When you consider desired or expected results and due to uncertainty, you realize that you might not meet those results you are considering the influence of risks. Positive risks, also known as opportunities, help you meet or surpass desired results. Negative risks, risks, hinder your ability to meet those desired results.
ISO 9001:2015 does not require documenting risks and opportunities. So, organizations are free to decide if they document and how to document. I recommend organizations develop a register for risks and opportunities. That register can be global or per product/service, or per process, or per department.
For example, in the purchasing department you can identify risks such as:
Selecting a bad supplier
Receiving ordered material too late
Receiving ordered material with quality problems
For example, in the purchasing department you can identify opportunities such as:
Selecting a supplier with know-how that helps us develop innovative products
Selecting a supplier that allows us to manufacture small amounts with fast response.
The following material will provide you more information: