The correct responses are A, B and C .

This situation relates to audit confidentiality, professional conduct, audit evidence control, and closing meeting management . The audit team leader should respond calmly, investigate the concern, and avoid automatically withdrawing valid findings simply because the auditee objects to the method used to collect some evidence.

A is correct because nonconformities should not be rescinded if they are supported by valid audit evidence from other sources. Audit findings must be based on objective evidence. If the same nonconformities are supported by interviews, records, observations, or other evidence apart from the videos, they can still be presented at the closing meeting.

B is correct because the audit team leader should investigate the situation with the auditor. The team leader needs to understand why videos were taken, whether this was an agreed or acceptable audit method, what permission was obtained, and whether confidentiality or site rules were breached.

C is correct because the auditor states that permission was obtained from the Production Manager who was escorting him. The team leader can explain this to the EMS Manager and offer a practical control by deleting the videos after they are no longer needed for the closing meeting, provided this aligns with certification body procedure and client confidentiality requirements.

D is incorrect because auditors do not have a general automatic right to take videos for reports. Recording or photographing during an audit should be controlled, agreed, and subject to confidentiality and information security requirements.

E is incorrect because immediately removing the auditor and deleting all videos is excessive unless an investigation confirms serious misconduct. The audit team leader should first establish the facts and determine whether the audit evidence remains valid.

Therefore, the three best responses are A, B and C .