PECB ISO-9001-Lead-Auditor Exam - Topic 5 Question 11 Discussion

Actual exam question for PECB's ISO-9001-Lead-Auditor exam

Question #: 11
Topic #: 5

An audit team leader arrives at a printing organisation to carry out a Stage 2 audit for a certification body. At a meeting with the Quality Manager, she is told that they have won their biggest contract from a computer

manufacturer to print and compile computer documentation packages. They have leased the unit next door for space reasons but have never worked in this sector before. The Quality Manager wants the ISO 9001

certificate to cover the new contract.

Which one of the options is the correct response by the auditor?

ADo you realise that this involves an extension to the scope of the audit and will require an application process?

BHow can we audit this area when we do not have an IT specialist in the team?

CWould you like a separate certificate for the IT packages to show your new client?

DWould you mind writing to my programme manager with this request?

Show Suggested Answer

Suggested Answer: A

When an organization wishes to extend the scope of their current certification to include new services or activities, such as the printing and compilation of computer documentation packages, it requires an extension to the scope of the audit.This involves a formal application process with the certification body to ensure that the new activities are included in the audit plan and that the organization's quality management system encompasses these new processes12.Reference: = The answer is based on the ISO 9001 Auditing Practices Group guidance on scope and applicability, which outlines the need for a formal application process when there is a change in the scope of the quality management system that affects the certification1.Additionally, the UKAS guide on the extension to scope (ETS) process provides information on how changes to the scope, including the addition of new services, require a formal application2.

by Daron at May 28, 2024, 09:55 AM

Limited Time Offer

25%

Off

Get Premium ISO-9001-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aleisha

3 months ago

Not sure why they’d want a separate certificate for IT packages.

upvoted 0 times

...

Darrin

3 months ago

Option A seems like the most logical response.

upvoted 0 times

...

Dorcas

3 months ago

Wait, they’ve never worked in this sector before? That’s risky!

upvoted 0 times

...

Rebbecca

4 months ago

Totally agree, they need to follow the application process!

upvoted 0 times

...

Elenora

4 months ago

A extension to the audit scope is definitely needed here.

upvoted 0 times

...

Elinore

4 months ago

I recall that asking for a separate certificate, like in Option C, might confuse the client. It seems more appropriate to focus on the audit scope instead.

upvoted 0 times

...

Marjory

4 months ago

I'm a bit uncertain about the implications of not having an IT specialist. Option B raises a valid concern, but I wonder if it’s the auditor's responsibility to address that.

upvoted 0 times

...

Royal

4 months ago

I think we practiced a similar question where the auditor had to clarify the scope. I feel like Option A is definitely the right approach here.

upvoted 0 times

...

Marta

5 months ago

I remember discussing the importance of understanding the scope of the audit. Option A seems to align with that, but I'm not entirely sure if it's the best response.

upvoted 0 times

...

Nathan

5 months ago

Definitely need to get approval from the program manager on any scope changes. Better to go through the proper channels to ensure we're following the right procedures.

upvoted 0 times

...

Francene

5 months ago

I like the idea of a separate certificate for the IT packages. That could be a good solution to demonstrate the organization's capability in this new area to the client.

upvoted 0 times

...

Jesus

5 months ago

Hmm, good point about the IT specialist. I'm not sure how we'd audit that area effectively without the right expertise on the team. Maybe we could bring in a consultant or subcontractor to assist?

upvoted 0 times

...

Kayleigh

5 months ago

This is a tricky one. I'll need to carefully consider the scope of the audit and whether the organization has the necessary processes and competencies in place to cover the new computer documentation work.

upvoted 0 times

...

Javier

5 months ago

I'm pretty confident the answer is the opening stage. That's when you'd want to gather as much information as possible before the actual negotiation begins.

upvoted 0 times

...

Timothy

5 months ago

Alright, time to put my GRC knowledge to the test. I'm confident that Document, Policy, and Risk are the correct tables in the application scope.

upvoted 0 times

...

Christoper

5 months ago

This looks like a straightforward question on disaster recovery testing in GCP. I'd focus on the key requirements - using Google-recommended practices and native GCP capabilities.

upvoted 0 times

...