EMS Audit Roles & Responsibilities 3 — Questions and Answers
Question 1: The audit program manager's role is BEST described as:
- Conducting interviews and collecting audit evidence
- Planning, establishing, implementing, and reviewing the overall audit program (Correct answer)
- Writing nonconformity reports for each audit
- Approving corrective actions after each audit cycle
Correct answer: Planning, establishing, implementing, and reviewing the overall audit program
The audit program manager oversees the entire audit program, including planning, resourcing, implementing, monitoring, and improving it.
Question 2: When an auditee disagrees with an audit finding, the appropriate first step is to:
- Remove the finding from the audit report immediately
- Allow the auditee to present objective evidence that could refute the finding (Correct answer)
- Escalate the disagreement to regulatory authorities
- Finalize the report as written and ignore the disagreement
Correct answer: Allow the auditee to present objective evidence that could refute the finding
ISO 19011 guidance allows auditees to present counter-evidence; if valid, the finding may be revised before the report is finalized.
Question 3: A newly assigned lead auditor lacks experience with the organization's specific sector regulations. The BEST resolution is to:
- Cancel the audit until a more qualified auditor is available
- Assign a technical expert with regulatory knowledge to support the audit team (Correct answer)
- Limit the audit scope to areas not involving regulatory compliance
- Have the auditee's staff explain the regulations during the audit
Correct answer: Assign a technical expert with regulatory knowledge to support the audit team
Gaps in auditor competence can be addressed by adding technical experts who provide the necessary specialized knowledge.
Question 4: Which statement BEST describes the concept of 'due professional care' for EMS auditors?
- Completing all audits within the original time budget regardless of findings
- Applying diligence, judgment, and attention to audit work consistent with the significance of the task (Correct answer)
- Ensuring every audit results in at least one nonconformity finding
- Obtaining written approval from top management before documenting any finding
Correct answer: Applying diligence, judgment, and attention to audit work consistent with the significance of the task
Due professional care means auditors exercise judgment and thoroughness proportionate to the complexity and importance of the audit tasks.
Question 5: After an EMS audit is completed, who is responsible for initiating corrective actions to address nonconformities?
- The lead auditor
- The audit program manager
- The auditee (Correct answer)
- The audit client
Correct answer: The auditee
The auditee owns identified nonconformities and is responsible for determining and implementing appropriate corrective actions.
Question 6: An observer accompanies the audit team at the auditee's request. Observers:
- May conduct interviews if the lead auditor is busy
- Are not part of the audit team and do not influence or interfere with audit conduct (Correct answer)
- Must be approved by the audit program manager before attending
- Are responsible for taking official audit notes
Correct answer: Are not part of the audit team and do not influence or interfere with audit conduct
Observers accompany the audit team but do not participate as auditors or interfere with the audit process.
Question 7: What is the primary purpose of an auditor maintaining confidentiality regarding audit information?
- To prevent regulatory agencies from learning about nonconformities
- To protect the security and privacy of information obtained during the audit (Correct answer)
- To allow the organization to correct issues before public disclosure
- To give the auditor leverage in future negotiations with the auditee
Correct answer: To protect the security and privacy of information obtained during the audit
Confidentiality is an ethical obligation ensuring that sensitive information obtained during an audit is protected and used only for audit purposes.
The audit program manager's role is BEST described as: