I85PREP
⌘ K
CPEA study materials
CPEA study resources

CPEA practice questions

One question at a time. Build your CPEA understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Environmental, Health and Safety Auditing

Under ISO 14001:2015, which element must an organization establish to ensure its environmental management system achieves its intended outcomes, including continual improvement of environmental performance?

  1. An annual sustainability report published to stakeholders
  2. Environmental policy that includes a commitment to fulfilling compliance obligations Correct answer.
  3. An environmental aspect register limited to regulated activities
  4. A documented procedure for every operational task

Explanation

The environmental policy is the top-level commitment document and must include commitments to protection of the environment, fulfilment of compliance obligations, and continual improvement. It provides the framework against which objectives and the EMS itself are measured.

Question 2Environmental, Health and Safety Auditing

An audit team is planning a compliance audit of a facility's air emissions. Which document should primarily define the audit criteria?

  1. The organization's organizational chart
  2. The applicable permit conditions and regulatory requirements Correct answer.
  3. The previous audit's corrective action log
  4. The audit program schedule for the year

Explanation

Audit criteria are the set of requirements used as a reference against which objective evidence is compared. For a compliance audit of air emissions, the permit conditions and applicable regulations are the criteria. Schedules, prior findings, and organizational charts are context, not criteria.

Question 3Environmental, Health and Safety Auditing

During an EHS audit, the auditor finds that a chemical storage area lacks secondary containment. Which audit finding classification is most appropriate when the condition violates an explicit regulatory requirement?

  1. Opportunity for improvement
  2. Observation
  3. Commendation
  4. Nonconformity Correct answer.

Explanation

A nonconformity is a failure to meet a requirement, whether that requirement comes from a regulation, permit, or internal standard. Because an explicit regulatory requirement is breached, the finding is a nonconformity rather than an advisory observation.

Question 4Environmental, Health and Safety Auditing

Which of the following best describes the purpose of an opening meeting at the start of an EHS audit?

  1. To present the final audit findings and agree on corrective actions
  2. To select which auditees will be interviewed
  3. To confirm the audit plan, scope, criteria, and communication arrangements with the auditee Correct answer.
  4. To collect documentary evidence for each audit criterion

Explanation

The opening meeting establishes shared understanding of the audit plan, scope, criteria, schedule, and communication channels before evidence collection begins. Findings are not presented as conclusions at this stage, and evidence collection happens afterward.

Question 5Environmental, Health and Safety Auditing

An auditor is sampling records to verify that hazardous waste shipments were properly manifested. Which sampling approach best supports an audit conclusion?

  1. Selecting a random or risk-based sample across the audit period Correct answer.
  2. Selecting only the most recent shipment record
  3. Asking the waste coordinator to choose representative records
  4. Reviewing only shipments that had reported incidents

Explanation

Audit sampling should be representative of the population and period under review, and risk-based selection strengthens the conclusion. Selecting only recent, incident-related, or auditee-chosen records introduces bias and weakens the evidence.

Question 6Environmental, Health and Safety Auditing

An organization's internal audit procedure requires that auditors be independent of the activity being audited. Which assignment best satisfies this requirement?

  1. A trained auditor from another site auditing the waste handling process Correct answer.
  2. A line operator auditing the process they operate daily
  3. The environmental manager who designed the process auditing it
  4. The production supervisor auditing their own department's waste handling

Explanation

Auditor independence requires that auditors do not audit their own work or have a conflict of interest. A trained auditor from another site has no responsibility for the audited process and can provide objective evidence-based conclusions.

Question 7Environmental, Health and Safety Auditing

An audit team identifies a finding that a permit-required monitoring report was submitted 45 days late. The site manager argues it should be an observation because the data were accurate. What is the most defensible auditor response?

  1. Reclassify as an observation because the data quality was acceptable
  2. Retain the nonconformity because the submission deadline is an explicit requirement Correct answer.
  3. Remove the finding because the report was eventually submitted
  4. Escalate directly to the regulator without documenting the finding

Explanation

Compliance includes meeting timing requirements, not only data accuracy. A missed submission deadline is a failure to meet an explicit permit requirement and remains a nonconformity regardless of data quality. Auditors document findings and classifications rather than bargaining them away.

Question 8Environmental, Health and Safety Auditing

Which of the following is the most reliable form of audit evidence for verifying that lockout/tagout is performed correctly?

  1. A manager's verbal assurance that procedures are followed
  2. A training attendance sheet for authorized employees
  3. Direct observation of a lockout performed during the audit Correct answer.
  4. A written procedure stating lockout steps

Explanation

Direct observation provides objective evidence of actual practice and can reveal gaps between the documented procedure and field performance. Documents and assurances alone show intent or awareness, not implementation.

Question 9Environmental, Health and Safety Auditing

An EHS auditor is reviewing a corrective action for a prior spill-prevention nonconformity. Which evidence best demonstrates the action was effective?

  1. A memo announcing the new procedure to staff
  2. A follow-up inspection showing no recurrence and containment in place Correct answer.
  3. A copy of the revised spill-prevention procedure
  4. A signed statement from the plant manager that the issue is resolved

Explanation

Effectiveness is demonstrated by evidence that the root cause was addressed and the condition has not recurred. A follow-up inspection showing containment in place provides objective verification of implementation and effect.

Question 10Environmental, Health and Safety Auditing

Which audit technique best tests whether employees understand their emergency response roles?

  1. Interviewing a sample of employees about their assigned roles Correct answer.
  2. Reviewing the emergency response plan document
  3. Checking that the plan bears a recent revision date
  4. Counting the number of fire extinguishers on site

Explanation

Competence and awareness are best verified through interviews that probe employees' understanding of their specific roles. Document review and equipment counts confirm existence, not understanding.

Question 11Environmental, Health and Safety Auditing

An auditor notes that a facility's environmental aspects register omits a newly commissioned solvent degreasing line. What is the most significant audit implication?

  1. The finding should be deferred to the next audit cycle
  2. The register should be reorganized alphabetically
  3. The omission may mean significant aspects and controls for the new line were not identified Correct answer.
  4. The omission is a documentation formatting issue

Explanation

The aspects register drives identification of significant environmental aspects and the controls applied to them. Omitting a new process means its impacts and controls may not have been evaluated, which is a substantive system weakness.

Question 12Environmental, Health and Safety Auditing

Which of the following best characterizes the difference between a compliance audit and a management system audit?

  1. A compliance audit reviews documents; a management system audit reviews interviews
  2. A compliance audit is voluntary; a management system audit is mandatory
  3. A compliance audit is always external; a management system audit is always internal
  4. A compliance audit evaluates conformance to legal and other requirements; a management system audit evaluates conformance to the EMS standard and internal arrangements Correct answer.

Explanation

Compliance audits focus on whether legal and other requirements are met, while management system audits evaluate whether the EMS conforms to the standard and the organization's own arrangements. Both can be internal or external and use varied evidence types.

Question 13Environmental, Health and Safety Auditing

An auditor is examining whether an organization has evaluated compliance with newly applicable regulations. Which evidence most directly addresses this requirement?

  1. A list of regulations printed at the start of the year
  2. Records of a compliance evaluation performed after the regulation took effect Correct answer.
  3. Minutes of a staff meeting where regulations were discussed
  4. A statement in the policy that the organization complies with laws

Explanation

The requirement is to evaluate compliance, so the most direct evidence is a documented evaluation conducted after the requirement became applicable. Discussion or a static list does not demonstrate evaluation.

Question 14Environmental, Health and Safety Auditing

An audit reveals that an operator bypassed an interlock on a process vessel to maintain production. Which finding attribute is most important to document beyond the immediate condition?

  1. The operator's length of service
  2. The root cause and systemic conditions that allowed the bypass Correct answer.
  3. The color of the interlock indicator light
  4. The production output during the shift

Explanation

Findings should capture the condition, criteria, evidence, and underlying cause so that corrective action addresses the system rather than only the symptom. Root cause and enabling conditions are essential for effective correction.

Question 15Environmental, Health and Safety Auditing

Which of the following best describes the role of objective evidence in an EHS audit report?

  1. It is optional when the auditor is experienced
  2. It replaces the need for audit criteria
  3. It supports findings and conclusions with verifiable facts Correct answer.
  4. It is limited to photographs taken during the audit

Explanation

Objective evidence is verifiable information that supports findings and conclusions. Audit reports should tie findings to criteria and evidence so that conclusions are defensible and traceable.

Question 16Environmental, Health and Safety Auditing

An organization wants to reduce the risk of missing regulatory changes between audits. Which control best supports this objective?

  1. Delegating all regulatory tracking to the audit team
  2. Adding a disclaimer to the environmental policy
  3. Increasing the internal audit frequency to quarterly
  4. Establishing a process to identify and evaluate new or changed legal requirements Correct answer.

Explanation

A defined process for identifying and evaluating changes in legal and other requirements addresses the root cause of missed obligations. Audit frequency detects problems after the fact rather than preventing them.

Question 17Environmental, Health and Safety Auditing

During an audit of contractor safety, the auditor finds that contractors performed hot work without a permit. Which audit conclusion is most appropriate?

  1. The audit scope should be expanded to exclude contractors
  2. Hot work permits are optional for short-duration tasks
  3. The finding should be closed because no fire occurred
  4. Contractor management controls are ineffective for hot work Correct answer.

Explanation

Absence of a required permit for hot work demonstrates a failure of contractor management and permit controls. The absence of harm does not negate the nonconformity, and the scope should not be narrowed to avoid the issue.

Question 18Environmental, Health and Safety Auditing

Which of the following is the most appropriate way for an auditor to handle a conflict of interest discovered mid-audit?

  1. Continue the audit and disclose the conflict in the report
  2. Delegate the conflicted area to an auditee
  3. Disclose the conflict to the audit program manager and recuse from affected areas Correct answer.
  4. Ignore the conflict if no findings result

Explanation

Auditor impartiality is fundamental to credible audits. A discovered conflict must be disclosed and managed, typically by recusal or reassignment of affected areas, rather than simply noted after the fact.

Question 19Environmental, Health and Safety Auditing

An auditor is evaluating whether an organization's emergency drills meet its own procedure. The procedure requires annual drills for all shifts, but records show drills were held only for the day shift. What is the finding?

  1. Nonconformity, because the organization's own procedure was not fully implemented Correct answer.
  2. Opportunity for improvement, because drills could be more frequent
  3. Conformity, because a drill was held during the year
  4. Observation, because drills are only recommended

Explanation

Audits evaluate conformance to the organization's own requirements as well as external ones. The procedure requires all shifts, and evidence shows only one shift participated, so the requirement was not met.

Question 20Environmental, Health and Safety Auditing

Which of the following best describes how an auditor should treat a finding that is outside the agreed audit scope but represents a serious risk?

  1. Investigate it fully and expand the audit without informing the client
  2. Ignore it because it is outside scope
  3. Document it and report it to the audit client for decision Correct answer.
  4. Include it as a nonconformity against the original criteria

Explanation

Auditors should report significant issues outside scope to the audit client so the client can decide how to handle them. Unilaterally expanding scope or judging against criteria not agreed can compromise the audit's integrity.

Question 21Environmental, Health and Safety Auditing

An auditor is assessing whether an organization's management review meets ISO 14001 expectations. Which input is required for consideration at management review?

  1. A list of all employees' training certificates
  2. The annual marketing plan
  3. The status of actions from previous management reviews Correct answer.
  4. The number of audits performed by competitors

Explanation

ISO 14001 specifies required inputs to management review, including the status of actions from previous reviews, changes in external and internal issues, compliance fulfilment, and audit results. Training lists and unrelated business plans are not specified inputs.

Question 22Environmental, Health and Safety Auditing

An auditor finds that an organization's nonconformity and corrective action process records actions taken but never evaluates whether the actions were effective. Which requirement is most directly unaddressed?

  1. Reviewing the effectiveness of any corrective action taken Correct answer.
  2. Communicating the nonconformity to regulators
  3. Determining the need for action to eliminate the cause
  4. Retaining a copy of the audit report

Explanation

Corrective action requires evaluating the effectiveness of actions taken so that the organization knows whether the root cause was eliminated. Recording actions alone does not close the loop on effectiveness.

Question 23Environmental, Health and Safety Auditing

An auditor is reviewing an organization's process for evaluating compliance obligations. Which situation most clearly indicates the process is not effective?

  1. A new permit condition took effect six months ago and has not been added to the register Correct answer.
  2. The compliance register is reviewed quarterly
  3. The register is maintained in a spreadsheet
  4. The register lists both legal and other requirements

Explanation

An effective process identifies and evaluates new or changed requirements promptly. A six-month-old permit condition missing from the register demonstrates the process failed to capture a known obligation.

Question 24Environmental, Health and Safety Auditing

Which of the following best explains why an auditor should trace a sample of records back to source data rather than relying on summary reports?

  1. Summary reports are not considered audit evidence
  2. Source data are easier to obtain
  3. Tracing verifies the reliability and completeness of reported information Correct answer.
  4. Summary reports are always inaccurate

Explanation

Tracing to source data tests the accuracy and completeness of summary information and strengthens the reliability of evidence. Summary reports can be valid evidence, but verification reduces the risk of undetected error.

Question 25Environmental, Health and Safety Auditing

Which of the following is the most appropriate action when an auditee disputes a finding during the closing meeting?

  1. Escalate immediately to the regulator
  2. Record the disagreement and the supporting evidence in the report Correct answer.
  3. Withdraw the finding to preserve the relationship
  4. Change the classification to an observation without justification

Explanation

Findings should be based on objective evidence against criteria, and disagreements should be documented along with the evidence so the audit client can adjudicate. Withdrawing or downgrading a finding without justification undermines audit integrity.

Question 26Environmental, Health and Safety Auditing

An EHS auditor is planning a compliance audit of a facility's hazardous waste accumulation area. Which document should the auditor obtain first to establish the regulatory requirements the site must meet?

  1. The maintenance work order history for the area
  2. The previous year's internal audit schedule
  3. The facility's annual training attendance roster
  4. The site's applicable hazardous waste regulations and permit conditions Correct answer.

Explanation

Audit criteria must be defined before evidence is gathered; for a compliance audit the criteria are the applicable regulations and permit conditions. Training rosters, work orders, and audit schedules are evidence or planning artifacts, not the benchmark against which compliance is judged.

Question 27Environmental, Health and Safety Auditing

During a walkthrough, an auditor observes a drum of flammable solvent stored without secondary containment near a floor drain. What is the most appropriate immediate action for the auditor?

  1. Omit the observation because it is outside the audit scope
  2. Wait until the closing meeting to raise the issue
  3. Personally move the drum to a containment area
  4. Document the observation with evidence and notify site management Correct answer.

Explanation

Auditors record objective evidence and escalate significant risks promptly to site management, but they do not take operational control of the site's processes. Immediate notification allows the organization to correct a serious condition while preserving the auditor's independence.

Question 28Environmental, Health and Safety Auditing

Which type of audit evidence generally provides the strongest basis for concluding that a permit condition is being met?

  1. A statement in the site's policy manual
  2. An unsigned draft of the monitoring procedure
  3. A direct observation plus corroborating monitoring records Correct answer.
  4. A verbal assurance from the area supervisor

Explanation

Evidence strength increases when independent sources corroborate each other; direct observation verified against contemporaneous records is more reliable than assertion alone. Policy statements and unsigned drafts describe intent rather than actual performance.

Question 29Environmental, Health and Safety Auditing

An auditor is selecting a sample of confined space entry permits to test. Which sampling approach best supports a defensible conclusion about the population?

  1. Selecting only permits with no recorded deviations
  2. Selecting the permits the site manager recommends
  3. Selecting only the permits filed most recently
  4. Selecting permits randomly across the full audit period and shifts Correct answer.

Explanation

Representative sampling requires coverage of the whole population, including different times and shifts, so bias is minimized. Convenience or manager-selected samples can hide nonconformities and weaken the audit conclusion.

Question 30Environmental, Health and Safety Auditing

Which statement best describes the purpose of an opening meeting at the start of an EHS audit?

  1. To confirm the audit plan, scope, criteria, and communication arrangements Correct answer.
  2. To verify that all corrective actions from prior audits are closed
  3. To present the audit findings and agree on corrective actions
  4. To interview employees about their training records

Explanation

The opening meeting aligns the audit team and auditee on scope, criteria, schedule, methods, and channels of communication before evidence collection begins. Findings and corrective actions belong to the closing meeting, and record verification is fieldwork.

Question 31Environmental, Health and Safety Auditing

An auditor is evaluating whether an organization's corrective action for a repeated chemical splash injury was effective. Which evidence is most relevant?

  1. The minutes of the meeting where the action was assigned
  2. The corrective action form signed by the plant manager
  3. A review of injury records and observations for a defined period after implementation Correct answer.
  4. The purchase order for new splash goggles

Explanation

Effectiveness is demonstrated by results after implementation, so injury trends and workplace observations over a defined period are the appropriate evidence. Assignment records and purchase orders prove only that an action was planned or purchased.

Question 32Environmental, Health and Safety Auditing

Which of the following is an example of a leading indicator that an EHS auditor might examine when assessing safety program performance?

  1. The number of completed workplace inspections and hazard reports Correct answer.
  2. The lost-time injury severity rate
  3. The workers' compensation claim cost trend
  4. The number of recordable injuries in the past year

Explanation

Leading indicators measure preventive activities and conditions before harm occurs, such as inspections completed and hazards reported. Injury counts, severity rates, and claim costs are lagging indicators that reflect outcomes already realized.

Question 33Environmental, Health and Safety Auditing

An auditor finds that a facility's emergency evacuation drill was conducted but no record of participant attendance exists. How should this be classified?

  1. A major nonconformity requiring immediate certification withdrawal
  2. A nonconformity because evidence of the drill cannot be verified Correct answer.
  3. An irrelevant issue outside EHS auditing
  4. An observation with no further action required

Explanation

Without attendance records, the auditor cannot verify that the required personnel participated, so the requirement for documented evidence is not met. This is typically a nonconformity, though its grading depends on the organization's criteria and risk.

Question 34Environmental, Health and Safety Auditing

An auditor is assessing whether an organization identifies environmental aspects of its activities, products, and services. Which approach best tests this requirement?

  1. Checking that the register is formatted as a spreadsheet
  2. Confirming that the register was approved by the EHS manager
  3. Reviewing the aspects register against a process walkthrough and change records Correct answer.
  4. Verifying that the register was updated within the last five years

Explanation

Comparing the documented register with actual processes and change records tests whether identification is complete and current, not merely documented. Approval, format, and age alone do not demonstrate that aspects were correctly identified.

Question 35Environmental, Health and Safety Auditing

During an audit, an auditee provides a procedure that is current and approved, but the auditor observes that workers follow a different practice. What is the most appropriate conclusion?

  1. The observation is invalid because the procedure is approved
  2. The procedure is adequate, so no finding is warranted
  3. The workers should be disciplined before the audit continues
  4. There is a gap between the documented procedure and actual practice Correct answer.

Explanation

Audit conclusions rest on evidence of actual implementation, so a divergence between the approved procedure and observed practice indicates an implementation gap. A document that is approved but not followed does not demonstrate control.

Question 36Environmental, Health and Safety Auditing

An auditor is reviewing an incident investigation report and notes that the root cause was recorded as 'employee carelessness.' Why is this conclusion weak from an audit perspective?

  1. It stops at individual behavior without examining underlying system factors Correct answer.
  2. It identifies a systemic cause that is too broad to correct
  3. It relies on too many interviews with witnesses
  4. It was documented after the incident occurred

Explanation

Effective root cause analysis examines contributing system factors such as design, training, supervision, and procedures. Attributing causation to carelessness alone typically prevents identification of correctable underlying conditions.

Question 37Environmental, Health and Safety Auditing

An EHS auditor is verifying that calibration of gas detectors is controlled. Which record provides the most direct evidence?

  1. Calibration certificates with dates, results, and technician identification Correct answer.
  2. The manufacturer's product brochure for the detectors
  3. The purchase invoice for the detectors
  4. The site's general equipment inventory list

Explanation

Calibration certificates record the actual performance check, the date, the result, and who performed it, directly evidencing control. Brochures, invoices, and inventory lists show specification or ownership, not calibration status.

Question 38Environmental, Health and Safety Auditing

An auditor is evaluating an organization's management of change process. Which situation most clearly indicates the process failed?

  1. A new process was introduced and the change request was approved before startup
  2. A change record includes a post-implementation review date
  3. A new chemical was introduced without updating the hazard communication inventory Correct answer.
  4. A change was reviewed by a cross-functional team

Explanation

Management of change must trigger updates to affected hazard information and controls; introducing a chemical without updating the inventory shows the process did not capture downstream impacts. The other options describe appropriate elements of a functioning process.

Question 39Environmental, Health and Safety Auditing

An auditor is assessing contractor safety management. Which evidence best demonstrates that contractors were qualified before starting work?

  1. A general orientation video available at the gate
  2. A list of contractors currently working on site
  3. Pre-qualification records showing safety performance review and approval before mobilization Correct answer.
  4. A signed contract stating the contractor will comply with site rules

Explanation

Pre-qualification records show that safety performance and competence were evaluated and approval was granted before work began. A contractual clause, a current list, or available orientation material does not prove that qualification occurred.

Question 40Environmental, Health and Safety Auditing

An auditor is testing whether an organization evaluates compliance with its legal obligations. Which finding would most directly indicate a weakness in this process?

  1. Compliance evaluation findings lead to corrective actions
  2. Compliance evaluation is performed annually and documented with conclusions
  3. Compliance evaluation covers only permits, excluding regulations with no permit requirement Correct answer.
  4. Compliance evaluation results are reviewed in management review

Explanation

A compliance evaluation must cover all applicable compliance obligations, not only permitted activities, so excluding non-permit regulations leaves obligations unevaluated. Annual performance, management review, and follow-up actions are all indicators of a functioning process.

Question 41Environmental, Health and Safety Auditing

An auditor is reviewing a training program for hazardous waste handlers. Which evidence best confirms that training was effective rather than merely delivered?

  1. Training sign-in sheets showing attendance dates
  2. Employee responses to knowledge questions and observed handling practices Correct answer.
  3. The training vendor's course outline
  4. The number of training hours scheduled per year

Explanation

Effectiveness is shown by demonstrated knowledge and correct on-the-job behavior, not by attendance or course design. Sign-in sheets, outlines, and scheduled hours prove delivery, not competence.

Question 42Environmental, Health and Safety Auditing

An auditor identifies that a required permit-required confined space program exists on paper but no entrants have been trained in the past two years. Which audit conclusion is most appropriate?

  1. The issue is an observation because no entry has yet occurred
  2. The program is not effectively implemented because competence requirements are unmet Correct answer.
  3. The program is conforming because documentation exists
  4. The finding should be dropped because training is an HR matter

Explanation

A documented program that lacks trained entrants cannot be effectively implemented, since competence is a core requirement for safe entry. Absence of a prior incident does not mitigate the unmet requirement.

Question 43Environmental, Health and Safety Auditing

An auditor is planning to use a checklist during a compliance audit. What is the most significant limitation of relying primarily on a checklist?

  1. It cannot be used for more than one facility
  2. It may constrain the auditor from pursuing unexpected conditions and system interactions Correct answer.
  3. It prevents the auditor from recording objective evidence
  4. It requires approval from the auditee before use

Explanation

Checklists support consistency but can narrow attention to listed items, causing auditors to miss unanticipated conditions and interactions between processes. They do not prevent evidence recording or require auditee approval.

Question 44Environmental, Health and Safety Auditing

An auditor finds a discrepancy between the volume of solvent purchased and the volume recorded as used and disposed over the same period. What is the most appropriate next step?

  1. Conclude that the facility is over-reporting disposal
  2. Report the discrepancy as fraud without further review
  3. Ignore the discrepancy because purchasing data are outside EHS scope
  4. Reconcile the mass balance by examining inventory records, waste manifests, and process changes Correct answer.

Explanation

A material balance discrepancy has several possible explanations, such as inventory change, evaporation, or unrecorded waste streams, so the auditor should reconcile using additional records before drawing a conclusion. Assuming fraud or dismissing the data would be premature.

Question 45Environmental, Health and Safety Auditing

An auditor is evaluating whether an organization's internal audit program meets management system expectations. Which characteristic is essential?

  1. Audit results are kept confidential from top management
  2. Audits are performed only by external certification bodies
  3. Audit criteria and scope are defined and auditors are objective and impartial Correct answer.
  4. Audits are scheduled only after incidents occur

Explanation

An internal audit program requires defined criteria and scope, plus auditor objectivity and impartiality so conclusions are unbiased. Internal audits are performed by the organization, are planned on a schedule, and results must reach management.

Question 46Environmental, Health and Safety Auditing

An auditor is reviewing a facility's process for tracking regulatory changes. Which control provides the strongest assurance that new requirements are identified and addressed?

  1. An annual reminder to managers to check for updates
  2. Reliance on the certification body to identify changes at surveillance audits
  3. A defined process assigning responsibility for monitoring sources, assessing applicability, and updating controls Correct answer.
  4. A subscription to a regulatory newsletter with no assigned reviewer

Explanation

Strong assurance comes from an assigned, repeatable process that monitors sources, assesses applicability, and updates controls and obligations. Reminders and unassigned subscriptions lack accountability, and relying on external audits leaves gaps between visits.

Question 47Environmental, Health and Safety Auditing

An auditor finds that a corrective action for a previous nonconformity was implemented, but the same nonconformity recurs six months later. What does this most likely indicate?

  1. The nonconformity grading was too lenient
  2. The original corrective action addressed the symptom rather than the root cause Correct answer.
  3. The organization's records are being falsified
  4. The audit sampling method was flawed

Explanation

Recurrence after an implemented action suggests the underlying cause was not identified or eliminated, so the action treated the symptom. It does not by itself indicate sampling error, grading problems, or falsification.

Question 48Environmental, Health and Safety Auditing

An auditor is assessing whether an organization's management review is effective. Which pattern would most strongly suggest the review is a formality rather than a functioning process?

  1. Review participants include top management and the EHS function
  2. Inputs include audit results and compliance evaluation, and outputs assign actions with owners and dates
  3. Review inputs include changes in legal requirements and interested party concerns
  4. The same generic minutes are produced each year with no actions, trends, or resource decisions Correct answer.

Explanation

An effective management review analyzes inputs and produces decisions and actions; identical minutes with no actions or trends indicate the review is not driving improvement. Including required inputs and top management are strengths, not weaknesses.

Question 49Environmental, Health and Safety Auditing

An auditor is evaluating a finding that involves a legal interpretation on which the organization and the regulator disagree. How should the auditor handle this in the report?

  1. Present the objective evidence and the differing interpretations, and classify the issue according to agreed audit criteria Correct answer.
  2. Report the issue as a major nonconformity regardless of the evidence
  3. State the organization's interpretation as the audit conclusion
  4. Omit the issue to avoid legal risk

Explanation

The auditor reports facts and evidence, notes the differing interpretations, and applies the agreed criteria without adjudicating legal disputes. Endorsing one interpretation or omitting the issue would compromise accuracy and objectivity.

Question 50Environmental, Health and Safety Auditing

An EHS auditor is assessing the reliability of self-reported performance data used in a management system dashboard. Which action best tests data integrity?

  1. Tracing a sample of dashboard figures back to source records and recalculating them Correct answer.
  2. Confirming that the dashboard is accessible to all employees
  3. Verifying that the dashboard was updated recently
  4. Reviewing the dashboard's visual design and layout

Explanation

Data integrity is tested by tracing reported figures to underlying source records and independently recalculating them. Accessibility, design, and recency do not demonstrate that the reported values are accurate.