You are carrying out an audit at a single-site organisation seeking certification to ISO 9001 for the first time. The organisation offers warehousing and export services to customers. Customers are invoiced for the time stock items are stored in the warehouse. Transport to and from the warehouse is controlled by the organisation and approved subcontract transport services are used. The organization does not have its own transport vehicles. Stock items are not purchased by the organisation.
You have gathered audit evidence as outlined in the table. Match the ISO 9001 Clause 8 extract to the audit evidence.

You work for an organisation, 'ABC', which provides packaged food to the public. You are asked to lead a team (you as the leader and two other
auditors) to audit an external provider, 'XYZ', which provides packaging materials to your organisation. It is 4 pm, and the audit is dlose to an end;
you are having an internal meeting with the team to decide what will be presented to the auditee during the Closing meeting. The Closing meeting
was scheduled for 5 pm.
'XYZ' has two manufacturing lines: M1 is a clean room for primary packaging materials (i.e. will be in direct contact with the food), and M2 is for
secondary materials (i.e. will not be in direct contact with food).
Auditor 1 audited the two manufacturing lines.
You: "What findings would you report?"
Auditor 1: "I have one issue. Earlier today in the morning I saw some secondary material stocked in the clean room. I would propose raising a
nonconformity."
You: "How would you write the nonconformity?"
Auditor 1: "In the clean room, there was a pallet with secondary materials."
What additional information would you add to this text to complete the nonconformity report? Select six.
Put the following steps of a third-party audit into the correct sequence in which they happen.

Scenario 1: AL-TAX is a company located in California which provides financial and accounting services. The company manages the finances of 17 companies and now is seeking to expand their business even more The CEO of AL-TAX, Liam Durham, claims that the company seeks to provide top-notch services to their clients Recently, there were a number of new companies interested in the services provided by AL-TAX.
In order to fulfill the requirements of new clients and further improve quality, Liam discussed with other top management members the idea of implementing a quality management system (QMS) based on ISO 9001. During the discussion, one of the members of the top management claimed that the size of the company was not large enough to implement a QMS. In addition, another member claimed that a QMS is not applicable for the industry in which AL TAX operates. However, as the majority of the members voted for implementing the QMS. Liam initiated the project.
Initially, Liam hired an experienced consultant to help AL-TAX with the implementation of the QMS. They started by planning and developing processes and methods for the establishment of a QMS based on ISO 9001. Furthermore, they ensured that the quality policy is appropriate to the purpose and context of AL TAX and communicated to all employees. In addition, they also tried to follow a process that enables the company to ensure that its processes are adequately resourced and managed, and that improvement opportunities are determined.
During the implementation process, Liam and the consultant focused on determining the factors that could hinder their processes from achieving the planned results and implemented some preventive actions in order to avoid potential nonconformities Six months after the implementation of the QMS. AL-TAX conducted an internal audit. The results of the internal audit revealed that the QMS was not fulfilling all requirements of ISO 9001. A serious issue was that the QMS was not fulfilling the requirements of clause 5.1.2 Customer focus and had also not ensured clear and open communication channels with suppliers.
Throughout the next three years, the company worked on improving its QMS through the PDCA cycle in the respective areas. To assess the effectiveness of the intended actions while causing minimal disruptions, they tested changes that need to be made on a smaller scale. After taking necessary actions, AL-TAX decided to apply for certification against ISO 9001.
Based on the scenario above, answer the following question:
Scenario 1 indicates that AL-TAX did not ensure clear and open communication channels with interested parties. Which quality management principle did the organization not follow in this case?
An internal auditor of a manufacturer of polystyrene packaging products for the electronics industry raised a nonconformity against section 10.3 of ISO 9001 in Report IA202. The nonconformity (NC 3) stated:
"The reject rate of the finished product of 9.7% needs improvement as it doesn't meet the stated objective of top management of 5%."
As the third-party auditor reviewing the internal audit process, you come across the nonconformity. For corrective action, the Quality Manager conducted an investigation into the reject rates. He reported that the collection baskets for products ejecting from the moulding machines were not large enough. About 6% of products fell onto the wet and dirty factory floor. Management stated that replacing the baskets was too costly and ordered the Maintenance Manager to ensure that the floor was kept clean and dry to prevent rejects. The auditor later checked the factory floor, which was wet and dirty in places.
From the following nonconformities, select three that the auditor could raise to ISO 9001.
In a third-party audit to ISO 9001, select two options of when the organisation is required to act in response to reported findings.
You are an auditor and are in dialogue with the quality manager and the managing director of a small business that supplies specific IT
hardware and software for manufacturers of medical equipment.
You: "I would like to look at how you manage the design and development of your products.
Auditee: "We have made some strategic changes, the main one being that since last month we no longer produce the software of our
products in-house."
You: "What has been the impact of that?"
Auditee: "We now subcontract the provision of the software needed for our hardware. This allowed us to concentrate our efforts on
the hardware and let specialised organisations develop the software. For the time being, we have subcontracted our software
requirements to three different organisations.
You: "What were the reasons for making the change?"
Auditee: "Our IT software section was a small operation, and we struggled to cope with new technologies. During busy periods, we
found it hard to meet lead times, and in quiet periods, we had staff with little to do. This was having an impact on customer
satisfaction."
You: "How did you go about the change?"
In relation to the auditor's question about how the change was managed, the auditee mentions the actions listed
below. Match the ISO 9001 clauses to show which action the requirement applies to.
To complete the table, click on the blank section you want to complete so it is highlighted in red and then click on the
ISO 9001 clauses listed below. Alternatively, drag and drop each clause to show which clause the action applies to.

Select which one of the following statements is true.
At the end of a second-party audit, the audit team enters the meeting room to hold the closing meeting; only two people
are present and waiting for them: the Health and Safety supervisor and the administrative officer. Neither has participated in
the audit. However, the team had previously agreed with the auditee Quality Manager on two nonconformities identified
during the audit (NC1 and NC2).
They said:
Health and Safety supervisor: "Good evening. We are sorry to inform you that the general manager was involved in a
serious car accident, and the other two managers have had to leave urgently to attend to the emergency."
Administration officer: "Our quality manager, before leaving, left a written message about 'NC2'. He declares that the
correction and corrective action have been already implemented and has attached some documents to the message as
evidence of these actions. Therefore, he expects that 'NC2' will not be included in the report."
Which one of the following would be your preferred answer to the Quallty Manager's request?
Scenario 7: POLKA is a car manufacturing company based in Stockholm, Sweden. The company has around 14,000 employees working in different sectors which help with the design, painting, assembling, and test drives of the final product. The company is widely known for its qualitative products and affordable prices. In order to retain their reputation, POLKA implemented a quality management system (QMS) based on ISO 9001.
Before applying for certification, the company decided to conduct an internal audit to check whether there are any nonconformities in their QMS and if the requirements of ISO 9001 are being fulfilled. The top management appointed Sean, the internal auditor, as the team leader of the internal audit team. Sean required from the top management to have unrestricted access to the employees and executives of POLKA and to the documented information. Furthermore, Sean required to establish a team with a large number of auditors, considering the size and the complexity of the organization. The top management of POLKA agreed with Sean's requirements.
The top management, in cooperation with Sean, assigned 10 more employees to the audit team. Following that. Sean planned the audit activities and assigned the roles and responsibilities to each auditor. They began by interviewing employees of different manufacturing departments to check whether they are aware of the process of the QMS implementation. While conducting these activities, one of the auditors asked Sean for permission to audit the department in which he worked on a daily basis, as he was very familiar with the processes of the department.
Along the way, the teams findings showed that the staff were trained, documented information was updated, and the QMS fulfilled the requirements of ISO 9001. The internal audit took three weeks to complete, and on the last week the audit team held a final meeting
The team shared their results and together drafted the audit report This report was submitted to the top management of the company. The report was maintained as documented information, and was available to the relevant interested parties.
Based on the scenario above, answer the following question:
Scenario 7 states that Sean planned audit activities on his own. Is this acceptable?


