Per 14971:
Risk Analysis is defined as the systematic use of available information to identify
hazards and to estimate the
risk.
Hazard is defined as a potential source of
harm.
For completeness:
Risk is the combination of the probability of occurence of
harm and the
severity of that
harm.
could you please help me with understanding the difference between risk managament (analysis) and hazard analysis?
A key feature of 14971 is the
analysis (and
reduction) of
risks. A hazard analysis is typically the top-level informative(*1) document in a risk analysis since
all risks derive from hazards. If there is a "difference" it is that Hazard Analyses are documents often supported by subordinate documents that document the current state of understanding of risk, whereas risk management is a process that covers an entire product life-cycle, incorporating feedback from monitoring and complaint reporting, etc.
(*1) A document with actual information, as opposed to planning tools like a risk management plan or a summary document like a risk management report.