Informational Risk Management (and Risk Based Thinking) in ISO 9001:2015

A

aburaggi

hello everyone

does anyone made risk identification and assessment to share with us?

i like to see some samples;)
 
Marc

Marc

Fully vaccinated are you?
Leader
Re: Risk Management in ISO 9001:2015

See: How the addition of "Risk" will affect ISO 9001:2015.

Sidney has an ISO 9001:2015 group on Linkedin which is discussing Risk but I don't have the link off hand. I'm sure Sidney will add it here when he sees this post/thread.

Some Risk Examples: Financial uncertainty, project failure, security aspects, competition, technology problems, the effect on the environment from operations such as wastes produced and dangerous emission(s).
 
John Broomfield

John Broomfield

Leader
Super Moderator
Re: Risk Management in ISO 9001:2015

aburaggi said:
hello everyone

does anyone made risk identification and assessment to share with us?

i like to see some samples;)
Click to expand...

aburaggi,

We speak as if we are not already managing risk while realizing opportunities.

When we plan a new project or process we agree the objectives then we consider what could happen to stop us fulfilling the objectives and what we must do to be assured of meeting the objectives.

Accordingly, we ensure we have the necessary resources and controls in place to manage the risks while realizing the opportunity.

Resources include facilities, equipment, materials, authorities and competencies. Controls include methods, procedures, responsibilities, care and coordination. Of course, the resources and controls come with the necessary contingencies such as making sure we do not have single points of control.

For example, we are planning to do business with a supplier for the first time. We apply our established selection criteria and then invest in more monitoring than we do for suppliers accomplished in fulfilling our requirements. Another example, our customers are slow to pay. We find out why and may ensure our management system results in accurate invoices issued as soon as possible. Or, we design a product or process but want to ensure it does not cause injury so we organize multidisciplinary reviews between each design iteration.

Just about every decision is predicated by a risk assessment. Naturally, we need our management systems to help us to manage the knowledge proven useful to quickly assess opportunities and their risks.

The greatest risk, as I see it, is forgetting what we already know and do with our processes and projects in favor of chasing what ISO newly specifies explicitly instead of implicitly.

John
 
H

heartolearn

Re: Risk Management in ISO 9001:2015

In order to provide evidence it would seem from the text within Marc's post that the incorporation of risk based thinking will require some form of tool(s) to log in risks as they apply to the appropriate process. (This in itself becomes a process, does it not?) Personnel accepting of risk management seemingly would need guidance and a working structure to operate from. On-going risk to improvement opportunity conversions would require documentation of some type or else how could they be analyzed, reacted upon, measured and monitored, and lastly reported to Leadership?
 
A

aburaggi

Re: Risk Management in ISO 9001:2015

John Broomfield said:
aburaggi,

We speak as if we are not already managing risk while realizing opportunities.

When we plan a new project or process we agree the objectives then we consider what could happen to stop us fulfilling the objectives and what we must do to be assured of meeting the objectives.

Accordingly, we ensure we have the necessary resources and controls in place to manage the risks while realizing the opportunity.

Resources include facilities, equipment, materials, authorities and competencies. Controls include methods, procedures, responsibilities, care and coordination. Of course, the resources and controls come with the necessary contingencies such as making sure we do not have single points of control.

For example, we are planning to do business with a supplier for the first time. We apply our established selection criteria and then invest in more monitoring than we do for suppliers accomplished in fulfilling our requirements. Another example, our customers are slow to pay. We find out why and may ensure our management system results in accurate invoices issued as soon as possible. Or, we design a product or process but want to ensure it does not cause injury so we organize multidisciplinary reviews between each design iteration.

Just about every decision is predicated by a risk assessment. Naturally, we need our management systems to help us to manage the knowledge proven useful to quickly assess opportunities and their risks.

The greatest risk, as I see it, is forgetting what we already know and do with our processes and projects in favor of chasing what ISO newly specifies explicitly instead of implicitly.

John
Click to expand...

thanks John
of course risk always is considered that?s why we always add control measures in each and every process we do,,,, and i think incorporating it with the QMS should give a greater value. since the risk will be identified and evaluated. Frequency x Severity = Risk

i just need to see few samples -if exist- to start identifying and categorizing those risks
 
John Broomfield

John Broomfield

Leader
Super Moderator
Re: Risk Management in ISO 9001:2015

aburaggi,

Sure, we'd all like a few examples of the evidence expected of risk-based thinking as specified in the DIS.

The DIS also says that it is not specifying requirements for a risk-based management system.

So, are we to generate additional evidence to keep auditors happy or are we to continue managing risk as we now do, without keeping a record?

Hopefully, the FDIS will clarify this.

John
 
Last edited:
L

LUV-d-4UM

Quite Involved in Discussions
Re: Risk Management in ISO 9001:2015

I am taking a big risk by posting the Quality Policy statement for the ISO9001:2015 management system. I welcome everyone to critique this quality policy. Thank you.

"We the employees of XYZ company are committed to deliver quality in every product and service which we provide to all our customers. To meet this commitment we will:

Supply products and services which meet customer expectations and requirements surpassing or equalizing the competition

Develop and introduce innovative products and services to meet emerging expectations and requirements

Maintain an environment which encourages us to continuously strive to improve the quality of work, both individual and as a team.

This commitment to quality is a responsibility accepted by all XYZ Company employees to maintain the loyalty and trust of our customers."
 
H

Helmut Jilling

Auditor / Consultant
Re: Risk Management in ISO 9001:2015

aburaggi said:
thanks John
of course risk always is considered that?s why we always add control measures in each and every process we do,,,, and i think incorporating it with the QMS should give a greater value. since the risk will be identified and evaluated. Frequency x Severity = Risk

i just need to see few samples -if exist- to start identifying and categorizing those risks
Click to expand...

just to be clear, many companies do not adequately evaluate and control risks.
 
somashekar

somashekar

Leader
Admin
Re: Risk Management in ISO 9001:2015

Helmut Jilling said:
just to be clear, many companies do not adequately evaluate and control risks.
Click to expand...
Yes, very true.
They do not anticipate, they do not learn from past experiences.
They get surprises, shocks,
They firefight, they become busy, they get tired, then they also get appreciated, and a false sense of achievement is felt. They take pride in it, they get rewarded too for all the fire fighting.
Each process and process interaction must be assessed from two elements.
1. What is the Goal.
2. What are the prospects and consequences in the actions we plan towards meeting the goal.
Does the prospects weigh good, so we decide to go from Plan to Do, with all the available resources, and planned monitoring.
Are there any consequences likely to come up for which we have to make a Plan 2 as a backup...

How you want to document this is your freedom.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
Q Risk Management ISO 14971 - Probability of Occurrence ISO 14971 - Medical Device Risk Management 8
Z Risk Management SOP ISO 14971 ISO 14971 - Medical Device Risk Management 1
M Risk Management Plan ISO 14971 - Medical Device Risk Management 13
thisby_ Installation Related Issues and Risk Management ISO 14971 - Medical Device Risk Management 5
Doninina Risk management file according MDR or ISO 14971:P2019 ? EU Medical Device Regulations 2
G Help:Risk Management - Accessories US Food and Drug Administration (FDA) 1
N Writing Risk Management procedure for small manufacturing and we don't know where to start. Manufacturing and Related Processes 9
M Clinical evaluation interface with the risk management process EU Medical Device Regulations 9
J ISO 10993-1:2018 Format to Perform Risk Management Process US Food and Drug Administration (FDA) 1
B Risk Management Procedure updates needed for 14971:2019 ISO 14971 - Medical Device Risk Management 11
M Intended Use vs Actual Use and Scope of Risk Management EU Medical Device Regulations 8
S IDCB 0129/0160 Clinical Risk Management ISO 14971 - Medical Device Risk Management 2
A Risk Management Team IEC 60601 - Medical Electrical Equipment Safety Standards Series 11
S Risk Management File - Procedure Packs ISO 14971 - Medical Device Risk Management 3
G Risk Management for IEC 60601-1 and IEC 60601-1-2 IEC 60601 - Medical Electrical Equipment Safety Standards Series 15
K Do you have separate clinical risk management group or experts in your manufactures? EU Medical Device Regulations 4
Sidney Vianna ISO Practical Guide on ISO 31000:2018 - Risk Management Other ISO and International Standards and European Regulations 0
T Risk Assessment and Management [Deleted] Misc. Quality Assurance and Business Systems Related Topics 1
J HELP NEEDED ! Risk Management Exercise ISO 14971 - Medical Device Risk Management 12
O Should a Covid vaccine and testing policy be included as part of ISO9001 or AS9100 risk management? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
Melissa Risk Management Process, How far do I need to go? ISO 14971 - Medical Device Risk Management 13
D Does Risk Management apply to re-labeler (MDR) EU Medical Device Regulations 1
H Risk Management Plan in agile process ISO 14971 - Medical Device Risk Management 14
U Supply risk management Manufacturing and Related Processes 4
T Biological Evaluation (10993) & Risk Management ISO 14971 - Medical Device Risk Management 9
D Cybersecurity and Risk Management: Loss of confidentiality IEC 62304 - Medical Device Software Life Cycle Processes 5
S Risk Management Review ISO 14971 - Medical Device Risk Management 4
S Risk Management and other Files ISO 14971 - Medical Device Risk Management 8
silentmonkey Overall Benefit/Risk Analysis - Risk Management VS Clinical Evaluation ISO 14971 - Medical Device Risk Management 3
Aymaneh Medical Device Cybersecurity Risk Management IEC 27001 - Information Security Management Systems (ISMS) 2
A 21 CFR 820 - Risk Management - Looking for some guidance US Food and Drug Administration (FDA) 3
Sravan Manchikanti Software Risk Management & probability of occurrence as per IEC 62304 IEC 62304 - Medical Device Software Life Cycle Processes 9
R Identify Medical Device characterstics as Annex C of ISO 14971 Risk Management ISO 14971 - Medical Device Risk Management 5
N Device Labeling - Medtronic Ventilator Files (Risk Management documents) Coffee Break and Water Cooler Discussions 2
T How do you define your Hazards? <a Risk Management discussion> ISO 14971 - Medical Device Risk Management 16
adir88 MDR requirement: Risk Management Plan for "each device" ISO 14971 - Medical Device Risk Management 5
Dobby1979 Risk Analysis & Technical File - What detail goes in the Risk Management Report ISO 14971 - Medical Device Risk Management 5
C AS9100 Rev D 8.1.1 & APQP - Operational risk management process AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
B ATP 5-19 "Risk Management" Misc. Quality Assurance and Business Systems Related Topics 2
N Risk Management besides mandated FDA requirements 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
M Identifying Hazards - Risk management process ISO 14971 - Medical Device Risk Management 6
R Risk Management in the Medical Device Industry ISO 14971 - Medical Device Risk Management 4
F Linking an ISO 31000 Risk management SOP to ISO 17025 ISO 17025 related Discussions 2
Ronen E The unbearable insensitivity of risk management language Other Medical Device and Orthopedic Related Topics 1
S ISO 14971 Risk Management - Questions for Hazard identification ISO 14971 - Medical Device Risk Management 2
M Risk/Benefit vs. benefit-risk - Revising an SOP covering Risk Management with the MDR in mind EU Medical Device Regulations 10
A Defining Expected Service Life in Risk Management File Reliability Analysis - Predictions, Testing and Standards 5
R Linking the Processes of Continual Improvement, Change Management, Risk Management, Action Planning, etc? Preventive Action and Continuous Improvement 5
D Risk management according to ISO 14971 - When to document risk controls? ISO 14971 - Medical Device Risk Management 10
J Software for Techfiles and Risk management ISO 14971 - Medical Device Risk Management 1

Similar threads

Top Bottom