The Consultant Offer
You are the lead auditor for a third-party ISO 14001 surveillance audit at a specialty chemical blender. On day three you find oxidizer drums stored directly next to flammable solvents in a 12,000-square-foot warehouse, with no secondary containment and no separation by distance. The client's emergency plan does not address this combination. The plant manager takes you aside and offers a paid consulting engagement to help redesign the storage area after the audit. He says a major finding would delay a customer contract and hints that other auditors have been practical. Your certification body has a separate consulting division that already provides training to the client. The audit team has two days left. The nonconformity evidence includes photographs, a walk-through note, and an interview with the warehouse supervisor who confirms the arrangement has existed for eight months.
1. Identify the ethical issues and applicable auditor conduct requirements, and state what you should do immediately.
Read the worked answer
Independence and conflict of interest. The offer creates a self-interest threat and a self-review threat: if I consult on the fix, I may later audit my own work. Third-party certification auditors must not provide consultancy to the client they audit, and must not accept inducements that could influence judgement. The hint that a major finding would delay a contract is inappropriate pressure. The separate consulting division's training contract also creates a potential conflict at the firm level, even if I am not involved.\n\nRequired response: decline the engagement, disclose the offer and the pressure to my audit program manager and the certification body's impartiality committee, and document the conversation. I should not continue as lead auditor if the conflict cannot be managed. I must not promise certification or soften the finding. The warehouse condition is a significant risk: oxidizer and flammable storage without separation or containment could cause a serious incident.\n\nJudgement point: the duty to report the offer is as important as declining it; silence allows the pressure to continue.
2. How should the finding be reported and how should you respond to the manager's pressure?
Read the worked answer
Report the finding factually. The report should state the storage arrangement, the lack of secondary containment, the emergency plan gap, the eight-month duration confirmed by the supervisor, and the evidence (photos, walk-through note, interview). The classification should reflect risk and system failure, not the client's contract. I would classify it as a major nonconformity if the hazard is uncontrolled and the EMS failed to detect it; at minimum it requires immediate correction.\n\nResponding to pressure: thank the manager, restate that the audit evidence must be reported, and refer the commercial discussion to the certification body. Do not accept the consulting offer. If the client continues to pressure, escalate and consider whether the audit can continue impartially. The audit team should debrief and ensure no team member is influenced. Confidentiality applies, but the certification body must receive the facts.\n\nJudgement point: the auditor's conclusion must be based on evidence and risk, not on the client's commercial consequences.
3. The certification body's consulting division already provides training to this client. What should the audit program manager do about this relationship?
Read the worked answer
Firm-level independence review. The manager should assess whether the training contract creates an unacceptable threat. Generic training that does not implement corrective actions for the audit finding may be manageable with safeguards. Training that helps the client fix the storage issue would create a self-review threat and should not be provided by the same certification body. The manager should document the analysis, apply the certification body's impartiality rules, and consider reassigning the audit or declining one of the engagements.\n\nDisclosure: the client should be informed if the relationship affects the audit. The audit team should not receive consulting documents or use them as audit evidence. If the threat cannot be reduced, the audit should not proceed.\n\nJudgement point: independence is assessed at both the individual and firm level. A separate division does not automatically separate the risk.