ABC is a worldwide fast-food organisation. One of the branches, in downtown Cape Town, decided to
implement an ISO 9001 quality management system and you are the audit team leader (with two other
auditors) that will carry out the certification audits, Stage 2.
ABC receive the orders by phone or internet; some of the employees deliver the ordered food to indicated
addresses. The normal menu includes 15 different types of hamburgers; however, in the last two weeks,
due to a shortage of a special type of meat, they can only prepare six of the 15 varieties.
During the internal meeting of the audit team, you ask one of the auditors to describe what she has
observed. She audited the reception of orders from customers (via phone or internet) and the
communication of the orders to the kitchen. She noticed that the menu offering food on the website is still
the normal one, with 15 different hamburgers, and during a 30-minute period, she observed many
customers reluctantly accepting something other than the hamburger they preferred.
You, as audit team leader, inform the Quality Manager of your concern about the major nonconformity,
since you consider this a serious breach of the basic principles of quality that lasted two weeks without
action being taken.
Right at the beginning of the Closing meeting, you discuss the nonconformity with the General Manager.
She got quite upset and said she was going to make a complaint to the certification body and left the
room; the Quality Manager was the only member of ABC left with the audit team. The Quality Manager said the General Manager would not come back to the meeting.
What would you do? Choose the best from the following options:
Answer : B
Which one of the following is not an ISO 9000:2015 quality management principle?
Answer : D
Customer focus
Leadership
Engagement of people
Process approach
Improvement
Evidence-based decision making
Relationship management
Therefore, risk-based approach isnota quality management principle under ISO 9001:2015.
You work as an external quality consultant for an organisation, 'A', which provides packaged food to the public. You are asked to lead a team (you as the leader and two other auditors) to audit a supplier, 'B', to ISO 9001 which provides packaging materials to your organisation. It is 4 pm and the audit is close to an end; you are having an internal meeting with the team to decide what will be presented to the auditee during the Closing meeting. The Closing meeting was scheduled at 5 pm.
You, as Audit Team Leader, audited top management. You explain to the audit team that you identified two nonconformities:
a. There is no documented information on Top Management Reviews, as required in clause 9.3 of ISO 9001:2015.
b. There is no evidence of Top Management Commitment as required in clause 5.1 of ISO 9001:2015. (e.g., not ensuring the availability of resources
to operate the QMS, not ensuring the establishment of objectives, no promotion of improvement, no promotion of the process approach).
All agreed to present these two nonconformities. They went to meet the Top Management of 'B' and noticed that the General Manager and three other managers (Production, Human Resources, and Sales) were present in the meeting room.
Considering the seriousness of the two nonconformities to Top Management, as audit team leader, from the following select the best option:
Answer : D
According to the guidance on conducting the audit closing meeting1, the audit team leader should provide a summary of the audit findings and conclusions, invite discussions, and agree on timelines for any corrective actions. The audit team leader should also be respectful, constructive, and objective when presenting the nonconformities, and avoid any personal or emotional comments. The audit team leader should also consider the impact of the disruptive event (such as the Covid-19 pandemic) on the auditee's context, interested parties, and risks2, and acknowledge any good practices or improvements observed during the audit. Therefore, option D is the best option, as it follows the best practices for the closing meeting and allows the auditee to understand the nonconformities and their implications, and to participate in the analysis and resolution of the issues. Option A is not correct, as it is not respectful, constructive, or objective, and it does not invite any discussion or feedback from the auditee. It also assumes that the audit team leader has the authority to recommend the removal of the supplier from the approved list, which may not be the case. Option B is not correct, as it does not provide enough information or explanation to the auditee, and it does not allow any discussion or feedback from the auditee. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, acknowledging any good practices, and agreeing on timelines for corrective actions. Option C is not correct, as it does not involve the other managers who are responsible for the functions or processes that were audited, and who may have valuable input or information to share. It also does not follow the best practices for the closing meeting, such as providing a summary of the audit, inviting discussions, and agreeing on timelines for corrective actions. Reference: 1: Conducting the Audit Closing Meeting: Sharing the Results2: Auditing ISO 9001:2015 in the Context of a Disruptive Event.
You work for an organisation, 'A', which provides packaged food to the public. You are asked to lead a team (you as the leader and two other
auditors) to audit a supplier, 'B', which provides packaging materials to your organisation. It is 4 p.m. and the audit is close to an end; you are having
an internal meeting with the team to decide what will be presented to the auditee during the Closing meeting. The Closing meeting was scheduled
for 5 p.m.
You, as audit team leader, audited top management, the laboratory, and the storage of raw materials.
Auditor 1 audited the two manufacturing lines and dispatch areas.
You to Auditor 1: "What findings would you report?"
Auditor 1: "When reviewing the Dispatch records, I noticed that during the morning two different trucks (Number 011 and 025) delivered the same
batch number of the product (Batch 33555). Truck 011 left the plant at 9.15 am and Truck 025 left the plant at 11.30 am. Procedure P-02 Rev.3 says
that trucks should carry a complete batch. The batch number, once on the truck, is captured using a QR device."
You: "OK, what do you think?"
Auditor 2: "I think that this is a nonconformity."
You: "OK. How would you describe the evidence on which the nonconformity will be based"?
Identify which one of the following statements best describes the identified nonconformity.
Answer : C
According to the definition in ISO 9000, a nonconformity is ''non-fulfillment of a requirement''. There are three parts to a well-documented nonconformity: the audit evidence to support auditor findings; a record of the requirement against which the nonconformity is detected; and the statement of nonconformity1. In this case, the audit evidence is the dispatch records that show the same batch number of the product being delivered by two different trucks at different times. The requirement is the procedure P-02 Rev.3 that says that trucks should carry a complete batch. The statement of nonconformity is that the batch 33555 was delivered split in two different trucks (011 and 025), which does not conform to the procedure. Therefore, option C best describes the identified nonconformity, as it includes all three parts of a well-documented nonconformity. Option A is not correct, as it does not state the audit evidence or the requirement. Option B is not correct, as it does not specify the audit evidence or the statement of nonconformity. Option D is not correct, as it does not match the audit evidence or the requirement. Reference: 1: ISO 9001 Auditing Practices Group Guidance on Nonconformity - Documenting.
During a second-party audit of a dairy farm (by a potential customer) complying with ISO 9001:2015, the auditor verifies that there is large variability in the daily production of the milking yard. The current agreement with their only customer is to provide 2,000 litres per day. However, in the last two years, they have noticed an increasing variability in daily production.
If they produce less than 2,000 litres, they are penalised with a fine of 1.5 pesos for every litre that they do not provide. If they produce more than 2,000 litres, they use the extra milk to feed the pigs.
This process has been in operation for decades. The dairy farm was founded by the grandfather of the current owners, who did not want to alter the established practices.
The auditor raises a nonconformity on the basis that the process is not under control (Clause 8.1).
If you had been the auditor, which one of the following actions would you have accepted?
Answer : B
The action that the auditor would have accepted is:
* Option B: Apply the existing process of addressing the risks and opportunities of milk production. This option is correct because ISO 9001:2015 clause 8.1 requires the organization to plan, implement and control the processes needed to meet the requirements for the provision of products and services, and to implement actions determined in clause 6.1, which refers to the actions to address risks and opportunities. The organization should apply the existing process of addressing the risks and opportunities of milk production, which may include identifying the sources of variability, assessing the potential impacts and consequences, determining and implementing appropriate actions to reduce or eliminate the variability, monitoring and measuring the effectiveness of the actions, and reviewing and updating the actions as necessary.
The following options are not correct:
* Option A: Modify the contract with the current customer to provide them with only 1,500 litres of milk per day and make an agreement with a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization's commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.
* Option C: Retain the current contract and try to sell the occasional surplus milk to a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization's commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.
* Option D: Analyse the daily dispatch of milk for 7 days to determine its variability. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization's commitment to implement actions to address risks and opportunities, as required by ISO 9001:2015 clause 8.1.
* ISO 9001:2015 Quality management systems - Requirements, Clause 8: Operation, Subclause 8.1: Operational planning and control, Subclause 8.2: Requirements for products and services
* ISO 9001 Lead Auditor Course Material, Module 4: ISO 9001:2015 Requirements, Slide 23: Clause 8 - Operation
* ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 4.2: ISO 9001:2015 Requirements, Subsection 4.2.8: Clause 8 - Operation
* Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies
A Health Trust has contracted with Servitup, a catering services organisation which has been certified to ISO 9001 for 1 year. It provides services to ten, small rural
hospitals in remote locations involving purchase and storage of dry goods and fresh produce, preparing meals and loading heated trolleys for ward service by hospital
staff. An auditor is conducting the first sole surveillance audit at one site with the Deputy Catering Manager (DCM).
At the closing meeting attended solely by the DCM, the auditor informs him that he has found numerous gaps in the QMS processes which lead him to consider
recommending suspension of the organisation's certification. He is particularly concerned with the evidence that patient health is being adversely affected by produce
stored beyond its safe consumption date, poor kitchen hygiene and undercooked meals. The DCM says that he cannot make any decisions about these issues in the
absence of the Catering Manager due to illness but will write everything down and report to the Catering Manager.
Which two actions should you take in the context of the audit?
Answer : B, C
The actions that should be taken in the context of the audit are:
* Option B: Call the individual(s) managing the audit programme to explain the situation and recommend immediate suspension of certification to protect the integrity of the Certification Body. This option is correct because the auditor has found serious and significant gaps in the QMS processes that affect the health and safety of the patients, which is a major nonconformity that may warrant suspension of certification. The auditor should inform the individual(s) managing the audit programme of the situation and the audit findings, and recommend immediate suspension of certification to protect the integrity of the Certification Body and the credibility of the certification scheme. The auditor should also follow the Certification Body's procedures and rules for suspension of certification and communicate the decision and the consequences to the auditee.
* Option C: Continue with the meeting, present the audit conclusions and inform the DCM that the organisation will receive the audit report in due course. This option is correct because the auditor should not terminate or postpone the closing meeting due to the absence of the Catering Manager, as the DCM is the auditee's nominated representative for the audit. The auditor should continue with the meeting, present the audit conclusions and the audit findings, and inform the DCM that the organisation will receive the audit report in due course. The auditor should also explain the audit outcome recommendation and the suspension of certification, and request the DCM to acknowledge the receipt and understanding of the audit results.
The following options are not correct:
* Option A: Close the meeting immediately after the DCM's response and advise that the issues will be addressed at the next surveillance visit. This option is not correct because the auditor should not close the meeting without presenting the audit conclusions and the audit findings, as this would violate the audit principles of fairness and transparency. The auditor should also not advise that the issues will be addressed at the next surveillance visit, as this would imply that the auditor is accepting the auditee's delay and inaction, and that the auditor is not taking the major nonconformity seriously.
* Option D: Conclude the meeting early and advise that it will be rescheduled once the Catering Manager has returned to work. This option is not correct because the auditor should not conclude the meeting early or reschedule it due to the absence of the Catering Manager, as this would disrupt the audit process and the audit schedule. The auditor should also not wait for the Catering Manager to return to work, as this would delay the communication and resolution of the major nonconformity, and potentially compromise the health and safety of the patients.
* Option E: Recommend that all personnel should be given urgent in-depth training in the QMS. This option is not correct because the auditor should not recommend or prescribe specific corrective actions to the auditee, as this would violate the audit principles of independence and objectivity. The auditor should only report the audit findings and the audit outcome recommendation, and leave the responsibility and authority for determining and implementing the corrective actions to the auditee.
* Option F: Thank the DCM for his time and express an expectation that improvements will be made in the QMS. This option is not correct because the auditor should not thank the DCM for his time and express an expectation that improvements will be made in the QMS, as this would imply that the auditor is satisfied and optimistic with the auditee's performance and response, and that the auditor is not taking the major nonconformity seriously. The auditor should instead express the concern and dissatisfaction with the auditee's QMS processes and the impact on the health and safety of the patients, and communicate the suspension of certification and the need for urgent and effective corrective actions.
* ISO 19011:2018 Guidelines for auditing management systems, Clause 6.4.2: Conducting audit activities, Subclause k) and l)
* ISO 9001 Lead Auditor Course Material, Module 5: Conducting an Audit, Slide 20: Closing Meeting
* ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 5.5: Closing Meeting
* Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies
Select six tasks you would expect to be completed at the audit team meeting of a third-party audit team leader and his audit team in preparation for a Closing meeting for a four-day initial certification audit.
Answer : C, D, E, F, H, I
The tasks that are expected to be completed at the audit team meeting of a third-party audit team leader and his audit team in preparation for a Closing meeting for a four-day initial certification audit are:
* Option C: Final audit team meeting to agree findings and categories including clarification of any uncertainties. This option is correct because the audit team meeting is an opportunity for the audit team leader and the audit team members to review and consolidate the audit findings, to ensure that they are clear, accurate, objective, and supported by sufficient audit evidence. The audit team should also agree on the categories of the findings, such as nonconformity, observation, or opportunity for improvement, and resolve any uncertainties or disagreements among the audit team members.
* Option D: Agree the roles of each audit team member for the closing meeting. This option is correct because the audit team meeting is an opportunity for the audit team leader to assign the roles and responsibilities of each audit team member for the closing meeting, such as presenting the audit findings, answering questions, or taking notes. The audit team leader should also ensure that the audit team members are prepared and confident to perform their roles and to communicate effectively with the auditee.
* Option E: Audit team review any points raised by the auditee nominated representative. This option is correct because the audit team meeting is an opportunity for the audit team to review any points raised by the auditee nominated representative during the audit, such as requests for clarification, feedback, or complaints. The audit team should consider the validity and relevance of the points raised and decide how to address them in the closing meeting or in the audit report.
* Option F: Audit team agree final audit outcome recommendation. This option is correct because the audit team meeting is an opportunity for the audit team to agree on the final audit outcome recommendation, based on the audit findings and the audit criteria. The audit team should also consider the implications and consequences of the audit outcome recommendation for the auditee and the certification body, and ensure that the recommendation is consistent and justified.
* Option H: Audit team complete final version of their individual findings. This option is correct because the audit team meeting is an opportunity for the audit team to complete the final version of their individual findings, based on the agreement and feedback from the audit team meeting. The audit team should ensure that their individual findings are written in a clear, concise, and factual manner, and that they include the audit criteria, the audit evidence, and the audit conclusion. The audit team should also submit their individual findings to the audit team leader for review and approval.
* Option I: Re-audit corrective actions taken to correct findings found during the audit. This option is correct because the audit team meeting is an opportunity for the audit team to re-audit the corrective actions taken by the auditee to correct the findings found during the audit, if applicable and feasible. The audit team should verify the effectiveness and adequacy of the corrective actions and update the audit findings accordingly. The audit team should also document the results of the re-audit and communicate them to the auditee.
The following options are not correct:
* Option A: Audit team leader informs the individual(s) managing the audit programme that the closing meeting is ready to be held. This option is not correct because this task is not part of the audit team meeting, but part of the communication between the audit team leader and the individual(s) managing the audit programme. The audit team leader should inform the individual(s) managing the audit programme that the closing meeting is ready to be held after the audit team meeting, when the audit team has completed all the tasks and is ready to present the audit results to the auditee.
* Option B: Hold daily audit team meeting to review any timetable issues and potential findings and their impact on the audit for other team members. This option is not correct because this task is not part of the final audit team meeting, but part of the daily audit team meetings that are held during the audit. The daily audit team meetings are opportunities for the audit team to review the progress and performance of the audit, to identify and resolve any issues or problems, and to coordinate and adjust the audit plan and activities as needed.
* Option G: Audit team leader completes final report, including individual findings and certification recommendation. This option is not correct because this task is not part of the audit team meeting, but part of the audit reporting process. The audit team leader should complete the final report, including the individual findings and the certification recommendation, after the closing meeting, when the audit team has received and considered the feedback and comments from the auditee. The audit team leader should also ensure that the final report is reviewed and approved by the appropriate authorities before issuing it to the auditee and the certification body.
* Option J: Write the audit finding report out when detected and obtain signature of the auditee. This option is not correct because this task is not part of the audit team meeting, but part of the audit evidence collection and documentation process. The audit team should write the audit finding report out when detected and obtain the signature of the auditee during the audit, when the audit team has observed and verified the audit evidence and has communicated the audit finding to the auditee. The signature of the auditee does not indicate acceptance or agreement with the audit finding, but only acknowledgement of receipt.
* ISO 19011:2018 Guidelines for auditing management systems, Clause 6.4.2: Conducting audit activities, Subclause i) and j)
* ISO 9001 Lead Auditor Course Material, Module 5: Conducting an Audit, Slide 19: Audit Team Meeting
* ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 5.4: Audit Team Meeting
* Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection 3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies