Risk-based thinking is a great way of implementing quality management into the everyday work life of every employee within an organization. ISO 9001:2015 promotes the process approach and in this free webinar on demand - The Process Approach - What it is, why it is important, and how to do it - https://advisera.com/9001academy/webinar/iso-9001-process-approach-free-webinar-on-demand/ I show how to relate processes, risks, training, documentation and control. You can start by mapping your processes. Then, for each process, draw it with a flowchart and ask: what can go wrong?
In the picture above the blue boxes are examples of what can go wrong. The yellow boxes are examples of what was decided to handle those risks – new activities, control plans, new documentation.
Then, for each flowchart you can see who participates:
Now, for each step, considering risks and answers to them, you can design the organizational knowledge required: