Free PECB ISO-9001-Lead-Auditor Practice Exam with Questions & Answers | Set: 8

ISO 9001:2015 requires auditors to base conclusions on objective evidence and to investigate potential issues before determining whether a nonconformity exists.

In this scenario, the auditor has observed:

A freezer temperature of -17.2 °C .

An understood storage requirement of less than -18.0 °C .

A statement from the supervisor regarding measurement uncertainty of ±1 °C .

Before raising a nonconformity, the auditor must verify:

The exact storage requirements and any permitted tolerances.

The validity and calibration status of the measuring equipment.

Why A is Correct

Ask to see the documented test method to determine if there is additional information on the limits for storage temperature.

The auditor must confirm:

The exact specification.

Whether tolerances or measurement uncertainty have been considered in the requirement.

Whether the storage criterion is truly a hard limit or includes allowable variation.

This follows the audit principle of obtaining sufficient objective evidence before reaching a conclusion.

Why B is Correct

Ask to see the calibration report for the measuring equipment.

ISO 9001 Clause 7.1.5 requires monitoring and measuring resources to be suitable and maintained to ensure valid results.

The supervisor has based his justification on measurement uncertainty. Therefore, the auditor should verify:

Calibration status,

Calibration validity,

Measurement uncertainty,

Traceability of calibration results.

Why the Other Options Are Incorrect

C. Raise a non-conformance immediately

At this point there is insufficient evidence. The auditor has not yet verified the specification or calibration records.

D. Ask to see competence records of supervisors of all terminals

This is not the immediate audit trail arising from the observation.

E. Immediately halt the vaccination process

Auditors do not normally have authority to stop operations except in exceptional circumstances defined by legal or contractual arrangements. The auditor must first gather evidence.

F. Accept the comment and proceed

Auditors must verify statements with objective evidence rather than accepting explanations without verification.

ISO-Aligned Conclusion

The next appropriate audit actions are to:

Verify the storage temperature requirements, and

Verify the calibration and uncertainty information of the measuring equipment.

Therefore, the correct answers are:

A. Ask to see the documented test method to determine if there is additional information on the limits for storage temperature.

B. Ask to see the calibration report for the measuring equipment.

===========

As the audit team leader, it is crucial to manage differing opinions constructively and ensure that the correct clause is selected for the nonconformity based on solid evidence. Here’s how the situation should be handled:

E. Invite you and the second auditor to fully explain your point of view and then decide which clause to select: This promotes collaboration and transparency, allowing both auditors to present their rationale for choosing the specific clause.

F. Review the evidence with you and the second auditor, and then decide which clause of ISO 9001 would best apply: Reviewing the evidence in relation to the specific requirements of ISO 9001 is essential for determining which clause is most appropriate.

H. Try to obtain a consensus between you and the second auditor after a discussion of the different opinions: Consensus-building is a crucial skill for an audit team leader. Achieving agreement ensures the nonconformity is addressed accurately and with full team support.

Options such as overruling immediately (D) or deferring the decision without full discussion (B) could undermine team dynamics and the audit process. Consulting the quality manager (A) or selecting an entirely different clause (G) is unnecessary, as the team should resolve the issue internally​​.

Comprehensive and Detailed In-Depth Explanation:

Before accepting an audit, the certification body must assess the integrity of the auditee and the nature of its operations to ensure compliance feasibility.

Clause References:

ISO/IEC 17021-1:2015, Clause 9.1.2 – Audit Planning:

The certification body must review the auditee’s background, reputation, and operational complexity before accepting the audit.

Why is the Correct Answer C?

The auditee’s integrity and reputation impact the credibility of certification.

The nature of operations determines audit complexity and resource allocation.

Why are the Other Options Incorrect?

A (Integrity and reputation only) → Correct but incomplete; nature of operations is equally important.

B (Nature of operations only) → Integrity is also a factor, not just operations.

D (No previous major nonconformities required) → Auditees with past major nonconformities can still be audited if corrective actions are taken.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 9001:2015, Clause 9.2 (Internal Audit):

Internal audits are conducted by employees of the company who are trained as auditors.

External auditors are not mandatory unless required by the organization.

Thus, A is the correct answer.

ISO 9001:2015 requires that certification audits be planned, controlled, and conducted in a way that ensures valid and reliable audit conclusions . However, ISO 9001 does not give operational detail on how to manage disrupted audits. For this, ISO 9001 explicitly refers to ISO 19011 and certification schemes require escalation to the audit programme or certification management function .

ISO 9001:2015, Clause 9.2.2 (NOTE) states that guidance on auditing management systems is provided in ISO 19011.

In a Stage 2 certification audit , all applicable processes within the scope must be audited before a certification decision can be made. The laboratory at Site 2 is clearly part of the operational scope and cannot be audited due to circumstances outside the organisation’s control (health and safety risk).

Why option C is correct:

Certification audits operate under a controlled certification programme , not solely at the discretion of the audit team leader.

ISO 19011 requires auditors to act responsibly when conditions prevent safe or complete auditing and to escalate significant changes or risks .

Certification bodies require the Audit Programme Manager (or Certification Manager) to decide whether the audit should be paused, partially completed, rescheduled, or split to preserve certification integrity.

Therefore, seeking direction from the audit Programme Manager is the correct and compliant action.

Here is the correct matching of the ISO 9001 Clause 8 extracts to the audit evidence:

Audit evidence: Three subcontract trainers who had delivered training were not approved as defined in procedure SA1 Supplier Approval revision 3.ISO 9001 Clause 8 extract: 8.4.1 ...shall apply criteria for ... external providers...(This clause requires the organization to control external providers, including ensuring their approval and competence.)

Audit evidence: A training programme for a customer was not documented as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.3.5 ...shall retain documented information on design and development outputs.(This clause addresses the need to retain documented information related to design and development outputs, such as a training programme.)

Audit evidence: One trainer had not recorded the damage to a customer’s training room wall caused by using sticky tape to hang training aids, as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.5.3 ...shall retain documented information on what has occurred.(This clause relates to retaining documented information on activities and outcomes, including records of damage or issues encountered.)

Audit evidence: Five sales orders had no record of having been reviewed to verify the ability to provide these courses.ISO 9001 Clause 8 extract: 8.2.3.1 ...shall conduct a review before committing...(This clause specifies the requirement to review and verify the organization ' s ability to meet customer requirements before accepting sales orders.)

These mappings reflect the specific requirements of ISO 9001:2015 for managing external providers, retaining documented information, and reviewing contracts.

In ISO 9001:2015, the responsibility for managing the audit program lies with those overseeing the entire audit process rather than the Audit Team Leader. During the planning stage, before involving the Audit Team Leader, key actions for managing the audit program include:

1. Providing the Resources Needed: According to clause 7.1 (Resources), the audit program manager must ensure that the necessary resources are in place to conduct the audit effectively. This encompasses logistical support, personnel, and other required resources for the audit to proceed smoothly.

2. Reviewing Reports of Previous Audits: As per clause 9.2.2 (Internal Audit), it is essential to consider the results of previous audits to plan effectively for the upcoming audit. This helps identify areas that require particular attention, ensuring continuity and focusing on recurring issues or improvements since the last audit.

These actions ensure that the audit is thoroughly prepared and that there is continuity and focus on any areas that might need closer inspection. The other options, such as preparing the audit plan, assigning responsibilities, preparing checklists, and selecting the audit team members, generally fall under the duties of the Audit Team Leader once they are appointed and engaged in the planning process.

ISO 9001 audits (including second-party audits) must be conducted in line with audit principles of fairness, objectivity, and impartiality , with guidance provided by ISO 19011:2018 for audit activities, including closing meetings.

Relevant ISO guidance

ISO 19011 – Closing meeting guidance states that the purpose of the closing meeting is to:

present audit findings and conclusions,

ensure the auditee understands the non-conformities,

explain the next steps, including reporting and follow-up.

Auditors must not :

prescribe solutions,

analyse or design corrective actions,

make commercial or approval decisions on behalf of the audited organisation.

Explanation of the correct option:

C. Present the non-conformities and inform them that the report will be sent within ten working days, close the meeting and leave the site.

This option correctly reflects the auditor’s role:

The non-conformities are presented clearly and transparently in the closing meeting.

The auditee is informed of the reporting process and timeline.

The auditor does not analyse solutions, recommend actions, or influence supplier approval decisions.

The meeting is closed professionally and objectively, in line with ISO 19011.

Explanation of why the other options are incorrect:

A : Closing meetings must be conducted with the agreed auditee representatives; hiding findings undermines transparency and audit integrity.

B : Analysing how to overcome the situation constitutes consulting , which compromises auditor impartiality.

D : Recommending removal from an approved supplier list exceeds the auditor’s authority and violates audit independence.

ISO-aligned conclusion:

The auditor’s responsibility at the closing meeting is limited to presenting findings and explaining next steps , not advising, consulting, or making business decisions. Therefore, the correct and ISO-compliant option is C .

ISO 9001:2015 makes it clear that an organisation remains responsible for conformity to requirements even when processes are outsourced . Certification audits must therefore evaluate not only the organisation’s internal activities, but also the control and effectiveness of externally provided processes .

ISO 9001:2015, Clause 8.4.1 requires that the organisation ensure externally provided processes, products and services conform to requirements. The organisation must determine controls to be applied to those outsourced processes.

ISO 9001:2015, Clause 4.4.1 further requires the organisation to determine processes needed for the quality management system and their application throughout the organisation, including outsourced processes.

For a third-party certification audit , sufficient objective evidence must be obtained to demonstrate that:

Outsourced processes are effectively controlled

The organisation’s quality management system achieves its intended results

Why option C is the best decision:

Proceeding with the audit in Bolivia and including all ABC personnel and all outsourced processes ensures that the certification audit:

Covers the full scope of the QMS , including outsourced production, maintenance, procurement, and HR activities

Allows direct evaluation of how ABC controls and manages its external providers in the location where those processes are actually performed

Provides sufficient objective evidence to support a valid certification decision

Reviewing only internal audits or auditing only planning activities would not provide adequate assurance of conformity for a high-risk, core operational activity such as lithium extraction.

Why the other options are not acceptable:

A : Auditing only the Planning function would exclude core operational and support processes that are within the scope of the QMS.

B : Reviewing internal audit results alone is insufficient for a third-party certification audit and does not replace direct assessment of outsourced processes.

D : ISO 9001 explicitly allows outsourcing of processes; the organisation remains responsible for control, not prohibited from outsourcing.

ISO-aligned conclusion:

In a third-party ISO 9001 certification audit, outsourced processes that are within scope must be audited , either directly or through appropriate controls. In this scenario, auditing the outsourced processes in Bolivia is necessary to ensure a complete, credible, and compliant certification audit.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 17021-1:2015, Clause 9.4.9 (Corrective Actions):

Minor nonconformities do not require a follow-up audit but must be corrected before the next surveillance audit.

Follow-up audits are required only for major nonconformities.

The audit team should recommend corrective actions, not enforce immediate follow-ups for minor nonconformities.

Thus, A is the correct answer.