In the context of a third-party audit, select the issue which is not expected to be included in the audit plan.
Answer(s): C
According to ISO 19011:2018, clause 6.3.2, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the following information1:·the audit objectives, scope and criteria·the audit team members and their roles and responsibilities ·the audit schedule, including the date, time and location of each audit activity ·the expected time and duration of meetings and interviews ·the allocation of appropriate resources to critical areas of the audit ·the identification of the audit client and the auditee ·the identification of the guides and observers, if any·the documents and records to be reviewed before and during the audit ·the audit methods and tools to be used·the audit language and terminology·the audit report content, format, distribution and expected completion date ·the risk to achieving audit objectives and the contingency plan, if any Therefore, the issue which is not expected to be included in the audit plan is C, expectations of the organisation's management. This issue is not relevant to the conduct of the audit, as the audit is based on the audit criteria, not on the management's expectations. The management's expectations may be considered during the audit initiation or the audit programme management, but they are not part of the audit plan.
ISO 19011:2018(en), Guidelines for auditing management systems, How to create an ISO 9001 internal audit plan - Advisera
In a third-party audit to ISO 9001, select two options of when the organisation is required to act in response to reported findings.
Answer(s): D,F
According to ISO 19011:2018, clause 6.6.2, a nonconformity is the non-fulfilment of a requirement. A nonconformity can be classified as either major or minor, depending on the nature and extent of the deviation from the audit criteria. A major nonconformity is a nonconformity that affects the ability or the integrity of the organization's management system to achieve the intended results. A minor nonconformity is a nonconformity that does not affect the ability or the integrity of the organization's management system to achieve the intended results, but is a deviation from the audit criteria1.According to ISO/IEC 17021-1:2015, clause 9.4.9, the organization is required to analyze the cause and describe the specific correction and corrective actions taken, or planned to be taken, to eliminate detected nonconformities, within a defined time. The organization is also required to provide the certification body with records and evidence of the implementation and effectiveness of the correction and corrective actions taken. The certification body will then verify the correction and corrective actions taken by the organization and decide on the certification status2. Therefore, the two options of when the organization is required to act in response to reported findings are D and F, as they indicate the presence of nonconformities that need to be corrected and prevented from recurring. The other options are not correct, as they do not require the organization to act in response to reported findings:·A. A recommendation is given in the report: A recommendation is a suggestion for improvement that is not related to a nonconformity. A recommendation is not binding for the organization and does not affect the certification status. The organization may choose to accept or reject the recommendation, but it is not required to act on it.·B. A finding of good practice is reported: A finding of good practice is a positive observation that indicates a strength or a best practice of the organization's management system. A finding of good practice is not related to a nonconformity and does not affect the certification status. The organization may choose to acknowledge or share the finding of good practice, but it is not required to act on it.·C. An opportunity for improvement is raised: An opportunity for improvement is a potential area where the organization's management system can be enhanced or optimized. An opportunity for improvement is not related to a nonconformity and does not affect the certification status. The organization may choose to pursue or ignore the opportunity for improvement, but it is not required to act on it.·E. A finding of conformity is reported: A finding of conformity is a confirmation that the organization's management system fulfils the audit criteria. A finding of conformity is not related to a nonconformity and does not affect the certification status. The organization may choose to celebrate or communicate the finding of conformity, but it is not required to act on it.
ISO 19011:2018(en), Guidelines for auditing management systems, ISO/IEC 17021-1:2015(en), Conformity assessment -- Requirements for bodies providing audit and certification of management systems -- Part 1: Requirements
DRAG DROPThe following are stages of an audit, put them in the order they would be conducted.
Answer(s): A
Establishing the audit programme objectivesDetermining and evaluating the audit programme risks and opportunities Establishing the audit programmeInitiating the auditPreparing all audit activityConducting the audit activitiesAccording to ISO 19011:2018, clause 5, the audit programme is a set of one or more audits planned for a specific time frame and directed towards a specific purpose. The audit programme includes all activities necessary to plan, organize, and conduct the audits. The audit programme management involves the following steps1:Establishing the audit programme objectives: The audit programme objectives define the intended outcomes of the audit programme, such as verifying conformity, evaluating performance, identifying improvement opportunities, etc. The audit programme objectives should be aligned with the strategic direction and policies of the organization and the needs and expectations of the interested parties.Determining and evaluating the audit programme risks and opportunities: The audit programme risks and opportunities are the factors that can affect the achievement of the audit programme objectives, such as changes in the internal or external context, availability of resources, competence of auditors, etc. The audit programme risks and opportunities should be identified, analyzed, and evaluated to determine the appropriate actions to address them. Establishing the audit programme: The audit programme is established by defining the audit programme scope, criteria, methods, and resources. The audit programme scope defines the extent and boundaries of the audit programme, such as the processes, functions, sites, activities, etc. that will be audited. The audit programme criteria are the set of policies, procedures, or requirements used as a reference for the audits. The audit programme methods are the techniques used to conduct the audits, such as interviews, observations, document review, sampling, etc. The audit programme resources are the human, technical, and financial resources needed to implement the audit programme.Initiating the audit: The audit initiation is the process of formally establishing the arrangements for an individual audit within the audit programme. The audit initiation involves contacting the auditee and the audit client, confirming the audit objectives, scope, and criteria, and obtaining the necessary information and access for the audit.Preparing all audit activity: The audit preparation is the process of developing the audit plan and the audit work documents for an individual audit. The audit plan is a document that provides the basis for agreement regarding the conduct of the audit, such as the audit schedule, the audit team, the audit methods, the audit language, the audit report, etc. The audit work documents are the records that provide evidence of the audit activities, such as the audit checklist, the audit notes, the audit findings, etc.Conducting the audit activities: The audit activities are the processes of collecting and verifying audit evidence and evaluating it against the audit criteria to make the audit conclusions. The audit activities include the opening meeting, the communication during the audit, the roles and responsibilities of the audit team and the auditee, the audit evidence collection and verification, the audit findings generation and recording, the closing meeting, and the audit report preparation and distribution.
ISO 19011:2018(en), Guidelines for auditing management systems
Audit criteria are a set of requirements used as a reference against which objective evidence is compared.Which two of the following are not potential audit criteria?
Answer(s): F,H
According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:·ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc. ·Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation ·Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities ·Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation's legal obligations, policies, or procedures·Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved ·Organisation's documented information, such as policies, procedures, manuals, records, etc., that describe the organisation's management system and its processes ·Commitment to follow principles issued by an NGO, such as the United Nations Global Compact,the International Labour Organization, etc., as long as they are relevant to the organisation's context and objectives·Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation's activities, products, and servicesTherefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation's management system. Commercial advertisements and claims made on the organisation's website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.
ISO 19011:2018(en), Guidelines for auditing management systems, What are audit criteria? - ISO Update
Which of the following two documents does an auditor need to prepare and complete prior to the on-site audit?
Answer(s): B,D
According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1.According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit. The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1. Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard:·A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1.·C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization's management system, or part of the audit programme, if they are part of the certification body's or registrar's requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1. ·E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1.·F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria. Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1.
Post your Comments and Discuss PECB ISO 9001 Lead Auditor exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISO 9001 Lead Auditor content, but please register or login to continue.