IOSA Conformance Auditors Training

In the case of conflicting information within the IOSA documentation what is the correct procedure to be used:

• The 1PM always prevails on IAH and ISM

• The Alerts always prevail on 1PM, ISM and IAH

• They have all t he same level and only the ISM prevails on the Mandatory Observations

• Refer to IATA for guidance

To ensure that a document is properly controlled there are many elements that need to be in place Which of the answers below is the most accurate:

A) A controlled document shall be disseminat ed t hroughout t he appropriate areas of t he organization and to any applicable external service provider

B) A controlled document shall be approved by regulatory authorities.

C) A controlled document shall be reviewed regularly to maintain the currency and retention specifications.

• Most accurate answer is A + B

• Most accurate answer is A + B + C

• Most accurate answer is A + C.

If they are applicable, are there any ISARPs for which it is possible not to provide any documentary references?

• No. All lSARPs shall always have a document references.

• Yes, ISARPs which are related to the Mandatory Observations do not require a documentary reference.

• Yes ISARPs that require adequate infrastructure, workplace, etc., do not require a documentary reference.

• Yes ISARPs that refer to outsourced functions do not require a documentary reference.

When can ISARPs be identified as not applicable?

• When the process, function, equipment requirement, etc., is completely inactive, or cannot be applied to the

  Operator.

• When the process, function, equipment requirement, et c., is completely outsourced.

• ISARPs are all applicable and they shall be identified with necessary document references.

• When the funct ion is at least part ially inactive, or cannot be applied to the Operator.

Which statement best describes the Parallel Conformity Option (PCO)?

• PCOs are available for all lSARPs.

• Only certain ISARPs have PCOs.

• PCOs have no expiry date.

• If t he PCO is not used, it must be assessed as Not Applicable.

The appropriate method to record a finding is to describe it:

• In broad terms as directly derived by the ISARP in a manner to ensure that both the auditee and the AO will understand it

• In a factual, clear and complete manner to ensure that the lead auditor will understand it.

• In a factual, clear and complete manner to ensure that the auditee will understand it.

• In a factual, clear and complete manner to ensure that both the auditee and the AO will understand it.

Can an ISARP be assessed as implemented but not documented?

• No. The continuity of implementation is directly linked to documentation and therefore no ISARP can be assessed this way.

• No. Any systems, programs, policies, processes and procedures are implemented in accordance with a controlled document and no alternatives are allowed.

• Yes. In some instances it is possible that the ISARP be assessed as implemented but not documented. The procedures to assess an implemented but not documented ISARP is no different by the ones to be used for other types of assessments.

• Yes. In some instances it is possible that the ISARP be assessed as implemented but not documented. Depending on the corrective action the assessment might need to be changed.

The ORG non-SMS repeated ISARPs identify a set of ORG ISARPs that are correlated to equivalent ISARPs in the

operational disciplines What judgment shall the ORG auditor make to determine if they are significant to support a nonconformity in the ORG provision?

• Any nonconformity in the operational discipline(s) will generate a nonconformity to the corresponding ORG ISARP.

• There should be at least 2 nonconformities in the operational disciplines to generate a nonconformity to the corresponding

  ORG ISARP.

• There should be at least 2 minor and 1 major nonconformities in the operational disciplines to generate a nonconformity to the corresponding ORG ISARP.

• The auditor must make judgments based on complexity, severity, significance, and systemic deficiency of the nonconformities in the operational disciplines with a risk-based approach. No rigid rules apply.

Which of the following statements for interlinked ISARPs is the most accurate?

• They are repeated ISARPs which have common operational requirements and are presented in a tabular format to help the auditor to identify, harmonize and ensure consistent assessments.

• They are ISARPs which have common operational requirements and are presented in a tabular format to help the auditor to identify, harmonize and ensure consistent assessments.

• They are SMS ISARPs which have common operational requirements and are presented in a tabular format to help the auditor to identify, harmonize and ensure consistent assessments.

• They are the minimum set of lSARPs that shall be checked onsite during a renewal audit to verify accuracy of the

  Conformance Report generated by the Operator.

Which of the following statements for evidence sampling is the most accurate?

• For each ISARP the auditor shall randomly sample at least 10% of the records available.

• For each ISARP the auditor shall randomly sample at least 10% of the records available but not less than 3 samples.

• The sample items will vary as per ISARP requirements. Their diversity and quality should be sufficiently representative of the entire range of records and shall account for the risk, complexity, size, frequency, and magnitude of the requirements assessed.

• The sample items will vary as per ISARP requirements but not less than 5 samples shall be selected for each ISARPs.