ISO-IEC-42001-LEAD-AUDITOR practice question 11 of 25

[Conducting an ISO/IEC 42001 Audit] Scenario 6 (continued): Scenario 6: HappilyAI is a pioneering enterprise dedicated to developing and deploying…

Full set: 120 questions
[Conducting an ISO/IEC 42001 Audit] Scenario 6 (continued): Scenario 6: HappilyAI is a pioneering enterprise dedicated to developing and deploying artificial intelligence Al solutions tailored toenhance customer service experiences across various industries. The company offers innovative products like virtual assistants,predictive analytics tools, and personalized customer interaction platforms. As part of its commitment to operational excellence andinnovation, HappilyAI has implemented a robust Al management system AIMS to oversee its Al operations effectively. Currently.HappilyAI is undergoing a comprehensive audit process of its AIMS to evaluate its compliance with ISO/IEC 42001. Under the leadership of Jess, the audit team began the audit process with meticulous planning and coordination, setting the groundworkfor the extensive on-site activities of the stage 1 audit. This initial phase was marked by a comprehensive documentation review. Theaudit scope encompassed a critical review of HappilyAI's core departments, including Research and Development (R&D), CustomerService, and Data Security, aiming to assess the conformity of HappilyAI's AIMS to the requirements of ISO/IEC 42001. Afterward, Jess and the team conducted a formal opening meeting with HappilyAI to introduce the audit team and outline the auditactivities. The meeting set a collaborative tone for the subsequent phases, where the team engaged in information collection, executedaudit tests, identified findings, and prepared draft nonconformity reports while maintaining a strict quality review process. In gathering evidence, the audit team employed a sampling method, which involved dividing the population into homogeneous groups toensure a comprehensive and representative data collection by drawing samples from each segment. Furthermore, the team employedobservation to deepen their understanding of the Al management processes. They verified the availability of essential documentation,including Al-related policies, and evaluated the communication channels established for reporting incidents. Additionally, they scrutinized specific monitoring tools designed to track the performance of data acquisition processes, ensuring thesetools effectively identify and respond to errors or anomalies. However, a notable challenge emerged as the team encountered a lack ofaccess to documented information that describes how tasks about AIMS are executed. In addition to this, the team identified a potentialnonconformity within the Sales Department. They decided not to record this as a nonconformity in the audit report but onlycommunicated it to the HappilyAI's representatives. During the stage 2 audit, the certification body, in collaboration with HappilyAI, assigned the roles of technical experts within the auditteam. Recognized for their specialized knowledge and expertisein artificial intelligence and its applications, these technical experts aretasked with the thorough assessment of the AIMS framework to ensure its alignment with industry standards and best practices,focusing on areas such as data ethics, algorithmic transparency, and Al system security. During the stage 2 audit, the certification body and the company assigned the roles of technical experts. Is this acceptable?
Answer options
A: No, the roles of technical experts must be assigned by the certification body prior to conducting the audit Correct answer
B: No, the company must assign the roles of technical experts independently of the certification body's involvement
C: Yes, the role of technical experts must be agreed upon by the certification body and the company during the audit process
Correct Answer:
A. No, the roles of technical experts must be assigned by the certification body prior to conducting the audit
Explanation

The certification body (CB) holds the sole responsibility for determining the competence of and appointing the audit team, including any technical experts. This is a critical aspect of ensuring the audit's impartiality and objectivity. This selection and assignment process must be completed during the planning phase, before the audit commences. The auditee's involvement is limited to the right to object to a team member on valid grounds, such as a conflict of interest. Assigning roles "in collaboration with" the auditee during the audit is improper procedure.

Why Incorrect

B. The auditee (the company) must never assign members to the audit team, as this would be a fundamental breach of impartiality.
C. The final decision rests with the certification body, not a mutual agreement. The auditee can object, but they do not jointly "agree upon" the assignment.

References

1. ISO/IEC 17021-1:2015, Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements, Clause 9.1.5.2. This clause explicitly states, "The certification body shall have a process for selecting and appointing the audit team...".

2. ISO/IEC 17021-1:2015, Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements, Clause 5.2. This section details the principles of impartiality, which would be compromised if the auditee were involved in assigning roles to the audit team.

3. ISO 19011:2018, Guidelines for auditing management systems, Clause 6.2.1 (General). This clause outlines that the responsibility for managing an audit programme includes establishing the competence of auditors and selecting audit teams.

Keep practicing

Take the free ISO-IEC-42001-LEAD-AUDITOR practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other ISO-IEC-42001-LEAD-AUDITOR practice questions

Scroll to Top