Free PECB ISO-45001-Lead-Auditor Practice Exam with Questions & Answers | Set: 4

Clause 10.2 requires organizations to investigate nonconformities, determine their causes, and take corrective actions to prevent recurrence. Clause 9.2.2 specifies the requirements for managing internal audit processes, while Clause 7.4.3 emphasizes the need to communicate relevant information effectively.

Analysis of Options:

A. 9.2.2.e - Management failed to take any action to deal with the audit nonconformity:Correct. Management must ensure that internal audit findings are addressed promptly. The lack of action violates Clause 9.2.2.e.

B. 9.2.2.d - Staff were not made aware that health and safety incidents were increasing:Incorrect. This clause pertains to the planning and conduct of audits, not the communication of findings.

C. 8.1.1 - Operations were not properly controlled to avoid health and safety incidents:Incorrect. While increased incidents may suggest operational issues, this option does not directly relate to the internal audit findings.

D. 9.2.2 - Report IA202 contained a poorly worded nonconformity (NC3):Incorrect. The clarity of the nonconformity wording is not directly relevant to Clause 9.2.2.

E. 10.2.b - The root cause of the increase in reported health and safety accidents was not investigated:Correct. Failure to investigate root causes violates Clause 10.2.b.

F. 7.4.3 - The results of the internal audit IA202 were not communicated to interested parties:Correct. Effective communication of audit results is required under Clause 7.4.3.

ISO References:

Clause 9.2.2: Internal audit process requirements.

Clause 10.2: Nonconformity and corrective action.

Clause 7.4.3: Communication requirements.

Clause 6.1.2 of ISO 45001:2018 emphasizes the identification of hazards and assessment of risks, and Clause 5.4 highlights the importance of consultation and communication among roles. The auditor ' s role includes verifying conformity to these clauses through evidence gathering and observation.

Analysis of Options:

A. The auditor should advise the organization to get rid of the walled area.This is outside the scope of an auditor’s role, which is to observe and report findings, not to dictate specific actions.

B. The auditor should ask the Maintenance Manager to conduct a safety survey.While safety surveys are useful, asking the Maintenance Manager to conduct one is not the auditor’s responsibility.

C. The auditor should check the lines of communication between the OHS Manager and Maintenance Manager.This aligns with ISO 45001:2018, Clause 5.4, as communication gaps may have contributed to the situation.

D. The auditor should check whether the organization has identified the safety hazards associated with the walled area.Clause 6.1.2 requires hazard identification. The auditor must determine whether this has been done.

E. The auditor should consider surveying more areas of the site for other potentially unsafe situations.Broadening the audit scope to identify additional risks is a good practice in line with Clause 9.2.2.

F. The auditor should demand that the Maintenance Manager deals with the wall.Demanding action is not within the auditor’s authority. The auditor should raise findings instead.

G. The auditor should raise a nonconformity against ISO 45001.While this may be appropriate depending on evidence, raising a nonconformity is not a replacement for good audit practices.

H. The auditor should refer the organization to health and safety authorities.This step is extreme and should only occur if there is an imminent danger and no action is being taken.

ISO References:

Clause 6.1.2: Hazard identification and risk assessment.

Clause 5.4: Worker consultation and participation.

Clause 9.2.2: Internal audit program and execution.

In a first-party audit (internal audit), the organization conducts the audit to determine whether its management system conforms to planned arrangements, to the organization’s own requirements, and to the requirements of ISO 45001, and whether it is effectively implemented and maintained. ISO 45001 Clause 9.2 requires internal audits to provide information on conformity and effectiveness.

E. Verify compliance with regulatory requirements is a valid audit objective because ISO 45001 requires the organization to determine its legal and other requirements and to evaluate compliance with them. Internal audits commonly include verification that these legal OH and S obligations are being met as part of checking the effectiveness and conformity of the OH and S management system. This aligns with Clause 6.1.3 and Clause 9.1.2 of ISO 45001.

B. Complete the audit on time is also an audit objective in practical first-party auditing because audit objectives are established for the audit and supported by planning, resources, timing, and reporting arrangements. While it is not a system conformance criterion, it is a valid objective for the audit assignment itself, ensuring the audit is performed as planned and efficiently managed. This fits normal lead auditor practice in planning and conducting internal audits.

Why the other options are not correct:

A. Apply international standards is too broad and is not itself an audit objective. Standards are the criteria or reference, not the objective.

C. Confirm the scope of the management system is accurate is not usually stated as a first-party audit objective; scope is established by the organization under Clause 4.3, though it may be reviewed during audits.

D. Prepare the audit report for the certification body does not apply to a first-party audit, because internal audits are not performed for a certification body.

F. Update the management policy is a management responsibility, not an audit objective. Audits may identify inputs for policy review, but updating the policy is not the purpose of the audit itself.

Therefore, the two correct options are:

B, E

Was he made aware of the hazards related to this work? → Clause 6.1.2.1:Clause 6.1.2.1 focuses on hazard identification. Organizations must identify hazards associated with work activities, such as operating a motorbike, and ensure workers are aware of these hazards.

Was he trained to use the new motorbike? → Clause 7.2:Clause 7.2 requires organizations to ensure that workers are competent to perform their assigned tasks, including providing necessary training for new equipment like a motorbike.

Was he asked to deliver too many orders in a short period of time? → Clause 8.2:Clause 8.2 relates to managing operational controls and ensuring that work processes do not impose undue risks, such as excessive workloads or time pressure.

Was he carrying any contact details in case of an accident? → Clause 7.3:Clause 7.3 requires effective communication of information relevant to OH and S, including emergency contact details or procedures for accidents.

ISO References:

Clause 6.1.2.1: Hazard identification.

Clause 7.2: Competence.

Clause 7.3: Awareness and communication.

Clause 8.2: Operational control.

The correct answer is A.

This is a serious attempted bribe and a direct threat to audit integrity, impartiality, and credibility. A third-party auditor must not accept gifts, inducements, or favorable treatment in exchange for changing, hiding, or weakening audit findings. The auditor must act ethically and protect the certification process from improper influence.

The organization has also failed to implement the agreed corrective action, so that failure must be recorded accurately. Any attempt to conceal it would be dishonest and would invalidate the audit outcome. In certification auditing, impartiality and objective evidence are fundamental principles. An offer of discounted personal work in exchange for suppressing an audit finding is unacceptable and must be escalated.

Therefore, the correct response is to:

stop the audit activity, because the integrity of the audit has been compromised;

leave the site;

report the attempted bribe immediately to the individual(s) managing the audit programme or certification body;

avoid further direct contact with the auditee until instructions are given.

Why the other options are wrong:

B is unethical because it ignores both the failed corrective action and the attempted bribe.

C is fraudulent because it involves knowingly recording false audit information and accepting the improper benefit.

D is also unethical because it accepts the benefit indirectly and delays the audit to help the auditee avoid the finding.