Determining risks and opportunities

I recommend starting with determining the context. For the internal issues, think about that kind of issues systematically arise in the reports and internal meetings (complaints, successes, costs, customer satisfaction, performance indicators, ...). Classify the positive internal issues as strengths and the negative internal issues as weaknesses.

I use the PESTLE analysis framework in order to support the discipline of questioning the mind around various areas that may affect an organization (politics, economics, social, technology, legislation and environment) to determine external issues. After the PESTLE analysis I recommend collecting positive external issues as opportunities and negative external issues as threats and organize the information in a SWOT matrix.

Then you can combine strengths with opportunities or with threats, or combine weaknesses with opportunities or with threats, and from those combinations see if you can determine risks or opportunities.

Below you can see some examples of application of this methodology:

I describe this methodology in more detail in this free webinar on demand - ISO 9001:2015 clause 4 - Context of the organization, interested parties, and scope - https://advisera.com/9001academy/webinar/iso-90012015-clause-4-context-of-the-organization-interested-parties-and-scope-free-webinar-on-demand/

You can find more information in the following links:

• How to identify the context of the organization in ISO 9001:2015 - https://advisera.com/9001academy/knowledgebase/how-to-identify-the-context-of-the-organization-in-iso-90012015/
• Enroll for free course - ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
• Book – Discover ISO 9001:2015 Through Practical Examples –https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/