ISO-9001-Lead-Auditor Exam Dumps - PECB ISO 9001 Questions and Answers

ISO 9001 audits (including second-party audits) must be conducted in line with audit principles of fairness, objectivity, and impartiality , with guidance provided by ISO 19011:2018 for audit activities, including closing meetings.

Relevant ISO guidance

ISO 19011 – Closing meeting guidance states that the purpose of the closing meeting is to:

present audit findings and conclusions,

ensure the auditee understands the non-conformities,

explain the next steps, including reporting and follow-up.

Auditors must not :

prescribe solutions,

analyse or design corrective actions,

make commercial or approval decisions on behalf of the audited organisation.

Explanation of the correct option:

C. Present the non-conformities and inform them that the report will be sent within ten working days, close the meeting and leave the site.

This option correctly reflects the auditor’s role:

The non-conformities are presented clearly and transparently in the closing meeting.

The auditee is informed of the reporting process and timeline.

The auditor does not analyse solutions, recommend actions, or influence supplier approval decisions.

The meeting is closed professionally and objectively, in line with ISO 19011.

Explanation of why the other options are incorrect:

A : Closing meetings must be conducted with the agreed auditee representatives; hiding findings undermines transparency and audit integrity.

B : Analysing how to overcome the situation constitutes consulting , which compromises auditor impartiality.

D : Recommending removal from an approved supplier list exceeds the auditor’s authority and violates audit independence.

ISO-aligned conclusion:

The auditor’s responsibility at the closing meeting is limited to presenting findings and explaining next steps , not advising, consulting, or making business decisions. Therefore, the correct and ISO-compliant option is C .

In the context of ISO 9001:2015 audits, it is the audit team leader who holds the responsibility for assigning work to the audit team. According to ISO 19011:2018 (Guidelines for auditing management systems, which complements ISO 9001:2015), the audit team leader is responsible for the organization and direction of the audit, including assigning specific roles and responsibilities to audit team members. This includes preparation of the audit plan, leading the audit, and ensuring that each team member understands their tasks.

Clause 8.2.4 of ISO 9001:2015 – Changes to Requirements for Products and Services:ISO 9001:2015 Clause 8.2.4 states that when changes to requirements for products or services are made, they must be communicated and agreed upon with relevant interested parties (in this case, the Health Trust). The lack of communication and agreement for substituting the cleaning chemical represents a clear violation of this clause.

Analysis of the Corrective Action Proposed:The organization proposed " obtaining a concession from the Health Trust for the use of the new chemical. " This action is reactive and assumes approval from the Health Trust without addressing the systemic issue: the lack of a defined change control process for managing contract changes.

Option Analysis:

A. The substitute chemical has not been used before in the Health Trust:Incorrect. While this may be a concern, it is not directly relevant to the root cause of the nonconformity, which is the absence of a process to handle contract changes.

B. The action assumes that the Health Trust will agree to the change:Incorrect. Although this is true, it is not the primary issue. The nonconformity lies in the lack of a structured approach to obtain agreement, not whether the Health Trust agrees.

C. Staff have not been trained in the use of the new chemical:Incorrect. This is a separate issue related to staff competence (Clause 7.2), but it is not the main reason why the corrective action is unacceptable under Clause 8.2.4.

D. The process for making changes to the contract has not been addressed:Correct. The fundamental issue is the organization ' s failure to follow or establish a change control process for amending contracts, including gaining formal agreement from the Health Trust. The proposed corrective action does not ensure that such issues will be systematically prevented in the future.

E. The substitute chemical may not be as effective as the original:Incorrect. The effectiveness of the substitute chemical is secondary to the primary issue, which is the lack of a change management process.

ISO 9001 References Supporting the Correct Answer:

Clause 8.2.4: Requires that changes to product/service requirements be reviewed, communicated, and agreed upon with the customer.

Clause 10.2 (Nonconformity and Corrective Action): Requires the organization to address the root cause of the nonconformity and take actions to ensure it does not recur. In this case, the root cause is the absence of a change control process.

Why D is the Best Answer:The core issue is that the organization did not have a formalized process for managing and agreeing upon changes to contract requirements. Addressing this process gap is essential to prevent recurrence of similar nonconformities. Merely seeking a concession from the Health Trust is a one-off solution that does not address the systemic issue.

Based on the scenario provided, there is evidence of nonconformity with the requirements defined in:

C. Clause 7.5.1 Documented information - General: The scenario indicates that there is no formal process for informing users about updates to the SWIFT database, which suggests a lack of control over documented information. This could lead to users being unaware of important changes and not using the latest version of the software, which is required by the quality management system1.

E. Clause 7.5.3 Control of documented information: The Operations Director’s approach to updating the SWIFT database and the lack of communication to users about these updates indicate that the documented information is not adequately controlled. Allowing users to revert to earlier versions of the software at their discretion further suggests that the organization does not have a proper mechanism in place to ensure the integrity and suitability of documented information2.

These clauses are part of the ISO 9001:2015 standard, which requires organizations to have a systematic approach to controlling and managing documented information as part of their quality management system. The scenario described shows a casual approach to managing critical software updates, which could affect the organization’s ability to consistently meet customer and regulatory requirements.

ISO 9001:2015 requires that certification audits be planned, controlled, and conducted in a way that ensures valid and reliable audit conclusions . However, ISO 9001 does not give operational detail on how to manage disrupted audits. For this, ISO 9001 explicitly refers to ISO 19011 and certification schemes require escalation to the audit programme or certification management function .

ISO 9001:2015, Clause 9.2.2 (NOTE) states that guidance on auditing management systems is provided in ISO 19011.

In a Stage 2 certification audit , all applicable processes within the scope must be audited before a certification decision can be made. The laboratory at Site 2 is clearly part of the operational scope and cannot be audited due to circumstances outside the organisation’s control (health and safety risk).

Why option C is correct:

Certification audits operate under a controlled certification programme , not solely at the discretion of the audit team leader.

ISO 19011 requires auditors to act responsibly when conditions prevent safe or complete auditing and to escalate significant changes or risks .

Certification bodies require the Audit Programme Manager (or Certification Manager) to decide whether the audit should be paused, partially completed, rescheduled, or split to preserve certification integrity.

Therefore, seeking direction from the audit Programme Manager is the correct and compliant action.

The auditor could raise the following nonconformities to ISO 9001 based on the scenario:

•Option A: 10.3 - The organisation did not continuously improve. Reject rates were unchanged. This option is correct because ISO 9001:2015 clause 10.3 requires the organization to improve the suitability, adequacy and effectiveness of the quality management system. The organization did not demonstrate any improvement in reducing the reject rate of the finished product, which was a stated objective of top management. The corrective action taken by the organization was not effective in addressing the root cause of the problem and preventing its recurrence.

•Option B: 7.1.4 - The factory environment is not suitably maintained to prevent dirty products. This option is correct because ISO 9001:2015 clause 7.1.4 requires the organization to determine, provide and maintain the environment necessary for the operation of its processes and to achieve conformity of products and services. The organization did not ensure that the factory floor was clean and dry, which affected the quality of the products and increased the risk of nonconformity.

•Option C: 7.1.1 - The organization failed to provide the required resources to prevent nonconforming products. This option is correct because ISO 9001:2015 clause 7.1.1 requires the organization to determine and provide the resources needed for the establishment, implementation, maintenance and continual improvement of the quality management system. The organization did not provide adequate collection baskets for the products ejecting from the moulding machines, which resulted in products falling onto the factory floor and becoming nonconforming.

The following options are not correct:

•Option D: 9.2.2 - Report IA202 contained a poorly worded nonconformity (NC 3). This option is not correct because ISO 9001:2015 clause 9.2.2 does not specify the requirements for the wording of nonconformities in internal audit reports. The nonconformity (NC 3) stated by the internal auditor was clear and relevant to the audit criteria and audit evidence. The issue is not with the report, but with the corrective action taken by the organization.

•Option E: 8.6 - Dirty products were released to the customer. This option is not correct because ISO 9001:2015 clause 8.6 requires the organization to implement planned arrangements, at appropriate stages, to verify that the product and service requirements have been met. The scenario does not indicate that the dirty products were released to the customer, but that they were recalled and repaired then returned to the customers. The issue is not with the release, but with the production process and the environment.

•Option F: 7.3 - Staff were not aware that products were falling onto the factory floor. This option is not correct because ISO 9001:2015 clause 7.3 requires the organization to ensure that the persons doing work under its control are aware of the quality policy, relevant quality objectives, their contribution to the effectiveness of the quality management system, and the implications of not conforming with the quality management system requirements. The scenario does not indicate that the staff were not aware of these aspects, but that the management did not provide adequate resources and environment for the staff to perform their work. The issue is not with the awareness, but with the management responsibility and resource provision.

•Option G: 10.2.1 - Conduct of an investigation was not sufficient to understand the cause of the nonconformity. This option is not correct because ISO 9001:2015 clause 10.2.1 requires the organization to react to the nonconformity and, as applicable, take action to control and correct it and deal with the consequences. The scenario indicates that the Quality Manager conducted an investigation into the reject rates and identified the cause of the nonconformity. The issue is not with the investigation, but with the corrective action taken by the management.

•Option H: 8.5.1 - Production operations were not properly controlled to avoid reject products. This option is not correct because ISO 9001:2015 clause 8.5.1 requires the organization to implement production and service provision under controlled conditions. The scenario indicates that the production operations were controlled by the moulding machines, which ejected the products into the collection baskets. The issue is not with the production operations, but with the size of the collection baskets and the condition of the factory floor.

ISO 9001:2015 requires audits to be planned and conducted to ensure the quality management system conforms to requirements and is effectively implemented. While ISO 9001 sets the requirement, it explicitly refers auditors to ISO 19011 for detailed guidance on audit planning and execution.

ISO 9001:2015, Clause 9.2.2 (NOTE) states that guidance for auditing management systems is provided in ISO 19011 .

Based on ISO 19011:2018 (Clause 6.3 – Initiating and preparing for the audit), the audit team leader is responsible for finalising key planning issues before documenting the audit plan , especially for multi-site and multi-country audits.

Explanation of the selected options:

A. Arrangement of translation of the audit report

ISO 19011 requires consideration of communication and language arrangements during audit preparation. Where sites are located in different countries, potential language difficulties must be addressed during planning, including translation needs for reports and communications.

C. Structuring the audit plan to account for audit trails

ISO 19011 requires audits to follow audit trails across processes, functions, and interfaces. The audit plan must be structured to allow logical progression through interrelated processes, which must be decided before the plan is documented.

D. Determining available IT infrastructure for remote participation

ISO 19011 allows the use of remote auditing techniques. When audit team members are located in different countries, the audit team leader must confirm the availability of IT infrastructure to support remote participation in opening and closing meetings as part of audit planning.

E. Considering processes not operating at the time of the audit

ISO 19011 requires the audit team leader to consider process availability. If some processes are not operating during the audit period, alternative audit methods (such as records review or rescheduling) must be planned in advance and reflected in the audit plan.

Explanation of why the other options are not selected:

B : ISO 19011 requires identification of roles and functions to be audited, not specific names, at the audit planning stage.

F : Moderation or grading of nonconformities is performed after audit findings are raised, not during audit planning.

G : Post-audit communication arrangements are addressed during reporting and follow-up activities, not before documenting the audit plan.

H : Follow-up audits are planned only if required after audit results are known, not during initial audit planning.

According to ISO 19011:2018, clause 6.3.2, an audit plan should include the following information:

The audit objectives, scope, and criteria

The audit team members and their roles and responsibilities

The audit schedule, including the sequence and timings of audit activities, such as opening meeting, document review, interviews, observations, closing meeting, etc.

The expected time and duration of each audit activity and location

The name and contact details of the auditee’s representative and other relevant parties

The allocation of appropriate resources to support the audit activities

The audit methods and techniques to be used, such as interviews, observations, sampling, etc.

The audit documents and records to be prepared and retained

The audit language and communication methods

The audit risks and opportunities and how to address them

The audit follow-up arrangements, if applicable

Therefore, the correct answer is D and F, as they are essential elements of an audit plan. The other options are either irrelevant or optional for an audit plan. References:

ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.2

ISO 19011: Guidelines for Auditing Management Systems | ASQ, section “Making audit arrangements”

ISO 19011 Management Systems Audit Checklist | Process Street, task 6.3.2