MSP Document Control & Information Management 1 — Questions and Answers
Question 1: According to ISO management system standards (e.g., ISO 9001:2015), what is the primary distinction between a 'document' and a 'record'?
- Documents are external; records are internal
- Documents provide information to be followed; records provide evidence of results achieved (Correct answer)
- Documents are mandatory; records are optional
- Documents are digital; records are paper-based
Correct answer: Documents provide information to be followed; records provide evidence of results achieved
Documents (documented information to be maintained) specify what should be done, while records (documented information to be retained) provide evidence that activities were performed.
Question 2: Which ISO standard clause most directly addresses the requirement for 'documented information' in a management system?
- Clause 4.1 – Understanding the organization
- Clause 7.5 – Documented information (Correct answer)
- Clause 6.2 – Objectives and planning
- Clause 9.1 – Monitoring and measurement
Correct answer: Clause 7.5 – Documented information
Clause 7.5 in the ISO High Level Structure (HLS) covers documented information requirements including creation, updating, and control.
Question 3: When controlling documented information, which of the following is NOT typically required by ISO management system standards?
- Ensuring it is available and suitable for use where and when needed
- Ensuring it is adequately protected from loss of confidentiality
- Translating all documents into every language spoken by employees (Correct answer)
- Determining the distribution, access, retrieval, and use of documented information
Correct answer: Translating all documents into every language spoken by employees
ISO standards require availability, protection, and controlled distribution, but do not mandate translation into every employee language.
Question 4: An organization retains a completed inspection checklist as evidence of a product conformance check. In ISO terminology, this checklist is best classified as:
- A procedure
- A work instruction
- A record (Correct answer)
- A policy
Correct answer: A record
A completed checklist providing evidence that an activity was performed and its result is classified as a record (documented information to be retained).
Question 5: Which activity is essential when a new version of a controlled document is issued?
- Destroying all previous versions immediately without exception
- Obtaining customer approval before distribution
- Ensuring obsolete versions are prevented from unintended use (Correct answer)
- Publishing the document on a public website for transparency
Correct answer: Ensuring obsolete versions are prevented from unintended use
A core requirement of document control is preventing unintended use of obsolete documents, whether by removal, marking, or controlled archiving.
Question 6: A company uses an electronic document management system (EDMS) with automatic version control. Which additional control is STILL necessary to comply with ISO requirements?
- Maintaining a parallel paper-based filing system
- Ensuring appropriate access, protection, and legibility of the documented information (Correct answer)
- Printing and manually signing every document
- Requiring external auditor approval for each document update
Correct answer: Ensuring appropriate access, protection, and legibility of the documented information
Even with an EDMS, organizations must ensure documented information is accessible, protected from unauthorized changes, and remains legible and identifiable.
Question 7: Which of the following best describes the purpose of a document control procedure in an integrated management system?
- To restrict access to management system documents to senior leadership only
- To define how documented information is created, reviewed, approved, distributed, and disposed of (Correct answer)
- To eliminate the need for records by maintaining only current documents
- To ensure all documents are printed and stored in physical binders
Correct answer: To define how documented information is created, reviewed, approved, distributed, and disposed of
A document control procedure establishes the lifecycle governance for documented information: creation, review, approval, distribution, access, and disposal.
MSP Document Control & Information Management 1
According to ISO management system standards (e.g., ISO 9001:2015), what is the primary distinction between a 'document' and a 'record'?