Free CQA Practice Test

The auditor's primary function is to identify and report nonconformities based on objective evidence against the audit criteria (in this case, the procedure). The finding of noncompliance is valid. However, the auditee's response indicates a potential systemic issue: a conflict within their own documentation hierarchy (policy vs. procedure). It is the auditee's responsibility, not the auditor's, to correct their management system. Therefore, the appropriate action is for the auditor to uphold the finding and request that the auditee investigate and resolve the internal conflict as part of their corrective action process. This ensures the root cause of the noncompliance is properly addressed by the responsible party.

A. Closing the corrective action request is improper because a valid noncompliance and a systemic documentation conflict exist and require resolution.
B. The auditor should not dictate solutions; instructing the auditee to comply with a procedure that may violate policy is inappropriate and oversteps the auditor's role.
C. Voiding the noncompliance is incorrect. The objective evidence shows the procedure was not followed, which is a factual finding that must be reported.

1. The ASQ Certified Quality Auditor Handbook, 5th ed., ASQ Quality Press. Chapter 15, "Audit Reporting and Follow-Up," Section: "Nonconformity Statement," pp. 218-219. The handbook emphasizes that the nonconformity statement must be clear and concise, enabling the auditee to understand the problem and take appropriate corrective action. The responsibility for determining the cause and corrective action rests with the auditee.

2. ISO 19011:2018, Guidelines for auditing management systems. Clause 6.4.8, "Generating audit findings." This standard states that nonconformities shall be recorded. Clause 6.6, "Completing the audit," implies that the output is a report that enables the auditee to take action. A conflict between documents is a significant finding about the management system's effectiveness that the auditee must resolve.

3. Russell, J. P. (Ed.). (2013). The ASQ Auditing Handbook, 4th ed. ASQ Quality Press. Chapter 20, "Corrective and Preventive Action," p. 316. This text clarifies that the auditee organization is responsible for investigating the cause of nonconformities and taking action to prevent recurrence. The auditor's role is to identify the issue, not to prescribe the solution or resolve internal conflicts.

The control chart clearly shows seven or more consecutive data points moving in a sustained upward direction. In Statistical Process Control (SPC), this specific non-random pattern is defined as a "trend." A trend indicates a gradual, systematic change in the process, suggesting that an assignable cause is influencing the process mean over time. The presence of such a pattern is a key indicator that the process is out of statistical control and requires investigation to identify and correct the root cause of the progressive change.

A. cycle: This is incorrect because a cycle is a repeating, wave-like pattern of high and low values, which is not depicted in the graph.
B. run: While the data does form a run (a series of points on one side of the centerline), "trend" is the more specific and accurate description for the continuous directional movement.
D. shift: This is incorrect as a shift represents an abrupt, sustained change to a new process level, not the gradual, continuous increase shown.

1. Montgomery, D. C. (2013). Introduction to Statistical Quality Control (7th ed.). John Wiley & Sons. In Section 5.3.2, "Warning Limits and Rules for Out-of-Control Signals," one of the key rules for identifying an out-of-control condition is "Six points in a row steadily increasing or decreasing." This pattern is explicitly defined as a trend. (p. 211).

2. NIST/SEMATECH. (n.d.). e-Handbook of Statistical Methods. Section 6.3.2, "Unusual Patterns and Runs." The handbook identifies a "Trend" as a common non-random pattern on a control chart, defining it as "six or more points in a row steadily increasing or decreasing." The provided graph exemplifies this rule.

3. Juran, J. M., & Gryna, F. M. (1988). Juran's Quality Control Handbook (4th ed.). McGraw-Hill. In Section 24, "Statistical Process Control," the authors describe tests for instability. Test 3 identifies a "Trend or steady change in level" indicated by "seven points in a row, all going up or all going down." (p. 24.19).

4. University of Michigan, College of Engineering. (n.d.). Statistical Process Control Courseware. Module: Control Chart Pattern Recognition. The courseware identifies a trend as a "long series of points that are continuously increasing or decreasing," which signals a gradual change in the process average.

The primary purpose of an audit report is to provide a formal, comprehensive, and factual record of the audit. Its most critical component is the audit findings. Audit findings are the results of evaluating the collected audit evidence against the audit criteria. They can include statements of conformity, nonconformity, and opportunities for improvement. The report serves as the official communication of these results to management and the auditee, forming the basis for any subsequent actions. The other options listed are part of the post-audit process and are the responsibility of the auditee, not the auditor to include in the initial report.

B. Root cause analysis: This is the responsibility of the auditee to perform in response to a nonconformity finding, not the auditor's role to determine or report.
C. Corrective action: The development and implementation of corrective actions are the auditee's responsibility after they have received and accepted the audit findings.
D. Re-audit schedule: A follow-up or re-audit is scheduled after the auditee has developed a corrective action plan; it is not a standard component of the initial audit report.

1. ISO 19011:2018, Guidelines for auditing management systems. Clause 6.6.2, "Audit report content," explicitly lists "audit findings and related evidence" as a key element of a complete audit report. It does not list root cause analysis, corrective actions, or a re-audit schedule as required content for the initial report.

2. Russell, J. P. (Ed.). (2013). The ASQ Auditing Handbook (4th ed.). ASQ Quality Press. Chapter 17, "Audit Reporting," states, "The audit report should be a formal, written document that describes the audit objectives, scope, and findings... The findings section is the most important part of the report" (p. 267). It clearly separates the reporting of findings from the corrective action process.

3. Sayle, A. J. (1997). Management Audits: The Assessment of Quality Management Systems (3rd ed.). Allan J Sayle. In the section on reporting, it is emphasized that the report must contain a clear statement of any nonconformities found. The book distinguishes this reporting phase from the subsequent corrective action phase, which is the auditee's responsibility (Chapter 10, Reporting the Audit).

The definition of a root cause is the most fundamental reason for the occurrence of a problem or nonconformance. The primary objective of root cause analysis is to identify this underlying issue so that effective corrective action can be taken. By addressing and eliminating the root cause, an organization ensures that the same problem will not happen again. The other options describe tools or processes associated with root cause analysis or nonconformance management, but they do not define the term itself. The core concept is the prevention of recurrence.

A. Designed experiments are a powerful statistical tool used to identify and confirm root causes, but they are not part of the definition.
B. A fishbone (Ishikawa) diagram is a brainstorming tool used to explore and categorize potential causes, not the definition of the actual root cause.
C. The Material Review Board (MRB) is a functional group that decides on the disposition of nonconforming material; its review is a process step, not a definitional characteristic of a root cause.

1. ISO 9000:2015, Quality management systems — Fundamentals and vocabulary.

Section 3.12.2, Note 1 to entry: In the definition of "corrective action" ("action to eliminate the cause of a nonconformity and to prevent recurrence"), the standard distinguishes it from "correction" ("action to eliminate a detected nonconformity"). This emphasizes that addressing the cause is directly linked to preventing recurrence, which is the essence of option D.

2. Russell, J. P. (Ed.). (2021). The ASQ Certified Quality Auditor Handbook (5th ed.). ASQ Quality Press.

Chapter 18, Corrective Action, p. 287: "The root cause is the factor that, when eliminated, prevents the recurrence of the problem... The objective of the root cause analysis is to find the basic cause of the problem so that it can be eliminated." This directly supports that correction must prevent recurrence.

3. Tague, N. R. (2005). The Quality Toolbox (2nd ed.). ASQ Quality Press.

Chapter on Root Cause Analysis, p. 445: "Root cause analysis is an analytical tool used to find the fundamental cause of a problem... The root cause is the cause that, if corrected, will prevent the problem from recurring." This definition explicitly aligns with option D.

4. Purdue University. (n.d.). Root Cause Analysis. Purdue Online Writing Lab (OWL).

In its description of the methodology, the resource states: "The root cause is the core issue—the highest-level cause—that sets in motion the entire cause-and-effect reaction that ultimately leads to the problem(s)." The entire purpose of the analysis described is to find this core issue to implement a permanent fix.

The audit is performed on behalf of the client, who commissions the audit. Therefore, the audit report is the property of the client. While the lead auditor is responsible for preparing and issuing the report, the client retains the ultimate authority and makes the final determination regarding its distribution. The distribution list is typically agreed upon during the audit planning phase and is documented in the audit plan, which is approved by the client. The auditor's responsibility is to ensure the report is distributed according to the client's instructions while maintaining confidentiality.

A. The lead auditor: The lead auditor manages the audit and prepares the report, but they act on behalf of the client and do not have the final authority over report distribution.
B. The audit group manager: The audit group manager oversees the audit program but does not own the output of a specific audit; ownership rests with the client who requested it.
C. The auditee: The auditee is the subject of the audit and a primary recipient of the report, but they do not have the authority to control its distribution to other parties.

1. ISO 19011:2018, Guidelines for auditing management systems. Clause 6.6.2, "Distributing the audit report," states: "The approved audit report should then be distributed to the relevant interested parties, as defined in the audit plan or audit programme procedures." The audit plan and programme are established under the authority of the individual(s) managing the audit programme, on behalf of the client.

2. Russell, J. P. (Ed.). (2021). The ASQ Certified Quality Auditor Handbook (5th ed.). ASQ Quality Press. In Chapter 11, "Audit Reporting," the section on "Report Distribution" explicitly states, "The audit report is the property of the client. The client determines who should receive copies of the report." (p. 188).

3. Sayle, A. J. (1997). Management Audits: The Assessment of Quality Management Systems (3rd ed.). Allan J Sayle. In Chapter 11, "The Report," it is noted that "The report is the property of the client and should not be shown to any third party without the client's express permission." (p. 311). This reinforces the principle of client ownership and control over distribution.

Root Cause Analysis (RCA) is a structured, problem-solving methodology used to identify the fundamental, underlying cause(s) of a problem or an undesirable condition. The primary objective is to move beyond treating the immediate symptoms and to uncover the "basic reason" for the failure. By identifying and addressing the true root cause, an organization can implement corrective actions that prevent the problem from recurring, leading to sustainable process improvement. The process involves systematically investigating an issue to determine not just what happened, but why it happened at its most foundational level.

A. Evaluating corrective action plans is a distinct step that occurs after the root cause has been identified and a plan has been formulated.
C. Identifying symptoms is the initial step in problem-solving that triggers an investigation; RCA is the process used to look beyond these symptoms.
D. Differentiating between major and minor problems is a prioritization or risk assessment activity, which typically precedes the decision to conduct an RCA.

1. Russell, J. P. (Ed.). (2021). The ASQ Certified Quality Auditor Handbook (5th ed.). ASQ Quality Press. In Chapter 16, "Corrective Action," the text defines a root cause as "a factor that caused a nonconformance and should be permanently eliminated through process improvement" (p. 289). This supports the idea of finding the "basic reason."

2. DeFeo, J. A. (2017). Juran's Quality Handbook: The Complete Guide to Performance Excellence (7th ed.). McGraw-Hill Education. Chapter 5, Section 5.8.3, "Corrective Action," explains that the process involves moving from the symptom to the root cause, stating, "The objective of the corrective action process is to prevent recurrence of problems by eliminating their root cause."

3. Tague, N. R. (2005). The Quality Toolbox (2nd ed.). ASQ Quality Press. The section on "Root Cause Analysis" (pp. 445-448) explicitly contrasts addressing symptoms with finding the underlying cause, describing it as a process to identify "the most basic reason for an undesirable condition or problem."

During a supplier audit, the auditor's access is limited to information relevant to the products or services being procured and the supplier's overall quality management system (QMS). Quality records for a product made for another customer are considered proprietary and confidential. Sharing such information would violate the supplier's confidentiality agreements with that customer. While an auditor must verify the QMS is effective, they must do so by reviewing records pertinent to their own organization's products or general system records, not by examining a competitor's or another client's specific data. This respects business ethics and confidentiality, a key principle in auditing.

A. Internal audit reports are a key indicator of the supplier's QMS maturity and self-correction capabilities, making them a valid area for review.
B. Parts inventory information is relevant for verifying controls like traceability, material handling, and management of nonconforming products.
D. Operating instructions are essential documents reviewed to ensure processes are defined, controlled, and followed as required by the QMS.

1. ISO 19011:2018, Guidelines for auditing management systems. Clause 4, "Principles of auditing," lists "Confidentiality – security of information" as a fundamental principle. It states, "Auditors should exercise discretion in the use and protection of information acquired in the course of their duties." This principle directly prohibits reviewing one customer's confidential records during an audit for another customer.

2. Russell, J. P. (Ed.). (2021). The ASQ Certified Quality Auditor Handbook (5th ed.). Chapter 11, "Supplier Management," discusses the relationship between customers and suppliers, which is governed by contracts and agreements that include confidentiality clauses. The handbook emphasizes that the audit scope must be respected, and access to proprietary information of third parties is typically excluded from this scope.

3. Goetsch, D. L., & Davis, S. B. (2020). Quality Management for Organizational Excellence (9th ed.). In the context of supplier partnerships and audits (Chapter 10), the text underscores the importance of trust and ethical conduct. Accessing a competitor's or another customer's proprietary data would be an ethical breach and destroy the trust essential for a supplier-customer relationship.

4. Purdue University, MET 44300 - Quality Control Courseware. Lectures on Supplier Quality Assurance emphasize that while auditors need access to evidence of a functioning quality system, this does not extend to proprietary information belonging to other clients. The audit's focus should be on the supplier's processes and records related to the auditing organization's products.

The primary responsibilities of audit team members during the execution of an audit are to operate within the defined boundaries and to perform the core audit tasks. This includes remaining within the audit scope (II) to ensure the audit is focused and its objectives are met. A fundamental activity for auditors is to collect, verify, and analyze objective evidence (III) against the established audit criteria. This process forms the basis for the audit findings and conclusions. Initiating the audit is a management function, and prescribing specific corrective actions is the responsibility of the auditee to maintain auditor independence and objectivity.

I. Initiating the audit: This is the responsibility of the individual managing the audit program or the audit client, not the audit team members who are assigned to a pre-initiated audit.
IV. Recommending specific corrective actions: Auditors identify and report nonconformities. Prescribing solutions is the auditee's role; doing so would compromise the auditor's objectivity and create a potential conflict of interest.

1. ISO 19011:2018, Guidelines for auditing management systems.

Clause 7.2.3.2, Auditors: This section outlines the responsibilities of auditors, which explicitly include "remaining within the audit scope" and "collecting and analysing audit evidence to reach audit conclusions."

Clause 5.4.1, Initiating the audit: This clause specifies that the individual(s) managing the audit programme should initiate the audit, confirming that this is not an audit team member's task.

Clause 6.6, Preparing and distributing the audit report: The standard indicates the report should contain audit findings and conclusions. It does not state that auditors should recommend specific corrective actions. The responsibility for determining and implementing corrections lies with the auditee.

2. Russell, J. P. (Ed.). (2013). The ASQ Auditing Handbook (4th ed.). ASQ Quality Press.

Chapter 6, The Audit Process: This chapter details the stages of an audit. It clarifies that auditors are responsible for "collecting objective evidence" and "evaluating evidence against criteria" (p. 89). It also emphasizes that the audit team must adhere to the agreed-upon scope (p. 85). The handbook distinguishes the auditor's role of reporting findings from the auditee's role of determining corrective actions (p. 93).

The primary purpose of the closing meeting is to formally communicate the audit's outcomes to the auditee's management and relevant stakeholders. The lead auditor chairs this meeting and is responsible for presenting a clear and concise summary of the audit results. This includes positive findings, observations, nonconformities, and the overall audit conclusion. This ensures that the auditee has a complete and formal understanding of the audit's outcome, which serves as the basis for any required corrective actions.

A. Accept the presentation of objective evidence. The collection and verification of objective evidence occur during the evidence-gathering phase (fieldwork) of the audit, not in the closing meeting.
B. Review the auditor’s qualifications. The audit team's competence and qualifications are typically confirmed and communicated during the audit planning stages or at the opening meeting.
C. Perform a causal analysis with the auditee. Causal analysis for nonconformities is the responsibility of the auditee as part of their corrective action process after the audit has concluded.

1. ISO 19011:2018, Guidelines for auditing management systems, Section 6.4.9, "Conducting the closing meeting." This section states that the purpose of the closing meeting, chaired by the lead auditor, is to "present the audit findings and conclusions." It lists typical activities, including presenting the summary and conclusions of the audit.

2. Russell, J. P. (Ed.). (2021). The ASQ Certified Quality Auditor Handbook (5th ed.). ASQ Quality Press. Chapter 11, "Audit Performance," details the closing meeting process. It specifies that the lead auditor presents the audit summary, including "the audit scope, objectives, overall performance, positive observations, nonconformities, and the audit team’s conclusion" (p. 188).

3. Purdue University, Manufacturing Extension Partnership (MEP). ISO 9001:2015 Internal Auditor Training Courseware. Module 6, "Conducting the Audit." The course materials outline the audit process according to ISO 19011, specifying that the closing meeting is for the lead auditor to "report audit findings and conclusions" and "present the audit report." It clarifies that root cause analysis is a post-audit activity for the auditee.

The primary goal of an audit is to gather objective evidence to verify conformity to established criteria. A request to "Show me..." prompts the auditee to present tangible records, documents, or physical evidence. This allows the auditor to directly observe and verify the information, which is the essence of objective evidence. The other options are open-ended questions that elicit verbal responses (testimonial evidence). While useful for understanding processes, testimonial evidence is subjective and must be corroborated by objective evidence, which is what the request in option D seeks directly.

A. This question elicits a verbal description, which is subjective testimonial evidence, not the objective evidence itself.
B. This question identifies a source of information but does not provide the actual evidence for the auditor to verify.
C. This question asks for a description of a process, which is a verbal account and requires subsequent verification with objective evidence.

1. ISO 19011:2018, Guidelines for auditing management systems, Clause 6.4.5, "Collecting and verifying information." This standard outlines methods for collecting information, including document review and observation. The request "Show me the information..." is a direct method for initiating a document review, which provides verifiable audit evidence, as opposed to interviews which gather testimonial information that may need further corroboration.

2. Russell, J. P. (Ed.). (2013). The ASQ Auditing Handbook (4th ed.). ASQ Quality Press. Chapter 16, "Audit Evidence and Communication," explains that objective evidence is factual and verifiable. The handbook contrasts interview techniques (like options A, B, and C) with the direct examination of records (prompted by option D), emphasizing that physical examination and document review provide the strongest forms of evidence. (pp. 235-237).

3. Sayle, A. J. (1997). Management Audits: The Assessment of Quality Management Systems (3rd ed.). ASQ Quality Press. In Chapter 8, "The Techniques of Auditing," Sayle emphasizes that the auditor's role is to seek proof. A request to be shown evidence is a direct method of seeking this proof, whereas asking for descriptions relies on the auditee's memory and interpretation, which is less reliable and objective. (p. 215).