Risk-based thinking is a new concept in the ISO 9001:2015 standard, and this has caused many companies to search for an easy way to manage the risk in their companies. By focusing on understanding your risks through a simple risk management process, you can focus your attention more on addressing the risks that are present for your organization rather than struggling with a complex process that will take excessive amounts of time and resources for little return on investment.

This white paper is intended for companies that are looking for a simple risk management process to support their implementation of an ISO 9001:2015 Quality Management System (QMS). A basic risk management process can be beneficial for a company by allowing them to focus their QMS on preventing problems from occurring, rather than being strictly reactionary. This paper describes the suggested steps in a basic risk management process, and is supported by this downloadable Diagram of 4 steps in ISO 9001 risk management.