Risk management in ISO 9001

Answer:

First, ISO 9001:2015 does not require risk management in terms that you need to implement it on full scale. All the standard requires is to identify risks and opportunities related to the QMS and to take actions to address them. The standard does not require organization to document a procedure for addressing risks and opportunities, or to adopt methodology for risk assessment. Organization only needs to plan actions to address risks and opportunities and evaluate effectiveness of these actions.

For more information, see: How to address risks and opportunities in ISO 9001 https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/