ISO Audit Execution & Evidence Gathering Flashcards
7 cards from real ISO AUDITOR practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 ISO Audit Execution & Evidence Gathering flashcards as text
Which of the following is an example of a process-based audit approach aligned with ISO 9001:2015?
Answer: Following the flow of a product or service from input to output, evaluating interactions and risk at each step
A process-based approach traces the end-to-end flow of value creation, reflecting ISO 9001's process approach and risk-based thinking.
An auditor observes that a worker is performing a task correctly but the supporting work instruction has a typographical error in a critical step. What is the appropriate audit finding?
Answer: A nonconformity against document control requirements, as inaccurate instructions present a systemic risk
Inaccurate controlled documents represent a document control nonconformity and a risk that errors could occur when different personnel or shifts follow the instruction.
When must an auditor maintain confidentiality of audit information according to ISO 19011?
Answer: At all times, including after the audit is complete, unless the audit client authorizes disclosure
ISO 19011's confidentiality principle requires auditors to protect sensitive information throughout and beyond the audit engagement.
An auditor finds that corrective action records from the previous audit cycle lack evidence of effectiveness verification. This most directly relates to which ISO 9001 clause?
Answer: Clause 10.2 — Nonconformity and corrective action
ISO 9001 clause 10.2.1(g) specifically requires organizations to review the effectiveness of corrective actions taken.
During a surveillance audit, an auditor identifies a positive practice not required by the standard that significantly reduces defects. How should this be documented?
Answer: As an opportunity for improvement or positive observation to recognize the practice
Effective practices beyond requirements can be noted as positive observations or OFIs to recognize and potentially encourage broader adoption.
What is the role of audit working papers (notes, checklists, evidence records) after an audit is complete?
Answer: They are retained as the objective basis for audit conclusions and may support follow-up activities
Working papers support audit conclusions and traceability; retention periods are defined by the audit program manager and applicable agreements.
During an audit of the design and development process (clause 8.3), which combination of evidence is MOST relevant to verifying that design outputs meet input requirements?
Answer: Design input documents, design output specifications, design review records, and verification/validation results
Verifying clause 8.3 conformity requires tracing design inputs through to outputs and confirming that reviews, verification, and validation occurred.