MSP - Certified Management Systems Professional Management System Auditing Questions and Answers — Questions and Answers
Question 1: An auditor is evaluating a manufacturing company's adherence to its quality management system. The auditor observes a specific instance where a required quality check was not performed. According to ISO 19011, what is the immediate result of evaluating this observation against the audit criteria?
- A corrective action plan
- An audit finding (Correct answer)
- An audit conclusion
- A management review input
Correct answer: An audit finding
According to ISO 19011, audit evidence (the observation of the missed quality check) is evaluated against audit criteria (the requirement to perform the check) to generate audit findings. An audit finding can indicate conformity or nonconformity. A corrective action plan comes later, in response to a nonconformity finding. An audit conclusion is a broader outcome of the entire audit, and management review input is a use for the audit results, not the immediate outcome of evaluating evidence.
Question 2: During a management system audit, the lead auditor must ensure the team possesses the necessary competence. Which of the following is the MOST critical factor in determining the required auditor competence for a specific audit?
- The auditor's availability and travel budget
- The personal preferences of the audit program manager
- The size of the audit team
- The complexity of the management system and the organization's context (Correct answer)
Correct answer: The complexity of the management system and the organization's context
ISO 19011 emphasizes that confidence in the audit process relies on auditor competence. The required competence is determined by factors like the complexity of the organization and its management system, the audit objectives, and the specific discipline being audited. While team size is a consideration, the complexity of what is being audited is the most critical driver for determining the knowledge and skills needed. Availability and preferences are logistical or managerial concerns, not determinants of competence.
Question 3: A company identified a potential weakness in its data backup process that could lead to a future nonconformity, although no data loss has occurred. The company updates the procedure and provides additional training to prevent any failure. This action is best described as:
- Correction
- Containment
- Preventive Action (Correct answer)
- Corrective Action
Correct answer: Preventive Action
Preventive action is taken to eliminate the cause of a *potential* nonconformity before it occurs. Since no incident had yet happened, the action was proactive to prevent a future problem. Corrective action addresses the root cause of a nonconformity that has already been detected to prevent its recurrence. A correction is an immediate fix to an existing nonconformity, like restoring a lost file, but doesn't address the root cause.
Question 4: Which of the following is a fundamental principle of auditing as defined by ISO 19011, ensuring that auditors report truthfully and accurately?
- Risk-based approach
- Integrity (Correct answer)
- Confidentiality
- Independence
Correct answer: Integrity
The principle of integrity is the foundation of professionalism in auditing, requiring auditors to perform their work with honesty, responsibility, and impartiality, and to report findings truthfully and accurately. While risk-based approach, confidentiality, and independence are also key principles of auditing, integrity specifically covers the obligation for truthful and accurate reporting.
Question 5: An external audit conducted by a certification body to verify a management system's compliance with a standard like ISO 9001 is best classified as which type of audit?
- First-party audit
- Second-party audit
- Third-party audit (Correct answer)
- Process audit
Correct answer: Third-party audit
A third-party audit is performed by an independent auditing organization, such as an accredited certification body, to determine conformity to a standard for the purpose of certification. A first-party audit is an internal audit conducted by the organization itself. A second-party audit is an external audit conducted by a customer on its supplier.
Question 6: When establishing the objectives for a management system audit program, top management should ensure they are consistent with and support the:
- Previous year's audit schedule
- Auditors' personal development goals
- Organization's strategic direction and management system policies (Correct answer)
- Budget allocated by the finance department
Correct answer: Organization's strategic direction and management system policies
According to ISO 19011, audit program objectives should be established to direct the planning and conduct of audits and should be consistent with the organization's overall strategic direction, policies, and objectives. This ensures the audit program adds value and supports the business goals. While budgets and schedules are important inputs, they do not define the primary objectives of the program.
MSP - Certified Management Systems Professional Management System Auditing Questions and Answers
An auditor is evaluating a manufacturing company's adherence to its quality management system.
The auditor observes a specific instance where a required quality check was not performed.
According to ISO 19011, what is the immediate result of evaluating this observation against the audit criteria?