Pass the PECB ISO 9001 ISO-9001-Lead-Auditor Questions and answers with ExamsMirror

According to ISO 9001:2015, clause 4.1, the organisation must determine the external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended results of its quality management system. The organisation must also monitor and review the information about these issues. SWOT analysis is a tool that can help the organisation to identify its strengths, weaknesses, opportunities, and threats. However, the SWOT analysis alone is not sufficient to comply with the requirement, as the organisation also needs to review the information periodically and update it as necessary. Therefore, one audit trail would be to establish how the organisation reviews information about external and internal issues, such as how often, by whom, using what criteria, and with what results. 123

According to ISO 9001:2015, clause 10.3, the organisation must continually improve the suitability, adequacy, and effectiveness of the quality management system. The organisation must also consider the results of analysis and evaluation, and the outputs from management review, to determine if there are any needs or opportunities for improvement. SWOT analysis can help the organisation to identify the areas where improvement is needed or possible, such as addressing the weaknesses and threats, or exploiting the strengths and opportunities. However, the SWOT analysis alone is not sufficient to comply with the requirement, as the organisation also needs to take actions to implement the improvement, such as setting objectives, allocating resources, assigning responsibilities, and evaluating the effectiveness. Therefore, another audit trail would be to establish what actions were taken to improve the QMS, such as what, when, by whom, how, and with what results. 124 References:

1: ISO 9001:2015 - Quality management systems — Requirements

2: Advisera, “Context of the organization in ISO 9001:2015 explained”, https://advisera.com/9001academy/knowledgebase/how-to-identify-the-context-of-the-organization-in-iso-90012015/

3: ISO Templates, “ISO 9001 - Clause 4: Context of the organisation explained”, https://resources.iso-templates.com/blog/iso-9001-clause-4-context-of-the-organisation-explained

4: Advisera, “How to implement continual improvement in ISO 9001”, https://advisera.com/9001academy/knowledgebase/how-to-implement-continual-improvement-in-iso-9001/

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires organizations to assess both internal and external issues that could impact the effectiveness of their Quality Management System (QMS).

Clause Reference:

Clause 4.1 – Understanding the Organization and Its Context states that organizations must determine external and internal issues that affect their ability to achieve intended results.

Internal issues include:

Knowledge within the organization (documented or undocumented)

Organizational culture

Resource availability

Technological advancements

Infrastructure and capabilities

Why is the Correct Answer C?

Knowledge (Clause 7.1.6) is a critical internal factor that directly affects the implementation and maintenance of a QMS.

Organizations must identify, maintain, and make available the necessary knowledge to achieve quality objectives and meet customer requirements.

Why are the Other Options Incorrect?

A (Social and economic environments) → These are considered external issues rather than internal.

B (Competitive environment) → Competition is external, not an internal issue affecting the QMS.

D (Expectations of suppliers) → Supplier expectations relate to external interested parties, covered under Clause 4.2 (Understanding the Needs and Expectations of Interested Parties).

 Understanding "Context of the Organization":

The term "context of the organization" is defined in ISO 9001:2015 Clause 4.1, which states:

"The organization shall determine external and internal issues that are relevant to its purpose and its strategic direction and that affect its ability to achieve the intended result(s) of its quality management system."

The definition emphasizes identifying both internal and external issues that influence the organization's approach to developing and achieving its objectives.

 Option Analysis:

Option A:Correct. This option aligns with the standard definition as it explicitly mentions the combination of internal and external issues that affect the organization’s approach to achieving its objectives, which is the essence of Clause 4.1.

Option B:Incorrect. The term "comparison of internal and external issues" does not reflect the ISO 9001 requirements. The standard does not require a comparison but rather an understanding of these issues.

Option C:Incorrect. Although it mentions "complexity," the focus of ISO 9001:2015 is on identifying relevant issues rather than the complexity of those issues.

Option D:Incorrect. This option mentions "coordination" and focuses only on the positive or negative effects. ISO 9001 requires identifying issues but does not emphasize coordination.

 Clause Reference and Relevance:

ISO 9001:2015 requires organizations to understand their context because internal and external factors can influence the Quality Management System's effectiveness. Understanding this context helps in:

Addressing risks and opportunities (Clause 6.1).

Aligning the QMS with the organization’s strategic direction.

 Why A is Correct:

"Combination of internal and external issues" captures the essence of Clause 4.1, making it the accurate definition of the context of the organization.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires specific roles and responsibilities for audit leaders and certification bodies.

Clause References:

ISO 19011:2018, Clause 5.5 – Conducting the Audit: Defines audit team leader responsibilities.

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning: Defines certification body responsibilities, including the certification agreement.

Why is the Correct Answer D?

The certification agreement is signed between the certification body and the auditee (TD Advertising).

Anne (audit team leader) does NOT have authority to sign the agreement—that is the responsibility of the certification body’s management.

Why are the Other Options Incorrect?

A (Establishing audit criteria and objectives) → Correct responsibility of the audit leader as per ISO 19011.

B (Determining audit feasibility) → Audit leaders assess feasibility but do not sign agreements.

C (Assigning responsibilities for the audit team) → This is part of the audit leader’s role in planning audits.

Comprehensive and Detailed In-Depth Explanation:

A combined audit is when multiple management systems (e.g., ISO 9001 for Quality, ISO 14001 for Environmental Management, and ISO 45001 for Occupational Health & Safety) are audited together in a single organization.

Clause References:

ISO 19011:2018, Clause 5.4 – Combined Audits:

A combined audit is performed when two or more management systems are assessed simultaneously at the same auditee.

Why is the Correct Answer A?

A combined audit reduces duplication of effort by auditing multiple standards together at a single organization.

Example: A company certified to both ISO 9001 and ISO 14001 can have one audit covering both standards.

Why are the Other Options Incorrect?

B (Two or more auditing organizations cooperating on a single auditee) → This is a joint audit, not a combined audit.

C (Two or more management systems audited at multiple auditees) → This is a multiple-site audit, not a combined audit.

Evaluate the effectiveness of the management system: This objective involves verifying that the quality management system meets the requirements of a specific standard, such as ISO 9001:2015, and that it achieves the intended results and outcomes. The audit team will collect and analyse audit evidence to determine the degree of conformity and performance of the quality management system23.

•Evaluate the capability of the management system to establish and achieve objectives: This objective involves verifying that the quality management system supports the strategic direction and policies of the organization, and that it addresses the needs and expectations of the interested parties. The audit team will assess the suitability, adequacy, and alignment of the quality management system objectives, and the effectiveness of the planning and implementation processes to achieve them23.

The other options are not the most relevant objectives of a third-party audit, according to the web search results from my internal tool. They may be related to other aspects or types of audits, but they are not the focus of a third-party audit.

Therefore, the correct answer is B and D.

Comprehensive and Detailed In-Depth Explanation:

Auditors must focus on key processes that impact QMS effectiveness to ensure audit risks are minimized.

Clause References:

ISO 19011:2018, Clause 6.3 – Managing Audit Risk: Auditors should prioritize critical processes to obtain reasonable assurance.

Why is the Correct Answer A?

Some processes are critical (e.g., production quality, customer complaints handling).

If these material processes fail, the QMS could collapse.

Why are the Other Options Incorrect?

B (Needs of internal parties) → Important, but not the primary focus for reducing audit risk.

C (Previous audit results) → Useful for improvement but does not directly reduce current audit risks.

D (Financial risks) → ISO 9001 focuses on quality risks, not financial risks.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.4.9 (Audit Conclusions & Reporting):

One consolidated audit report should be drafted based on all team members’ findings.

Each auditor does not draft separate reports (B) unless explicitly required.

Thus, A is the correct answer.

Clause 8.2.4 of ISO 9001:2015 – Changes to Requirements for Products and Services:ISO 9001:2015 Clause 8.2.4 states that when changes to requirements for products or services are made, they must be communicated and agreed upon with relevant interested parties (in this case, the Health Trust). The lack of communication and agreement for substituting the cleaning chemical represents a clear violation of this clause.

Analysis of the Corrective Action Proposed:The organization proposed "obtaining a concession from the Health Trust for the use of the new chemical." This action is reactive and assumes approval from the Health Trust without addressing the systemic issue: the lack of a defined change control process for managing contract changes.

Option Analysis:

A. The substitute chemical has not been used before in the Health Trust:Incorrect. While this may be a concern, it is not directly relevant to the root cause of the nonconformity, which is the absence of a process to handle contract changes.

B. The action assumes that the Health Trust will agree to the change:Incorrect. Although this is true, it is not the primary issue. The nonconformity lies in the lack of a structured approach to obtain agreement, not whether the Health Trust agrees.

C. Staff have not been trained in the use of the new chemical:Incorrect. This is a separate issue related to staff competence (Clause 7.2), but it is not the main reason why the corrective action is unacceptable under Clause 8.2.4.

D. The process for making changes to the contract has not been addressed:Correct. The fundamental issue is the organization's failure to follow or establish a change control process for amending contracts, including gaining formal agreement from the Health Trust. The proposed corrective action does not ensure that such issues will be systematically prevented in the future.

E. The substitute chemical may not be as effective as the original:Incorrect. The effectiveness of the substitute chemical is secondary to the primary issue, which is the lack of a change management process.

ISO 9001 References Supporting the Correct Answer:

Clause 8.2.4: Requires that changes to product/service requirements be reviewed, communicated, and agreed upon with the customer.

Clause 10.2 (Nonconformity and Corrective Action): Requires the organization to address the root cause of the nonconformity and take actions to ensure it does not recur. In this case, the root cause is the absence of a change control process.

Why D is the Best Answer:The core issue is that the organization did not have a formalized process for managing and agreeing upon changes to contract requirements. Addressing this process gap is essential to prevent recurrence of similar nonconformities. Merely seeking a concession from the Health Trust is a one-off solution that does not address the systemic issue.

According to ISO 19011:2018, clause 6.3.2, an audit plan should include the following information:

The audit objectives, scope, and criteria

The audit team members and their roles and responsibilities

The audit schedule, including the sequence and timings of audit activities, such as opening meeting, document review, interviews, observations, closing meeting, etc.

The expected time and duration of each audit activity and location

The name and contact details of the auditee’s representative and other relevant parties

The allocation of appropriate resources to support the audit activities

The audit methods and techniques to be used, such as interviews, observations, sampling, etc.

The audit documents and records to be prepared and retained

The audit language and communication methods

The audit risks and opportunities and how to address them

The audit follow-up arrangements, if applicable

Therefore, the correct answer is D and F, as they are essential elements of an audit plan. The other options are either irrelevant or optional for an audit plan. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.2

ISO 19011: Guidelines for Auditing Management Systems | ASQ, section “Making audit arrangements”

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.3.2