Based on the provided document, here are 10 multiple-choice questions with answers for each main
clause of MS ISO 45001:2018.
Multiple-Choice Questions: MS ISO 45001:2018
Clause 1: Scope
1. What is the primary focus of MS ISO 45001:2018?
o A) Quality management systems
o B) Environmental management systems
o C) Occupational health and safety management systems
o D) Financial management systems
2. MS ISO 45001:2018 is designed to enable organizations to provide safe and healthy
workplaces by:
o A) Primarily focusing on product safety
o B) Delegating all OH&S responsibility to workers
o C) Preventing work-related injury and ill health, and proactively improving OH&S
performance
o D) Reducing all organizational risks, including financial ones
3. What are the intended outcomes of an OH&S management system, consistent with the
organization’s OH&S policy, according to Clause 1?
o A) Increased market share and customer satisfaction
o B) Reduction in workforce size and operational costs
o C) Continual improvement of OH&S performance, fulfilment of legal requirements
and other requirements, and achievement of OH&S objectives
o D) Elimination of all risks and opportunities
4. MS ISO 45001:2018 is applicable to organizations regardless of their:
o A) Profitability and market position
o B) Specific OH&S performance criteria
o C) Size, type and activities
o D) Compliance with national trade tariffs
5. Which of the following issues does MS ISO 45001:2018 explicitly state it does not address,
beyond the risks to workers and other relevant interested parties?
o A) Worker wellness/wellbeing
o B) Occupational health and safety management
o C) Product safety, property damage or environmental impacts
o D) Elimination of hazards
6. An organization can claim conformity to MS ISO 45001:2018 only if:
o A) It adopts only the parts of the document relevant to its immediate needs
o B) It only complies with national legal requirements
o C) All its requirements are incorporated into an organization’s OH&S management
system and fulfilled without exclusion
o D) It simply states compliance in its annual report
7. The document gives guidance for its use to:
o A) Mandate specific criteria for OH&S performance
o B) Only apply to large industrial organizations
o C) Help organizations provide safe and healthy workplaces by preventing work-
related injury and ill health, and proactively improving its OH&S performance
o D) Address issues of product safety and environmental impacts comprehensively
8. What kind of risks are within the scope of application of MS ISO 45001:2018?
o A) Only financial risks
o B) Only environmental risks
o C) OH&S risks under the organization’s control
o D) Risks related to product liability only
9. What does the phrase "IDT" on the front cover of the Malaysian Standard document signify?
o A) An International Development Team
o B) An Initial Draft for Testing
o C) An identical standard where the technical content, structure, and wording is
exactly the same as in an International Standard
o D) An Independent Document for Training
10. While MS ISO 45001:2018 enables an organization to manage its OH&S risks and improve its
OH&S performance, adoption of this document itself will not in itself guarantee:
o A) Reduction in legal compliance efforts
o B) Prevention of work-related injury and ill health to workers, provision of safe and
healthy workplaces and improved OH&S performance
o C) Improved financial standing
o D) Compliance with all ISO standards
Clause 2: Normative references
1. Regarding normative references in MS ISO 45001:2018, which statement is accurate?
o A) This document includes several normative references crucial for its application
o B) There are no normative references in this document
o C) Normative references are listed in Annex A
o D) All normative references are implicitly contained within the main text
Note: Clause 2 "Normative references" explicitly states "There are no normative references in this
document". This makes it challenging to formulate 10 distinct, non-trivial multiple-choice questions
solely based on the content of this specific clause without resorting to external information or highly
repetitive questions. The questions below reflect the limited direct content available for this clause.
2. What is the purpose of Clause A.2 "Normative references" in Annex A?
o A) To list all mandatory external documents for compliance
o B) To confirm that there are no normative references in the document, and to
suggest referring to the Bibliography for further information
o C) To provide a comprehensive list of legal requirements
o D) To detail the development procedures of the standard
3. If a user wants further information on OH&S guidelines or other ISO management system
standards, where should they look, according to Clause A.2?
o A) In Clause 3, "Terms and definitions"
o B) Contact STANDARDS MALAYSIA directly
o C) In the Bibliography
o D) Within Clause 6, "Planning"
4. The absence of normative references in MS ISO 45001:2018 implies that:
o A) The document is incomplete and requires external mandatory standards for use
o B) The requirements within the document are self-contained and do not rely on
other specific, mandatory reference documents for their interpretation or
application
o C) It is not a complete management system standard
o D) It is only an informative guidance document
5. Which part of the document confirms that MS ISO 45001:2018 does not rely on other
mandatory reference documents?
o A) The Foreword
o B) The Introduction
o C) Clause 2 and Annex A.2
o D) Clause 10, "Improvement"
Clause 3: Terms and definitions
1. In MS ISO 45001:2018, a "worker" is defined as a person performing work or work-related
activities that are:
o A) Only paid and full-time
o B) Under the control of the organization
o C) Limited to only managerial persons
o D) Exclusively performed by the organization’s direct employees
2. What is the definition of a "workplace" in this document?
o A) Any location where an organization's product is sold
o B) A place under the control of the organization where a person needs to be or to
go for work purposes
o C) Only the primary administrative office
o D) Any location where workers communicate with each other
3. What is a "hazard" defined as within the standard?
o A) An unexpected positive outcome from an activity
o B) A source with a potential to cause injury and ill health
o C) A planned activity designed to improve performance
o D) A beneficial circumstance for OH&S performance
4. A "nonconformity" is defined as:
o A) Fulfilment of a requirement
o B) An opportunity for improvement
o C) Non-fulfilment of a requirement
o D) A deviation from a proposed plan that has no consequences
5. What constitutes an "OH&S management system"?
o A) Any system used to manage quality and finance
o B) A management system or part of a management system used to achieve the
OH&S policy
o C) Only the documented procedures for emergency response
o D) A system solely focused on minimizing legal compliance efforts
6. In MS ISO 45001:2018, what does the verbal form "shall" indicate?
o A) A recommendation
o B) A permission
o C) A possibility or a capability
o D) A requirement
7. How is "top management" defined in relation to an organization?
o A) A group of external consultants advising the organization
o B) Person or group of people who directs and controls an organization at the
highest level
o C) Any manager within the organization who has authority
o D) The external organization responsible for certification
8. What are the intended outcomes of the OH&S management system according to its
definition?
o A) To increase production and reduce overheads
o B) To only address issues of social responsibility
o C) To prevent injury and ill health to workers and to provide safe and healthy
workplaces
o D) To manage environmental impacts exclusively
9. What is "documented information" defined as?
o A) Only records of financial transactions
o B) Only procedures written on paper
o C) Information required to be controlled and maintained by an organization and
the medium on which it is contained
o D) Only oral communications and informal agreements
10. What is "continual improvement"?
o A) An activity that must occur without any interruption whatsoever
o B) A one-time event upon achieving certification
o C) Recurring activity to enhance performance
o D) Improvement that is only necessary in areas with identified nonconformities
Clause 4: Context of the organization
1. What shall the organization determine in Clause 4.1 "Understanding the organization and its
context"?
o A) Only the financial performance targets
o B) Only the competitor's market strategies
o C) External and internal issues that are relevant to its purpose and that affect its
ability to achieve the intended outcome(s) of its OH&S management system
o D) The historical data of all past incidents
2. When understanding the needs and expectations of workers and other interested parties,
what shall the organization determine?
o A) Only their personal preferences and opinions
o B) Their financial investment capabilities
o C) The relevant needs and expectations (i.e. requirements) of workers and other
interested parties, and which of these are or could become legal requirements and
other requirements
o D) Only the immediate requirements from regulatory bodies
3. What must the organization determine to establish the scope of its OH&S management
system?
o A) Its entire global operations, without exception
o B) Only the activities that pose the highest risk
o C) The boundaries and applicability of the OH&S management system
o D) The number of workers required for each process
4. When determining the scope, which of the following must the organization take into
account?
o A) Competitor's OH&S strategies
o B) Only financial considerations
o C) External and internal issues, the requirements of workers and other interested
parties, and planned or performed work-related activities
o D) Future market trends and product developments
5. The OH&S management system shall include activities, products, and services that:
o A) Are solely the responsibility of external contractors
o B) Only relate to administrative tasks
o C) Are within the organization’s control or influence that can impact the
organization’s OH&S performance
o D) Are specifically excluded from the scope
6. How shall the scope of the OH&S management system be made available?
o A) Through verbal communication from top management
o B) As an informal internal agreement
o C) As documented information
o D) Via an external audit report only
7. What is the overall requirement for an organization regarding its OH&S management system
in Clause 4.4?
o A) To simply establish it
o B) To only maintain it
o C) To establish, implement, maintain and continually improve an OH&S
management system
o D) To delegate all responsibilities to workers
8. Which of the following is an example of an external issue that can affect the OH&S
management system?
o A) Organizational structure and roles
o B) Information systems and decision-making processes
o C) Introduction of new technologies, new laws, and new competitors
o D) The organization's own policies and objectives
9. Which of the following is an example of an internal issue that can affect the OH&S
management system?
o A) Legal and regulatory authorities
o B) Suppliers, contractors, and subcontractors
o C) The capabilities, understood in terms of resources, knowledge and competence
o D) International trade agreements
10. What does the credibility of the organization's OH&S management system depend upon,
concerning its scope?
o A) The number of workers in the organization
o B) The financial investment in the system
o C) The choice of the boundaries, which should not be used to exclude activities,
products, and services that impact OH&S performance or to evade legal
requirements
o D) The level of detail in its documented information
Clause 5: Leadership and worker participation
1. Top management shall demonstrate leadership and commitment by taking overall
responsibility and accountability for:
o A) Minimizing legal compliance efforts
o B) Only responding to incidents after they have occurred
o C) The prevention of work-related injury and ill health, as well as the provision of
safe and healthy workplaces and activities
o D) Ensuring compliance with financial regulations only
2. What is a critical factor for the success of an OH&S management system, as stated in the
Introduction and emphasized in Clause 5.1?
o A) Limiting documented information to the absolute minimum
o B) Avoiding communication with external interested parties
o C) Leadership, commitment and participation from all levels and functions of the
organization
o D) Strictly adhering to reactive measures rather than proactive planning
3. The OH&S policy established by top management shall include a commitment to:
o A) Increase market share and profitability
o B) Limit employee benefits
o C) Provide safe and healthy working conditions for the prevention of work-related
injury and ill health, eliminate hazards, and reduce OH&S risks
o D) Outsource all high-risk activities
4. The OH&S policy shall be:
o A) Kept confidential from workers
o B) Updated only once every five years
o C) Available as documented information, communicated within the organization,
and available to interested parties, as appropriate
o D) Subject to external legal review only
5. Top management shall ensure that responsibilities and authorities for relevant OH&S roles
are:
o A) Only assigned to the OH&S manager
o B) Determined by external auditors
o C) Assigned and communicated at all levels within the organization and maintained
as documented information
o D) Kept flexible and undocumented
6. What explicit obstacle or barrier to worker participation should the organization determine
and remove or minimize?
o A) Providing timely access to clear information
o B) Emphasizing consultation of non-managerial workers
o C) Reprisals or threats of reprisals
o D) Establishing health and safety committees
7. Which of the following is emphasized for the consultation of non-managerial workers?
o A) Determining control measures for operation
o B) Determining the needs and expectations of interested parties
o C) Investigating incidents and nonconformities
o D) Evaluating training effectiveness
8. Which of the following is emphasized for the participation of non-managerial workers?
o A) Establishing the OH&S policy
o B) Determining how to fulfil legal requirements
o C) Identifying hazards and assessing risks and opportunities
o D) Planning to achieve OH&S objectives
9. What does consultation (in the context of worker participation) imply?
o A) A one-way communication where the organization provides information
o B) A two-way communication involving dialogue and exchanges, with timely
provision of information for informed feedback to be considered before decision-
making
o C) Merely informing workers after decisions are made
o D) Delegation of decision-making authority to workers
10. Who has ultimate responsibility for the functioning of the OH&S management system, even
if responsibility and authority can be assigned?
o A) Workers at each level
o B) Top management
o C) External consultants
o D) Health and safety committees
Clause 6: Planning
1. When planning for the OH&S management system, the organization shall consider issues
related to:
o A) Only external market trends
o B) Only financial risks and opportunities
o C) Its context, the requirements of interested parties, and the scope of its OH&S
management system
o D) Future product development only
2. What is one of the objectives for which risks and opportunities need to be addressed during
planning?
o A) To reduce the number of workers
o B) To increase profit margins
o C) To give assurance that the OH&S management system can achieve its intended
outcome(s)
o D) To minimize external communication
3. The organization’s process for hazard identification shall be:
o A) Reactive, focusing only on past incidents
o B) Conducted annually by external consultants
o C) Ongoing and proactive
o D) Limited to identifying only physical hazards
4. When shall the assessment of OH&S risks and opportunities associated with planned
changes in the organization be undertaken?
o A) After the change has been fully implemented
o B) Only if an incident occurs as a result of the change
o C) Before the change is implemented
o D) Annually during the management review
5. The organization shall maintain documented information on which of the following aspects
related to planning actions to address risks and opportunities?
o A) Only financial investments
o B) Risks and opportunities, and the process(es) and actions needed to determine
and address them
o C) External market trends
o D) Employee vacation schedules
6. The hazard identification process shall take into account, but not be limited to, hazards
arising from:
o A) Only natural disasters
o B) Only equipment failures
o C) How work is organized, social factors, routine and non-routine activities, past
incidents, and potential emergency situations
o D) Only external economic changes
7. OH&S objectives established by the organization shall:
o A) Be kept confidential from workers
o B) Be measurable (if practicable) or capable of performance evaluation
o C) Remain unchanged once established
o D) Focus primarily on increasing production
8. When planning how to achieve its OH&S objectives, the organization shall determine:
o A) Only who will be responsible
o B) Only the financial costs involved
o C) What will be done, what resources will be required, who will be responsible,
when it will be completed, and how the results will be evaluated
o D) Only the external legal requirements
9. What is required regarding documented information for legal and other requirements?
o A) It only needs to be accessible to top management
o B) It can be an informal understanding
o C) It shall be maintained and retained and updated to reflect any changes
o D) It is only needed during initial setup of the system
10. When planning its actions, the organization shall take into account which of the following?
o A) Only the cheapest available options
o B) Only the easiest actions to implement
o C) The hierarchy of controls and outputs from the OH&S management system,
along with best practices, technological options, and financial, operational, and
business requirements
o D) Only actions that require no additional resources
Clause 7: Support
1. What resources shall the organization determine and provide for the OH&S management
system?
o A) Only financial resources
o B) Only human resources
o C) The resources needed for the establishment, implementation, maintenance and
continual improvement of the OH&S management system
o D) Resources only for emergency situations
2. To ensure worker competence, the organization shall:
o A) Assume all workers are competent upon hiring
o B) Only provide training when an incident occurs
o C) Determine necessary competence, ensure workers are competent based on
education, training or experience, take actions to acquire/maintain competence,
and retain documented information as evidence
o D) Only focus on managerial competence
3. Workers shall be made aware of their ability to:
o A) Influence the organization's strategic direction
o B) Conduct management reviews
o C) Remove themselves from work situations that they consider present an
imminent and serious danger to their life or health, as well as the arrangements for
protecting them from undue consequences for doing so
o D) Approve financial budgets
4. When establishing communication processes, the organization shall take into account:
o A) Only the preferences of top management
o B) Competitors' communication strategies
o C) Diversity aspects (e.g., gender, language, culture, literacy, disability) and
external interested parties' views
o D) Only formal written communications
5. What must the organization ensure about OH&S information to be communicated?
o A) It is always kept confidential
o B) It is only communicated externally
o C) It is consistent with information generated within the OH&S management
system, and is reliable
o D) It is only communicated informally
6. The organization’s OH&S management system shall include which type of documented
information?
o A) Only financial statements and tax records
o B) Only marketing and sales plans
o C) Documented information required by this document and documented
information determined by the organization as being necessary for the
effectiveness of the OH&S management system
o D) Any information, regardless of its relevance to OH&S
7. When creating and updating documented information, the organization shall ensure
appropriate:
o A) Marketing and branding
o B) Cost-reduction strategies
o C) Identification and description, format and media, and review and approval for
suitability and adequacy
o D) Uncontrolled distribution to all parties
8. For the control of documented information, which of the following activities shall the
organization address, as applicable?
o A) Only generation of new information
o B) Only the destruction of all old records
o C) Distribution, access, retrieval and use; storage and preservation; control of
changes; and retention and disposition
o D) Only the collection of competitor data
9. Access to relevant documented information includes access by:
o A) Only auditors
o B) Only top management
o C) Workers, and, where they exist, workers’ representatives
o D) External financial advisors
10. What is an example of an applicable action the organization can take to acquire and maintain
necessary competence?
o A) Reducing training budgets
o B) Excluding temporary workers from training
o C) Providing training, mentoring, re-assigning currently employed persons, or
hiring/contracting competent persons
o D) Relying solely on self-study by workers
Clause 8: Operation
1. The organization shall plan, implement, control and maintain the processes needed to meet
OH&S management system requirements by:
o A) Avoiding documented information to ensure flexibility
o B) Only establishing criteria for processes
o C) Establishing criteria, implementing control in accordance with criteria,
maintaining and retaining documented information, and adapting work to workers
o D) Relying entirely on external contractors
2. According to the hierarchy of controls for eliminating hazards and reducing OH&S risks,
which measure is typically considered the most effective?
o A) Using personal protective equipment (PPE)
o B) Implementing administrative controls
o C) Substituting with less hazardous processes
o D) Eliminating the hazard
3. Which of the following is considered an administrative control according to the hierarchy of
controls?
o A) Machine guarding
o B) Replacing solvent-based paint with water-based paint
o C) Conducting training to prevent bullying and harassment
o D) Removing fork-lift trucks from an area
4. What is the objective of a management of change process as described in the standard?
o A) To prevent any changes from occurring within the organization
o B) To enhance occupational health and safety at work, by minimizing the
introduction of new hazards and OH&S risks into the work environment as changes
occur
o C) To solely focus on the financial implications of changes
o D) To quickly implement changes without prior assessment of OH&S impacts
5. The organization shall establish, implement, and maintain a process(es) to control the
procurement of products and services in order to:
o A) Only reduce costs for the organization
o B) Increase product marketability
o C) Ensure their conformity to its OH&S management system
o D) Eliminate all external suppliers
6. When coordinating its procurement process with contractors, the organization shall identify
hazards and assess/control OH&S risks arising from:
o A) Only the financial viability of the contractors
o B) Only the contractors' activities that impact the organization
o C) The contractors’ activities impacting the organization, the organization’s
activities impacting contractors’ workers, and contractors’ activities impacting
other interested parties in the workplace
o D) Only the legal compliance of the contractors
7. When an organization "outsources" a function or process, who retains the responsibility for
conforming to the requirements of MS ISO 45001:2018 for that outsourced function or
process?
o A) The external organization performing the outsourced function
o B) The organization that outsourced the function
o C) The responsibility is equally shared by both organizations
o D) The responsibility is transferred entirely to the external provider
8. What does emergency preparedness and response include regarding training?
o A) Training is optional and only provided if incidents occur
o B) Training is only for top management
o C) Providing training for the planned response
o D) Training only on financial aspects of emergencies
9. What is required regarding communication of relevant information during emergency
preparedness and response?
o A) It is only communicated internally to workers
o B) It is kept confidential to avoid panic
o C) It is communicated to all workers on their duties and responsibilities, and to
contractors, visitors, emergency response services, government authorities and, as
appropriate, the local community
o D) It is only communicated to emergency services after an incident
10. The organization's procurement process(es) shall define and apply which type of criteria for
the selection of contractors?
o A) Only financial criteria
o B) Only past work experience criteria
o C) Occupational health and safety criteria
o D) Only product quality criteria
Clause 9: Performance evaluation
1. The organization shall establish, implement and maintain a process(es) for monitoring,
measurement, analysis and performance evaluation to determine:
o A) Only external market competition
o B) Only employee satisfaction
o C) What needs to be monitored and measured, including legal requirements
fulfillment, activities related to hazards/risks/opportunities, progress towards
objectives, and effectiveness of controls
o D) Only the financial performance of the system
2. What should the organization ensure regarding monitoring and measuring equipment?
o A) It is only used when a nonconformity is identified
o B) It is purchased but not necessarily maintained
o C) It is calibrated or verified as applicable, and is used and maintained as
appropriate
o D) It is outsourced to an external provider without internal checks
3. The organization shall retain appropriate documented information as evidence of:
o A) Its marketing strategies
o B) Customer feedback
o C) The results of monitoring, measurement, analysis and performance evaluation;
and on the maintenance, calibration or verification of measuring equipment
o D) Competitors' activities
4. What is the purpose of the process for evaluating compliance with legal requirements and
other requirements?
o A) To solely collect data for external reporting
o B) To only review legal documents annually
o C) To establish, implement and maintain a process(es) for evaluating compliance
o D) To delegate all compliance responsibility to a legal department
5. The organization shall conduct internal audits at planned intervals to provide information on
whether the OH&S management system:
o A) Has achieved maximum profitability
o B) Conforms to the organization’s own requirements and the requirements of this
document, and is effectively implemented and maintained
o C) Is attracting new employees
o D) Is completely free of any risks
6. When planning an internal audit programme, what shall the organization take into
consideration?
o A) Only the availability of external auditors
o B) Only the cost of the audit
o C) The importance of the processes concerned and the results of previous audits
o D) Only the number of incidents from the previous year
7. Who should the results of internal audits be reported to?
o A) Only the CEO
o B) Only the auditors themselves
o C) Relevant managers; and relevant audit results also to workers, workers’
representatives, and other relevant interested parties
o D) External regulatory bodies only
8. Top management shall review the organization’s OH&S management system at planned
intervals to ensure its:
o A) Financial viability only
o B) Market competitiveness
o C) Continuing suitability, adequacy and effectiveness
o D) Adherence to external voluntary guidelines only
9. Management review shall include consideration of information on OH&S performance,
including trends in:
o A) Only financial indicators
o B) Customer satisfaction scores
o C) Incidents, nonconformities, corrective actions, monitoring and measurement
results, evaluation of compliance, audit results, and consultation/participation of
workers
o D) Employee turnover rates
10. What must be included in the outputs of the management review?
o A) Decisions only on financial investments
o B) Opportunities for product development
o C) Decisions related to the continuing suitability, adequacy and effectiveness of the
OH&S management system, continual improvement opportunities, need for
changes, resources needed, and implications for strategic direction
o D) Only a summary of past incidents
Clause 10: Improvement
1. What shall the organization determine opportunities for, as a general requirement for
improvement?
o A) Only cost reduction
o B) Only new product development
o C) Improvement (from Clause 9 performance evaluation) and implement necessary
actions to achieve the intended outcomes of its OH&S management system
o D) Only external stakeholder engagement
2. When an incident or a nonconformity occurs, the organization shall first:
o A) Immediately inform external regulators
o B) Blame the responsible worker
o C) React in a timely manner to control and correct it, and deal with the
consequences
o D) Wait for a formal investigation to be initiated by external parties
3. Who shall participate in evaluating the need for corrective action after an incident or
nonconformity?
o A) Only top management
o B) Only external consultants
o C) Workers, and the involvement of other relevant interested parties
o D) Only the OH&S manager
4. What is the objective of corrective action related to an incident or nonconformity?
o A) To punish those responsible
o B) To simply document the event
o C) To eliminate the root cause(s) of the incident or nonconformity, in order that it
does not recur or occur elsewhere
o D) To conduct a public relations campaign
5. When determining and implementing any action needed, including corrective action, the
organization shall do so in accordance with:
o A) The cheapest available options
o B) The preferences of individual workers
o C) The hierarchy of controls and the management of change
o D) Only the immediate financial impact
6. The organization shall retain documented information as evidence of:
o A) Only the financial cost of incidents
o B) Only internal discussions about nonconformities
o C) The nature of the incidents or nonconformities and any subsequent actions
taken; and the results of any action and corrective action, including their
effectiveness
o D) Only the names of involved workers
7. What does "continual improvement" indicate in the context of this document?
o A) Duration without interruption
o B) Improvement that is only necessary once every few years
o C) Duration that occurs over a period of time, but with intervals of interruption
o D) A one-time enhancement of performance
8. To continually improve the OH&S management system, the organization shall:
o A) Only reduce financial expenditure
o B) Only rely on external audits
o C) Enhance OH&S performance, promote a culture that supports an OH&S
management system, promote worker participation, and communicate relevant
results of continual improvement
o D) Only focus on achieving initial certification
9. What is the focus of root cause analysis?
o A) Assigning blame for an incident
o B) Merely documenting the visible symptoms of a problem
o C) Prevention, by exploring all possible factors associated with an incident or
nonconformity to determine what can be done to prevent recurrence
o D) Predicting future market trends
10. When reviewing the effectiveness of corrective actions, what is the organization examining?
o A) Whether the financial costs were justified
o B) Whether new equipment has been purchased
o C) The extent to which the implemented corrective actions adequately control the
root cause(s)
o D) The number of workers involved in the action