When do we identify Residual Risk?

qualprod

Trusted Information Resource
#11
Yes and no. This is where my confusion comes from. It sounds like some people say residual risk should be estimated up front to show how our controls deal with inherent risk. Other people say that residual risk should be measured after controls have been implemented. There are different scenarios. It seems that when we have existing controls, we should calculate residual risk to see if those controls are already effective to treat new or existing risks. If yes, residual risk should be recorded. If no (no controls or they are not effective), we will need to develop additional risk treatment actions. In this case, it is irrelevant to estimate residual risk because it doesn't seem to add value. See diagram. Why would we estimate it? View attachment 26169

View attachment 26169
Ukrain

Take a look at 31000, check what is in bold

5.5 Risk treatment
5.5.1 General
Risk treatment involves selecting one or more options for modifying risks, and implementing those options.
Once implemented, treatments provide or modify the controls.

Risk treatment involves a cyclical process of:
⎯ assessing a risk treatment;
deciding whether residual risk levels are tolerable;
⎯ if not tolerable, generating a new risk treatment; and
⎯ assessing the effectiveness of that treatment.
Risk treatment options are not necessarily mutually exclusive or appropriate in all circumstances. The options
can include the following:
a) avoiding the risk by deciding not to start or continue with the activity that gives rise to the risk;
b) taking or increasing the risk in order to pursue an opportunity;
c) removing the risk source;
d) changing the likelihood;
e) changing the consequences;
f) sharing the risk with another party or parties (including contracts and risk financing); and
g) retaining the risk by informed decision.

Additionally:

In 2.27
residual risk
risk (2.1) remaining after risk treatment (2.25)

Hope this helps
 
Elsmar Forum Sponsor
#12
Yes and no. This is where my confusion comes from. It sounds like some people say residual risk should be estimated up front to show how our controls deal with inherent risk. Other people say that residual risk should be measured after controls have been implemented. There are different scenarios. It seems that when we have existing controls, we should calculate residual risk to see if those controls are already effective to treat new or existing risks. If yes, residual risk should be recorded. If no (no controls or they are not effective), we will need to develop additional risk treatment actions. In this case, it is irrelevant to estimate residual risk because it doesn't seem to add value. See diagram. Why would we estimate it? View attachment 26169

View attachment 26169
HI ukrainka85, my understanding is as follow:
1 before we propose the control measures to reduce the risk, indeed, we need to ensure the control measure is effective that can reduce the risk. in this case, we need to evaluate the risk level before the implement the control measures. But also i see some companies donot have the evaluation before the implementation. It is ok but it will bring the risk that it is possible after the control measures the risk is still unacceptable. In this case, the effort for the control is waste of time. So, it is better to do the evaluation before the implementation of the control measures. Also, implement the control measures could bring additional risk which need evaluation.
2 After the implementation, there should also evaluation on the risk that is because during the implementation, maybe there could be some risk that is not considered before.
 
Thread starter Similar threads Forum Replies Date
D How to Identify the Risks and Opportunities required for QMS Processes? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
D How to identify and confirm that the developed device fall under Israel electro medical device category Other Medical Device Regulations World-Wide 0
D How to identify and confirm that the developed device fall under Israel electro medical device category Other Medical Device Regulations World-Wide 1
E How do you identify what standards a country recognizes outside of FDA, EU, Health Canada Other Medical Device Related Standards 1
Marc Can you identify this moth? 19 January 2019 After Work and Weekend Discussion Topics 6
K Please help identify appropriate statistical treatment Statistical Analysis Tools, Techniques and SPC 13
D Help identify a Nationally Recognized Testing Laboratory (NRTL) (UL) certified lab General Measurement Device and Calibration Topics 3
T To Identify the Applicable MDD Directive - Prepared blood smear EU Medical Device Regulations 13
A Requirement to Identify Changes to record in ISO 13485 : 2016 ISO 13485:2016 - Medical Device Quality Management Systems 4
R AS9100D Cl. 8.4.2 - Identify Raw Material as a Significant Operational Risk AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 4
C How to Identify Counterfeit Medications (drugs)? US Food and Drug Administration (FDA) 5
P How to identify the Management Representative ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
T How to identify requirements for 'Incoming inspection' Inspection, Prints (Drawings), Testing, Sampling and Related Topics 5
M How to identify software configuration items in a BOM Quality Manager and Management Related Issues 3
S Resource Planning/How to identify IATF 16949 - Automotive Quality Systems Standard 1
V How to identify Customer Specific Requirement If is not provided by Customer Customer and Company Specific Requirements 5
B How to identify Six Sigma Yellow Belt Project Six Sigma 4
C Must we identify steps taken to identify the Root Cause of a failure Nonconformance and Corrective Action 15
G How to identify Key Characteristics (KC) in a Design FMEA (DFMEA) FMEA and Control Plans 2
X Existing Toolroom Process Validation - Need to identify clauses addressed. Manufacturing and Related Processes 7
C How Can I Identify 304 Stainless Steel? Manufacturing and Related Processes 6
Geoff Cotton How to identify Stakeholders in a Company Quality Tools, Improvement and Analysis 9
M How to identify CTQ / Critical Characteristics using the DFMEA approach. FMEA and Control Plans 3
R 3rd Party Audit Comment - Identify ISO Clauses/Sub Clauses to each Process Quality Management System (QMS) Manuals 45
J AS9100:C Risk Management - Identify the Risk for the Sales/Contract Processes AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 12
T How to Identify Taper Gages without potentially damaging them General Measurement Device and Calibration Topics 5
N How to Number (Identify) and Index Forms Document Control Systems, Procedures, Forms and Templates 1
A DoC for Software Product - How can I identify the specific units that are covered? EU Medical Device Regulations 6
T How to Identify "Observation" in Internal Audits? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 26
X Audit Findings - The Process/Clause Matrix does not identify all the processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 30
S Identify Environment Aspect by Activities Approach ISO 14001:2015 Specific Discussions 4
T Can't identify my company's "Key Process" Process Maps, Process Mapping and Turtle Diagrams 27
B Effectiveness of 200% Visual Inspection to Identify Defects and Defectives Inspection, Prints (Drawings), Testing, Sampling and Related Topics 32
N Definition IDENTIFY and DETERMINE - What is the technical difference between the words Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 64
A Procedure to Identify Potential Emergency Situations and Accidents Miscellaneous Environmental Standards and EMS Related Discussions 4
D AS9102 - How to title the attached form and how to identify the characteristics AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 4
kedarg6500 How to Identify Critical to Quality Characteristics (CTQ) FMEA and Control Plans 2
Le Chiffre At what point do you need to identify a U.S. Agent - 510(k) 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
M New to AS9100 - Clause 7.5.3 - Do you have to identify each part produced AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 6
S Form to identify status of product on the production floor. IATF 16949 - Automotive Quality Systems Standard 5
L Special Characteristics - What if the customer does not identify any SCs? FMEA and Control Plans 5
M How do you identify the wrong orientation in complex wiring harness? Manufacturing and Related Processes 21
W How do you address clause 4.1 General requirements - Identify the processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 21
S CE Mark using Registered Trademark to identify the legal manufacturer EU Medical Device Regulations 6
Bilijaf Determine vs. identify (as in clause 4.1 a), any differences? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
B How to identify the processes needed for quality management system ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
I Skill Matrix Format as a Tool to Identify Training Needs Document Control Systems, Procedures, Forms and Templates 1
F How Can I Identify any Drawbacks of 8D Problem Solving Methodology Quality Tools, Improvement and Analysis 5
N Definition Potential Failure Mode Definition and How to identify Failure Modes? Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 33
M Who can Identify and Initiate a Request for a Non-Conformance Report? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 18
Similar threads


















































Top Bottom