ISO-14001-Lead-Auditor PECB Certified EMS ISO 14001 Lead Auditor Exam Questions and Answers

According to ISO 14001:2015:

Clause 6.1.2 & 6.1.4 (Environmental aspects and planning actions): demolition impacts must be identified and controlled (C).

Clause 8.1 (Operational planning and control): control of outsourced processes (supervision and contract requirements) (B, E).

Clause 9.1.2 (Compliance obligations): regulatory approvals for demolition (H).

The subcontractor ' s internal policies (A, D, F, G) are generally not part of XM ' s EMS obligations.

According to ISO/IEC 17021-1:2015 Clause 9.3.1 and ISO 19011:2018 Clause 5.4.1:

Any change in scope requires formal review and approval through certification body ' s application process.

The auditor cannot unilaterally extend the scope during the audit.

The correct course of action is to inform the auditee that scope changes require an application process.

From ISO 19011:2018:

Clause 5.4.3:

“The audit plan should consider the potential impact on the auditee ' s processes during audit activities to minimize disruption.”

Clause 5.2 and 5.3:

“The audit programme frequency should be based on the significance of the environmental aspects, past audit results, changes, and risks.”

Internal auditors auditing their own work violates auditor impartiality (Clause 4.4.2 - Auditor Independence).

Second-party audits are customer-supplier audits, not certification body audits (Clause 3.7 - Audit Types).

EMS auditors must consider the organization ' s preparedness for emergencies (ISO 14001:2015 Clause 8.2).

As per ISO 14001:2015 Clause 10 (Improvement) and Clause 9 (Performance Evaluation):

The ' Check ' phase includes activities that evaluate performance, such as:

Clause 9.1:

“The organization shall monitor, measure, analyze and evaluate its environmental performance.”

Clause 10.2:

“When a nonconformity occurs, the organization shall react to the nonconformity, evaluate the need for corrective action.”

Management review is part of the ' Act ' phase (Clause 9.3), and Environmental Policy (Clause 5.2) belongs to ' Plan ' .

Post-emergency evaluations — A

Actions required — B

Periodic testing — C

Training — D

This question relates to ISO 14001:2015 Clause 8.2 — Emergency preparedness and response , which requires an organization to establish, implement, and maintain processes needed to prepare for and respond to potential emergency situations.

The correct matching is:

Post-emergency evaluations → to implement corrective actions

After an emergency or emergency drill, the organization should review what happened, evaluate the effectiveness of the response, and take corrective action where weaknesses or failures are identified.

Actions required → to mitigate impacts

Emergency planning must define actions needed to prevent or reduce adverse environmental impacts, such as spill containment, isolation of hazardous materials, shutdown procedures, or notification of relevant parties.

Periodic testing → of emergency plans

Emergency response arrangements should be tested periodically where practicable, for example through drills, simulations, or spill-response exercises.

Training → of emergency response personnel

Personnel involved in emergency response must be trained so they understand their roles, responsibilities, communication routes, and response procedures.

The two unused options — communication processes and including contact details — may be relevant to emergency planning generally, but they do not best complete the four statements shown in this question.

According to ISO/IEC 17021-1:2015 Clause 9.2.2 and 9.3.1:

Scope changes may be accommodated during the certification process, but proper evaluation is required.

The auditor should:

Confirm whether the EMS has been extended to cover the new site (C).

Inform that scope expansion needs to follow formal procedures through the certification body (F).

Simply including the new site without evaluation (A) is incorrect.

The audit plan can be adjusted, but full reassessment (D) is unnecessary unless significant issues arise.

The correct answers are B and D .

B is correct because, during remote or virtual auditing, the auditor must respect confidentiality, information security, privacy, and auditee permissions. Recording people, taking screenshots, or capturing documents should only be done with permission from the auditee. This aligns with audit principles such as confidentiality, professional care, and information security .

D is correct because auditors should use a combination of audit methods to obtain reliable audit evidence. Audit methods may include interviews, observation of activities, review of documents and records, sampling, remote communication tools, site tours, and review of environmental performance data. Using more than one method helps verify evidence and improves audit confidence.

The other options are incorrect:

A is incorrect because virtual audit evidence is not limited to human interaction. Evidence may also be collected through document review, records, photographs, video, data systems, monitoring reports, permits, procedures, and other non-interactive sources.

C is incorrect because audit sampling methods are determined by the auditor or audit team based on audit objectives, scope, criteria, risk, and available evidence. They do not need to be agreed by the auditee, although the auditee may need to provide access to relevant information.

E is incorrect because auditors are not automatically entitled to take copies of procedures or records off-site. Taking copies depends on confidentiality rules, certification body procedures, legal restrictions, and auditee permission.

F is incorrect because audit evidence from top management interviews still requires verification where possible. Interview evidence should normally be corroborated using records, observed practices, objectives, environmental performance data, compliance obligations, or other audit evidence. Top management status does not remove the need for verification.

Therefore, the two true statements are B and D .

The correct answers are A and E .

A. Advise that the audit team make-up is a decision for the Certification Body — Correct

For a certification audit, the Certification Body is responsible for determining the audit team composition. This includes deciding the number of auditors, required competence, audit duration, technical expertise, impartiality, and ability to cover the full audit scope. The client may express a preference or raise a concern, but the client cannot dictate the audit team structure simply to reduce costs.

E. Suggest asking the Certification Body management to consider the request — Correct

The request may be passed to appropriate Certification Body management for review. The Certification Body can consider whether the request is possible without compromising audit duration, competence, impartiality, coverage of the audit scope, or certification requirements. However, any change must remain under the Certification Body’s control.

The other options are not appropriate:

B. Advise the EMS Manager that his request can be considered for future audits — Incorrect

This avoids the current request rather than addressing it properly. The Certification Body may consider the request now, but only through its own competent review process.

C. Suggest that the EMS Manager choose another Certification Body — Incorrect

This is unprofessional and unnecessary. The correct approach is to explain the Certification Body’s responsibility and review the request appropriately.

D. Advise that the contract has already been signed and cannot be revised — Incorrect

A signed contract does not automatically prevent changes. Changes may be possible if reviewed and approved by the Certification Body, provided audit integrity is maintained.

F. Advise that a remote audit could be conducted instead of an on-site audit — Incorrect

Remote auditing cannot simply be substituted to reduce travel expenses. The use of remote audit methods must be justified and must still allow the Certification Body to achieve the audit objectives. For many certification audit activities, especially where operational controls and site conditions must be verified, on-site evaluation may be necessary.

Therefore, the best two responses are A and E .

The best actions are F and A .

F. Urgently contact the certification body and explain the situation — Correct

This is the first and most important action. In a third-party certification audit, the certification body controls the audit programme, audit team appointment, audit duration, audit competence, and certification process. If a team member leaves unexpectedly, especially where that person is also evaluating a first-time audit team leader, the certification body must be informed immediately so it can decide how the audit should proceed.

A. Ask the auditee if they could accept to extend the audit till the following day — Correct

Because the second auditor could return the next day, extending the audit is a practical solution, provided the certification body agrees. This helps ensure the planned audit activities, required audit time, audit team competence, and evaluation of the audit team leader can still be completed properly.

The other options are not the best responses:

B is too extreme. The audit does not need to be cancelled immediately if it can be completed by adjusting the plan with certification body approval.

C is not appropriate without certification body approval, because continuing alone may reduce planned audit coverage and affect audit team competence or required audit duration.

D is not sufficient because the auditee cannot decide whether the certification audit can continue with a changed audit team.

E is less suitable than F because you should first explain the full situation to the certification body. The certification body may then decide whether a replacement audit team leader is needed, whether the audit should be extended, or whether another action is required.

Therefore, the correct selected options are A and F .