ISO-9001-Lead-Auditor PECB QMS ISO 9001:2015 Lead Auditor Exam Free Practice Exam Questions (2025 Updated)

Nonconformity report

ISO 9001 Clause Number: 8.5.4 Nature of problem: Cleaning and sanitising records are not available for every batch. ISO 9001 requirement that has not been fulfilled: ISO 9001 - “The organization shall implement planned arrangements, at appropriate stages, to verify that the product requirements have been met.” Evidence: 40 cleaning records are available for 63 batches.

Comprehensive and Detailed In-Depth Explanation:

The PDCA (Plan-Do-Check-Act) cycle is a continuous improvement model used in ISO 9001:2015. The "Check" phase involves monitoring, measuring, and analyzing the results to assess if the planned actions have been effective.

In scenario 1, AL-TAX tested the effectiveness of the intended actions, which aligns with the Check stage of the PDCA cycle. Clause 9.1.1 (Monitoring, Measurement, Analysis, and Evaluation) requires organizations to evaluate their QMS and determine whether improvements are necessary.

Comprehensive and Detailed In-Depth Explanation:

Understanding Audit Stages Based on ISO/IEC 17021-1:2015

ISO certification audits consist of two main stages:

Stage 1 Audit (Readiness Review)

The organization’s documented information is reviewed to assess readiness for Stage 2.

This ensures that the QMS is developed, implemented, and prepared for full assessment.

Stage 2 Audit (On-Site Evaluation)

Auditors assess process implementation and effectiveness through interviews, observations, and evidence collection.

The audit team verifies if the organization meets ISO 9001 requirements in practice.

Why is the Correct Answer B?

The audit team reviewed ME’s documents, which is a Stage 1 activity.

The audit team performed interviews, sampling, and on-site verification, which is a Stage 2 activity.

There was no mention of an audit follow-up or a surveillance audit, which occur post-certification.

Why are the Other Options Incorrect?

A (Audit follow-up and Stage 1 Audit) → Follow-up audits occur after certification, which was not the case here.

C (Stage 2 Audit and Surveillance Audit) → Surveillance audits are post-certification audits and were not conducted yet.

According to ISO 19011:2018, clause 3.2, audit criteria are a set of policies, procedures or requirements used as a reference against which objective evidence is compared. Audit criteria are usually selected by the audit client or by agreement between the audit client and the auditee, and they should be appropriate for the audit scope and objectives1. Audit criteria may include, but are not limited to, the following sources2:

•ISO management system standards, such as ISO 9001, ISO 14001, ISO 45001, etc.

•Verbal statements by the general manager or other top management, as long as they are consistent with the documented policies and objectives of the organisation

•Verbal agreements with interested parties, such as customers, suppliers, regulators, etc., as long as they are documented and approved by the relevant authorities

•Health and safety notices, such as posters, signs, labels, etc., that communicate the organisation’s legal obligations, policies, or procedures

•Written agreements with interested parties, such as contracts, orders, specifications, etc., that define the requirements and expectations of the parties involved

•Organisation’s documented information, such as policies, procedures, manuals, records, etc., that describe the organisation’s management system and its processes

•Commitment to follow principles issued by an NGO, such as the United Nations Global Compact, the International Labour Organization, etc., as long as they are relevant to the organisation’s context and objectives

•Environmental aspects register, such as a list of the environmental impacts and risks associated with the organisation’s activities, products, and services

Therefore, the two options that are not potential audit criteria are F and H, as they are not reliable or verifiable sources of information, and they may not reflect the actual performance or conformity of the organisation’s management system. Commercial advertisements and claims made on the organisation’s website are forms of marketing communication that may be exaggerated, misleading, or inaccurate, and they are not subject to the same level of scrutiny or approval as the other sources of audit criteria.

The action that the auditor would have accepted is:

•Option B: Apply the existing process of addressing the risks and opportunities of milk production. This option is correct because ISO 9001:2015 clause 8.1 requires the organization to plan, implement and control the processes needed to meet the requirements for the provision of products and services, and to implement actions determined in clause 6.1, which refers to the actions to address risks and opportunities. The organization should apply the existing process of addressing the risks and opportunities of milk production, which may include identifying the sources of variability, assessing the potential impacts and consequences, determining and implementing appropriate actions to reduce or eliminate the variability, monitoring and measuring the effectiveness of the actions, and reviewing and updating the actions as necessary.

The following options are not correct:

•Option A: Modify the contract with the current customer to provide them with only 1,500 litres of milk per day and make an agreement with a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.

•Option C: Retain the current contract and try to sell the occasional surplus milk to a second customer. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to meet the customer and applicable statutory and regulatory requirements, as required by ISO 9001:2015 clause 8.2.2.

•Option D: Analyse the daily dispatch of milk for 7 days to determine its variability. This option is not correct because it does not address the root cause of the variability in the daily production of the milking yard, which may affect the quality and consistency of the products and services provided by the organization. It also does not demonstrate the organization’s commitment to implement actions to address risks and opportunities, as required by ISO 9001:2015 clause 8.1.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 17021-1:2015 (Conformity Assessment – Requirements for Certification Bodies), Clause 9.3.1.2, the Stage 1 Audit typically consumes around 30% of the total audit time.

This time is allocated to:

Reviewing documented information.

Assessing the readiness for Stage 2.

Identifying potential nonconformities.

A 20% allocation (Answer A) is too low, and 40% (Answer C) is excessive, as the majority of the audit should be spent on Stage 2 (on-site verification).

This option reflects a balanced and professional approach. The audit team leader should first gather information directly from the involved auditor to understand the situation before making any decisions. It demonstrates due diligence and fairness.

This ensures that the situation is properly escalated and handled in accordance with the auditing body’s procedures. Consulting the audit programme manager helps ensure consistency in handling such incidents.

The nonconformity raised is based on objective evidence, independent of the incident with the photographs. ISO 9001 audits are evidence-based, and the validity of the findings should not be compromised by unrelated issues.

1. A. Advise the Quality Manager that he, as audit team leader, needs to speak to the auditor about the situation and he will report back to the Quality Manager once this is done:2. D. Delay the Closing meeting until the audit team leader has consulted his audit programme manager at Head Office:3. E. Insist that the nonconformities must stand since they have been agreed by the team from other evidence gathered:

B. Advise the Quality Manager that the auditor will be reported to Head Office:

Reporting the auditor directly without first investigating the situation is premature and unprofessional. It might escalate the issue unnecessarily.

C. Apologize for the situation and ensure the Quality Manager that all photographs will be deleted during the Closing meeting:

Deleting evidence without proper consultation could be seen as tampering or unprofessional conduct. It’s essential to understand the context of the photographs first.

F. State that the auditor will take no further part in the audit and all his photographs will be deleted:

This is an extreme response without first investigating the situation. Taking unilateral action without gathering facts can damage the audit's integrity.

Why Not the Other Options:

Comprehensive and Detailed In-Depth Explanation:

The Stage 2 audit (ISO 17021-1:2015, Clause 9.3.1.3) is conducted to:

Verify whether the QMS is effectively implemented and operational.

Ensure compliance with ISO 9001 requirements in actual practice.

Identify nonconformities that may impact certification.

Reviewing documented information (Answer B) is part of Stage 1, and gathering scope information (Answer C) is done before the certification audit.

Comprehensive and Detailed In-Depth Explanation:

One of the common misconceptions about ISO 9001 is that it only applies to manufacturing companies producing tangible goods. However, ISO 9001:2015 is designed for all types of organizations, including service providers such as financial, healthcare, and IT companies.

Clause 1 (Scope) clearly states that ISO 9001 is applicable to any organization, regardless of type, size, or the products and services it provides. AL-TAX, being a financial services company, is equally eligible for implementing a QMS under ISO 9001.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 5.1 (Impartiality):

Internal auditors must not audit areas where they have direct responsibilities to avoid conflicts of interest.

Outsourcing (C) is not required, as long as impartiality is maintained internally.

Thus, B is the correct answer.

Comprehensive and Detailed In-Depth Explanation:

ISO 19011:2018, Clause 5.1 (Impartiality) states that:

Internal auditors must be independent of the processes they audit to ensure objectivity.

Auditing one’s own department introduces bias and is not permitted.

Thus, Sean must not allow the auditor to audit their own department.

Comprehensive and Detailed In-Depth Explanation:

According to ISO 19011:2018, Clause 6.6 (Audit Follow-Up):

The primary focus of an audit follow-up is verifying that corrective actions were effectively implemented.

Internal audits and management reviews (B) are part of routine QMS operations, not the main objective of follow-ups.

Site conditions (C) are relevant but secondary to verifying corrective action effectiveness.

Thus, A is the correct answer.

According to the ISO 9001:2015 standard, clause 8.7 requires that an organization identify and control any nonconforming outputs that do not conform to the requirements of the customer or other relevant requirements. Nonconforming outputs are any outputs from the process, product or service that do not meet the specified quality criteria. Nonconforming outputs must be dealt with in one or more of the following ways:

Correction of the nonconformity

Segregation, containment, return or suspension of provision of products and services

Informing the customer

Authorisation for acceptance under concession

The organization must also retain documented information on the description of the nonconformity, the actions taken, any concessions obtained, and the identification of the authority deciding the action to resolve the nonconformity.

In this scenario, you have interviewed a line supervisor who is responsible for managing a manual picking line where operators are removing contaminant materials from incoming products. The supervisor has explained that these plastic items are rejected at this stage because they do not meet their processing standards and they can damage their machinery and compromise their quality standards. The supervisor has also mentioned that some of these rejected items are melted down in another process later on and some are disposed of as waste products that cannot be recycled.

Based on this information, you can investigate further by taking two actions:

A. Check the process for handling nonconforming items: You can verify whether there is a documented procedure for identifying, segregating, containing, returning or suspending provision of nonconforming items at this stage. You can also check whether there is a system for informing customers about any nonconforming items that may affect their satisfaction or expectations.

D. Determine what happens to the waste products: You can verify whether there is a documented procedure for disposing of waste products that cannot be recycled as per environmental regulations and customer requirements.

These two actions would help you to determine whether there are any nonconforming outputs at this stage and how they are controlled by the organization.

A → 8.4.3.a

B → 7.2.b

C → 10.2.2

D → 10.2.1

E → 6.2

F → 5.2.2.c

8.4.3.a – No specification is issued to the suppliers of waste plastic:This clause refers to the information provided to external providers, including requirements for products and services. If no specification is issued, it means the organization is not complying with this clause, which states:

“The organization shall ensure that the requirements for the products and services to be provided are adequately defined prior to communication to the external provider.”

7.2.b – The picking operators have been trained:This falls under Competence requirements. Clause 7.2(b) requires that persons are competent on the basis of education, training, or experience:

“Ensure that these persons are competent on the basis of appropriate education, training, or experience.”

10.2.2 – No documentation is retained for rejected materials:This relates to corrective action documentation. Clause 10.2.2 requires organizations to retain documented information as evidence of nonconformities and actions taken:

“The organization shall retain documented information as evidence of: the nature of the nonconformities and any subsequent actions taken…”

10.2.1 – The rejected materials are segregated:This links to the treatment of nonconforming outputs. Clause 10.2.1 discusses actions such as containment or segregation for nonconforming outputs:

“Deal with nonconforming outputs in one or more of the following ways: correction; segregation, containment…”

6.2 – Management has set an objective for the level of recycling:This refers to quality objectives. Clause 6.2 requires that measurable quality objectives be established, and this includes setting performance targets:

“The organization shall establish quality objectives at relevant functions… The quality objectives shall be measurable…”

5.2.2.c – The quality policy appears in promotional material:Clause 5.2.2(c) requires the quality policy to be available to relevant interested parties. Using it in promotional material ensures that it is communicated externally:

“The quality policy shall be… available to relevant interested parties, as appropriate.”

According to ISO 19011:2018, clause 6.3.2, the audit plan is a document that provides the basis for agreement regarding the conduct of the audit. The audit plan should include the following information1:

•the audit objectives, scope and criteria

•the audit team members and their roles and responsibilities

•the audit schedule, including the date, time and location of each audit activity

•the expected time and duration of meetings and interviews

•the allocation of appropriate resources to critical areas of the audit

•the identification of the audit client and the auditee

•the identification of the guides and observers, if any

•the documents and records to be reviewed before and during the audit

•the audit methods and tools to be used

•the audit language and terminology

•the audit report content, format, distribution and expected completion date

•the risk to achieving audit objectives and the contingency plan, if any

Therefore, the issue which is not expected to be included in the audit plan is C, expectations of the organisation’s management. This issue is not relevant to the conduct of the audit, as the audit is based on the audit criteria, not on the management’s expectations. The management’s expectations may be considered during the audit initiation or the audit programme management, but they are not part of the audit plan.

Here is the correct matching of ISO 9001:2015 clauses to the steps mentioned in the change management process:

We identified risks and opportunities and fed these into our risk management processes.

Clause 6.1 (Actions to address risks and opportunities)

We found a suitable supplier.

Clause 8.4 (Control of externally provided processes, products, and services)

We monitored customer feedback and noticed an increase in negative feedback about lead times.

Clause 9.1.2 (Customer satisfaction)

We put together a plan for implementation.

Clause 6.2.2 (Planning to achieve quality objectives)

We monitored the performance of the new supplier.

Clause 8.4.2 (Type and extent of control of external providers)

We noticed that productivity targets were being missed.

Clause 9.1.1 (Monitoring, measurement, analysis, and evaluation)

We communicated the plan internally.

Clause 7.4 (Communication)

We looked at the data at the management review and decided we needed to do something different.

Clause 9.3.2 (Management review inputs)

We reorganised the staffing and implemented redundancies.

Clause 7.1.2 (People)

We set an objective to effectively implement the transition and outsource manufacturing.

Clause 6.2.1 (Quality objectives and planning to achieve them)

This aligns the steps of the change process with relevant ISO 9001:2015 clauses related to risk, planning, communication, and monitoring.

The purpose of conducting a document review is to determine the conformity of the system, as far as documented, with audit criteria and to gather information to support the audit activities. A document review is a systematic and objective examination of the documented information that is relevant to the audit objectives and scope. It can help the auditor to verify if the documented information is complete, accurate, consistent, and up-to-date. It can also help the auditor to identify any gaps, errors, or nonconformities in the documented information that may affect the audit findings or conclusions.

The other options are not correct because they do not reflect the true purpose of a document review. Option A describes the purpose of an audit report, which is to communicate the audit results and recommendations to the management and other interested parties. Option B describes the purpose of an audit plan, which is to define the scope, objectives, criteria, methods, resources, and schedule of an audit. Option C describes the purpose of an audit evidence report, which is to provide evidence of nonconformities or opportunities for improvement identified during an audit. Option D describes the purpose of an audit decision report, which is to justify or explain why certain decisions were made during an audit.

I hope this answer helps you understand why option F is correct and why options A-C-D are incorrect. If you want to learn more about ISO 9001 Lead Auditor exam questions and answers, you can check out some of these resources:

ISO 9001 Lead Auditor Sample Exam Questions and Answers: This article provides some sample questions and answers for each section of the ISO 9001 Lead Auditor exam.

ISO 9001 (QMS) Lead Auditor Quiz Questions and Answers: This article provides some quiz questions and answers on various topics related to ISO 9001 QMS.

ISO 9001 Lead Auditor - Exam Practice Tests: This course offers practice tests with explanations for each question.

Irca Lead Auditor Exam Questions And Answers Pdf: This document contains some exam questions and answers in PDF format.

Here is the correct matching of the ISO 9001 Clause 8 extracts to the audit evidence:

Audit evidence: Three subcontract trainers who had delivered training were not approved as defined in procedure SA1 Supplier Approval revision 3.ISO 9001 Clause 8 extract: 8.4.1 ...shall apply criteria for ... external providers...(This clause requires the organization to control external providers, including ensuring their approval and competence.)

Audit evidence: A training programme for a customer was not documented as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.3.5 ...shall retain documented information on design and development outputs.(This clause addresses the need to retain documented information related to design and development outputs, such as a training programme.)

Audit evidence: One trainer had not recorded the damage to a customer’s training room wall caused by using sticky tape to hang training aids, as required in procedure TD 2 Training revision 2.ISO 9001 Clause 8 extract: 8.5.3 ...shall retain documented information on what has occurred.(This clause relates to retaining documented information on activities and outcomes, including records of damage or issues encountered.)

Audit evidence: Five sales orders had no record of having been reviewed to verify the ability to provide these courses.ISO 9001 Clause 8 extract: 8.2.3.1 ...shall conduct a review before committing...(This clause specifies the requirement to review and verify the organization's ability to meet customer requirements before accepting sales orders.)

These mappings reflect the specific requirements of ISO 9001:2015 for managing external providers, retaining documented information, and reviewing contracts.

Comprehensive and Detailed In-Depth Explanation:

ISO 9001:2015 requires organizations to ensure that auditors have the necessary competence and knowledge to conduct audits effectively.

Clause References:

ISO 19011:2018, Clause 7.2.1 – Determining Competence of Auditors: Auditors must have knowledge of applicable legal and regulatory requirements that affect the scope of the audit.

ISO/IEC 17021-1:2015, Clause 7.1.2 – Competence Requirements: Certification bodies must ensure that auditors assigned to the audit team possess relevant knowledge in areas such as legal and regulatory compliance.

Why is the Correct Answer C?

Each audit team member should have sufficient knowledge of relevant legal and regulatory requirements to ensure compliance.

This helps auditors identify gaps or nonconformities related to compliance obligations.

Having multiple team members with knowledge reduces reliance on a single expert and ensures a comprehensive assessment.

Why are the Other Options Incorrect?

A (Only one team member needs knowledge) → Incorrect because audits involve various aspects, and all auditors should have basic awareness of legal and regulatory requirements.

B (Legal knowledge is not necessary) → Incorrect because compliance is essential for QMS effectiveness.

D (Only the lead auditor needs legal knowledge) → Incorrect because ISO requires all auditors to be competent in applicable laws, not just the leader.