Exemplar Global QMS Lead Auditor flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Audit criteria

The set of policies, procedures, requirements, standards, or contractual obligations against which audit evidence is compared to determine conformity. For an ISO 9001 audit the criteria include the standard, the QMS documentation, and applicable customer or regulatory requirements.

Audit evidence

Records, statements of fact, or other verifiable information relevant to the audit criteria. Evidence must be traceable to its source so that findings and conclusions can be substantiated and defended if challenged.

Audit finding

The result of evaluating collected audit evidence against audit criteria. Findings may indicate conformity or nonconformity; they are the factual basis from which audit conclusions and reports are built.

Major nonconformity

A nonconformity that affects the capability of the management system to achieve intended results, or a significant failure of a required system element. It typically warrants priority correction and may affect certification.

Minor nonconformity

A single observed lapse or isolated failure that does not indicate a systemic breakdown of the management system. It still requires correction and root-cause evaluation, but does not by itself prevent effective operation.

Audit scope

The extent and boundaries of an audit, including the organizational units, processes, locations, and time period covered. The scope must be consistent with the audit objectives and stated in the audit plan and report.

Audit programme

Arrangements for a set of one or more audits planned for a specific time frame and directed at a specific purpose. It includes scheduling, resourcing, and the processes for conducting and improving audits.

Auditor impartiality

The requirement that auditors be independent of the activity being audited and free from bias or conflict of interest. Auditors must not audit their own work, and objectivity must be maintained throughout.

Opening meeting purpose

To confirm the audit plan and scope, explain the methods and criteria, confirm communication channels and escalation routes, and clarify that findings are based on sampling and evidence, not exhaustive inspection.

Sampling in auditing

Selecting a subset of records or activities to evaluate against criteria. Sampling introduces uncertainty, so conclusions apply to the sample and evidence must be sufficient and representative, not merely convenient.

Process approach

Managing activities as interrelated processes with defined inputs, outputs, sequence, interactions, and performance measures. It requires understanding how processes combine to produce intended results and how they are controlled.

Risk-based thinking

Considering risks and opportunities when planning and operating the QMS, then taking proportionate action. It is implicit throughout ISO 9001 and explicitly required in clause 6.1 planning actions.

Context of the organization

The combination of internal and external issues, and the requirements of relevant interested parties, that can affect the QMS and its intended outcomes. Clause 4 requires determining and monitoring this context.

Interested party

A person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity. Relevant interested parties and their requirements must be determined under clause 4.2.

Quality objective

A result to be achieved related to quality, established for relevant functions and levels. Objectives must be consistent with quality policy, measurable, monitored, and supported by plans for achievement.

Quality policy

A statement of the organization's quality intentions and direction, appropriate to its purpose and context. It must include commitment to satisfy applicable requirements and to continual improvement.

Documented information

Information required to be controlled and maintained, plus the medium on which it is contained. It covers both documents (how things are done) and records (evidence of results).

Control of documented information

Ensuring documented information is available and suitable where and when needed, and protected from loss of integrity, improper access, or unauthorized change. Distribution, retention, and disposition must be controlled.

Monitoring and measurement

Determining the status and performance of activities against criteria, using methods that ensure valid results. Equipment used for measurement must be suitable and calibrated or verified where required.

Calibration traceability

Measurement equipment must be calibrated or verified at specified intervals against standards traceable to national or international standards. Where traceability is not possible, the basis for calibration must be recorded.

Internal audit clause 9.2

Requires internal audits at planned intervals, an audit programme, defined criteria and scope, impartial auditors, reporting to relevant management, and correction and corrective action without undue delay.

Management review inputs

Clause 9.3 requires review of audit results, customer satisfaction, process performance, nonconformities, corrective actions, monitoring results, resource adequacy, and risks and opportunities, with outputs covering improvement and resource needs.

Nonconformity and corrective action

Clause 10.2 requires reacting to nonconformities, evaluating the need to eliminate causes, implementing action, reviewing effectiveness, updating risks, and retaining documented information as evidence of the process.

Continual improvement

The recurring activity to enhance performance, required by clause 10.3. Organizations must determine and select opportunities and implement actions to meet customer requirements and increase satisfaction.

Conformity

Fulfilment of a requirement, as stated in ISO 9000 vocabulary. In an audit, a conformity finding records that evidence shows the requirement has been met.

Audit conclusion

The outcome of the audit after considering the audit objectives and all findings. It states whether the management system conforms, is effectively implemented and maintained, and identifies areas for improvement.

Vertical audit

Tracing a specific product, service, or project through the full set of processes from order to delivery. It tests process interaction and end-to-end control rather than isolated departmental compliance.

Horizontal audit

Examining a single process or requirement across multiple departments, projects, or sites. It is useful for identifying systemic issues and consistency of implementation across the organization.

Audit trail

The documented sequence linking a requirement through records and activities to the resulting evidence. A clear audit trail allows the auditor to verify traceability and to substantiate each finding.

Competence of auditors

Auditors must have the education, training, experience, and personal attributes needed to conduct audits effectively. Competence must be evaluated and maintained through ongoing professional development.

Customer satisfaction monitoring

Clause 9.1.2 requires monitoring customer perceptions of the degree to which needs and expectations are met. Methods may include surveys, complaints, returns, and repeat business, and results must be analysed.

Audit report content

The report must record audit objectives, scope, criteria, dates and locations, findings and evidence, conclusions, and any unresolved divergences. It should be factual, clear, and issued within agreed time frames.