Last Attempt ISO-45001-Lead-Auditor Questions

The correct answer is A.

This is a serious attempted bribe and a direct threat to audit integrity, impartiality, and credibility. A third-party auditor must not accept gifts, inducements, or favorable treatment in exchange for changing, hiding, or weakening audit findings. The auditor must act ethically and protect the certification process from improper influence.

The organization has also failed to implement the agreed corrective action, so that failure must be recorded accurately. Any attempt to conceal it would be dishonest and would invalidate the audit outcome. In certification auditing, impartiality and objective evidence are fundamental principles. An offer of discounted personal work in exchange for suppressing an audit finding is unacceptable and must be escalated.

Therefore, the correct response is to:

stop the audit activity, because the integrity of the audit has been compromised;

leave the site;

report the attempted bribe immediately to the individual(s) managing the audit programme or certification body;

avoid further direct contact with the auditee until instructions are given.

Why the other options are wrong:

B is unethical because it ignores both the failed corrective action and the attempted bribe.

C is fraudulent because it involves knowingly recording false audit information and accepting the improper benefit.

D is also unethical because it accepts the benefit indirectly and delays the audit to help the auditee avoid the finding.

Analysis of Options:

A. The organisation must attempt to identify and address every risk it faces:Incorrect. ISO 45001 focuses on OH and S risks and not every risk faced by the organization.

B. The effect of uncertainty (i.e. risk) can result in positive outcomes as well as negative ones:Correct. Clause 3.20 defines risk as the " effect of uncertainty, " which may result in positive or negative outcomes.

C. Although organisations are required to carry out risk management, the method by which they do so is up to them:Correct. ISO 45001 does not prescribe specific risk management methods, leaving the organization to choose the approach that best suits its context (Clause 6.1.2).

D. Risk assessment is an activity that must be carried out by top management:Incorrect. Risk assessment can involve workers and other personnel; it is not limited to top management.

E. The organisation is required to assess risks arising from OH and S hazards:Correct. Clause 6.1.2.2 requires organizations to assess OH and S risks associated with hazards.

F. Risk is often expressed as a combination of likelihood and impact:Correct. This is a common way to express risk, aligned with Clause 6.1.2.

ISO References:

Clause 3.20: Definition of risk.

Clause 6.1.2: Hazard identification and risk assessment

Stage 1 is the readiness and preliminary assessment stage of an initial certification audit. Its purposes include reviewing relevant management-system documented information, assessing site-specific conditions and determining whether the organisation is sufficiently prepared for Stage 2. Any weaknesses that could become nonconformities during Stage 2 can therefore be communicated as areas of concern, making C correct. Option A is incorrect because ISO 19011 provides auditing guidance; the formal two-stage certification requirements are established through ISO/IEC 17021-1. Option B describes the more extensive Stage 2 assessment, where effective implementation and conformity are evaluated. Option D is also incorrect because discussions with client personnel form part of Stage 1 readiness determination. ISO 45001 Lead Auditor training material explicitly identifies Stage 1 areas of concern that could become Stage 2 nonconformities.