Discuss PECB ISO-9001-Lead-Auditor Exam Topic 5 Question 11

An audit team leader arrives at a printing organisation to carry out a Stage 2 audit for a certification body. At a meeting with the Quality Manager, she is told that they have won their biggest contract from a computer

manufacturer to print and compile computer documentation packages. They have leased the unit next door for space reasons but have never worked in this sector before. The Quality Manager wants the ISO 9001

certificate to cover the new contract.

Which one of the options is the correct response by the auditor?

ADo you realise that this involves an extension to the scope of the audit and will require an application process?

BHow can we audit this area when we do not have an IT specialist in the team?

CWould you like a separate certificate for the IT packages to show your new client?

DWould you mind writing to my programme manager with this request?

Suggested Answer: A

When an organization wishes to extend the scope of their current certification to include new services or activities, such as the printing and compilation of computer documentation packages, it requires an extension to the scope of the audit.This involves a formal application process with the certification body to ensure that the new activities are included in the audit plan and that the organization's quality management system encompasses these new processes12.Reference: = The answer is based on the ISO 9001 Auditing Practices Group guidance on scope and applicability, which outlines the need for a formal application process when there is a change in the scope of the quality management system that affects the certification1.Additionally, the UKAS guide on the extension to scope (ETS) process provides information on how changes to the scope, including the addition of new services, require a formal application2.

Get Premium ISO-9001-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Aleisha 10 months ago

Not sure why they’d want a separate certificate for IT packages.

Darrin 11 months ago

Option A seems like the most logical response.

Dorcas 11 months ago

Wait, they’ve never worked in this sector before? That’s risky!

Rebbecca 11 months ago

Totally agree, they need to follow the application process!

Elenora 11 months ago

A extension to the audit scope is definitely needed here.

Elinore 12 months ago

I recall that asking for a separate certificate, like in Option C, might confuse the client. It seems more appropriate to focus on the audit scope instead.

Marjory 12 months ago

I'm a bit uncertain about the implications of not having an IT specialist. Option B raises a valid concern, but I wonder if it’s the auditor's responsibility to address that.

Royal 12 months ago

I think we practiced a similar question where the auditor had to clarify the scope. I feel like Option A is definitely the right approach here.

Marta 1 year ago

I remember discussing the importance of understanding the scope of the audit. Option A seems to align with that, but I'm not entirely sure if it's the best response.

Nathan 1 year ago

Definitely need to get approval from the program manager on any scope changes. Better to go through the proper channels to ensure we're following the right procedures.

Francene 1 year ago

I like the idea of a separate certificate for the IT packages. That could be a good solution to demonstrate the organization's capability in this new area to the client.

Jesus 1 year ago

Hmm, good point about the IT specialist. I'm not sure how we'd audit that area effectively without the right expertise on the team. Maybe we could bring in a consultant or subcontractor to assist?

Kayleigh 1 year ago

This is a tricky one. I'll need to carefully consider the scope of the audit and whether the organization has the necessary processes and competencies in place to cover the new computer documentation work.

Javier 1 year ago

I'm pretty confident the answer is the opening stage. That's when you'd want to gather as much information as possible before the actual negotiation begins.

Timothy 1 year ago

Alright, time to put my GRC knowledge to the test. I'm confident that Document, Policy, and Risk are the correct tables in the application scope.

Christoper 1 year ago

This looks like a straightforward question on disaster recovery testing in GCP. I'd focus on the key requirements - using Google-recommended practices and native GCP capabilities.

PECB ISO-9001-Lead-Auditor Exam - Topic 5 Question 11 Discussion