You are correct. It is not required. However, it is expected that a medical device manufacturer will follow this standard for risk management. There is no need to have a certification to this standard. However, when your company is performing internal audits, it is a good idea to include a ISO 14971 audit.