Pass the PECB ISO 9001 ISO-9001-Lead-Auditor Questions and answers with CertsForce

When conducting a third-party audit to ISO 9001, especially in the context of training and corrective actions taken due to customer complaints, the most appropriate audit trails to follow would be:

A. Ask if customer complaints had ceased since the multi-skilled training finished. This audit trail is relevant because it directly relates to the effectiveness of the corrective action taken. If customer complaints have decreased or ceased, it could indicate that the additional training was effective1.

F. Review records to assess if all planned training has been completed. This trail is important to ensure that the training plan has been fully implemented and to verify that all staff members have received the necessary training. It also helps in assessing the adequacy of the training in terms of content, frequency, and outcomes1.

These two trails, A and F, are closely linked to the issue of customer complaints and the organization’s response to them. They provide insight into whether the actions taken were suitable and whether they have led to improvements in staff performance and customer satisfaction1. The other options, while potentially useful, do not directly address the immediate concern of the effectiveness of the corrective actions taken in response to the customer complaints1.

Comprehensive and Detailed In-Depth Explanation:

Stage 1 Audit (ISO 9001:2015, Clause 9.2.2) is a documentation review to assess the readiness for a Stage 2 Audit. The auditor must document:

Observations that could lead to nonconformities, ensuring they are addressed before Stage 2.

Areas needing improvement, such as missing documented information or unclear process definitions.

While understanding the auditee’s main processes is important, documenting interviews is not a requirement at Stage 1.

To demonstrate top management’s leadership and commitment with respect to the quality management system, the following four actions would be indicative:

B. Briefing staff on the development of an improvement culture: This shows that top management is actively involved in promoting a culture of continuous improvement, which is a key aspect of the quality management system1.

C. Chairing management review meetings: By leading these meetings, top management demonstrates their involvement in the quality management system’s ongoing performance and commitment to its continual improvement1.

E. Investing time and money in corrective actions arising from nonconformities: This indicates that top management is committed to addressing issues and ensuring that the quality management system is effective and continually improving1.

G. Promoting the importance of following procedures: When top management emphasizes the importance of adherence to procedures, it reinforces the significance of the quality management system and its processes1.

These actions align with the requirements of ISO 9001:2015, which emphasizes the need for top management to take accountability for the effectiveness of the quality management system and to promote a focus on continual improvement and customer satisfaction123. Approving company car budgets, conducting disciplinary meetings, and not attending the audit closing meeting do not directly demonstrate leadership and commitment to the quality management system1.

ISO 9001 audits (including second-party audits) must be conducted in line with audit principles of fairness, objectivity, and impartiality , with guidance provided by ISO 19011:2018 for audit activities, including closing meetings.

Relevant ISO guidance

ISO 19011 – Closing meeting guidance states that the purpose of the closing meeting is to:

present audit findings and conclusions,

ensure the auditee understands the non-conformities,

explain the next steps, including reporting and follow-up.

Auditors must not :

prescribe solutions,

analyse or design corrective actions,

make commercial or approval decisions on behalf of the audited organisation.

Explanation of the correct option:

C. Present the non-conformities and inform them that the report will be sent within ten working days, close the meeting and leave the site.

This option correctly reflects the auditor’s role:

The non-conformities are presented clearly and transparently in the closing meeting.

The auditee is informed of the reporting process and timeline.

The auditor does not analyse solutions, recommend actions, or influence supplier approval decisions.

The meeting is closed professionally and objectively, in line with ISO 19011.

Explanation of why the other options are incorrect:

A : Closing meetings must be conducted with the agreed auditee representatives; hiding findings undermines transparency and audit integrity.

B : Analysing how to overcome the situation constitutes consulting , which compromises auditor impartiality.

D : Recommending removal from an approved supplier list exceeds the auditor’s authority and violates audit independence.

ISO-aligned conclusion:

The auditor’s responsibility at the closing meeting is limited to presenting findings and explaining next steps , not advising, consulting, or making business decisions. Therefore, the correct and ISO-compliant option is C .

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires organizations to assess both internal and external issues that could impact the effectiveness of their Quality Management System (QMS).

Clause Reference:

Clause 4.1 – Understanding the Organization and Its Context states that organizations must determine external and internal issues that affect their ability to achieve intended results.

Internal issues include:

Knowledge within the organization (documented or undocumented)

Organizational culture

Resource availability

Technological advancements

Infrastructure and capabilities

Why is the Correct Answer C?

Knowledge (Clause 7.1.6) is a critical internal factor that directly affects the implementation and maintenance of a QMS.

Organizations must identify, maintain, and make available the necessary knowledge to achieve quality objectives and meet customer requirements.

Why are the Other Options Incorrect?

A (Social and economic environments) → These are considered external issues rather than internal.

B (Competitive environment) → Competition is external, not an internal issue affecting the QMS.

D (Expectations of suppliers) → Supplier expectations relate to external interested parties, covered under Clause 4.2 (Understanding the Needs and Expectations of Interested Parties).

Actions and Applicable ISO 9001:2015 Clauses

We identified risks and opportunities. → Clause 6.1 (Actions to address risks and opportunities)

We found suitable suppliers. → Clause 8.4 (Control of externally provided processes, products and services)

We determined the need to keep updated with new IT technologies. → Clause 4.1 (Understanding the organization and its context)

We put together a plan for the change to IT provision outsourcing. → Clause 6.3 (Planning of changes)

We monitored the performance of the new suppliers. → Clause 8.4.2 (Type and extent of control of external providers)

We monitored our productivity targets to understand why they were being missed. → Clause 9.1.1 (Monitoring, measurement, analysis and evaluation – General)

We communicated the plan internally. → Clause 7.4 (Communication)

We looked at the data at the management review and decided we needed to do something different. → Clause 9.3.2 (Management review inputs)

ISO 9001:2015 requires organizations to manage change in a planned, risk-based, and controlled manner , particularly when changes affect product realization and customer satisfaction.

Clause 6.1 requires organizations to identify risks and opportunities arising from changes, such as outsourcing software development.

Clause 4.1 supports understanding internal and external issues, including rapid changes in IT technology that affect strategic direction.

Clause 6.3 requires changes to the QMS (such as outsourcing a core activity) to be planned, considering purpose, consequences, resources, and responsibilities.

Clause 8.4 and 8.4.2 ensure that when processes are outsourced, the organization selects suitable providers and monitors their performance to ensure conformity.

Clause 7.4 requires effective internal communication so that personnel understand changes and their roles.

Clause 9.1.1 requires monitoring and measurement of performance indicators (such as productivity targets) to understand performance issues.

Clause 9.3.2 requires top management to review performance data and determine actions when the QMS is no longer achieving intended results.

ISO-aligned conclusion:

The auditee’s actions demonstrate a systematic and compliant approach to managing change , covering context analysis, risk-based thinking, planning, control of outsourced processes, performance monitoring, communication, and management review, all in line with ISO 9001:2015 requirements.

Establishing the audit programme objectives

Determining and evaluating the audit programme risks and opportunities

Establishing the audit programme

Initiating the audit

Preparing all audit activity

Conducting the audit activities

According to ISO 19011:2018, clause 5, the audit programme is a set of one or more audits planned for a specific time frame and directed towards a specific purpose. The audit programme includes all activities necessary to plan, organize, and conduct the audits. The audit programme management involves the following steps1:

Establishing the audit programme objectives: The audit programme objectives define the intended outcomes of the audit programme, such as verifying conformity, evaluating performance, identifying improvement opportunities, etc. The audit programme objectives should be aligned with the strategic direction and policies of the organization and the needs and expectations of the interested parties.

Determining and evaluating the audit programme risks and opportunities: The audit programme risks and opportunities are the factors that can affect the achievement of the audit programme objectives, such as changes in the internal or external context, availability of resources, competence of auditors, etc. The audit programme risks and opportunities should be identified, analyzed, and evaluated to determine the appropriate actions to address them.

Establishing the audit programme: The audit programme is established by defining the audit programme scope, criteria, methods, and resources. The audit programme scope defines the extent and boundaries of the audit programme, such as the processes, functions, sites, activities, etc. that will be audited. The audit programme criteria are the set of policies, procedures, or requirements used as a reference for the audits. The audit programme methods are the techniques used to conduct the audits, such as interviews, observations, document review, sampling, etc. The audit programme resources are the human, technical, and financial resources needed to implement the audit programme.

Initiating the audit: The audit initiation is the process of formally establishing the arrangements for an individual audit within the audit programme. The audit initiation involves contacting the auditee and the audit client, confirming the audit objectives, scope, and criteria, and obtaining the necessary information and access for the audit.

Preparing all audit activity: The audit preparation is the process of developing the audit plan and the audit work documents for an individual audit. The audit plan is a document that provides the basis for agreement regarding the conduct of the audit, such as the audit schedule, the audit team, the audit methods, the audit language, the audit report, etc. The audit work documents are the records that provide evidence of the audit activities, such as the audit checklist, the audit notes, the audit findings, etc.

Conducting the audit activities: The audit activities are the processes of collecting and verifying audit evidence and evaluating it against the audit criteria to make the audit conclusions. The audit activities include the opening meeting, the communication during the audit, the roles and responsibilities of the audit team and the auditee, the audit evidence collection and verification, the audit findings generation and recording, the closing meeting, and the audit report preparation and distribution.

Nonconformity report

ISO 9001 Clause Number: 9.3.1 Nature of problem: Management review has not been conducted at the defined frequency. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “Top management shall review the organization’s quality management system at planned intervals.” Evidence: The last management review took place nine months ago, and the previous one took place one year before the latest review. The planned interval is six months.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 17021-1:2015, Clause 9.6.2 (Surveillance Activities):

The certification body is responsible for planning and conducting surveillance audits to ensure continued compliance.

The auditee’s top management (A) does not develop surveillance activities, but they must participate.

The audit team leader (C) conducts the surveillance audit, but they do not develop the program.

Thus, B is the correct answer.

Top management is responsible for establishing, implementing, and maintaining the quality policy. The quality policy provides a framework for setting quality objectives and must be compatible with the context of the organization and support its strategic direction. It should also provide a commitment to satisfy applicable requirements and to continuous improvement.