Risk management yes (ISO 13485 requires risk management, although it's not very clear what the expectations are), ISO 14971 not necessarily, although it's best to use it.
Another tip - ISO 13485, and related standards, are not really standards to create a quality system, they are standards to evaluate quality systems.
If you want a document to guide you in creating a good quality system, you might take a look at ISO 9004, or a good book such as the ones from David Hoyle (my recommendation is aways the ISO 9001 Quality Systems Handbook).