ISO AUDITOR Process-Based QMS Approach 3 — Questions and Answers
Question 1: Which of the following best describes a 'process approach' audit technique compared to a department-based audit?
- It audits each department in sequence from purchasing to shipping
- It follows the flow of a product or service across functional boundaries to evaluate end-to-end effectiveness (Correct answer)
- It focuses exclusively on documented procedures and work instructions
- It evaluates management commitment before assessing operational processes
Correct answer: It follows the flow of a product or service across functional boundaries to evaluate end-to-end effectiveness
Process approach auditing traces the actual flow of work across departments, revealing how handoffs and interactions affect quality — rather than auditing each department in isolation.
Question 2: When an auditor reviews a process map, they notice a process with no identified risks. What should the auditor conclude?
- The process is well-controlled and needs no further review
- Risk-based thinking has likely not been applied to this process as required by Clause 6.1 (Correct answer)
- Only high-risk processes require risk identification under ISO 9001
- The process owner should consult ISO 31000 before the next audit
Correct answer: Risk-based thinking has likely not been applied to this process as required by Clause 6.1
ISO 9001:2015 Clause 6.1 requires risk and opportunity identification for all QMS processes — a process with no identified risks suggests risk-based thinking has not been applied.
Question 3: A process produces outputs that consistently meet specifications, yet customer complaints remain high. What process-based concept does this scenario illustrate?
- Inadequate process documentation
- A gap between process effectiveness and customer satisfaction (output meets spec but not customer need) (Correct answer)
- Poor supplier performance affecting upstream inputs
- Lack of corrective action for internal nonconformities
Correct answer: A gap between process effectiveness and customer satisfaction (output meets spec but not customer need)
This illustrates that internal specifications may not reflect true customer requirements — meeting spec does not guarantee customer satisfaction if the spec itself is misaligned.
Question 4: What is the role of 'process owners' in a process-based QMS according to ISO 9001:2015 principles?
- They approve all documented information related to the QMS
- They are accountable for process performance and have the authority to manage and improve the process (Correct answer)
- They represent top management during internal audits
- They are responsible only for recording process metrics
Correct answer: They are accountable for process performance and have the authority to manage and improve the process
Process owners in a process-based QMS are accountable for the results of their process and must have sufficient authority to define, monitor, and improve it.
Question 5: Which measurement approach best demonstrates that a core realization process is 'effective' under ISO 9001:2015?
- The process has a documented procedure reviewed annually
- Planned results are consistently achieved, as confirmed by performance data (Correct answer)
- The process owner holds a relevant professional qualification
- The process has been audited with zero nonconformities in the last cycle
Correct answer: Planned results are consistently achieved, as confirmed by performance data
ISO 9001 defines process effectiveness as the extent to which planned activities are realized and planned results achieved — demonstrated through actual performance data, not documentation or audit status.
Question 6: An auditor observes that corrective actions consistently target individuals rather than process root causes. Which QMS principle is being violated?
- Leadership
- Customer focus
- Process approach (Correct answer)
- Relationship management
Correct answer: Process approach
The process approach principle recognizes that problems are usually systemic — blaming individuals without addressing process root causes violates this principle and perpetuates recurrence.
Question 7: When mapping the interaction between the design process and the purchasing process, what linkage must an auditor verify exists?
- A shared document control number for all design and purchasing records
- Design outputs (specifications, requirements) are effectively communicated as purchasing inputs (Correct answer)
- Both processes share the same process owner for accountability
- Purchasing personnel attend all design review meetings
Correct answer: Design outputs (specifications, requirements) are effectively communicated as purchasing inputs
Process interaction requires that outputs from one process (design specifications) become valid, communicated inputs to the next process (purchasing requirements) — the auditor must verify this handoff.
Which of the following best describes a 'process approach' audit technique compared to a department-based audit?