ISO AUDITOR Supplier & External Provider Auditing 1 — Questions and Answers
Question 1: Under ISO 9001:2015, which clause addresses the control of externally provided processes, products, and services?
- Clause 7.4
- Clause 8.4 (Correct answer)
- Clause 9.1
- Clause 6.1
Correct answer: Clause 8.4
Clause 8.4 of ISO 9001:2015 specifically covers the control of externally provided processes, products, and services.
Question 2: Which criterion is MOST important when determining the type and extent of controls applied to an external provider?
- The external provider's geographic location
- The potential impact of the externally provided output on the organization's products and services (Correct answer)
- The length of the existing business relationship with the provider
- The external provider's total number of employees
Correct answer: The potential impact of the externally provided output on the organization's products and services
ISO 9001:2015 clause 8.4.1 requires that the type and extent of control reflect the potential impact on the organization's ability to consistently meet customer and applicable requirements.
Question 3: What information must an organization communicate to external providers before work commences, per ISO 9001:2015 clause 8.4.3?
- The organization's internal audit schedule
- Requirements for processes, products, or services and criteria for release (Correct answer)
- The organization's annual financial performance targets
- The names and credentials of all internal auditors
Correct answer: Requirements for processes, products, or services and criteria for release
Clause 8.4.3 requires communicating requirements including specifications, acceptance criteria, and competence requirements so the provider can deliver conforming outputs.
Question 4: Which document type is most commonly used to formally establish quality requirements between an organization and an external provider?
- Internal audit report
- Management review minutes
- Quality agreement or supplier quality manual (Correct answer)
- Corrective action report
Correct answer: Quality agreement or supplier quality manual
Quality agreements or supplier quality manuals formally document the quality requirements, responsibilities, and expectations agreed upon by both parties.
Question 5: When conducting a supplier audit, which audit approach focuses on evaluating the supplier's processes rather than only inspecting end products?
- Product inspection audit
- Process audit (Correct answer)
- System audit
- Compliance audit
Correct answer: Process audit
A process audit evaluates how well the supplier's processes are controlled and capable of consistently producing conforming outputs, going beyond final product inspection.
Question 6: What is the PRIMARY purpose of maintaining an Approved Supplier List (ASL)?
- To track supplier invoice payment history
- To ensure only evaluated and qualified suppliers are used for critical procurement (Correct answer)
- To document supplier delivery lead times for scheduling purposes
- To record customer complaints about supplier-provided products
Correct answer: To ensure only evaluated and qualified suppliers are used for critical procurement
The ASL ensures that only suppliers who have been evaluated and qualified are selected, supporting consistent conformance of purchased products and services.
Question 7: According to ISO 9001:2015, what must occur before externally provided products or services are released or used?
- The external provider must submit a self-assessment audit report
- A management review meeting must be held to approve the purchase
- Verification that externally provided products and services meet specified requirements (Correct answer)
- The external provider must hold a current ISO 9001 certification
Correct answer: Verification that externally provided products and services meet specified requirements
ISO 9001:2015 clause 8.4.1 requires organizations to verify that externally provided processes, products, and services meet requirements before acceptance.
ISO AUDITOR Supplier & External Provider Auditing 1
Under ISO 9001:2015, which clause addresses the control of externally provided processes, products, and services?