are not maintained as documented information.
Establishing quality objectives did not include top management.
The organisation cannot afford to undertake quality objectives all at once.
Quality objectives are not being implemented by the organisations' personnel.

Answer(s): B,C

Explanation:

According to ISO 9001:2015, clause 6.2.1, the organization is required to establish quality objectives at relevant functions, levels, and processes for the quality management system (QMS). The quality objectives must be consistent with the quality policy, measurable, monitored, communicated, and updated as appropriate. The organization is also required to maintain documented information on the quality objectives, as per clause 7.5.1.
Therefore, in the scenario given, the quality objectives defined by the external consultant are not in alignment with the organization's quality policy, as they are based on those of a competitor, rather than the organization's own purpose, strategic direction, and customer requirements. This creates a mismatch between the organization's vision and goals, and the quality objectives that are supposed to guide and measure the QMS performance. Moreover, the quality objectives are not maintained as documented information, which makes it difficult to communicate, monitor, and update them, as well as to demonstrate evidence of their implementation and achievement. Hence, the circumstances in which a nonconformity against clause 6.2 of ISO 9001 could be raised are B and C, as they indicate a failure to comply with the requirements of clause 6.2.1. The other options are either irrelevant or not directly related to clause 6.2, as they do not pertain to the establishment and documentation of quality objectives.

Reference:

ISO 9001:2015(en), Quality management systems -- Requirements, clause 6.2.1 and 7.5.1 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

Reveal Solution Next Question

Free ISO-9001-Lead-Auditor Exam Braindumps (page: 11)

QUESTION: 41

Explanation:

Reference:

QUESTION: 42

Explanation:

Reference:

QUESTION: 43

Explanation:

Reference:

QUESTION: 44

Explanation:

Reference: