OptimEats is a startup food production company, located in Oslo, Norway, specializing in the creation of healthy, ready-to-eat meals for its consumers. OptimEats uses AI to streamline food production, preparation, and logistics. These systems analyze real-time data to identify hazards, predict maintenance needs, and ensure regulatory compliance. To enhance efficiency and safety, OptimEats integrated an artificial intelligence management system AIMS based on ISO/IEC 42001.
The company aligned its AIMS with ISO 22000, which outlines the requirements for a food safety management system. By integrating AI tools with ISO 22000 principles, OptimEats aims to improve overall performance in food safety, ensuring that its products meet regulatory standards and customer expectations.
In the event of a nonconformity, such as a deviation in product quality, a failure in hygiene standards, or a breakdown in equipment monitoring, OptimEats aims to take swift and decisive action. The company has established protocols for evaluating and implementing solutions, including corrective measures to restore compliance, preventive actions to avoid recurrence, and system adjustments to address root causes. It also regularly reviews their effectiveness and makes necessary changes. In addition to this, OptimEats records information as evidence for both minor and major nonconformities, enabling traceability and continual improvement.
OptimEats analyzed internal and external factors affecting its AIMS to address relevant challenges and seize opportunities. The company also identified key interested parties and their requirements, integrating these into the system to improve satisfaction. Moreover, it defined the scope of the AIMS, and later documented and shared it with interested parties to maintain transparency and accountability.
OptimEats established a robust internal audit program to assess the effectiveness of its AIMS. With defined audit frequency, methods, responsibilities, and reporting procedures in place, the company aims to conduct regular audits to evaluate process importance and previous findings. Audit objectives, criteria, and scope are specified, and auditors communicate audit results to the top management, although documented information is not retained as evidence of audit results.
While adhering to ISO/IEC 42001 controls, OptimEats justified the exclusion of certain controls from Annex A based on the unique needs of its AIMS. Additionally, modifications to controls in Annex B have been made and new controls have been implemented to enhance the system's effectiveness. However, the company did not document these changes in the Statement of Applicability.
Lastly, OptimEats considered the application of Annex C into its AIMS but, after thorough evaluation, determined that while it offers valuable insights, it is not necessary for the company's specific needs and objectives.
Based on the scenario above, answer the following question:
Based on scenario 2, did OptimEats adhere to clause 9.2 Internal audit of ISO/IEC 42001?
- Yes, it defined audit frequency, methods, and reported results to relevant management
- Yes, auditors communicate the audit results to the top management
- No, documented information must be retained as evidence of audit results
Answer(s): C
Explanation:
Clause 9.2 of ISO/IEC 42001 requires organizations to retain documented information as evidence of the implementation of the audit program and audit results. Although OptimEats established and conducted an internal audit program appropriately, it failed to retain documented information as evidence of audit results, which makes it nonconformant with the requirement.