You are carrying out an audit to ISO 9001 at an organisation which offers regulatory consultancy services to manufacturers of cosmetics.
You are interviewing the Technical Director (TD), who manages a team of regulatory experts responsible for providing regulatory services to customers.
You: "How do you ensure your regulatory team's competence concerning regulatory requirements is maintained?"
TD: "The two Regulatory Experts we employ full-time have years of experience of working in the cosmetics industry."
You: "How is their regulatory competence maintained?"
TD: "They are dedicated individuals with lots of contacts in the sector."
You: "How does the business enable them to maintain their understanding of current regulatory requirements?"
TD: "We leave that up to them."
XYZ Corporation is an organisation that employs 100 people. As audit team leader, you are conducting a
certification audit at Stage 1. When reviewing the quality management system (QMS) documentation, you
find that quality objectives have been set for every employee in the organisation except top management.
The Quality Manager complains that this has created a lot of resistance to the QMS, and the Chief Executive
is asking questions about how much it will cost. He asks for your opinion on whether this is the correct
method of setting objectives.
Three months after Stage 1, you return to XYZ Corporation to conduct a Stage 2 certification audit as Audit
Team Leader with one other auditor. You find that the Quality Manager has cancelled the previous quality
objectives for all employees and replaced them with a single objective for himself. This states that "The
Quality Manager will drive multiple improvements in the QMS in the next year". The Quality Manager indicates
that this gives him the authority to issue instructions to department managers when quality improvement is
needed. He says that this approach has the full backing of senior management. He shows you the latest
Quality Improvement Request that was included in the last management review.
After further auditing, the issues below were found. Select three statements that apply to the term 'audit trail'
One of the conflict resolution techniques is toning down. How is the conflict managed in that case?
Scenario 6: Davis Clinic (DC) is an American medical center focused on integrated health care. Since its establishment DC was committed to providing qualitative services for its clients, which is the reason why the company decided to implement a quality management system (QMS) based on ISO 9001. After a year of having an active QMS in place, DC applied for a certification audit.
A team of five auditors, from a well-known certification body, was selected to conduct the audit. Eva was appointed as the audit team leader. After three days of auditing, the team gathered to review and examine their findings. They also discussed the audit findings with DC's top management and then drafted the audit conclusions.
In the closing meeting, which was held between the audit team and the top management of DC. Eva presented two nonconformities that were detected during the audit. Eva stated that the company did not retain documented information regarding its outsourced services for an analysis laboratory and regarding the conducted management reviews. During the closing meeting, the audit team required from DCs top management to come up with corrective action plans within two weeks. Although the top management did not agree with the audit findings, the audit team insisted that the auditee must submit corrective actions within the given time frame in order for the audit activities to continue.
Once the action plans were evaluated, the audit team began preparing the audit report. Eva required from the team to provide accurate descriptions of the audit findings and the audit conclusions. The report was then distributed to all the interested parties involved in the audit, including the certification body Based on the report, the certification body together with Eva, as the audit team leader, made the certification decision.
Based on the scenario above, answer the following question:
The audit team delayed audit activities until DC’s top management submitted their action plans. Is this acceptable?
Scenario 2:
Bell is a Canadian food manufacturing company that operates globally. Their main products include nuts, dried fruits, and confections. Bell has always prioritized product quality and has maintained a good reputation for many years. However, the company's production error rate increased significantly, leading to more customer complaints.
To increase efficiency and customer satisfaction, Bell implemented a Quality Management System (QMS) based on ISO 9001. The top management established a QMS implementation team comprising five middle managers from various departments, including Leslie, the quality manager.
Leslie was responsible for assigning responsibilities and authorities for QMS-related roles. He also suggested including a top management representative in the QMS team, but top management declined due to other priorities.
The team defined the QMS scope as:
"The scope of the QMS includes all activities related to food processing."
Leslie established a quality policy and presented it to the team for review before top management approval. Top management also proposed a new strategy for handling customer complaints, requiring biweekly customer surveys to monitor customer perceptions.
The quality policy was established by Leslie and approved by top management. Is this acceptable? Please refer to scenario 2.
Scenario 4:
TD Advertising is a print management company based in Chicago. The company offers design services, digital printing, storage, and distribution. As TD expanded, its management recognized that success depended on adopting new technologies and improving quality.
To ensure customer satisfaction and quality improvement, the company decided to pursue ISO 9001 certification.
After implementing the QMS, TD hired a well-known certification body for an audit. Anne Key was appointed as the audit team leader. She received a document listing the audit team members, audit scope, criteria, duration, and audit engagement limits.
Anne reviewed the document and approved the audit mandate. The certification body and TD’s top management signed the certification agreement.
Before contacting TD, Anne reviewed the audit scope and noticed that TD made changes to it due to the adoption of new printing equipment. However, Anne disagreed with the changes, stating they would affect the audit timeline. She considered withdrawing from the audit.
The audit team members were selected based on their knowledge of the legal and other regulations that TD is subject to. Is this acceptable?
Scenario 7: POLKA is a car manufacturing company based in Stockholm, Sweden. The company has around 14,000 employees working in different sectors which help with the design, painting, assembling, and test drives of the final product. The company is widely known for its qualitative products and affordable prices. In order to retain their reputation, POLKA implemented a quality management system (QMS) based on ISO 9001.
Before applying for certification, the company decided to conduct an internal audit to check whether there are any nonconformities in their QMS and if the requirements of ISO 9001 are being fulfilled. The top management appointed Sean, the internal auditor, as the team leader of the internal audit team. Sean required from the top management to have unrestricted access to the employees and executives of POLKA and to the documented information. Furthermore, Sean required to establish a team with a large number of auditors, considering the size and the complexity of the organization. The top management of POLKA agreed with Sean's requirements.
The top management, in cooperation with Sean, assigned 10 more employees to the audit team. Following that. Sean planned the audit activities and assigned the roles and responsibilities to each auditor. They began by interviewing employees of different manufacturing departments to check whether they are aware of the process of the QMS implementation. While conducting these activities, one of the auditors asked Sean for permission to audit the department in which he worked on a daily basis, as he was very familiar with the processes of the department.
Along the way, the teams findings showed that the staff were trained, documented information was updated, and the QMS fulfilled the requirements of ISO 9001. The internal audit took three weeks to complete, and on the last week the audit team held a final meeting
The team shared their results and together drafted the audit report This report was submitted to the top management of the company. The report was maintained as documented information, and was available to the relevant interested parties.
Based on the scenario above, answer the following question:
Scenario 7 states that Sean planned audit activities on his own. Is this acceptable?
Which type of audit risk is the risk that a significant defect may occur in the QMS, although the organization has internal control mechanisms in place?
According to the ISO 9001 standard, which one of the following is a defined responsibility of top management?
You are carrying out an audit at an organisation seeking certification to ISO 9001 for the first time. The organisation offers health and safety training to customers. Training courses are offered either as open courses, delivered at a public venue, or online, or as courses that are tailored to meet specific requirements. The business operates from a single office and those who deliver the training are either full-time employees or subcontractors.
You are interviewing the Training Manager (TM).
You: "What quality objectives apply to the training process?"
TM: "One of the quality objectives we aim for is a 90% minimum exam pass rate for all open training courses."
You: "How do you measure this objective?"
The Training Manager shows you a record on her computer and you see the following:
Which two of the following statements are true?
How can an organization ensure the objectivity and impartiality of the internal audit function?
You are carrying out an annual audit at an organisation that offers home security services. You are interviewing the Quality Manager (QM)
You: "Would you tell me about your management review process?"
QM: "The senior management team plans to review the management system every six months. The review follows a set agenda and records are maintained."
You: "May I see the records from the last two management reviews?"
Narrative: The Quality Manager gives you the latest record, which shows the last management review took place nine months ago.
The Quality Manager then gives you the previous management review record, which took place one year before the latest review.
You: "Are there any other review reports in the last two years?
QM: "No, these are the only ones."
You work for an organisation, 'A', which provides packaged food to the public. You are asked to lead a team (you as the leader and two other
auditors) to audit a supplier, 'B', which provides packaging materials to your organisation. It is 4 p.m. and the audit is close to an end; you are having
an internal meeting with the team to decide what will be presented to the auditee during the Closing meeting. The Closing meeting was scheduled
for 5 p.m.
You, as audit team leader, audited top management, the laboratory, and the storage of raw materials.
Auditor 1 audited the two manufacturing lines and dispatch areas.
You to Auditor 1: "What findings would you report?"
Auditor 1: "When reviewing the Dispatch records, I noticed that during the morning two different trucks (Number 011 and 025) delivered the same
batch number of the product (Batch 33555). Truck 011 left the plant at 9.15 am and Truck 025 left the plant at 11.30 am. Procedure P-02 Rev.3 says
that trucks should carry a complete batch. The batch number, once on the truck, is captured using a QR device."
You: "OK, what do you think?"
Auditor 2: "I think that this is a nonconformity."
You: "OK. How would you describe the evidence on which the nonconformity will be based"?
Identify which one of the following statements best describes the identified nonconformity.
Whistiekleen is a national dry cleaning and laundry organisation with 50 shops. You are conducting a surveillance audit of the Head Office and are sampling customer complaints. You find that 80% of complaints originate from five shops in the same region. Most of these complaints relate to damage to customer laundry. The Quality Manager tells you that these are the oldest shops in the organisation. The deaning equipment needs replacing but the organisation cannot afford it now. You learn that the shop managers were told to dismiss most of the claims based on the poor quality of the laundered materials.
On raising the matter with senior management, you are told that there are plans to replace the equipment in these shops over the next five years.
Match the ISO 9001 Clauses to the statements.
Scenario 5: Mechanical-Electro (ME) Audit Stages
Mechanical-Electro, better known as ME, is an American company that provides mechanical and electrical services in China. Their services range from air-conditioning systems, ventilation systems, plumbing, to installation of electrical equipment in automobile plants, electronic manufacturing facilities, and food processing plants.
Due to the fierce competition from local Chinese companies and failing to meet customer requirements, ME's revenue dropped significantly. In addition, customers' trust and confidence in the company decreased, and the reputation of the company was damaged.
In light of these developments, the top management of ME decided to implement a quality management system (QMS) based on ISO 9001. After having an effective QMS in place for over a year, they applied for a certification audit.
A team of four auditors was appointed for the audit, including Li Na as the audit team leader. Initially, the audit team conducted a general review of ME's documents, including the quality policy, operational procedures, inventory lists, QMS scope, process documentation, training records, and previous audit reports.
Li Na stated that this would allow the team to maintain a systematic and structured approach to gathering documents for all audit stages. While reviewing the documented information, the team observed some minor issues but did not identify any major nonconformities. Therefore, Li Na claimed that it was not necessary to prepare a report or conduct a meeting with ME's representatives at that stage of the audit. She stated that all areas of concern would be discussed in the next phase of the audit.
Following the on-site activities and the opening meeting with ME's top management, the audit team structured an audit test plan to verify whether ME’s QMS conformed to Clause 8.2.1 (Customer Communication) of ISO 9001.
To do so, they gathered information through group interviews and sampling. Li Na conducted interviews with departmental managers in the first group and then with top management. In addition, she chose a sampling method that sufficiently represented customer complaints from both areas of ME's operations.
The team members were responsible for the sampling procedure. They selected a sample size of 4 out of 45 customer complaints received weekly for electrical services and 2 out of 10 complaints for mechanical services.
Afterward, the audit team evaluated the evidence against the audit criteria and generated the audit findings.
Li Na chose a sampling method that sufficiently represents customer complaints from both areas of ME’s operations. Which sampling method fits that description?
Scenario 6: Davis Clinic (DC) is an American medical center focused on integrated health care. Since its establishment DC was committed to providing qualitative services for its clients, which is the reason why the company decided to implement a quality management system (QMS) based on ISO 9001. After a year of having an active QMS in place, DC applied for a certification audit.
A team of five auditors, from a well-known certification body, was selected to conduct the audit. Eva was appointed as the audit team leader. After three days of auditing, the team gathered to review and examine their findings. They also discussed the audit findings with DC's top management and then drafted the audit conclusions.
In the closing meeting, which was held between the audit team and the top management of DC. Eva presented two nonconformities that were detected during the audit. Eva stated that the company did not retain documented information regarding its outsourced services for an analysis laboratory and regarding the conducted management reviews. During the closing meeting, the audit team required from DCs top management to come up with corrective action plans within two weeks. Although the top management did not agree with the audit findings, the audit team insisted that the auditee must submit corrective actions within the given time frame in order for the audit activities to continue.
Once the action plans were evaluated, the audit team began preparing the audit report. Eva required from the team to provide accurate descriptions of the audit findings and the audit conclusions. The report was then distributed to all the interested parties involved in the audit, including the certification body Based on the report, the certification body together with Eva, as the audit team leader, made the certification decision.
Based on the scenario above, answer the following question:
According to Scenario 6, the audit team required DC’s top management to submit corrective action plans within two weeks. Is this action acceptable?
Scenario 3:
Fin-Pro is a financial institution in Austria offering commercial banking, wealth management, and investment services. The company faced a significant loss of customers due to failing to improve service quality as they expanded.
To regain customer confidence, top management implemented a QMS based on ISO 9001. After a year, they contacted ACB, a local certification body, to pursue ISO 9001 certification.
The audit team was led by Emilia, an experienced lead auditor, and included three auditors. After an agreement was reached, ACB sent the audit objectives to the audit team.
The audit team began by gathering information about Fin-Pro’s understanding of ISO 9001 requirements. While reviewing documented information, they noticed missing records of training and awareness sessions. They conducted employee interviews to verify attendance.
The team also reviewed the organizational chart and job descriptions to confirm employee competence. They observed the company’s working environment (social, psychological, and physical conditions).
The audit team analyzed the evidence and prepared an audit report with findings and conclusions.
What type of evidence has been collected by the ACB’s audit team, as presented in scenario 3?
The following are stages of an audit, put them in the order they would be conducted.
Scenario 6: Davis Clinic (DC) is an American medical center focused on integrated health care. Since its establishment DC was committed to providing qualitative services for its clients, which is the reason why the company decided to implement a quality management system (QMS) based on ISO 9001. After a year of having an active QMS in place, DC applied for a certification audit.
A team of five auditors, from a well-known certification body, was selected to conduct the audit. Eva was appointed as the audit team leader. After three days of auditing, the team gathered to review and examine their findings. They also discussed the audit findings with DC's top management and then drafted the audit conclusions.
In the closing meeting, which was held between the audit team and the top management of DC. Eva presented two nonconformities that were detected during the audit. Eva stated that the company did not retain documented information regarding its outsourced services for an analysis laboratory and regarding the conducted management reviews. During the closing meeting, the audit team required from DCs top management to come up with corrective action plans within two weeks. Although the top management did not agree with the audit findings, the audit team insisted that the auditee must submit corrective actions within the given time frame in order for the audit activities to continue.
Once the action plans were evaluated, the audit team began preparing the audit report. Eva required from the team to provide accurate descriptions of the audit findings and the audit conclusions. The report was then distributed to all the interested parties involved in the audit, including the certification body Based on the report, the certification body together with Eva, as the audit team leader, made the certification decision.
Based on the scenario above, answer the following question:
Is it acceptable for the certification body and Eva to make the certification decision together?
ISO 9001 addresses changes through several requirements, two examples of which are Clause 6.3 (Planning of Changes) and Clause 8.5.6 (Control of Changes). How do the requirements of Clause 8.5.6 differ from those of Clause 6.3?
ABC is a worldwide fast-food organisation. One of the branches, in downtown Cape Town, decided to
implement an ISO 9001 quality management system and you are the audit team leader (with two other
auditors) that will carry out the certification audits, Stage 2.
ABC receive the orders by phone or internet; some of the employees deliver the ordered food to indicated
addresses. The normal menu includes 15 different types of hamburgers; however, in the last two weeks,
due to a shortage of a special type of meat, they can only prepare six of the 15 varieties.
During the internal meeting of the audit team, you ask one of the auditors to describe what she has
observed. She audited the reception of orders from customers (via phone or internet) and the
communication of the orders to the kitchen. She noticed that the menu offering food on the website is still
the normal one, with 15 different hamburgers, and during a 30-minute period, she observed many
customers reluctantly accepting something other than the hamburger they preferred.
You, as audit team leader, inform the Quality Manager of your concern about the major nonconformity,
since you consider this a serious breach of the basic principles of quality that lasted two weeks without
action being taken.
Right at the beginning of the Closing meeting, you discuss the nonconformity with the General Manager.
She got quite upset and said she was going to make a complaint to the certification body and left the
room; the Quality Manager was the only member of ABC left with the audit team. The Quality Manager said the General Manager would not come back to the meeting.
What would you do? Choose the best from the following options:
During a third-party audit of a pharmaceutical organisation (CD9000) site of seven COVID-19 testing laboratories in various terminals at
a major international airport, you interview the CD 9000's General Manager (GM), who was accompanied by Jack, the legal compliance
expert. Jack is acting as the guide in the absence of the Technical Manager due to him contracting COVID-19.
You: "What external and internal issues have been identified that could affect CD9000 and its quality management system?"
GM: "Jack guided us on this. We identified issues like probable competition of another laboratory organisation in the airport, legal
requirements on COVID-19 continuously changing, the shortage of competent laboratory analysists, the epidemic declining soon,
shortage of chemicals for the analysis. It was quite a good experience."
You: "Did you document these issues?"
GM: "No. Jack said that ISO 9001 does not require us to document these issues."
You: "How did you determine the risks associated with the issues and did you plan actions to address them?"
GM: "I am not sure. The Technical Manager is responsible for this process. Jack may be able to answer this question in his absence."
Select two options for how you would respond to the General Manager's suggestion:
Scenario 5: Mechanical-Electro (ME) Audit Stages
Mechanical-Electro, better known as ME, is an American company that provides mechanical and electrical services in China. Their services range from air-conditioning systems, ventilation systems, plumbing, to installation of electrical equipment in automobile plants, electronic manufacturing facilities, and food processing plants.
Due to the fierce competition from local Chinese companies and failing to meet customer requirements, ME's revenue dropped significantly. In addition, customers' trust and confidence in the company decreased, and the reputation of the company was damaged.
In light of these developments, the top management of ME decided to implement a quality management system (QMS) based on ISO 9001. After having an effective QMS in place for over a year, they applied for a certification audit.
A team of four auditors was appointed for the audit, including Li Na as the audit team leader. Initially, the audit team conducted a general review of ME's documents, including the quality policy, operational procedures, inventory lists, QMS scope, process documentation, training records, and previous audit reports.
Li Na stated that this would allow the team to maintain a systematic and structured approach to gathering documents for all audit stages. While reviewing the documented information, the team observed some minor issues but did not identify any major nonconformities. Therefore, Li Na claimed that it was not necessary to prepare a report or conduct a meeting with ME's representatives at that stage of the audit. She stated that all areas of concern would be discussed in the next phase of the audit.
Following the on-site activities and the opening meeting with ME's top management, the audit team structured an audit test plan to verify whether ME’s QMS conformed to Clause 8.2.1 (Customer Communication) of ISO 9001.
To do so, they gathered information through group interviews and sampling. Li Na conducted interviews with departmental managers in the first group and then with top management. In addition, she chose a sampling method that sufficiently represented customer complaints from both areas of ME's operations.
The team members were responsible for the sampling procedure. They selected a sample size of 4 out of 45 customer complaints received weekly for electrical services and 2 out of 10 complaints for mechanical services.
Afterward, the audit team evaluated the evidence against the audit criteria and generated the audit findings.
Which stages of the audit were performed?
Which two of the following are the key expected results of a quality management system that conforms to the requirements of ISO 9001:2015?
You are the supervisor in Production of a medium size manufacturing organisation. You are qualified as an internal auditor. The Quality Manager asks you to lead the next internal audit of Production and Logistics Dispatch. The audit team includes two other internal auditors.
Noitol is an organisation specialising in the design and production of e-learning training materials for the insurance market. During an ISO 9001 audit
of the development department, the auditor asks the Head of Development about the process used for validation of the final course design. She states that they usually ask customers to validate the product with volunteers. She says that the feedback received often leads to key improvements.
The auditor samples the design records for a recently completed course for the 247 Insurance organisation. Design verification was carried out but there was no validation report. The Head of Development advises that this customer required the product on an urgent basis, so the validation stage
was omitted. When asked, the Head estimates that this occurs about 50% of the time. She confirms that they always ask for feedback and often make changes. There is no record of feedback in the design file for the course.
The auditor raises a nonconformity against ISO 9001. Which one of the following options is the basis for the nonconformity?
Takitup is a small fabrication organisation that manufactures steel fencing, stairs and platforms for the construction sector. It has been certified to ISO 9001 for some time and has appointed a new Quality Manager. The audit plan during a surveillance audit covers the organisation's improvement actions and the auditor asks to see the most recent management review meeting minutes.
The auditor finds that the management review report records that none of the improvement actions set by the previous review has been realised for a second time. A new Quality Manager has been brought in at the middle management level to rectify the situation as the organisation is concerned that it might lose its certification.
Select three options that would provide evidence of conformance with clause 10.3 of ISO 9001.
Which two of the following auditors would not participate in a first-party audit?
Audit criteria are a set of requirements used as a reference against which objective evidence is compared.
Which two of the following are not potential audit criteria?
Knowledge and skills are requirements of the auditor's competence. Select two from the following topics of knowledge that apply to every member of an audit team auditing an ISO 9001 quality management system.
According to ISO 19011, what two activities take place during the conduct of a audit follow-up?
Which of the following is a record related to the audit program that should be managed and maintained?
Put the following steps of a third-party audit into the correct sequence in which they happen.
For a third-party, match the Activity with the Responsibility for conducting it.
Scenario 2:
Bell is a Canadian food manufacturing company that operates globally. Their main products include nuts, dried fruits, and confections. Bell has always prioritized product quality and has maintained a good reputation for many years. However, the company's production error rate increased significantly, leading to more customer complaints.
To increase efficiency and customer satisfaction, Bell implemented a Quality Management System (QMS) based on ISO 9001. The top management established a QMS implementation team comprising five middle managers from various departments, including Leslie, the quality manager.
Leslie was responsible for assigning responsibilities and authorities for QMS-related roles. He also suggested including a top management representative in the QMS team, but top management declined due to other priorities.
The team defined the QMS scope as:
"The scope of the QMS includes all activities related to food processing."
Leslie established a quality policy and presented it to the team for review before top management approval. Top management also proposed a new strategy for handling customer complaints, requiring biweekly customer surveys to monitor customer perceptions.
Which situation presented in scenario 2 is NOT compliant with ISO 9001?
During a second-party audit, the auditor examines the records that are available for the external provider, ABC Forgings, to whom manufacturing has recently been outsourced.
There are standard external provider checklists for three competitors for the contract and there are inspection records from the trial manufacturing batches produced by ABC Forgings. There is no documented evidence of the criteria used to confirm the appointment of ABC Forgings, and no contract or terms and conditions. Ongoing monitoring indicates that external provider performance is satisfactory, but no documented information has been retained.
Select two options for the evidence which demonstrates a nonconformity with clause 8.4 of ISO 9001.
Scenario 4:
TD Advertising is a print management company based in Chicago. The company offers design services, digital printing, storage, and distribution. As TD expanded, its management recognized that success depended on adopting new technologies and improving quality.
To ensure customer satisfaction and quality improvement, the company decided to pursue ISO 9001 certification.
After implementing the QMS, TD hired a well-known certification body for an audit. Anne Key was appointed as the audit team leader. She received a document listing the audit team members, audit scope, criteria, duration, and audit engagement limits.
Anne reviewed the document and approved the audit mandate. The certification body and TD’s top management signed the certification agreement.
Before contacting TD, Anne reviewed the audit scope and noticed that TD made changes to it due to the adoption of new printing equipment. However, Anne disagreed with the changes, stating they would affect the audit timeline. She considered withdrawing from the audit.
Based on scenario 4, conducting which of the activities below is NOT the responsibility of Anne?
You have been just hired as the Internal Lead Auditor of a large organisation, responsible for internal audits. Your first job is to analyse the answers to nonconformities included in the report of a recent internal audit to Top Management.
The report contained one nonconformity as follows:
There is no evidence of Top Management ensuring the availability of resources to operate the QMS, the establishment of objectives, the promotion of continual improvement, and the promoting of the process approach.
Which four of the following Top Management actions can be considered 'corrections to the nonconformity'?
Will the auditee be subject to an audit follow-up if a minor nonconformity has been reported by the audit team leader in the audit conclusions?
The following actions need to be carried out during a third-party audit planning stage. Which two actions correspond to the individual(s) managing the audit program before the involvement of the audit team leader’
You are preparing for interviews with two members of top management. Based on the information that you gathered about the organization, you conclude that it is the top management who takes all the important decisions and closely supervises and controls employees. Based on this, which management style is practiced in the organization?
An internal auditor of a manufacturer of polystyrene packaging products for the electronics industry raised a nonconformity against section 10.3 of ISO 9001 in Report IA202. The nonconformity (NC 3) stated:
"The reject rate of the finished product of 9.7% needs improvement as it doesn't meet the stated objective of top management of 5%."
As the third-party auditor reviewing the internal audit process, you come across the nonconformity. For corrective action, the Quality Manager conducted an investigation into the reject rates. He reported that the collection baskets for products ejecting from the moulding machines were not large enough. About 6% of products fell onto the wet and dirty factory floor. Management stated that replacing the baskets was too costly and ordered the Maintenance Manager to ensure that the floor was kept clean and dry to prevent rejects. The auditor later checked the factory floor, which was wet and dirty in places.
From the following nonconformities, select three that the auditor could raise to ISO 9001.
Scenario 2:
Bell is a Canadian food manufacturing company that operates globally. Their main products include nuts, dried fruits, and confections. Bell has always prioritized product quality and has maintained a good reputation for many years. However, the company's production error rate increased significantly, leading to more customer complaints.
To increase efficiency and customer satisfaction, Bell implemented a Quality Management System (QMS) based on ISO 9001. The top management established a QMS implementation team comprising five middle managers from various departments, including Leslie, the quality manager.
Leslie was responsible for assigning responsibilities and authorities for QMS-related roles. He also suggested including a top management representative in the QMS team, but top management declined due to other priorities.
The team defined the QMS scope as:
"The scope of the QMS includes all activities related to food processing."
Leslie established a quality policy and presented it to the team for review before top management approval. Top management also proposed a new strategy for handling customer complaints, requiring biweekly customer surveys to monitor customer perceptions.
In scenario 2, the team determined the QMS scope by taking into account only the requirements of top management. Is this compliant with ISO 9001?
Scenario 5: Mechanical-Electro (ME) Audit Stages
Mechanical-Electro, better known as ME, is an American company that provides mechanical and electrical services in China. Their services range from air-conditioning systems, ventilation systems, plumbing, to installation of electrical equipment in automobile plants, electronic manufacturing facilities, and food processing plants.
Due to the fierce competition from local Chinese companies and failing to meet customer requirements, ME's revenue dropped significantly. In addition, customers' trust and confidence in the company decreased, and the reputation of the company was damaged.
In light of these developments, the top management of ME decided to implement a quality management system (QMS) based on ISO 9001. After having an effective QMS in place for over a year, they applied for a certification audit.
A team of four auditors was appointed for the audit, including Li Na as the audit team leader. Initially, the audit team conducted a general review of ME's documents, including the quality policy, operational procedures, inventory lists, QMS scope, process documentation, training records, and previous audit reports.
Li Na stated that this would allow the team to maintain a systematic and structured approach to gathering documents for all audit stages. While reviewing the documented information, the team observed some minor issues but did not identify any major nonconformities. Therefore, Li Na claimed that it was not necessary to prepare a report or conduct a meeting with ME's representatives at that stage of the audit. She stated that all areas of concern would be discussed in the next phase of the audit.
Following the on-site activities and the opening meeting with ME's top management, the audit team structured an audit test plan to verify whether ME’s QMS conformed to Clause 8.2.1 (Customer Communication) of ISO 9001.
To do so, they gathered information through group interviews and sampling. Li Na conducted interviews with departmental managers in the first group and then with top management. In addition, she chose a sampling method that sufficiently represented customer complaints from both areas of ME's operations.
The team members were responsible for the sampling procedure. They selected a sample size of 4 out of 45 customer complaints received weekly for electrical services and 2 out of 10 complaints for mechanical services.
Afterward, the audit team evaluated the evidence against the audit criteria and generated the audit findings.
According to general principles of sampling procedure, did the audit team select a valid sample for electrical services?
Scenario 7: POLKA is a car manufacturing company based in Stockholm, Sweden. The company has around 14,000 employees working in different sectors which help with the design, painting, assembling, and test drives of the final product. The company is widely known for its qualitative products and affordable prices. In order to retain their reputation, POLKA implemented a quality management system (QMS) based on ISO 9001.
Before applying for certification, the company decided to conduct an internal audit to check whether there are any nonconformities in their QMS and if the requirements of ISO 9001 are being fulfilled. The top management appointed Sean, the internal auditor, as the team leader of the internal audit team. Sean required from the top management to have unrestricted access to the employees and executives of POLKA and to the documented information. Furthermore, Sean required to establish a team with a large number of auditors, considering the size and the complexity of the organization. The top management of POLKA agreed with Sean's requirements.
The top management, in cooperation with Sean, assigned 10 more employees to the audit team. Following that. Sean planned the audit activities and assigned the roles and responsibilities to each auditor. They began by interviewing employees of different manufacturing departments to check whether they are aware of the process of the QMS implementation. While conducting these activities, one of the auditors asked Sean for permission to audit the department in which he worked on a daily basis, as he was very familiar with the processes of the department.
Along the way, the teams findings showed that the staff were trained, documented information was updated, and the QMS fulfilled the requirements of ISO 9001. The internal audit took three weeks to complete, and on the last week the audit team held a final meeting
The team shared their results and together drafted the audit report This report was submitted to the top management of the company. The report was maintained as documented information, and was available to the relevant interested parties.
Based on the scenario above, answer the following question:
Ten employees of POLKA were part of the audit team that conducted the internal audit. Is this acceptable?
ABC is a fast food shop that receives orders by phone or the internet. The normal menu includes 15 different types of hamburgers; however, in the
last two days, due to a shortage of a special type of meat, they can only prepare six of the 15 varieties.
You are performing a third-party audit of ABC; you observed that the menu offering food on the website is still the normal one, with 15 different
hamburgers. During a 30-minute period, you observed several customers reluctantly accepting other than the hamburger they preferred. You decided
to raise the following nonconformity as follows:
"There is evidence that ABC has not reviewed the ability to provide customers the offered products".
The restaurant manager does not accept the nonconformity. She says that ABC had an extensive training programme for all personnel, which you have already seen when auditing Human Resources. This shortage of some hamburgers cannot be considered a management system failure.
Which one would be your answer from the following options?
Which one of the following is not an ISO 9000:2015 quality management principle?
Select one of the options that best describes the purpose of conducting a document review:
ABC is a service organisation that cleans and irons bed and table linen for four large hospitals in the city centre. It claims to meet ISO 9001:2015 requirements. During an internal audit, an auditor observes that
machine No. 4 is being operated with the three variables outside the limits established in the applicable documented procedure SP-701. The auditor has decided to raise a nonconformity.
Which six elements should be included in the nonconformity report?
You are carrying out an audit at an organisation seeking certification to ISO 9001 for the first time. The organisation offers health and safety training to
customers.
You are interviewing the Quality Systems Manager (QSM).
You: "What risks and opportunities have the business identified?"
QSM: "I'1l show you. This was discussed with the Managing Director at the latest management review."
Narrative: The QSM shows you the latest management review record and points to the following table:
You: "How is the business planning to address these risks and opportunities?"
QSM: "The MD said that they already knew about them so it was not necessary."
You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time. The
organisation manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product
packaging. Sales turnover has increased significantly over the past five years. The organisation uses a software programme called SWIFT, which is used to record sales, plan production, purchase supplies, print despatch notes, track new product development, perform traceability exercises, carry out mass balance checks, raise invoices, create budgets, and support financial control.
You are nearing the end of the audit and you are reviewing your audit notes. You notice a recurring trend concerning the SWIFT database as shown below:
You ask the Quality Manager to explain how the SWIFT database is controlled. You learn that the Operations Director is
responsible for determining and progressing SWIFT software updates. You decide to meet the Operations Director (OD).
You: "Good afternoon."
OD: "Good afternoon."
You: "What responsibility do you have concerning the SWIFT database?"
OD: "I maintain it. If anyone wishes to propose an update to the database, they send me an email with
details of their proposal. I then either process the database update myself, or I send the request to the
consultant who designed the database 20 years ago. The necessary software changes are made, and the
amended software is immediately released to users."
You: "Would you explain how the software amendments are controlled?"
OD: "Of course. I personally update every computer myself."
You: "Do you inform the database users of the changes?"
OD: "No I don't. They find out for themselves by using the software, or they come to see me if they have
any questions."
You: "How do you ensure that the database users use the latest version?"
OD: "That's easy, I update every computer myself."
You: "During the audit, I noted there were several versions of SWIFT in use (you refer to your audit
notes)."
OD: "I know. That's because some versions work better than others, and depending on user needs and
experiences, we allow users to revert to using an earlier version if they find it works better for them."
Based on the scenario, which two of the following statements are true? There is evidence of
nonconformity with a requirement defined in ...
A person who provides specific knowledge or expertise to the audit team during the audit is known as a/an:
You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time. The organisation manufactures cosmetics for major retailers.
You are interviewing the Manufacturing Manager (MM).
You: "I would like to begin by looking at the cleaning controls."
MM: "We record the cleaning of the equipment at the end of every batch. This document details the minimum cleaning frequency and the procedures to follow for all areas and each item of equipment. The person who carries out the cleaning puts their initial on the document and records the time and date alongside."
Narrative: You sample production records over 3-days and note down evidence of nonconformity as per the table below.
You decide to raise a non-conformity.