Preparing a Risk Assessment Procedure

The procedure should contain at least the following sections:

- How you identify your risks and opportunities - In this section you can describe a method which can include questions to answer during a brainstorming session with the relevant people of your organization or for instance conducting a SWOT analysis to better understand the risks and opportunities of the context of your organization. 

- How you determine the level of significance of each risk that has been indentified - In this section you need to establish certain criteria to determine a rating for each risk and opportunitiy. For instance the probablity of ocurrence is a criteron often used. 

- Which actions must be conducted to address the significant risks and opportunties - Here you define which measures must be taken according to the results of risk significance obtained.

- Review of the actions taken to address the risks and opportunities - In this section you define the frequency of the assessment to be done in order to check the actions that have been conducted to address risks and opportunities. 

For more information about how to write a procedure for addressing risks and opportunities, see the following materials:

- Article - How to address risks and opportunities in ISO 9001: https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/

- Enroll for free course - ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/

- Book – Discover ISO 9001:2015 Through Practical Examples – https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/