The activities that are specifically required by ISO 17021-1 as part of third-party (Certification Body) surveillance audit processes are:
*Option A: Audit use of certification marks on marketing materials. This option is correct because ISO
17021-1:2015 clause 9.6.2.2 requires the certification body to audit the client's use of marks and/or any other reference to certification, as applicable, to ensure conformity with the certification requirements.
*Option B: Review changes to the QMS since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review any changes affecting the client's quality management system and its ability to continue to fulfil the requirements of the standard used for certification.
*Option C: Confirm effectiveness of internal audit and management review. This option is correct because ISO
17021-1:2015 clause 9.6.2.2 requires the certification body to confirm the continuing effectiveness of the client's quality management system, including the effectiveness of the internal audit and management review processes.
*Option F: Review the status of previously raised findings and audit effectiveness of any outstanding findings.
This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the status of findings and any corrective actions taken by the client in response to previous audits, and to verify the effectiveness of the implemented corrective actions.
*Option H: Verify legal compliance. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to verify the client's compliance with applicable statutory and regulatory requirements related to the scope of certification.
*Option I: Handling of customer complaints since last visit. This option is correct because ISO 17021-1:2015 clause 9.6.2.2 requires the certification body to review the client's handling of customer complaints related to the certified activities since the last audit.
The following options are not correct:
*Option D: Complete a full document review of the quality management system. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to complete a full document review of the quality management system during surveillance audits. A full document review is only required during the initial certification audit or when there are significant changes to the quality management system or the certification requirements.
*Option E: Failing to meet financial responsibilities. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to audit the client's financial responsibilities during surveillance audits. The certification body may have contractual arrangements with the client regarding the payment of fees, but this is not part of the surveillance audit process.
*Option G: Review the calibration status of the instrumentation. This option is not correct because ISO
17021-1:2015 clause 9.6.2.2 does not require the certification body to review the calibration status of the instrumentation during surveillance audits. The certification body may audit the client's monitoring and measuring resources as part of the quality management system requirements, but this is not a specific activity required by ISO 17021-1.
*Option J: Conduct a minimum number of annual surveillance audits during the certification period. This option is not correct because ISO 17021-1:2015 clause 9.6.2.2 does not require the certification body to conduct a minimum number of annual surveillance audits during the certification period. The certification body may determine the frequency and duration of surveillance audits based on the risk and performance of the client, but this is not a specific activity required by ISO 17021-1.
References:
*ISO 17021-1:2015 Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 1: Requirements
*ISO 9001 Lead Auditor Course Material, Module 7: Audit Follow-up and Surveillance, Slide 8: Surveillance Audit
*ISO 9001 Lead Auditor Training Course - IRCA Certified, Section 7.2: Audit Follow-up and Surveillance
*Lead Auditor Exam Preparation Guide (EPG) Template - PECB, Section 3.2: Exam Content Outline, Subsection 3.2.1: Section 1 - Audit Fundamentals, Subsection 3.2.2: Section 2 - Audit Principles, Subsection
3.2.3: Section 3 - Audit Process, Subsection 3.2.4: Section 4 - Audit Competencies

Explanation:
In the context of a third-party certification audit, match the roles with the following responsibilities:
Responsibilities:
Conduct the audit to the assigned area.= Auditors
Assist the auditors in identifying personnel to participate in the audit.= Guide Assign each team member's responsibility for the audit.= Audit team leader Respond to questions and provide evidence to the auditor.= Auditee According to ISO 19011:2018, clause 3, the definitions of the roles are as follows1:
Auditors: persons with the competence to conduct an audit
Guide: person appointed by the auditee to assist the audit team
Auditee: organization being audited
Audit team leader: member of an audit team appointed to manage the audit or an audit team Therefore, the roles can be matched to the responsibilities based on these definitions and the description of the audit process in clause 6 of the standard1.
References: ISO 19011:2018(en), Guidelines for auditing management systems

Explanation:
Quality management principles:
Customer focus = Increased revenue and market share
Engagement of people = Enhanced trust and collaboration throughout the organisation Improvement = Enhanced drive for innovation Evidence-based decision-making = Increased ability to demonstrate effectiveness of past actions According to the Quality management principles document published by ISO, each quality management principle has a statement, a rationale, key benefits, and actions you can take to apply it. Based on these descriptions, the potential benefits can be matched to the corresponding principles as follows:
Customer focus: The primary focus of quality management is to meet customer requirements and to strive to exceed customer expectations. The key benefits of this principle include increased customer value, customer satisfaction, customer loyalty, repeat business, reputation, customer base, revenue and market share.
Engagement of people: Competent, empowered and engaged people at all levels throughout the organization are essential to enhance its capability to create and deliver value. The key benefits of this principle include improved understanding of the organization's objectives and values, increased involvement in improvement activities, enhanced personal development, increased motivation and empowerment, enhanced trust and collaboration, and increased recognition and rewards.
Improvement: Successful organizations have an ongoing focus on improvement. The key benefits of this principle include improved organizational capabilities, alignment of improvement activities at all levels, increased ability to anticipate and react to opportunities and threats, enhanced drive for innovation, and increased levels of satisfaction.
Evidence-based decision-making: Decisions based on the analysis and evaluation of data and information are more likely to produce desired results. The key benefits of this principle include improved decision-making processes, increased ability to demonstrate the effectiveness of past decisions, increased ability to review, challenge and change opinions and decisions, and increased ability to improve performance.

Documented information is a means by which an organization demonstrates compliance. It communicates what we do and how we do things, it communicates what happened and what results were achieved. It is, essentially, a tool for communication. ISO 9001:2015 allows an organization flexibility in the way it chooses to document its quality management system (QMS). This enables each individual organization to determine the correct amount of documented information needed in order to demonstrate the effective planning, operation and control of its processes and the implementation and continual improvement of the effectiveness of its QMS. The standard states that the organization shall maintain documented information to the extent necessary to support the operation of processes and retain documented information to the extent necessary to have confidence that the processes are being carried out as planned. Therefore, the purpose of retaining documented information is to support the operation of the processes of the QMS, not to facilitate auditing, provide confidence or safeguard integrity, which are secondary benefits of documented information.
References: Guidance on the requirements for Documented Information of ISO 9001:2015, ISO 9001:2015 documented information | CQI | IRCA, Documented Information Required by ISO 9001:2015 - 9000 Store