The correct answers are B and D .
In certification audits, the certification body decides the audit team composition and audit time using its own documented procedures and competence requirements. ISO/IEC 17021-1 requires the certification body to determine the competencies needed for the audit team and to assign an audit team that is competent for the audit scope. It also requires the certification body to determine the audit time needed to plan and accomplish a complete and effective audit.
IAF MD 5 further explains that the certification body should consider the composition and size of the audit team to ensure audit effectiveness. This means a client request for "only one auditor" may be considered , but it cannot simply be accepted just to reduce travel costs if that would undermine competence, coverage, or effectiveness.
Therefore:
* B is correct because the OHS Manager should be told that audit duration and team make-up are decided in line with the certification body's internal procedures .
* D is correct because the request can be considered , and the certification body can respond after applying its rules and competence requirements.
Why the other options are incorrect:
* A is not the best answer because the people managing the audit programme already operate within the certification body's process.
* C is inappropriate; a client request does not justify telling them to use another certification body.
* E is incorrect because the accreditation body does not decide the audit team for the client's audit.
* F is incorrect because the request cannot be automatically accepted based only on cost saving.