Dear Marcelo,
I've been following your posts, searching for answers regarding the risk management process. In our recent audit, we had a minor NC for risk management process flow and residual risk.
From what the auditor asked me, I understand that a customer complaint (or any post-production information) should feed back into the risk management process.
My question is where does it feedback to? Back to Residual risk, where I assess whether the failures identified in the complaint have been covered in the residual risk? And if they have what would be my next step?
What if it is not covered in the residual risk?
Please help me. I've been at this for days and no where near a complete understanding of the process.