ISO-IEC-42001-LEAD-AUDITOR practice question 2 of 25

[Conducting an ISO/IEC 42001 Audit] Scenario 7 (continued): Scenario 7: ICure, headquartered in Bratislava, is a medical institution known for its…

Full set: 120 questions
[Conducting an ISO/IEC 42001 Audit] Scenario 7 (continued): Scenario 7: ICure, headquartered in Bratislava, is a medical institution known for its use of the latest technologies in medical practices. Ithas introduced groundbreaking Al-driven diagnostics and treatment planning tools that have fundamentally transformed patient care. ICure has integrated a robust artificial intelligence management system AIMS to manage its Al systems effectively. This holisticmanagement framework ensures that ICure's Al applications are not only developed but also deployed and maintained to adhere to the highest industry standards, thereby enhancing efficiency and reliability. ICure has initiated a comprehensive auditing process to validate its AIMS's effectiveness in alignment with ISO/IEC 42001. The stage 1audit involved an on-site evaluation by the audit team. The team evaluated the site-specific conditions, interacted with ICure's personnel, observed the deployed technologies, and reviewed the operations that support the AIMS. Following these observations, the findings weredocumented and communicated to ICure. setting the stage for subsequent actions. Unforeseen delays and resource allocation issues introduced a significant gap between the completion of stage 1 and the onset of stage2 audits. This interval, while unplanned, provided an opportunity for reflection and preparation for upcoming challenges. After four months, the audit team initiated the stage 2 audit. They evaluated AIMS's compliance with ISO/IEC 42001 requirements, payingspecial attention to the complexity of processes and their documentation. It was during this phase that a critical observation was made: ICure had not fully considered the complexity of its processes and their interactions when determining the extent of documentedinformation. Essential processes related to Al model training, validation, and deployment were not documented accurately, hinderingeffective control and management of these critical activities. This issue was recorded as a minor nonconformity, signaling a need forenhanced control and management of these vital activities. Simultaneously, the auditor evaluated the appropriateness and effectiveness of the "AIMS Insight Strategy," a procedure developed by ICure to determine the AIMS internal and external challenges. This examination identified specific areas for improvement, particularly in the way stakeholder input was integrated into the system. It highlighted how this could significantly enhance the contribution of relevant parties in strengthening the system's resilience and effectiveness. The audit team determined the audit findings by taking into consideration the requirements of ICure, the previous audit records and conclusions, the accuracy, sufficiency, and appropriateness of evidence, the extent to which planned audit activities are realized and planned results achieved, the sample size, and the categorization of the audit findings. The audit team decided to first record all the requirements met; then they proceeded to record the nonconformities. Based on the scenario above, answer the following question: Based on Scenario 7, the audit team conducted a Stage 2 audit after a considerable time from Stage 1. Is this recommended?
Answer options
A: No, the gap between Stage 1 and Stage 2 audits should be minimal (usually two weeks) to ensurethat the AIMS remains consistent and relevant during the audit process Correct answer
B: Yes, a bigger gap between Stage 1 and Stage 2 audits allows the audit team time for reflection and preparation in addressing the findings
C: No, the Stage 2 audit should be conducted immediately after the Stage 1 audit to quickly address any identified issues
Correct Answer:
A. No, the gap between Stage 1 and Stage 2 audits should be minimal (usually two weeks) to ensurethat the AIMS remains consistent and relevant during the audit process
Explanation

A four-month gap between Stage 1 and Stage 2 audits is excessive and not recommended. Auditing standards require the interval to be managed to ensure the findings from Stage 1 remain valid for Stage 2. A significant delay introduces the risk that the Artificial Intelligence Management System (AIMS) has undergone material changes (e.g., in processes, personnel, or context). This could invalidate the initial assessment and may require the audit team to repeat parts of the Stage 1 audit to confirm the current state of the system before proceeding, ensuring the integrity and relevance of the entire audit process.

Why Incorrect

B: While reflection is useful, a four-month delay is a procedural risk that can compromise the audit's validity, not a planned strategic pause. C: "Immediately" is too rigid; a reasonable, short interval is typically required for the organization to address any issues identified in Stage 1.

References

1. ISO/IEC 17021-1:2015, Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements, Clause 9.3.1.2.3. This clause states that the interval between Stage 1 and Stage 2 should account for the client's need to resolve issues. It also notes that a "lengthy interval" may necessitate repeating Stage 1. Four months is typically considered a lengthy interval in this context.

2. International Accreditation Forum (IAF), Mandatory Document for the Duration of QMS and EMS Audits (IAF MD 5:2019), Section 2.4. While specific to QMS/EMS, the principle is universal. It states that if the time between Stage 1 and Stage 2 exceeds 6 months, Stage 1 should be repeated. This establishes an outer boundary, with shorter periods being best practice.

Scroll to Top