Comprehensive and Detailed In-Depth Explanation:
Clause References:
* ISO 19011:2018 (Guidelines for Auditing Management Systems), Clause 5.3 - Establishing the Audit Objectives
* ISO/IEC 17021-1:2015, Clause 9.1.2 - Audit Planning
Why is the Correct Answer C?
* Audit objectives must be clearly defined in the audit offer to ensure that the scope, criteria, and purpose are agreed upon in advance.
* ISO/IEC 17021-1:2015 (which governs certification bodies) requires that audit objectives be established before the audit begins to ensure transparency and effectiveness.
* Sending audit objectives after an agreement has been reached could lead to misalignment between the auditee's expectations and the audit's purpose.
Why are the Other Options Incorrect?
* A (Audit objectives should be known only after agreement) # Incorrect because objectives must be pre-defined in the audit offer.
* B (Only the auditee should know the objectives) # Incorrect because both the auditor and auditee must align on objectives.
* D (Approval from the lead auditor is sufficient) # Incorrect because audit planning follows formal procedures defined by ISO/IEC 17021-1.

Comprehensive and Detailed In-Depth Explanation:According to ISO 17021-1:2015, Clause 9.4.9 (Corrective Actions):
* Minor nonconformities do not require a follow-up audit but must be corrected before the next surveillance audit.
* Follow-up audits are required only for major nonconformities.
* The audit team should recommend corrective actions, not enforce immediate follow-ups for minor nonconformities.
Thus, A is the correct answer.

According to ISO 19011:2018, clause 6.6.2, a nonconformity is the non-fulfilment of a requirement. A nonconformity can be classified as either major or minor, depending on the nature and extent of the deviation from the audit criteria. A major nonconformity is a nonconformity that affects the ability or the integrity of the organization's management system to achieve the intended results. A minor nonconformity is a nonconformity that does not affect the ability or the integrity of the organization's management system to achieve the intended results, but is a deviation from the audit criteria1.
According to ISO/IEC 17021-1:2015, clause 9.4.9, the organization is required to analyze the cause and describe the specific correction and corrective actions taken, or planned to be taken, to eliminate detected nonconformities, within a defined time. The organization is also required to provide the certification body with records and evidence of the implementation and effectiveness of the correction and corrective actions taken. The certification body will then verify the correction and corrective actions taken by the organization and decide on the certification status2.
Therefore, the two options of when the organization is required to act in response to reported findings are D and F, as they indicate the presence of nonconformities that need to be corrected and prevented from recurring. The other options are not correct, as they do not require the organization to act in response to reported findings:
*A. A recommendation is given in the report: A recommendation is a suggestion for improvement that is not related to a nonconformity. A recommendation is not binding for the organization and does not affect the certification status. The organization may choose to accept or reject the recommendation, but it is not required to act on it.
*B. A finding of good practice is reported: A finding of good practice is a positive observation that indicates a strength or a best practice of the organization's management system. A finding of good practice is not related to a nonconformity and does not affect the certification status. The organization may choose to acknowledge or share the finding of good practice, but it is not required to act on it.
*C. An opportunity for improvement is raised: An opportunity for improvement is a potential area where the organization's management system can be enhanced or optimized. An opportunity for improvement is not related to a nonconformity and does not affect the certification status. The organization may choose to pursue or ignore the opportunity for improvement, but it is not required to act on it.
*E. A finding of conformity is reported: A finding of conformity is a confirmation that the organization's management system fulfils the audit criteria. A finding of conformity is not related to a nonconformity and does not affect the certification status. The organization may choose to celebrate or communicate the finding of conformity, but it is not required to act on it.
References: ISO 19011:2018(en), Guidelines for auditing management systems, ISO/IEC 17021-1:2015(en), Conformity assessment - Requirements for bodies providing audit and certification of management systems
- Part 1: Requirements