Pass the PECB ISO 9001 ISO-9001-Lead-Auditor Questions and answers with CertsForce

Nonconformity report

ISO 9001 Clause Number: 9.3.1 Nature of problem: Management review has not been conducted at the defined frequency. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “Top management shall review the organization’s quality management system at planned intervals.” Evidence: The last management review took place nine months ago, and the previous one took place one year before the latest review. The planned interval is six months.

According to ISO 9001:2015, clause 6.2.1, the organization is required to establish quality objectives at relevant functions, levels, and processes for the quality management system (QMS). The quality objectives must be consistent with the quality policy, measurable, monitored, communicated, and updated as appropriate. The organization is also required to maintain documented information on the quality objectives, as per clause 7.5.1.

Therefore, in the scenario given, the quality objectives defined by the external consultant are not in alignment with the organization’s quality policy, as they are based on those of a competitor, rather than the organization’s own purpose, strategic direction, and customer requirements. This creates a mismatch between the organization’s vision and goals, and the quality objectives that are supposed to guide and measure the QMS performance. Moreover, the quality objectives are not maintained as documented information, which makes it difficult to communicate, monitor, and update them, as well as to demonstrate evidence of their implementation and achievement.

Hence, the circumstances in which a nonconformity against clause 6.2 of ISO 9001 could be raised are B and C, as they indicate a failure to comply with the requirements of clause 6.2.1. The other options are either irrelevant or not directly related to clause 6.2, as they do not pertain to the establishment and documentation of quality objectives.

Here is the correct matching of the ISO 9001 Clause 8 extracts to the audit evidence:

Audit evidence: Three subcontract trainers who had delivered training were not approved as defined in procedure SA1 Supplier Approval revision 3.ISO 9001 Clause 8 extract: 8.4.1 ...shall apply criteria for ... external providers...(This clause requires the organization to control external providers, including ensuring their approval and competence.)

Audit evidence: A training programme for a customer was not documented as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.3.5 ...shall retain documented information on design and development outputs.(This clause addresses the need to retain documented information related to design and development outputs, such as a training programme.)

Audit evidence: One trainer had not recorded the damage to a customer’s training room wall caused by using sticky tape to hang training aids, as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.5.3 ...shall retain documented information on what has occurred.(This clause relates to retaining documented information on activities and outcomes, including records of damage or issues encountered.)

Audit evidence: Five sales orders had no record of having been reviewed to verify the ability to provide these courses.ISO 9001 Clause 8 extract: 8.2.3.1 ...shall conduct a review before committing...(This clause specifies the requirement to review and verify the organization's ability to meet customer requirements before accepting sales orders.)

These mappings reflect the specific requirements of ISO 9001:2015 for managing external providers, retaining documented information, and reviewing contracts.

Comprehensive and Detailed In-Depth Explanation:

Stage 1 Audit (ISO 9001:2015, Clause 9.2.2) is a documentation review to assess the readiness for a Stage 2 Audit. The auditor must document:

Observations that could lead to nonconformities, ensuring they are addressed before Stage 2.

Areas needing improvement, such as missing documented information or unclear process definitions.

While understanding the auditee’s main processes is important, documenting interviews is not a requirement at Stage 1.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 emphasizes continual improvement as a fundamental requirement of an effective Quality Management System (QMS).

Clause Reference:

Clause 4.4.1 (Quality Management System and Its Processes) states that organizations must:

Determine processes needed for the QMS

Establish criteria and methods for process effectiveness

Ensure continual improvement of the system

Why is the Correct Answer C?

Continual improvement is a core principle of ISO 9001.

Organizations must regularly assess and enhance their QMS to adapt to new challenges and maintain effectiveness.

Why are the Other Options Incorrect?

A (To change the QMS quarterly) → ISO 9001 does not mandate a specific frequency for system changes.

B (To review the QMS annually) → QMS reviews must be conducted as needed, not strictly annually.

D (To conduct a QMS gap analysis every two years) → Gap analysis is useful but is not a mandatory requirement under Clause 4.4.

Comprehensive and Detailed In-Depth Explanation:

Auditors must focus on key processes that impact QMS effectiveness to ensure audit risks are minimized.

Clause References:

ISO 19011:2018, Clause 6.3 – Managing Audit Risk: Auditors should prioritize critical processes to obtain reasonable assurance.

Why is the Correct Answer A?

Some processes are critical (e.g., production quality, customer complaints handling).

If these material processes fail, the QMS could collapse.

Why are the Other Options Incorrect?

B (Needs of internal parties) → Important, but not the primary focus for reducing audit risk.

C (Previous audit results) → Useful for improvement but does not directly reduce current audit risks.

D (Financial risks) → ISO 9001 focuses on quality risks, not financial risks.

Comprehensive and Detailed In-Depth Explanation:

Clause 5.1.1 of ISO 9001:2015 – Leadership and Commitment – specifically mandates that top management must take accountability for the effectiveness of the QMS. They are also responsible for ensuring:

Integration of the QMS into business processes (5.1.1 c)

Promotion of customer focus and continual improvement (5.1.1 d, i)

Availability of necessary resources (5.1.1 e)

That the QMS achieves its intended results (5.1.1 g)

Let’s analyze the selected options:

✅ A. Top management is not accountable for the effectiveness of the QMS.

This directly violates clause 5.1.1 a, which explicitly requires top management to take accountability for the effectiveness of the QMS. Delegating this to a middle-level Quality Manager, as described in the scenario, constitutes a nonconformity.

✅ F. The Quality Manager does not have access to the resources needed for the QMS.

According to clause 5.1.1 e, top management must ensure the availability of required resources for maintaining and improving the QMS. If the Quality Manager is resource-constrained, it indicates top management has failed to meet this requirement.

Now, why the other options are incorrect in terms of direct clause 5.1.1 nonconformity:

❌ B. Avoiding giving improvement actions to the Chief Executive – While this may reflect poor communication, it is not, by itself, a clear breach of 5.1.1 unless linked directly to top management’s lack of accountability or commitment.

❌ C. Chief Executive never attending meetings – ISO 9001 does not require physical attendance of the Chief Executive at management reviews. What matters is whether top management is fulfilling their roles, not how.

❌ D. Completing only half of improvement actions – This indicates performance issues but does not necessarily indicate top management’s lack of accountability, unless they failed to monitor progress entirely.

❌ E. Reporting to one designated senior manager – This is not inherently nonconforming unless that senior manager does not fulfill top management’s responsibilities under 5.1.1.

Relevant ISO 9001:2015 Reference:

Clause 5.1.1 a, e, g, h:

"Top management shall demonstrate leadership and commitment with respect to the quality management system by:

a) taking accountability for the effectiveness of the quality management system;

e) ensuring that the resources needed for the quality management system are available..."

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 emphasizes the importance of communication as part of an effective Quality Management System (QMS).

Clause References:

Clause 7.4 (Communication): This requires organizations to establish what, when, with whom, and how communication should take place to ensure effectiveness.

Quality Management Principle – Engagement of People: Effective communication allows stakeholders (employees, suppliers, customers) to fully participate and contribute to quality objectives.

Why is the Correct Answer A?

Appropriate communication means ensuring that messages are clear, relevant, and accessible to the intended audience.

Different stakeholders (employees, customers, regulatory bodies, suppliers) may require different formats, languages, or media to ensure they fully understand and engage.

This aligns with ISO 9001:2015, which emphasizes that communication must be tailored to the needs of the recipient for maximum effectiveness.

Why are the Other Options Incorrect?

B (Timely responses) → Important but does not specifically refer to appropriateness in communication.

C (Communicating processes and assumptions to all interested parties) → Communication should be relevant; sharing all details might not be necessary or appropriate.

D (Only top management handling external communication) → Communication must be distributed across relevant functions, not restricted to leadership.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015, Clause 5.2.1 (Establishing the Quality Policy) states that top management must establish, implement, and maintain a quality policy.

In the scenario, the quality manager (Leslie) created the policy, but top management did not establish it themselves, which violates Clause 5.2.1. While the policy can be drafted by a team, top management must take full ownership of its development and approval.