Which of the following two documents does an auditor need to prepare and complete prior to the on-site audit?
Correct Answer: B,D
According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1. According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit. The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1. Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard: *A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1. *C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization's management system, or part of the audit programme, if they are part of the certification body's or registrar's requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1. *E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1. *F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria. Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1. References: ISO 19011:2018(en), Guidelines for auditing management systems
Question 17
Which two of the following should be included in an audit plan?
Correct Answer: D,F
According to ISO 19011:2018, clause 6.3.2, an audit plan should include the following information: The audit objectives, scope, and criteria The audit team members and their roles and responsibilities The audit schedule, including the sequence and timings of audit activities, such as opening meeting, document review, interviews, observations, closing meeting, etc. The expected time and duration of each audit activity and location The name and contact details of the auditee's representative and other relevant parties The allocation of appropriate resources to support the audit activities The audit methods and techniques to be used, such as interviews, observations, sampling, etc. The audit documents and records to be prepared and retained The audit language and communication methods The audit risks and opportunities and how to address them The audit follow-up arrangements, if applicable Therefore, the correct answer is D and F, as they are essential elements of an audit plan. The other options are either irrelevant or optional for an audit plan. References: ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.2 ISO 19011: Guidelines for Auditing Management Systems | ASQ, section "Making audit arrangements" ISO 19011 Management Systems Audit Checklist | Process Street, task 6.3.2
Question 18
Match the process descriptions below to the process names:
Correct Answer:
Explanation: A white background with black text Description automatically generated
Question 19
Which one of the following options best describes the purpose of a Stage 1 third-party audit?
Correct Answer: A
The purpose of a Stage 1 third-party audit is to determine an organization's readiness for their Stage 2 Certification Audit. During the Stage 1, the auditor will review the organization's management system documented information, evaluate the site-specific conditions, and have discussions with personnel. The objective is to assess the alignment of the organization's design with ISO 9001 requirements and to identify any areas of concern that could be classified as a nonconformance during the Stage 2 Audit. The auditor will also use the Stage 1 Audit to complete Stage 2 Audit planning, including a review of the allocation of resources and details for the next phase of the audit. Therefore, the option that best describes the purpose of a Stage 1 third-party audit is A, to determine the auditees understanding of ISO 9001. The other options are not correct, as they are not the main focus of a Stage 1 audit: *B. To get to know the organization's customers: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization's customers, but rather in the organization's ability to meet customer and applicable statutory and regulatory requirements. *C. To learn about the organization's procurement processes: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization's procurement processes, but rather in the organization's ability to control externally provided processes, products and services. *D. To introduce the audit team to the client: This is not the purpose of a Stage 1 audit, as the auditor is not there to make introductions, but rather to conduct a preliminary examination of the organization's compliance with ISO 9001 standards. References: What is the difference between Stage 1 and Stage 2 Audits? - ISO Update, The ISO 9001 Audit Process Explained | ISO Explained, What is an ISO Stage 2 Audit? - RiskOptics - Reciprocity
Question 20
Select six of the activities that are specifically required by ISO 17021-1 as part third-party (Certification Body) surveillance audit processes.
Correct Answer: A,B,C,F,H,I
The activities that are specifically required by ISO 17021-1 as part of third-party (Certification Body) surveillance audit processes are: *Option A: Audit use of certification marks on marketing materials. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to audit the client's use of marks and/or any other reference to certification, as applicable, to ensure conformity with the certification requirements. *Option B: Review changes to the QMS since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review any changes affecting the client's quality management system and its ability to continue to fulfil the requirements of the standard used for certification. *Option C: Confirm effectiveness of internal audit and management review. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to confirm the continuing effectiveness of the client's quality management system, including the effectiveness of the internal audit and management review processes. *Option F: Review the status of previously raised findings and audit effectiveness of any outstanding findings. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the status of findings and any corrective actions taken by the client in response to previous audits, and to verify the effectiveness of the implemented corrective actions. *Option H: Verify legal compliance. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to verify the client's compliance with applicable statutory and regulatory requirements related to the scope of certification. *Option I: Handling of customer complaints since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the client's handling of customer complaints related to the certified activities since the last audit. The following options are not correct: *Option D: Complete a full document review of the quality management system. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to complete a full document review of the quality management system during surveillance audits. A full document review is only required during the initial certification audit or when there are significant changes to the quality management system or the certification requirements. *Option E: Failing to meet financial responsibilities. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to audit the client's financial responsibilities during surveillance audits. The certification body may have contractual arrangements with the client regarding the payment of fees, but this is not part of the surveillance audit process. *Option G: Review the calibration status of the instrumentation. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to review the calibration status of the instrumentation during surveillance audits. The certification body may audit the client's monitoring and measuring resources as part of the quality management system requirements, but this is not a specific activity required by ISO 17021-1. *Option J: Conduct a minimum number of annual surveillance audits during the certification period. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to conduct a minimum number of annual surveillance audits during the certification period. The certification body may determine the frequency and duration of surveillance audits based on the risk and performance of the client, but this is not a specific activity required by ISO 17021-1. References: *ISO 17021-1:2015 Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 1: Requirements *ISO 9001 Lead Auditor Course Material, Module 7: Audit Follow-up and Surveillance, Slide 8: Surveillance Audit *ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 7.2: Audit Follow-up and Surveillance *Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies
