ISO Audit Planning & Preparation Flashcards

Which factor should receive the MOST weight when prioritizing audit focus areas during planning?

Answer: Risk level and previous audit findings associated with the process

Risk-based audit planning directs attention to processes where failure would have the greatest impact on QMS performance and customer satisfaction.

An audit team observes that the organization's audit schedule has not been updated for 18 months. Under ISO 9001:2015, this most likely indicates:

Answer: A potential nonconformity against Clause 9.2, which requires a planned audit program

ISO 9001:2015 Clause 9.2 requires a planned internal audit program; an outdated or unmaintained schedule suggests the program is not being implemented effectively.

What is the purpose of a pre-audit document review?

Answer: To understand the organization's documented QMS and identify potential focus areas for the audit

Document review before the audit helps auditors understand the QMS structure and identify areas warranting closer examination during fieldwork.

Which of the following audit methods is most effective for evaluating process effectiveness rather than just procedural conformance?

Answer: Process tracing — following the flow of a product or service through the process and verifying outcomes

Process tracing (horizontal audit approach) evaluates how well a process achieves its intended outputs, not just whether procedures are documented.

When selecting audit team members for an ISO 9001 audit of a medical device manufacturer, which competency criterion is MOST critical?

Answer: Technical knowledge relevant to the industry and regulatory environment being audited

ISO 19011 requires auditors to possess competence appropriate to the sector and technical complexity of the organization being audited.

What distinguishes a 'concern' or 'observation' from a nonconformity in an audit report?

Answer: A concern identifies a potential weakness or opportunity for improvement that does not yet constitute a breach of requirements

Observations or concerns note trends or risks that could develop into nonconformities but do not represent current failure to meet specified requirements.

The audit plan should specify communication arrangements because:

Answer: Clear communication roles prevent misunderstandings and ensure audit progress is shared with appropriate parties

ISO 19011 includes communication arrangements in the audit plan to ensure all parties — including interim findings updates — are managed systematically.