Quality Management System (ISO 9001) Auditor
The ISO 9001 auditor exam tests clause-level knowledge of ISO 9001:2015 and the audit process in ISO 19011:2018 and ISO/IEC 17021-1:2015. You must be able to follow an audit trail, collect objective evidence, and classify findings correctly.
Core rules
- ISO 9001:2015 uses the Annex SL 10-clause structure. Auditable requirements sit in clauses 4–10; clauses 1–3 are informative.
- Clause 4.4 requires the process approach: processes, sequence and interaction, inputs/outputs, criteria, resources, responsibilities, risks, and improvement. Audit process performance, not just turtle diagrams.
- Risk-based thinking sits in 6.1 (actions to address risks and opportunities). There is no requirement for a documented risk register or a formal risk-assessment method.
- Documented information (7.5) is required only where the standard says so. A quality manual, six mandatory procedures, and a management representative are not required by the 2015 edition.
- 9.2 requires an internal audit programme covering criteria, scope, frequency, and auditor objectivity; 9.3 defines management review inputs and outputs.
- 10.2 separates correction (fix the nonconformity) from corrective action (address the cause and review effectiveness).
Worked example
A final-assembly torque wrench has a calibration label showing “due 03/2024”; the audit is in July 2024, and the wrench is in use. Clause 7.1.5.1 requires measuring resources that give valid results, and 7.1.5.2 requires calibration at specified intervals and identification of status. The finding is against 7.1.5.2. Severity depends on evidence: if product was released using the wrench, trace affected product and assess whether a major nonconformity (system failure affecting conformity) is justified. The correction is recalibration and product assessment; the corrective action must address why the schedule failed.
Traps
Citing ISO 9001:2008 clauses such as 8.2.2 or 4.2.3; writing “observation” for a clear requirement failure; treating a missing quality manual as a nonconformity; using “correction” and “corrective action” interchangeably; and accepting a procedure instead of evidence that the process is effective.