Auditing risks and opportunities

Answer:
You can start by asking if the organization has determined its risks and opportunities. Even if they are not documented, you can check if different people in different places and moments are on the same page about risks and opportunities determination.

Then you can ask how the organization determines which risks and opportunities are relevant and must be treated. Now is the time to request evidence of examples of actions, developed and implemented, to manage relevant risks and opportunities. Were those actions effective?

And how the organization monitors and reviews risks and opportunities?

These are examples of the kind of questions you can ask to audit risks and opportunities.

The following material will provide you with information about risks and opportunities:
- ISO 9001 – How to address risks and opportunities in ISO 9001 - https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/
- free online training ISO 9001:2015 Foundatio ns Course – https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/