During a third-party audit of a pharmaceutical organisation (CD9000) site of seven COVID-19 testing laboratories...

D. I would look for evidence that the actions resulting from the risk assessment had been taken.

According to ISO 9001:2015, Clause 6.1.2 requires the organization to plan actions to address risks and opportunities. The organization must integrate and implement these actions into its quality management system and evaluate their effectiveness. The auditor should seek evidence that the organization has assessed the risks and taken appropriate actions.

B. I would ask to audit the Technical Manager by phone.

As the Technical Manager is responsible for this process and is absent due to illness, it is reasonable to attempt to contact him to obtain accurate information. This ensures that the audit process is not unduly delayed and that the information is obtained from the appropriate person.

A. I would not accept the legal compliance expert answering the question.

While the legal compliance expert might not be the best source for technical details, outright rejecting their input is not appropriate. It is better to first verify if the expert can provide relevant information.

C. I would delay the audit until the return of the Technical Manager.

This would be an inefficient approach. Contacting the Technical Manager by phone is a more practical and reasonable option.

E. I would ask for a different guide instead of the legal compliance expert.

The guide ' s role is not necessarily to answer technical questions but to facilitate the audit. Since Jack is already familiar with the situation, replacing him may not add value.

F. I would ask the consultant to leave the meeting since he is not an employee of the organization.

This is inappropriate and could disrupt the audit process. There is no rule in ISO 9001 preventing a consultant from assisting in the audit if authorized by the organization.

Why Not the Other Options: