CEA Audit Process & Reporting 5 — Questions and Answers
Question 1: Which of the following BEST describes 'corrective action verification' in the post-audit phase?
- The auditee's promise to fix all findings within 30 days
- Confirmation by the audit team or management that agreed corrections have been implemented effectively (Correct answer)
- A regulatory agency's acceptance of the audit report
- The lead auditor's personal sign-off on the audit protocol
Correct answer: Confirmation by the audit team or management that agreed corrections have been implemented effectively
Corrective action verification confirms that the actions taken in response to audit findings are complete, effective, and sustainable — closing the audit loop.
Question 2: An audit team conducting a multi-media environmental audit would MOST likely evaluate compliance with which combination of regulations?
- RCRA and OSHA only
- Clean Air Act, Clean Water Act, RCRA, and TSCA together (Correct answer)
- CERCLA and Superfund requirements exclusively
- State permits only, excluding federal regulations
Correct answer: Clean Air Act, Clean Water Act, RCRA, and TSCA together
A multi-media audit evaluates compliance across air, water, waste, and chemical management programs simultaneously, integrating multiple federal and state regulatory frameworks.
Question 3: What distinguishes a 'compliance audit' from a 'management systems audit'?
- A compliance audit evaluates adherence to specific legal requirements; a management systems audit evaluates whether EMS processes are functioning (Correct answer)
- A management systems audit only applies to ISO 14001-certified facilities
- A compliance audit is always conducted by regulators; a management systems audit is always self-conducted
- There is no meaningful distinction between the two audit types
Correct answer: A compliance audit evaluates adherence to specific legal requirements; a management systems audit evaluates whether EMS processes are functioning
Compliance audits focus on whether a facility meets specific regulatory requirements, while management systems audits assess whether the organization's EMS is properly designed and functioning.
Question 4: When an environmental auditor identifies a finding that falls outside the defined audit scope, the auditor should:
- Ignore it since it falls outside the audit scope
- Document it separately as an 'out of scope' observation and inform appropriate management (Correct answer)
- Expand the audit scope unilaterally to investigate further
- Report it directly to the regulatory agency without informing facility management
Correct answer: Document it separately as an 'out of scope' observation and inform appropriate management
Out-of-scope issues should be noted and communicated to appropriate management without unilaterally expanding the audit, ensuring they are not ignored while preserving audit integrity.
Question 5: Which of the following is the MOST critical characteristic of a well-written audit finding?
- Uses technical jargon to demonstrate auditor expertise
- Is specific, factual, cites the applicable requirement, and states the observed condition (Correct answer)
- Assigns blame to the responsible employee by name
- Recommends the specific corrective action the facility must implement
Correct answer: Is specific, factual, cites the applicable requirement, and states the observed condition
A well-written finding clearly states what was observed, references the specific regulation or standard violated, and is supported by objective evidence — without assigning blame or prescribing solutions.
Question 6: Under the EPA's Audit Policy, voluntary disclosure of violations discovered through an environmental audit may result in:
- Automatic criminal prosecution regardless of cooperation
- Elimination or significant reduction of gravity-based civil penalties (Correct answer)
- Mandatory facility shutdown pending regulatory review
- Increased scrutiny and more frequent regulatory inspections
Correct answer: Elimination or significant reduction of gravity-based civil penalties
The EPA Audit Policy incentivizes voluntary self-disclosure by reducing or eliminating gravity-based civil penalties when violations are promptly disclosed and corrected.
Question 7: When prioritizing corrective actions from an environmental audit, which factor should receive the HIGHEST weighting?
- The cost of implementing the corrective action
- The potential severity of environmental harm or human health risk if not corrected (Correct answer)
- The time required to complete the corrective action
- The visibility of the finding to external auditors
Correct answer: The potential severity of environmental harm or human health risk if not corrected
Risk-based prioritization places the greatest urgency on findings that, if left uncorrected, pose the greatest risk to human health or the environment.
Which of the following BEST describes 'corrective action verification' in the post-audit phase?