Interested parties requirements - Evidence of control

[Ragnarok]

Hello to all

If if i have a list where i detail the interested parties then i list what are their requirements

for example:

- employee : fair and on time pay , clear career path

- Banks : loan reimbursement

- Partners: abiding by contractual requirements

and if we determine that the risks are only in the "on time pay"

Should we have :

* formal justification why the rest are not risks ? ( records that analyse status of loan reimbursements , detailed partnership requirements and status of each )

* how would i prove that i am treating my employees "fairly" , or that the infrastructure is |adequate" ?

in brief :

should all the expectations and requirements determined be PROVEN not to be a risk ( if we have a risk procedure with likelihood/impact and risk matrix?)

Thanks for any help

 

[normzone]

Risk Mitigation -

Avoidance
Acceptance
Limitation
Transference

Four Types of Risk Mitigation and BCM Governance, Risk and Compliance

 

[Marc]

<SNIP> should all the expectations and requirements determined be PROVEN not to be a risk </snip>

Being realistic, you can not prove all risks are anything more than (and only in some cases in reality actually are) potentially (e.g.: via validation) mitigated. Typically mitigation strategies are more theoretical than actual experience shows is realistic.

Even if you want to show a mitigation strategy/plan works, you can only do that after a real world event has taken place.

 

[dsanabria]

<snip> If if i have a list where i detail the interested parties then i list what are their requirements </snip>

Here is the requirement

"4.2 Understanding the Needs and Expectations of Interested Parties

Due to their effect or potential effect on the organization’s ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements,

the organization shall determine:

a. the interested parties that are relevant to the quality management system;

b. the requirements of these interested parties that are relevant to the quality management system.

The organization shall monitor and review information about these interested parties and their relevant requirements."


NOTE: You are overthinking this...