Question 1

A medical device company is undergoing an ISO 13485:2016 audit. The company has a documented procedure for supplier evaluation, and the company has several suppliers used to produce critical components. The company’s procedure outlines initial evaluation, periodic evaluation, and performance monitoring, however, for some suppliers that are deemed “low-risk” there is no *documented rationale* for why those suppliers were classified as such. As the Lead Auditor, what is the MOST appropriate action to take?

Options :

A : Accept the company-s classification of the suppliers as "low-risk" without further investigation, as long as the products they supply consistently meet specifications.

B : Issue a minor nonconformity, and require that the company either conduct a risk assessment or generate a documented rationale for why the suppliers were classified as low risk.

C : Accept the classification if these suppliers provide components to Class I devices.

D : Issue a major nonconformity, since all supplier evaluations must be documented with a detailed, objective risk assessment.

Answer: B

Question 2

During an ISO 13485:2016 surveillance audit, a Lead Auditor reviews the management review process of a medical device company. The company conducts management reviews quarterly, as required. However, the Lead Auditor notices that the documented outputs of these reviews consistently lack specific action items with assigned responsibilities and deadlines for addressing identified issues. Which of the following is the MOST significant concern regarding this situation?

Options :

A : The frequency of the management reviews is insufficient to address the company-s needs.

B : The lack of documented action items and responsibilities undermines the effectiveness of the management review process.

C : The documented outputs should also include a review of the company-s financial performance.

D : The management review process is compliant since the company is conducting reviews as frequently as documented.

Answer: B

Question 3

A medical device company is undergoing an ISO 13485:2016 audit. The company uses a contract manufacturer to produce a critical component of their Class II medical device. The Lead Auditor reviews the medical device company's records pertaining to the oversight of the contract manufacturer. While the records show regular communication, agreed-upon specifications, and documented inspections of incoming components, the Lead Auditor discovers that the medical device company is performing no periodic on-site audits of the contract manufacturer's facility. The company claims that these audits are not required if the component meets all the specifications and regulatory requirements. What should be the Lead Auditor’s MOST appropriate next action?

Options :

A : Accept the company-s justification and move on to the next area of the audit, documenting the rationale.

B : Issue a nonconformity because on-site audits are always mandatory for contract manufacturers of critical components.

C : Investigate the company-s rationale for not conducting on-site audits, considering the risk associated with the component and the effectiveness of other controls.

D : Require the company to immediately schedule an on-site audit of the contract manufacturer, regardless of the risk assessment or other controls.

Answer: C

Question 4

A medical device company is undergoing an ISO 13485:2016 audit. They have a well-defined process for handling nonconforming product, which includes identification, segregation, review, and disposition. The company has clearly defined responsibilities for each step of the process. However, the Lead Auditor discovers that the procedure does not specify timeframes for completing each step, particularly the review and disposition of nonconforming product. What is the MOST significant concern for the Lead Auditor?

Options :

A : The lack of timeframes could lead to delays in addressing nonconformities, potentially resulting in the use of nonconforming product.

B : The nonconforming product may lose traceability to the production lot.

C : Without timeframes, the process becomes too rigid and inflexible, inhibiting the investigation of non-conformances.

D : The lack of defined responsibilities in the process, even with the lack of time frames, allows for a clear assignment of responsibilities.

Answer: A

Question 5

During an ISO 13485:2016 audit of a medical device company, the Lead Auditor discovers that the company has implemented a comprehensive training program for its employees. The program covers various aspects of the QMS, including document control, CAPA, and risk management. However, the effectiveness of the training is solely measured through post-training quizzes, with no documented evidence of how the learned knowledge and skills are applied in the employees' actual job performance. As a Lead Auditor, what is your PRIMARY concern?

Options :

A : The lack of a defined process for verifying the effectiveness of the training could lead to employees not applying the learned knowledge and skills in their work, potentially impacting product quality and safety.

B : The exclusive reliance on post-training quizzes is sufficient to demonstrate training effectiveness, as long as the quiz questions are comprehensive and cover all relevant aspects of the QMS.

C : The absence of documented evidence of training effectiveness is not a significant concern, as long as the training program is well-structured and covers all required topics.

D : The company should focus on improving the content of the post-training quizzes to better assess the employees' understanding of the QMS requirements.

Answer: A

Free ISO-QMS-13485 Mock Exam – Practice Online Confidently

Buying Options: