Auditors use the ______ as a benchmark to determine conformity.

• A. Audit plan
• B. Audit objectives
• C. Audit criteria
• D. Audit feasibility

Did Samuel consider all the necessary factors while reviewing documented information during the stage 1 audit? Refer to Scenario 6.
Scenario 6: AfrinovAl, based in Nairobi, Kenya, develops Al tools to improve agriculture in Africa. The company uses Al to address challenges faced by African farmers, offering tools for analyzing satellite images to monitor crop health, predicting pest and disease outbreaks, and automating irrigation to use water more efficiently.
AfrinovAl has implemented an artificial intelligence management system AIMS based on ISO/IEC 42001, reflecting its commitment to ethical and effective management practices in its Al solutions.
AfrinovAl is undergoing a certification audit to obtain certification against ISO/IEC 42001. Samuel, an expert in Al technologies and management systems, is heading the audit team. Before initiating the audit process, Samuel reviewed and approved the audit plan, which served as a basis for the agreement between the certification body and the auditee.
During the stage 1 audit, the audit team focused on a detailed evaluation of AfrinovAI's documented information, critically assessing both their format and content.
Samuel held a meeting with his team to prepare for the stage 2 audit. During this meeting, responsibilities were allocated among team members, assigning specific processes, functions, sites, areas, or activities based on each auditor's expertise and the audit requirements. He also assigned auditing roles to technical experts to leverage their specialized knowledge in specific areas.
In the stage 2 audit, Samuel and his team held an opening meeting during which Samuel explained how the audit activities will be undertaken. AfrinovAI's also participated in the meeting. Afterward, the audit team conducted on-site activities to closely inspect the physical locations of the audited processes. The interviewed individuals from the auditee's personnel regarding the AIMS and observed some of the operations of the auditee. They also used sampling and technical verification to assess the implementation of Al-related controls, verify compliance with established procedures, and identify any gaps in adherence to the AIMS requirements. They skipped the review of documented information related to the AIMS since some documents had already been reviewed during the stage 1 audit. This comprehensive approach ensured a thorough evaluation of AfrinovAI's AIMS against the ISO/IEC 42001.

• A. Yes, documented information must be validated based on two criteria, i.e., content and format
• B. No, Samuel should only check if documented information has been stored in the appropriate media
• C. No, Samuel should also ensure that there is a process in place for reviewing and approving documented information for suitability and adequacy
• D. Yes, if the information is archived in a secure system

Scenario 4 (continued):
BioNovaPharm, a German biopharmaceutical company, has implemented an artificial intelligence management system AIMS based on ISO/IEC 42001 to optimize various aspects of drug discovery, including analyzing extensive biological data, identifying potential drug candidates, and streamlining clinical trial processes. After having the AIMS in place for over a year, the company contracted a certification body and is now undergoing an AIMS audit to obtain certification against ISO/IEC 42001.
Adopting a risk-based approach, the audit team focused on risk throughout their activities. The level of detail outlined in the audit plan corresponded to the scope and complexity of the audit. The team employed a ranking system for detailed audit procedures, prioritizing those with the highest risk.
Once the stage 1 audit began, the audit team started reviewing the auditee's documented information. To assess whether BioNovaPharm complies with the legal and regulatory requirements related to incident communication, the audit team examined evidence provided by the company's external legal office. The evidence confirmed that BioNovaPharm applies the requirements of the EU Al Act, which mandates that providers of high-risk Al systems report serious incidents to relevant authorities.
Following the completion of the stage 1 audit, John, an audit team member, documented the stage 1 audit outputs, including the observations of the audit team that could result in nonconformities during the on-site audit. However, the audit team leader, Emma, who was overseeing the audit activities, observed that John failed to document significant observations related to the lack of transparency in the Al decision-making processes of BioNovaPharm. Considering that Emma observed John's lack of competence in undertaking some audit activities, a disciplinary note was recorded for John.
Question:
Based on Scenario 4, is the decision of the top management representative not to provide the additional evidence requested by the audit team justifiable?

• A. No, because it is not recommended to conduct interviews with different employees to verify segregation of roles and responsibilities within the organization
• B. Yes, because audits are based purely on interview evidence
• C. Yes, because the top management representative determined that the answers from the interviews could be corroborated by interviewing different employees
• D. No, because verbal evidence is less reliable than the other types of evidence and requires additional supporting evidence

What should audit findings that are nonconformities NOT be recorded as?

• A. Nonfulfillment of a requirement
• B. Opportunities for improvement
• C. Corrective actions needed
• D. Supporting evidence