PECB ISO-9001-Lead-Auditor - QMS ISO 9001:2015 Lead Auditor Exam

Comprehensive and Detailed Explanation From Exact Extract:

According to ISO 19011:2018 – Guidelines for Auditing Management Systems, which is referenced in ISO 9001 Lead Auditor training and practice, auditor competence is defined by a combination of knowledge, skills, and personal attributes. Here's how each selected option aligns:

D. Determining what evidence to gather: This activity is rooted in knowledge of audit principles, criteria, and risk-based thinking. It requires an understanding of which types of evidence (documents, records, interviews, observations) are necessary to evaluate conformity to the audit criteria (Clause 7.2.3 of ISO 19011:2018).

E. Evaluate proposals of corrective actions: This task involves applying knowledge of ISO 9001 requirements, root cause analysis methods, and risk controls to assess whether proposed actions are suitable to prevent recurrence. It demands comprehension of quality management principles and corrective action methodologies, linking it firmly to knowledge.

Other options such as A (Communicate with auditee) and B (Conduct audit meetings) are predominantly skills-based, requiring interpersonal and communication abilities, not theoretical or regulatory knowledge.

C (Determine how to seek evidence) and F (Identify findings) involve both knowledge and skill but are more action-oriented and tied to situational judgment and auditor behavior.

The purpose of a Stage 1 third-party audit is to determine an organization’s readiness for their Stage 2 Certification Audit. During the Stage 1, the auditor will review the organization’s management system documented information, evaluate the site-specific conditions, and have discussions with personnel. The objective is to assess the alignment of the organization’s design with ISO 9001 requirements and to identify any areas of concern that could be classified as a nonconformance during the Stage 2 Audit. The auditor will also use the Stage 1 Audit to complete Stage 2 Audit planning, including a review of the allocation of resources and details for the next phase of the audit. Therefore, the option that best describes the purpose of a Stage 1 third-party audit is A, to determine the auditees understanding of ISO 9001. The other options are not correct, as they are not the main focus of a Stage 1 audit:

•B. To get to know the organization’s customers: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s customers, but rather in the organization’s ability to meet customer and applicable statutory and regulatory requirements.

•C. To learn about the organization’s procurement processes: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization’s procurement processes, but rather in the organization’s ability to control externally provided processes, products and services.

•D. To introduce the audit team to the client: This is not the purpose of a Stage 1 audit, as the auditor is not there to make introductions, but rather to conduct a preliminary examination of the organization’s compliance with ISO 9001 standards.

Identifying the source of information

Sampling available data

Gathering audit evidence

Verifying objective evidence

Evaluating evidence against the audit criteria

Making audit conclusions

Evaluating against the audit criteria

According to ISO 19011:2018, clause 6.4, the process of collecting and verifying information during an audit involves the following steps1:

Identifying the source of information: The audit team should identify the sources of information that are relevant to the audit objectives, scope and criteria. These sources may include documents, records, personnel, processes, activities, facilities, equipment, etc. The audit team should also determine the methods and tools for accessing and collecting the information, such as interviews, observations, document review, sampling, etc.

Sampling available data: The audit team should select a representative sample of the available data to verify the conformity and effectiveness of the management system. The sample size and selection method should be based on the audit objectives, scope and criteria, as well as the level of confidence and risk. The audit team should also consider the validity, reliability, relevance and sufficiency of the data.

Gathering audit evidence: The audit team should use the methods and tools identified in the previous step to collect audit evidence, which is the records, statements of fact or other information that are relevant to the audit criteria and verifiable. The audit team should record the audit evidence in a clear, concise and objective manner, using notes, checklists, photographs, audio or video recordings, etc.

Verifying objective evidence: The audit team should verify the accuracy, completeness and authenticity of the audit evidence collected. This may involve cross-checking different sources of information, confirming the identity and authority of the persons providing the information, examining the original documents or records, etc. The audit team should also identify any discrepancies, inconsistencies or gaps in the audit evidence.

Evaluating evidence against the audit criteria: The audit team should compare the audit evidence with the audit criteria to determine the extent of conformity and nonconformity. The audit team should also identify any opportunities for improvement, best practices, positive aspects or potential risks. The audit team should use professional judgement and apply the principles of auditing when evaluating the audit evidence.

Making audit conclusions: The audit team should consolidate the audit findings and evaluate the overall performance and effectiveness of the management system. The audit team should also consider the audit objectives, scope and criteria, as well as the context and expectations of the auditee and other interested parties. The audit team should provide a clear, concise and objective statement of the audit conclusions, which may include the degree of conformity, the achievement of the intended outcomes, the need for corrective actions, the suitability for certification, etc.

Evaluating against the audit criteria: The audit team should review the audit conclusions and ensure that they are consistent with the audit criteria and supported by sufficient and appropriate audit evidence. The audit team should also ensure that the audit conclusions are communicated to the auditee and other relevant parties in a timely and effective manner, using the agreed audit report format and distribution method.

To certify an organization's ISO 9001:2015-based Quality Management System (QMS) for the first time, the correct sequence of activities would be:

Establish the management system (already in place).

Supplier audit

Internal audit

Management review

Initial certification audit – stage 1

Initial certification audit – stage 2 (already in place).

This sequence follows the typical path for preparing and ensuring that a QMS is functioning as required, leading up to certification.

According to the ISO 9001:2015 standard, clause 10.2.1 defines nonconformity as the non-fulfilment of a requirement. A requirement can be related to the quality management system, the products and services, the customer expectations, or the applicable statutory and regulatory requirements. Nonconformities can be detected through various sources, such as audits, inspections, tests, customer complaints, or internal reviews. Nonconformities must be addressed by taking appropriate actions to correct them and prevent their recurrence.

In this scenario, the auditee has shown several issues that indicate nonconformities in their quality management system. Two statements that apply to the term nonconformity are:

A. No quality objectives planned for the top management team: According to ISO 9001, clause 6.2.1, the organization must establish quality objectives at relevant functions, levels, and processes. The quality objectives must be consistent with the quality policy and the strategic direction of the organization. The top management team is responsible for providing leadership and direction for the quality management system and ensuring its alignment with the organization’s purpose and context. Therefore, the absence of quality objectives for the top management team is a nonconformity as it violates the requirement of clause 6.2.1.

E. Quality improvements not aligning with the quality policy: According to ISO 9001, clause 5.2.1, the quality policy is a statement of the organization’s intentions and direction regarding quality, as formally expressed by top management. The quality policy must provide a framework for setting quality objectives and be compatible with the context and strategic direction of the organization. The quality policy must also be communicated, understood, and applied within the organization. Therefore, if the quality improvements are not aligned with the quality policy, it is a nonconformity as it violates the requirement of clause 5.2.1.

According to ISO 9001:2015, clause 6.2.1, the organization is required to establish quality objectives at relevant functions, levels, and processes for the quality management system (QMS). The quality objectives must be consistent with the quality policy, measurable, monitored, communicated, and updated as appropriate. The organization is also required to maintain documented information on the quality objectives, as per clause 7.5.1.

Therefore, in the scenario given, the quality objectives defined by the external consultant are not in alignment with the organization’s quality policy, as they are based on those of a competitor, rather than the organization’s own purpose, strategic direction, and customer requirements. This creates a mismatch between the organization’s vision and goals, and the quality objectives that are supposed to guide and measure the QMS performance. Moreover, the quality objectives are not maintained as documented information, which makes it difficult to communicate, monitor, and update them, as well as to demonstrate evidence of their implementation and achievement.

Hence, the circumstances in which a nonconformity against clause 6.2 of ISO 9001 could be raised are B and C, as they indicate a failure to comply with the requirements of clause 6.2.1. The other options are either irrelevant or not directly related to clause 6.2, as they do not pertain to the establishment and documentation of quality objectives.

Reduced incoming inspection → A. Quality

Improved communication with suppliers → B. Procurement

Purchased materials received on time → C. Logistics

Reduced variability within processes → D. Production

According to ISO 9001:2015, Clause 8.4 - Control of externally provided processes, products and services, organisations are required to ensure that externally provided products and services conform to specified requirements. When an organisation sources from ISO 9001 certified suppliers, there is greater assurance of consistency in quality, delivery, and communication. This enhances internal operations across various functions:

Reduced incoming inspection (Quality): ISO 9001 certified suppliers have robust quality controls (Clause 8.4.2), reducing the need for repeated inspections upon receipt. This aligns with Quality’s responsibility for incoming inspection and verification.

Improved communication with suppliers (Procurement): Clause 8.4.3 emphasizes the communication of detailed requirements to external providers. Procurement plays a key role in ensuring these requirements are understood and met.

Purchased materials received on time (Logistics): Timely deliveries are often a result of structured supplier evaluation and selection (Clause 8.4.1). Logistics benefits through fewer delays and better scheduling of internal processes.

Reduced variability within processes (Production): Consistency of supplied materials supports stable and predictable production processes, which is a key aspect of Clause 8.5 – Production and service provision.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.4.11 (Closing Meeting):

The audit team must proceed with the audit report, even if the auditee disagrees with findings.

Disagreements do not invalidate audit results.

The auditee has the right to file a complaint or appeal, but this is handled after the audit report is submitted.

Thus, the audit team acted correctly by proceeding with the audit report despite top management’s disagreement.