ISO-9001-Lead-Auditor Exam Dumps : QMS ISO 9001:2015 Lead Auditor Exam

A second-party audit of a key supplier should focus on whether the supplier’s QMS is suitable, effective, and capable of meeting requirements. ISO 19011 recommends considering context, changes, prior audit results, interested-party concerns, and effectiveness of key QMS processes.

B is relevant because outsourced processes affecting conformity may need to be audited or otherwise controlled. C and F are relevant because audit planning should consider changes since previous audits and previous audit results. D is relevant because ISO 9001 requires relevant interested parties and their requirements to be considered. I is relevant because the QMS must remain suitable and aligned with context and strategic direction. J is relevant because internal audit and management review are key mechanisms for evaluating QMS effectiveness.

A is mainly relevant to certification-body controls, not a supplier second-party audit. E is too prescriptive; ISO 9001 does not require annual audits of all external providers. G may be useful depending on scope, but the stronger required audit trails here are B, C, D, F, I, and J. H is outside ISO 9001 QMS audit scope unless directly relevant to contractual or QMS risks.

===========

Comprehensive and Detailed In-Depth Explanation:

Once a Stage 2 certification audit has commenced, certain logistical or planning-related elements may still be adjusted, while others are fixed by prior agreement and cannot be changed.

✅ C. Audit Plan:

The audit plan is a document that outlines the scope, objectives, criteria, and logistics of the audit. According to ISO/IEC 17021-1:2015 (the standard for bodies providing audit and certification of management systems), clause 9.2.3.3 allows for modification of the audit plan based on real-time conditions during the audit — such as availability of auditees or changes in process access.

✅ F. Increase of Audit Duration:

Audit duration is generally determined during audit planning based on factors like employee count, risk, complexity, etc. However, if during Stage 2 it is found that more time is needed (e.g., due to additional processes, scope not fully covered, or significant findings), auditors are permitted to extend the audit. This ensures full coverage of all required areas as per ISO/IEC 17021-1 clause 9.1.4 and IAF MD 5.

❌ A. Agreed Language of the Audit:

This is determined and agreed upon in the contract and audit planning stages. Changing it during Stage 2 would create communication and documentation issues, especially in multi-site or multi-national audits.

❌ B. Audit Scope:

The audit scope is defined in the contract and certification agreement based on clause 4.3 of ISO 9001:2015. Changing it mid-audit would invalidate planning, required competencies, and potentially even the certification basis.

❌ D. Agreed Standard for the Audit Criteria:

Changing the standard (e.g., from ISO 9001 to ISO 13485) is fundamentally altering the purpose and contractual basis of the audit and is not permissible once Stage 2 has started.

❌ E. Audit Checklist:

The checklist is a tool prepared by the auditor as part of audit preparation and is based on the audit plan and standard requirements. While it may be adapted during the audit (e.g., if new risks arise), it does not constitute a formal change like duration or scope.

Relevant References:

ISO/IEC 17021-1:2015 Clause 9.2.3.3 (Audit Plan Modification)

IAF MD 5:2019 (Duration of QMS Audits)

ISO 9001:2015 Clause 4.3 (Scope of the QMS)

ISO/IEC 17021-1:2015 Clause 9.1.4 (Audit Duration)

Comprehensive and Detailed In-Depth Explanation:

One of the seven quality management principles in ISO 9001:2015 is Improvement, which emphasizes continual enhancement of processes, products, and services.

Clause 10.3 (Continual Improvement) states that organizations must continuously assess risks, consequences, and impacts to improve their QMS.

Risk-based thinking (Clause 0.3.3) supports improvement by identifying and mitigating risks before they affect performance.

Clause 6.1 (Actions to Address Risks and Opportunities) requires organizations to take a proactive approach, ensuring long-term success.

Other options do not fully align with the question:

Process approach (A) focuses on managing interrelated activities.

Leadership (B) ensures commitment but does not directly address risk assessment.

Relationship management (D) deals with interested parties, not risk mitigation.