ISO 9001 ISO-9001-Lead-Auditor練習テストエンジン今すぐ試そう62試験問題 [Q28-Q46]

ISO 9001 ISO-9001-Lead-Auditor練習テストエンジン: 今すぐ試そう62試験問題

試験合格保証付きのISO 9001 ISO-9001-Lead-Auditor試験問題集

質問 # 28
Select the words that best complete the sentence:

正解：

解説：

Explanation:
According to the ISO 19011:2018 document, the audit plan should provide the basis for agreement regarding the conduct and scheduling of the audit activities. The amount of detail provided in the audit plan should reflect the scope and complexity of the audit, as well as the risk of not achieving the audit objectives1. The scope of the audit refers to the extent and boundaries of the audit, such as the audit criteria, the audit objectives, the organizational and functional units, and the processes to be audited1. The complexity of the audit refers to the degree of difficulty or intricacy of the audit, such as the number and diversity of the auditees, the audit criteria, the audit methods, and the audit team composition2. The risk of not achieving the audit objectives refers to the possibility that the audit may fail to provide reliable and sufficient audit evidence to support the audit conclusions and report1.
Therefore, the complete sentence is:
In the context of a third-party audit, the amount of detail provided in the audit plan should reflect the scope and complexity of the audit, as well as the risk of not achieving the audit objectives.
References: 1: ISO 19011:2018 - Guidelines for auditing management systems 2: Audit Complexity - an overview | ScienceDirect Topics

質問 # 29
You are conducting a third-party audit to ISO 9001 and the next item on your audit plan is 'internal auditing'.
When reviewing a sample of audit records up to 5 years previously, you find that many contain non-conformance reports and no actions have been taken. You interview the Quality Manager.
You: "I have noted that many of the older files contain non-conformances that have not had any corrective action taken." Quality Manager: "Because the business is always changing, the departmental managers tell me that the non-conformances are no longer applicable. I made a decision that any non-conformance over 3 years old is automatically closed" You: "Do you obtain any confirmation beforehand from the appropriate departments that the non-conformances are no longer applicable." Quality Manager: " No, because they are so old I consider that they are no longer appropriate. Please remember that we take a risk-based approach which means we audit where and when it is considered important to do so.
Select one course of action you would now take from the options.

A. Review all non-conformances reports related to clause 9.2 of ISO 9001
B. Interview Top management to determine whether they were aware of and agreed the actions of the Quality Manager
C. Raise a non-conformance report against clause 9.2.2.e of ISO 9001
D. Interview relevant Departmental managers to assess whether the older non-conformances are still valid.

正解：C

解説：
According to ISO 9001:2015, clause 9.2.2.e, the organization is required to retain documented information as evidence of the implementation of the audit programme and the audit results. This includes the records of the nonconformities identified during the internal audits and the corrective actions taken to address them. The organization is also required to verify the effectiveness of the corrective actions, as per clause 10.2.2.
Therefore, in the scenario given, the Quality Manager's decision to automatically close any nonconformance over 3 years old without obtaining any confirmation from the relevant departments or verifying the effectiveness of the corrective actions is a clear violation of the requirements of clause 9.2.2.e. This indicates a lack of control and follow-up of the internal audit process, as well as a potential risk of recurrence or occurrence of the nonconformities in other areas. This also undermines the credibility and value of the internal audit programme, as well as the risk-based approach claimed by the Quality Manager.
Hence, the best course of action to take is D, to raise a nonconformance report against clause 9.2.2.e of ISO
9001, and to communicate the audit findings to the relevant management. The other options are either insufficient or irrelevant to address the issue, as they do not directly relate to the noncompliance with clause
9.2.2.e.
References:
ISO 9001:2015(en), Quality management systems - Requirements, clause 9.2.2 and 10.2.2 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

質問 # 30
You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organization manufactures cosmetics for major retailers and the name of the retailer supplied appears on the product packaging. Sales turnover has increased significantly over the past five years.
You are interviewing the new Product Development Manager. You note that a software application called SWIFT is used to help control the product development process.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 clause 8.3 extracts to the audit evidence.

正解：

解説：

質問 # 31
Match the process descriptions below to the process names:

正解：

解説：

Explanation:
Match the process descriptions below to the process names:
The process by which the accuracy of test equipment is checked against a known standard. = Calibration The process by which a product or service is visually examined to determine conformity to requirements. = Evaluation The process by which data is examined in detail to reach a specific answer or answers. = Analysis The process by which a parameter of a product or service is examined to determine a specific value. = Measurement According to the ISO 9000:2015 - Quality management systems - Fundamentals and vocabulary, the definitions of the process names are as follows:
Calibration: operation that, under specified conditions, in a first step, establishes a relation between the quantity values with measurement uncertainties provided by measurement standards and corresponding indications with associated measurement uncertainties and, in a second step, uses this information to establish a relation for obtaining a measurement result from an indication.
Evaluation: determination of the suitability, adequacy or effectiveness of an object to achieve established objectives.
Analysis: detailed examination of the elements or structure of something.
Measurement: process to experimentally obtain one or more quantity values that can reasonably be attributed to a quantity.
Therefore, the process descriptions can be matched to the process names based on these definitions.
References:
ISO 9000:2015 - Quality management systems - Fundamentals and vocabulary

質問 # 32
Which of the following two documents does an auditor need to prepare and complete prior to the on-site audit?

A. Risk Matrices
B. Procedures
C. Audit Report
D. Findings
E. Audit Plan
F. Checklist / Prompts

正解：E、F

解説：
According to ISO 19011:2018, clause 6.3, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the information listed in my previous response, such as the audit objectives, scope, criteria, schedule, team, methods, report, etc. The audit plan should be prepared and completed prior to the on-site audit, and should be communicated to the audit team and the auditee1.
According to ISO 19011:2018, clause 6.4.3, the checklist / prompts are documents that list the questions or topics that need to be covered during an audit. The checklist / prompts can help the auditor to collect and verify information relevant to the audit criteria, and to ensure the consistency and completeness of the audit.
The checklist / prompts should be prepared and completed prior to the on-site audit, and should be based on the audit plan and the audit scope and objectives1.
Therefore, the two documents that an auditor needs to prepare and complete prior to the on-site audit are B and D, as they are essential for planning and conducting the audit. The other options are not correct, as they are either prepared or completed after the on-site audit, or not required by the standard:
*A. Audit Report: The audit report is a document that provides a complete, accurate, concise, and clear record of the audit. The audit report should include the information listed in my previous response, such as the audit objectives, scope, criteria, findings, conclusions, etc. The audit report should be prepared and completed after the on-site audit, and should be distributed to the audit client and the auditee1.
*C. Procedures: Procedures are documents that specify the way activities are to be performed. Procedures may be part of the audit criteria, if they are part of the organization's management system, or part of the audit programme, if they are part of the certification body's or registrar's requirements. Procedures are not prepared or completed by the auditor prior to the on-site audit, but rather reviewed or followed by the auditor during the audit1.
*E. Risk Matrices: Risk matrices are tools that help to assess and prioritize the risks and opportunities associated with the audit programme or the audit. Risk matrices may be part of the audit programme management, if they are used to determine and evaluate the audit programme risks and opportunities, or part of the audit preparation, if they are used to determine and evaluate the audit risks and opportunities. Risk matrices are not prepared or completed by the auditor prior to the on-site audit, but rather used or updated by the auditor during the audit programme management or the audit preparation1.
*F. Findings: Findings are the results of the evaluation of the collected audit evidence against the audit criteria.
Findings can indicate either conformity or nonconformity, as well as positive aspects or opportunities for improvement. Findings are not prepared or completed by the auditor prior to the on-site audit, but rather generated and recorded by the auditor during the audit activities1.
References: ISO 19011:2018(en), Guidelines for auditing management systems

質問 # 33
You are conducting a third-party Stage 1 audit at ABC Ltd, a single-site organisation that manufactures wooden furniture. You interview the Technical Director to learn more about the organisation. The Technical Director explains that they have had a successful year and that obtaining ISO 9001 certification will support the further growth of the business. You ask for an overview of the organisation's structure and its interrelationships with external interested parties.
The Technical Director shows you a document detailing all business processes and interrelationships. You notice in this document that another organisation called Teak Ltd manufactures wooden furniture on behalf of ABC Ltd. The Technical Director confirms this capability has been accounted for in the scope of the quality management system. You learn that the furniture manufactured by Teak Ltd has accounted for 40% of the sales revenue over the previous 12 months.
Which two of the following options best describe how you would plan the audit of the interrelationship with Teak Ltd during the Stage 2 audit at ABC Ltd?

A. Verify if Teak Ltd are certified to ISO 9001
B. Verify Teak Ltd supply arrangements as described in the ABC Ltd quality management system
C. Verify the quality management system at Teak Ltd by conducting an audit at their site
D. Verify how ABC Ltd evaluates the performance of Teak Ltd
E. Verify the controls concerning customer property implemented by Teak Ltd
F. Verify whether the design processes of Teak Ltd comply with ISO 9001

正解：B、D

解説：
According to ISO 9001:2015, clause 8.4, an organization is required to control the processes, products and services provided by external providers, including those that affect the quality of the organization's own products and services. This includes determining the controls to be applied to the external provision of processes, products and services, as well as the information to be communicated to the external providers. The organization is also required to monitor, measure, and evaluate the performance of the external providers and retain documented information of these activities.
Therefore, in the scenario given, ABC Ltd is responsible for controlling the processes, products and services provided by Teak Ltd, as they affect the quality of ABC Ltd's own products and services. This means that ABC Ltd should have established criteria and methods for evaluating the performance of Teak Ltd, as well as documented information of the results of such evaluation. ABC Ltd should also have defined the supply arrangements with Teak Ltd, including the specifications, requirements, and verification activities related to the products and services provided by Teak Ltd.
Hence, the best options to describe how to plan the audit of the interrelationship with Teak Ltd during the Stage 2 audit at ABC Ltd are A and D, as they are aligned with the requirements of ISO 9001:2015, clause 8.4.
The other options are either irrelevant or beyond the scope of the audit, as they do not pertain to the control of external provision by ABC Ltd.
References:
ISO 9001:2015(en), Quality management systems - Requirements, clause 8.4 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.3.1 and 6.4.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

質問 # 34
An audit team leader arrives at a printing organisation to carry out a Stage 2 audit for a certification body. At a meeting with the Quality Manager, she is told that they have won their biggest contract from a computer manufacturer to print and compile computer documentation packages. They have leased the unit next door for space reasons but have never worked in this sector before. The Quality Manager wants the ISO 9001 certificate to cover the new contract.
During the audit, a team member finds that a number of print jobs have been rejected by several clients over a number of months due to spelling errors in the print run. The Print Manager blames the new employees they had to take on because of a big contract. The auditor raises a nonconformance against clause 10.2.1.b of ISO
9001.
Which one of the evidence statements would support this finding?

A. The organisation did not provide the correct resources to prevent nonconformity.
B. There was no evidence that a check of spelling took place before the release of printing to the client.
C. There was no record that the organisation evaluated the effectiveness of the training given to new employees.
D. The actions taken to deal with customer complaints did not prevent recurrence of the problem.

正解：D

解説：
According to clause 10.2.1.b of ISO 9001:2015, the organization should evaluate the need for action to eliminate the causes of nonconformities, in order to prevent their recurrence. This means that the organization should identify and address the root causes and contributing factors of the nonconformities, and implement appropriate corrective actions that are effective and proportional to the impact of the nonconformities. In this case, the evidence statement that supports the finding of nonconformance is C, because it shows that the organization did not take effective actions to prevent the recurrence of the spelling errors in the print run, which resulted in repeated customer rejections and dissatisfaction. The other options are not directly related to clause 10.2.1.b, although they may indicate other nonconformities or weaknesses in the organization's QMS.
For example, option A may relate to clause 7.2 on competence, option B may relate to clause 8.6 on release of products and services, and option D may relate to clause 7.1 on resources. References: ISO 9001:2015, [ISO
9001 Auditing Practices Group Guidance on Nonconformity and Corrective Action], ISO 9001 Clause 10.
Improvement - ISO-templates.com

質問 # 35
Select six of the activities that are specifically required by ISO 17021-1 as part third-party (Certification Body) surveillance audit processes.

A. Audit use of certification marks on marketing materials.
B. Handling of customer complaints since last visit.
C. Confirm effectiveness of internal audit and management review.
D. Conduct a minimum number of annual surveillance audits during the certification period.
E. Verify legal compliance.
F. Review the status of previously raised findings and audit effectiveness of any outstanding findings.
G. Review changes to the QMS since last visit.
H. Failing to meet financial responsibilities.
I. Complete a full document review of the quality management system.
J. Review the calibration status of the instrumentation.

正解：A、B、C、E、F、G

解説：
The activities that are specifically required by ISO 17021-1 as part of third-party (Certification Body) surveillance audit processes are:
*Option A: Audit use of certification marks on marketing materials. This option is correct because ISO
17021-1:2015 clause 9.6.2.2 requires the certification body to audit the client's use of marks and/or any other reference to certification, as applicable, to ensure conformity with the certification requirements.
*Option B: Review changes to the QMS since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review any changes affecting the client's quality management system and its ability to continue to fulfil the requirements of the standard used for certification.
*Option C: Confirm effectiveness of internal audit and management review. This option is correct because ISO
17021-1:2015 clause 9.6.2.2 requires the certification body to confirm the continuing effectiveness of the client's quality management system, including the effectiveness of the internal audit and management review processes.
*Option F: Review the status of previously raised findings and audit effectiveness of any outstanding findings.
This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the status of findings and any corrective actions taken by the client in response to previous audits, and to verify the effectiveness of the implemented corrective actions.
*Option H: Verify legal compliance. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to verify the client's compliance with applicable statutory and regulatory requirements related to the scope of certification.
*Option I: Handling of customer complaints since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the client's handling of customer complaints related to the certified activities since the last audit.
The following options are not correct:
*Option D: Complete a full document review of the quality management system. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to complete a full document review of the quality management system during surveillance audits. A full document review is only required during the initial certification audit or when there are significant changes to the quality management system or the certification requirements.
*Option E: Failing to meet financial responsibilities. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to audit the client's financial responsibilities during surveillance audits. The certification body may have contractual arrangements with the client regarding the payment of fees, but this is not part of the surveillance audit process.
*Option G: Review the calibration status of the instrumentation. This option is not correct because ISO
17021-1:2015 clause 9.6.2.2 does not require the certification body to review the calibration status of the instrumentation during surveillance audits. The certification body may audit the client's monitoring and measuring resources as part of the quality management system requirements, but this is not a specific activity required by ISO 17021-1.
*Option J: Conduct a minimum number of annual surveillance audits during the certification period. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to conduct a minimum number of annual surveillance audits during the certification period. The certification body may determine the frequency and duration of surveillance audits based on the risk and performance of the client, but this is not a specific activity required by ISO 17021-1.
References:
*ISO 17021-1:2015 Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 1: Requirements
*ISO 9001 Lead Auditor Course Material, Module 7: Audit Follow-up and Surveillance, Slide 8: Surveillance Audit
*ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 7.2: Audit Follow-up and Surveillance
*Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection
3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies

質問 # 36
According to ISO 19011, what two activities take place during the conduct of a audit follow-up?

A. Verify corrections taken to fix the reported non-conformities
B. Assign roles and responsibilities of observers
C. Verify the effectiveness of the implemented corrective actions
D. Verify legal compliance
E. Plan the next audit
F. Determine feasibility of the audit

正解：A、C

解説：
According to ISO 19011:2018, clause 6.7, the audit follow-up is the process of verifying the completion and effectiveness of corrective actions taken by the auditee as a result of an audit. The audit follow-up can include two main activities:
Verifying the effectiveness of the implemented corrective actions: this means checking whether the actions taken by the auditee have addressed the root causes of the nonconformities and prevented their recurrence or occurrence in other areas. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.
Verifying corrections taken to fix the reported non-conformities: this means checking whether the auditee has corrected the nonconformities identified during the audit and eliminated their immediate effects. The verification can be done by reviewing documents, records, data, or other evidence provided by the auditee, or by conducting a follow-up audit on site or remotely.
The audit follow-up can be conducted as a separate audit or as part of a subsequent audit, depending on the audit programme, the audit objectives, the audit criteria, the audit scope, the audit risks, and the audit findings.
The audit follow-up should be planned and conducted in accordance with the same principles and processes as the initial audit, and the results should be documented and reported accordingly. References:
ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.7 ISO 19011 Management Systems Audit Checklist | Process Street, task 6.7.1 and 6.7.2 Conducting the Audit Follow-Up: When to Verify - The Auditor, section "Conducting the audit follow-up"

質問 # 37
An audit team leader arrives at a printing company to carry out a Stage 2 audit for a certification body. At a meeting with the Quality Manager, she is told that they have won their biggest contract from a computer manufacturer to print and compile computer documentation packages. The Quality Manager wants the ISO
9001 certificate to cover the new contract.
During the audit, a team member found that some print jobs had been rejected by several clients over some months due to spelling errors in the print run. The Print Manager blames the new employees they had to take on because of a big contract.
The auditor finds that the responsibility for checking spelling errors is placed on the printer that sets up the print run.
In line with the policy of the certification body, the audit team raise improvement opportunities in the audit report. Which three of the following options would represent acceptable opportunities for improvement in the report?

A. An intensive training plan that involves all production personnel.
B. The organisation needs to delay its certification to gain more experience of the QMS.
C. A business consultant can be recommended for advice on improving operations.
D. The responsibility for checking printing needs to be independent of the operators.
E. The recruitment process to include spelling tests to filter out unsuitable candidates.
F. More process time needs to be allocated to the new employees.
G. A plan to determine why the errors occur and to prevent them.
H. Operational planning activities may benefit from a clearer risk-based approach.

正解：D、G、H

解説：
According to the ISO 9001 Auditing Practices Group Guidance on Improvement Opportunities1, an improvement opportunity is a suggestion made by the auditor for the auditee to consider that, if implemented, may enhance the performance of the QMS. Improvement opportunities are not mandatory, but they should be based on objective evidence and aligned with the audit criteria and objectives. Improvement opportunities should also be realistic, feasible, and beneficial for the auditee. In this case, the evidence statements that represent acceptable improvement opportunities in the report are A, C, and E, because they address the potential causes and effects of the spelling errors in the print run, and propose possible actions that may improve the quality of the products and services, and the effectiveness of the QMS. These options are consistent with the requirements and principles of ISO 9001, such as clause 6.1 on actions to address risks and opportunities, clause 8.1 on operational planning and control, clause 8.5.1 on control of production and service provision, and clause 10.2 on nonconformity and corrective action. The other options are not appropriate improvement opportunities, because they are either irrelevant, unrealistic, or unhelpful for the auditee. For example, option B may contradict the audit objective and scope, option D may imply a lack of auditor competence or impartiality, option F may not address the root cause of the problem, option G may not be applicable or effective, and option H may not be feasible or justified. References: ISO 9001 Auditing Practices Group Guidance on Improvement Opportunities, ISO 9001:2015, ISO 9001 Auditing Practices Group Guidance on Audit Evidence

質問 # 38
You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organization manufactures cosmetics for major retailers.
You are interviewing the Manufacturing Manager (MM).
You: "I would like to begin by looking at the cleaning controls."
MM: "We record the cleaning of the equipment at the end of every batch. This document details the minimum cleaning frequency and the procedures to follow for all areas and each item of equipment. The person who carries out the cleaning puts their initial on the document and records the time and date alongside." Narrative: You sample production records over 3-days and note down evidence of nonconformity as per the table below.

正解：

解説：

Explanation:
Nonconformity report
ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - "The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met." Evidence: 40 cleaning records are available for 63 batches.

質問 # 39
Which two of the following auditors would not participate in a first-party audit?

A. An auditor certified by IRCA
B. An auditor from a customer
C. An auditor trained in-house
D. An auditor from an interested party
E. An auditor trained in the IRCA scheme
F. An auditor employed by an external consultancy organisation

正解：B、F

解説：
A first-party audit is an internal audit conducted by auditors who are employed by the organization being audited but who have no vested interest in the audit results of the area being audited1. The purpose of a first-party audit is to assess the conformity of the organization's quality management system to the requirements of ISO 9001 and to identify opportunities for improvement2. Therefore, the two auditors who would not participate in a first-party audit are:
*A. An auditor employed by an external consultancy organization: This auditor is not employed by the organization being audited, and therefore does not qualify as a first-party auditor. This auditor may be hired to conduct a second-party audit (if the external consultancy organization is a customer or supplier of the organization being audited) or a third-party audit (if the external consultancy organization is a certification body or registrar).
*F. An auditor from a customer: This auditor is not employed by the organization being audited, and therefore does not qualify as a first-party auditor. This auditor may be hired to conduct a second-party audit, as a customer is an interested party that has specific requirements for the organization being audited.
The other options are not correct, as they could participate in a first-party audit, as long as they are employed by the organization being audited and have no vested interest in the audit results of the area being audited:
*B. An auditor from an interested party: This auditor could be a first-party auditor, as long as the interested party is within the organization being audited. For example, an auditor from the finance department could audit the production department, as long as they are not involved in the production process or affected by its outcomes.
*C. An auditor trained in-house: This auditor could be a first-party auditor, as long as they are employed by the organization being audited and have no vested interest in the audit results of the area being audited. The source of the auditor's training is not relevant for determining the type of audit, as long as the auditor is competent and qualified to perform the audit.
*D. An auditor trained in the IRCA scheme: This auditor could be a first-party auditor, as long as they are employed by the organization being audited and have no vested interest in the audit results of the area being audited. The IRCA scheme is a professional certification scheme for auditors of management systems, which provides recognition of the auditor's competence and credibility3. However, being trained in the IRCA scheme does not determine the type of audit, as long as the auditor is competent and qualified to perform the audit.
*E. An auditor certified by IRCA: This auditor could be a first-party auditor, as long as they are employed by the organization being audited and have no vested interest in the audit results of the area being audited. Being certified by IRCA means that the auditor has met the requirements of the IRCA scheme and has demonstrated their competence and credibility as an auditor of management systems3. However, being certified by IRCA does not determine the type of audit, as long as the auditor is competent and qualified to perform the audit.
References: First Party Audits: The 5 Steps to Success - Sync Resource Inc, ISO 9001 Auditing Practices Group, IRCA - International Register of Certificated Auditors

質問 # 40
You are carrying out an annual audit at an organisation that offers home security services. You are interviewing the Quality Manager (QM) You: "Would you tell me about your management review process?" QM: "The senior management team plans to review the management system every six months. The review follows a set agenda and records are maintained." You: "May I see the records from the last two management reviews?" Narrative: The Quality Manager gives you the latest record, which shows the last management review took place nine months ago.
The Quality Manager then gives you the previous management review record, which took place one year before the latest review.
You: "Are there any other review reports in the last two years?
QM: "No, these are the only ones."

正解：

解説：

Explanation:

Nonconformity report
ISO 9001 Clause Number: 9.3.1 Nature of problem: Management review has not been conducted at the defined frequency. ISO 9001 requirement that has not been fulfilled: ISO 9001 - "Top management shall review the organization's quality management system at planned intervals." Evidence: The last management review took place nine months ago, and the previous one took place one year before the latest review. The planned interval is six months.

質問 # 41
You are an auditor from a construction organisation who is conducting a second party audit to ISO 9001 at a steel rolling mill producing structural steelwork. When auditing the rolling process, you find that the operator who is unloading the furnace does not use the adjacent infrared pyrometer to measure the appropriate product temperature in readiness for the next production stage.
You: "How do you tell when the billet is ready for the rolling stage?"
Operator: "I've done this job for 20 years. I can tell by the bright red colour." You: "What happens if the colour is wrong?" Operator: "The billet goes back into the furnace." You: "Is the pyrometer ever used?" Operator: "Only in borderline cases." You continue to interview the operator and find that around 25% of the billets are sent back to the furnace.
This includes 80% of the borderline cases.
Select three options that would provide evidence of conformance with clause 9.1.1 of ISO 9001.

A. An increase in the use of the pyrometer by operators.
B. Planning for monitoring and measuring the billet temperature.
C. Certification of conformance to national standards from the manufacture of the pyrometer.
D. Periodic analysis of the results of temperature checks.
E. A procedure that provides instruction in taking billet temperature.
F. A quality objective to achieve lower recycle rates for billets.
G. Maintenance plan for the furnace.
H. Annual review records for furnace operators.

正解：B、D、E

解説：
According to ISO 9001:2015, clause 9.1.1, the organization is required to determine what needs to be monitored and measured, the methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid results, and when the monitoring and measuring shall be performed. The organization is also required to retain appropriate documented information as evidence of the results.
Therefore, in the scenario given, the organization should have planned for monitoring and measuring the billet temperature, as it is a critical factor for the quality of the product and the process. The organization should also have established a procedure that provides instruction in taking billet temperature, using the pyrometer or other suitable methods, to ensure consistency and accuracy. The organization should also have performed periodic analysis of the results of temperature checks, to identify trends, problems, and opportunities for improvement.
Hence, the options that would provide evidence of conformance with clause 9.1.1 of ISO 9001 are A, E, and F, as they are aligned with the requirements of the clause. The other options are either irrelevant or not directly related to clause 9.1.1, as they do not pertain to the monitoring and measurement of the billet temperature.
References:
ISO 9001:2015(en), Quality management systems - Requirements, clause 9.1.1 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6

質問 # 42
Which one of the following options best describes the purpose of a Stage 1 third-party audit?

A. To introduce the audit team to the client.
B. To determine the auditees understanding of ISO 9001.
C. To get to know the organisation's customers.
D. To learn about the organisation's procurement processes.

正解：B

解説：
The purpose of a Stage 1 third-party audit is to determine an organization's readiness for their Stage 2 Certification Audit. During the Stage 1, the auditor will review the organization's management system documented information, evaluate the site-specific conditions, and have discussions with personnel. The objective is to assess the alignment of the organization's design with ISO 9001 requirements and to identify any areas of concern that could be classified as a nonconformance during the Stage 2 Audit. The auditor will also use the Stage 1 Audit to complete Stage 2 Audit planning, including a review of the allocation of resources and details for the next phase of the audit. Therefore, the option that best describes the purpose of a Stage 1 third-party audit is A, to determine the auditees understanding of ISO 9001. The other options are not correct, as they are not the main focus of a Stage 1 audit:
*B. To get to know the organization's customers: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization's customers, but rather in the organization's ability to meet customer and applicable statutory and regulatory requirements.
*C. To learn about the organization's procurement processes: This is not the purpose of a Stage 1 audit, as the auditor is not interested in the specific details of the organization's procurement processes, but rather in the organization's ability to control externally provided processes, products and services.
*D. To introduce the audit team to the client: This is not the purpose of a Stage 1 audit, as the auditor is not there to make introductions, but rather to conduct a preliminary examination of the organization's compliance with ISO 9001 standards.
References: What is the difference between Stage 1 and Stage 2 Audits? - ISO Update, The ISO 9001 Audit Process Explained | ISO Explained, What is an ISO Stage 2 Audit? - RiskOptics - Reciprocity

質問 # 43
Select the word that best completes the sentence:

正解：

解説：

Explanation:

According to the ISO - Management system standards page, the key benefits of an effective management system include improved operational effectiveness and efficiency, improved risk management and protection of people and the environment, and enhanced drive for innovation. The Integrated Use of Management System Standards (IUMSS) handbook also states that the purpose and objectives of management system standards are to help organizations improve their performance by specifying repeatable steps that organizations consciously implement to achieve their goals and objectives.
Therefore, the complete sentence is:
"The purpose of a management system standard is to improve the performance of an organisation."

質問 # 44
In the context of a management system audit, identify the sequence of a typical process for collecting and verifying information. The first one has been done for you.
To complete the sequence click on the blank section you want to complete so it is highlighted in red and then click on the applicable text from the options below. Alternatively, drag and drop the options to the appropriate blank section.

正解：

解説：

Explanation:
Identifying the source of information
Sampling available data
Gathering audit evidence
Verifying objective evidence
Evaluating evidence against the audit criteria
Making audit conclusions
Evaluating against the audit criteria
According to ISO 19011:2018, clause 6.4, the process of collecting and verifying information during an audit involves the following steps1:
Identifying the source of information: The audit team should identify the sources of information that are relevant to the audit objectives, scope and criteria. These sources may include documents, records, personnel, processes, activities, facilities, equipment, etc. The audit team should also determine the methods and tools for accessing and collecting the information, such as interviews, observations, document review, sampling, etc.
Sampling available data: The audit team should select a representative sample of the available data to verify the conformity and effectiveness of the management system. The sample size and selection method should be based on the audit objectives, scope and criteria, as well as the level of confidence and risk. The audit team should also consider the validity, reliability, relevance and sufficiency of the data.
Gathering audit evidence: The audit team should use the methods and tools identified in the previous step to collect audit evidence, which is the records, statements of fact or other information that are relevant to the audit criteria and verifiable. The audit team should record the audit evidence in a clear, concise and objective manner, using notes, checklists, photographs, audio or video recordings, etc.
Verifying objective evidence: The audit team should verify the accuracy, completeness and authenticity of the audit evidence collected. This may involve cross-checking different sources of information, confirming the identity and authority of the persons providing the information, examining the original documents or records, etc. The audit team should also identify any discrepancies, inconsistencies or gaps in the audit evidence.
Evaluating evidence against the audit criteria: The audit team should compare the audit evidence with the audit criteria to determine the extent of conformity and nonconformity. The audit team should also identify any opportunities for improvement, best practices, positive aspects or potential risks. The audit team should use professional judgement and apply the principles of auditing when evaluating the audit evidence.
Making audit conclusions: The audit team should consolidate the audit findings and evaluate the overall performance and effectiveness of the management system. The audit team should also consider the audit objectives, scope and criteria, as well as the context and expectations of the auditee and other interested parties. The audit team should provide a clear, concise and objective statement of the audit conclusions, which may include the degree of conformity, the achievement of the intended outcomes, the need for corrective actions, the suitability for certification, etc.
Evaluating against the audit criteria: The audit team should review the audit conclusions and ensure that they are consistent with the audit criteria and supported by sufficient and appropriate audit evidence.
The audit team should also ensure that the audit conclusions are communicated to the auditee and other relevant parties in a timely and effective manner, using the agreed audit report format and distribution method.
References: ISO 19011:2018(en), Guidelines for auditing management systems

質問 # 45
You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time.
The organisation offers warehousing and export services to customers. Customers are invoiced for the time stock items are stored in the warehouse. Transport to and from the warehouse is controlled by the organisation and approved subcontract transport services are used. The organization does not have its own transport vehicles. Stock items are not purchased by the organisation.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 Clause 8 extract to the audit evidence.

正解：

解説：

Explanation:
The table below shows the possible matching of the ISO 9001 Clause 8 extract to the audit evidence.
Table
Audit evidence
ISO 9001 Clause 8 extract
Four of the 10 pallets of stock sampled in the warehouse were not labelled.
"8.5.2 ... shall use suitable means to identify outputs ..."
A damaged pallet of stock seen in the quarantine area was leaking liquid onto the floor.
"8.7.1 ... shall ensure that outputs that do not conform to their requirements are identified and controlled ..." One of the fork-lift truck drivers had no fork-lift truck driving licence.
"8.5.1 e ... shall include, as applicable ... the appointment of competent persons ..." There was no pest control provision in the warehouse.
"8.5.4 ... shall preserve the outputs during production and service provision ..." Two pallets of temperature-sensitive stock items were being stored at ambient as the chilled storage facility was full.
"8.1 ... shall plan, implement and control the processes ..."