PECB Updated ISO-45001-Lead-Auditor Exam Questions and Answers by mahdi

The correct answer is A .

This is a serious attempted bribe and a direct threat to audit integrity, impartiality, and credibility . A third-party auditor must not accept gifts, inducements, or favorable treatment in exchange for changing, hiding, or weakening audit findings. The auditor must act ethically and protect the certification process from improper influence.

The organization has also failed to implement the agreed corrective action , so that failure must be recorded accurately. Any attempt to conceal it would be dishonest and would invalidate the audit outcome. In certification auditing, impartiality and objective evidence are fundamental principles. An offer of discounted personal work in exchange for suppressing an audit finding is unacceptable and must be escalated.

Therefore, the correct response is to:

stop the audit activity , because the integrity of the audit has been compromised;

leave the site ;

report the attempted bribe immediately to the individual(s) managing the audit programme or certification body;

avoid further direct contact with the auditee until instructions are given.

Why the other options are wrong:

B is unethical because it ignores both the failed corrective action and the attempted bribe.

C is fraudulent because it involves knowingly recording false audit information and accepting the improper benefit.

D is also unethical because it accepts the benefit indirectly and delays the audit to help the auditee avoid the finding.

Clause 10.2 requires organizations to investigate nonconformities, determine their causes, and take corrective actions to prevent recurrence. Clause 9.2.2 specifies the requirements for managing internal audit processes, while Clause 7.4.3 emphasizes the need to communicate relevant information effectively.

Analysis of Options:

A. 9.2.2.e - Management failed to take any action to deal with the audit nonconformity: Correct. Management must ensure that internal audit findings are addressed promptly. The lack of action violates Clause 9.2.2.e.

B. 9.2.2.d - Staff were not made aware that health and safety incidents were increasing: Incorrect. This clause pertains to the planning and conduct of audits, not the communication of findings.

C. 8.1.1 - Operations were not properly controlled to avoid health and safety incidents: Incorrect. While increased incidents may suggest operational issues, this option does not directly relate to the internal audit findings.

D. 9.2.2 - Report IA202 contained a poorly worded nonconformity (NC3): Incorrect. The clarity of the nonconformity wording is not directly relevant to Clause 9.2.2.

E. 10.2.b - The root cause of the increase in reported health and safety accidents was not investigated: Correct. Failure to investigate root causes violates Clause 10.2.b.

F. 7.4.3 - The results of the internal audit IA202 were not communicated to interested parties: Correct. Effective communication of audit results is required under Clause 7.4.3.

ISO References:

Clause 9.2.2: Internal audit process requirements.

Clause 10.2: Nonconformity and corrective action.

Clause 7.4.3: Communication requirements.

The correct answers are B and D .

In certification audits, the certification body decides the audit team composition and audit time using its own documented procedures and competence requirements. ISO/IEC 17021-1 requires the certification body to determine the competencies needed for the audit team and to assign an audit team that is competent for the audit scope. It also requires the certification body to determine the audit time needed to plan and accomplish a complete and effective audit.

IAF MD 5 further explains that the certification body should consider the composition and size of the audit team to ensure audit effectiveness. This means a client request for “only one auditor” may be considered , but it cannot simply be accepted just to reduce travel costs if that would undermine competence, coverage, or effectiveness.

Therefore:

B is correct because the OHS Manager should be told that audit duration and team make-up are decided in line with the certification body’s internal procedures .

D is correct because the request can be considered , and the certification body can respond after applying its rules and competence requirements.

Why the other options are incorrect:

A is not the best answer because the people managing the audit programme already operate within the certification body’s process.

C is inappropriate; a client request does not justify telling them to use another certification body.

E is incorrect because the accreditation body does not decide the audit team for the client’s audit.

F is incorrect because the request cannot be automatically accepted based only on cost saving.

The correct answers are A and F .

A. The auditee should review the audit plan for agreement is true because, in certification auditing practice, the audit plan is communicated to the client/auditee in advance and should be agreed regarding the practical arrangements for the audit. ISO guidance on certification auditing includes preparation of the audit plan and communication of the audit plan and audit team as part of planning audits. ( ISO )

F. The audit team leader must define the responsibilities of team members and observers is also true. ISO/IEC 17021-1 states that the audit team leader , in consultation with the audit team, shall assign to each team member responsibility for auditing specific processes, functions, sites, areas or activities . This is a direct audit-planning responsibility of the team leader. Observers are also part of the audit arrangements that must be defined and managed during planning. ( IAS )

Why the other statements are false:

B. The audit team leader should plan to interview each employee is false. Certification audits are conducted using sampling , not by interviewing every employee. Audit evidence is gathered on a representative basis. ( ISO )

C. The organisation must provide hospitality for the audit team is false. Hospitality is not a certification requirement and can raise impartiality concerns.

D. The audit team leader should audit the Occupational Health and Safety Manager is not a mandatory requirement. The audit plan must cover relevant processes, functions, activities and responsibilities, but it does not require the team leader personally to audit one named individual. ( IAS )

E. The organisation should cancel all staff leave during the audit is false. The auditee should ensure availability of relevant personnel as needed, but cancelling all leave is not an audit requirement.

Therefore, the two true statements are:

A, F