Document Control Flashcards

An organization has a document retention policy of 3 years for inspection records, but a customer contract requires 7-year retention. Which retention period should the organization follow?

Answer: 7 years, because the more stringent requirement (customer contract) takes precedence

When customer or regulatory requirements are more stringent than internal policy, the organization must meet the stricter requirement to remain in conformance.

During an audit, an auditor notes that operators on the shop floor are using printouts of procedures dated from two years ago, while the current version is revision 5. This situation most likely indicates:

Answer: A failure in document distribution and point-of-use control

Using obsolete procedure printouts at the point of use is a clear nonconformity against Clause 7.5.3.2, which requires control to prevent unintended use of obsolete information.

Which of the following is the BEST example of a document that 'provides evidence of results achieved' under ISO 9001:2015?

Answer: A completed inspection checklist showing test results and pass/fail status

A completed inspection checklist with actual results is a record (retained documented information) that provides objective evidence of conformity with requirements.

An auditor is reviewing document control in a multi-site organization. What is the most important aspect to verify across all sites?

Answer: That all sites are using the same current approved versions of shared controlled documents

In multi-site organizations, consistent use of current approved versions of shared controlled documents ensures uniform conformance to QMS requirements across all locations.

When an organization uses a cloud-based platform to manage its documented information, which control is MOST critical to verify during an audit?

Answer: Access controls ensuring only authorized personnel can modify documents

Access controls are critical in electronic systems to ensure that only authorized individuals can create, modify, or approve documented information, preventing unauthorized changes.

According to ISO 9001:2015, the extent of documented information in a QMS can differ between organizations based on:

Answer: The size of the organization, the complexity of processes, and the competence of personnel

ISO 9001:2015 explicitly states that the amount and type of documented information can vary depending on organizational size, process complexity, and personnel competence.

An auditor finds that a critical process has no documented procedure and operators rely entirely on verbal instructions. Under ISO 9001:2015, the auditor should:

Answer: Assess whether the absence of documentation affects process consistency and raises a nonconformity if it does

ISO 9001:2015 requires documented information only 'to the extent necessary' to support process operation; the auditor must evaluate whether the lack of documentation creates risk of inconsistent outcomes.