According to ISO 9001:2015, clause 9.2.2.e, the organization is required to retain documented information as evidence of the implementation of the audit programme and the audit results. This includes the records of the nonconformities identified during the internal audits and the corrective actions taken to address them. The organization is also required to verify the effectiveness of the corrective actions, as per clause 10.2.2.
Therefore, in the scenario given, the Quality Manager's decision to automatically close any nonconformance over 3 years old without obtaining any confirmation from the relevant departments or verifying the effectiveness of the corrective actions is a clear violation of the requirements of clause 9.2.2.e. This indicates a lack of control and follow-up of the internal audit process, as well as a potential risk of recurrence or occurrence of the nonconformities in other areas. This also undermines the credibility and value of the internal audit programme, as well as the risk-based approach claimed by the Quality Manager.
Hence, the best course of action to take is D, to raise a nonconformance report against clause 9.2.2.e of ISO
9001, and to communicate the audit findings to the relevant management. The other options are either insufficient or irrelevant to address the issue, as they do not directly relate to the noncompliance with clause
9.2.2.e.
References:
ISO 9001:2015(en), Quality management systems - Requirements, clause 9.2.2 and 10.2.2 ISO 19011:2018(en), Guidelines for auditing management systems, clause 6.4.4 and 6.7.2 ISO 9001 Lead Auditor Training Course | IRCA Certified | BSI, section "Learning objectives" ISO 9001 Lead Auditor Course Material | 3FOLD Education Centre, module 5 and 6