Risk & Opportunity Assessment Flashcards
7 cards from real ISO AUDITOR practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk & Opportunity Assessment flashcards as text
Under ISO 9001:2015, which clause specifically requires the organization to determine external and internal issues relevant to its purpose when establishing risk context?
Answer: Clause 4.1
Clause 4.1 requires determining external and internal issues that are relevant to the organization's purpose and that affect its ability to achieve intended results.
An auditor reviews a company's risk register and finds that all risks are rated only by likelihood, with no consideration of impact. What is the primary deficiency?
Answer: The risk register lacks a two-dimensional risk evaluation approach
Effective risk evaluation under ISO 9001:2015 considers both the likelihood of occurrence and the severity of consequences to prioritize risks appropriately.
A manufacturing firm identifies a new regulation that could restrict a key raw material. Under ISO 9001:2015, this would be classified as:
Answer: An external risk requiring action planning
New regulations are external issues (Clause 4.1) that create risks to achieving quality objectives and require actions planned under Clause 6.1.
ISO 9001:2015 requires that actions taken to address risks and opportunities be proportionate to:
Answer: The potential effect on conformity of products and services
Clause 6.1.2 states that actions to address risks and opportunities shall be proportionate to the potential impact on conformity of products and services.
During an audit, you discover that risk and opportunity actions are planned but never integrated into QMS processes. Which ISO 9001:2015 requirement is NOT being met?
Answer: Clause 6.1 — actions must be integrated and implemented in QMS processes
Clause 6.1.2 explicitly requires that actions to address risks and opportunities be integrated into and implemented within QMS processes.
Which of the following best describes an 'opportunity' in the context of ISO 9001:2015 risk-based thinking?
Answer: A favorable circumstance that can be exploited to improve performance or achieve objectives
An opportunity is a set of circumstances that makes it possible to achieve a positive outcome, such as adopting new technology or entering a new market to enhance quality performance.
An auditor asks for evidence that risk-based thinking has been applied across the QMS. Which combination of records would best satisfy this request?
Answer: Risk register linked to QMS process controls and objective plans
A risk register linked to process controls and objective plans demonstrates that risks have been identified, evaluated, and addressed through actual QMS mechanisms.