Handling risk

Answer
Organizations determine risks and then evaluate them. ISO 31000:2018 presents several options to handle relevant risks:
* Avoid risk by deciding not to start, or not to continue, with an action that raises it;
* Accept or increase the risk in order to pursue an opportunity;
* Remove the source of the risk;
* Lower the probability;
* Change the consequences;
* Share the risk with another party or parties;
* Maintain risk based on informed decision;
* Take advantage of opportunities.

Your “preventive” interpretation is applicable when avoiding risk and when lowering the probability, for example.
The “correct and fix” interpretation is less common but applicable when removing the s ource of risk. So, both, in certain way are correct. Although the “preventive” approach is much more common.

The following material will provide you more information about risk management:
- How to identify risk controls in ISO 9001:2015 - https://advisera.com/9001academy/blog/2019/01/21/how-to-identify-risk-controls-in-iso-90012015/
- How to identify risk significance in ISO 9001:2015 - https://advisera.com/9001academy/blog/2019/01/14/how-to-identify-risk-significance-in-iso-90012015/
- Free webinar – How to implement risk management in ISO 9001:2015 - https://advisera.com/9001academy/webinar/how-to-implement-risk-management-in-iso-90012015-free-webinar/
- ISO 9001:2015 Risk Management Toolkit - https://advisera.com/9001academy/iso-90012015-risk-management-toolkit/
- Enroll for free course - ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
- book – Discover ISO 9001:2015 Through Practical Examples – https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/