Quality Auditor Certification Quality Auditor Certification Risk Management 2 — Questions and Answers
Question 1: FMEA (Failure Mode and Effects Analysis) supports quality auditing by:
- Replacing the need for process audits
- Identifying potential failure modes auditors should focus on (Correct answer)
- Generating corrective action requests automatically
- Verifying calibration of measurement instruments
Correct answer: Identifying potential failure modes auditors should focus on
FMEA documents potential failure modes and their effects, giving auditors a roadmap of high-risk areas to investigate.
Question 2: What does a high Risk Priority Number (RPN) in an FMEA indicate to a quality auditor?
- The process is well-controlled and low priority
- The area has a combination of high severity, occurrence, and detectability risk (Correct answer)
- Corrective actions have already been verified
- The process can be excluded from the audit scope
Correct answer: The area has a combination of high severity, occurrence, and detectability risk
A high RPN (Severity × Occurrence × Detection) signals that the failure mode poses significant risk and warrants audit attention.
Question 3: Which risk management standard is commonly referenced in conjunction with quality auditing frameworks?
- ISO 9001
- ISO 31000 (Correct answer)
- ISO 14001
- ISO 45001
Correct answer: ISO 31000
ISO 31000 provides principles and guidelines for risk management that quality auditors apply when assessing organizational risk frameworks.
Question 4: An auditor discovers a supplier's critical process has never been audited. This represents which type of audit risk?
- Detection risk
- Control risk
- Coverage risk (Correct answer)
- Sampling risk
Correct answer: Coverage risk
Coverage risk arises when significant areas or processes are excluded from the audit program, leaving gaps in assurance.
Question 5: When an organization uses a risk register, a quality auditor should review it to:
- Determine employee compensation levels
- Identify areas where audit emphasis is needed based on documented risks (Correct answer)
- Replace the audit checklist entirely
- Calculate statistical process control limits
Correct answer: Identify areas where audit emphasis is needed based on documented risks
A risk register documents identified organizational risks, making it a key input for determining where audit resources should be concentrated.
Question 6: Which audit strategy is best aligned with a risk-based approach under ISO 19011?
- Fixed-cycle audits with equal time spent on all departments
- Adjusting audit frequency and depth based on the significance and risk of each area (Correct answer)
- Auditing only departments that have received customer complaints
- Performing audits only when regulatory deadlines require them
Correct answer: Adjusting audit frequency and depth based on the significance and risk of each area
ISO 19011 advocates adjusting audit frequency and scope based on the risk and importance of processes to optimize the audit program.
Quality Auditor Certification Quality Auditor Certification Risk Management 2
FMEA (Failure Mode and Effects Analysis) supports quality auditing by: