Risk and opportunities assessment or Risk based thinking- Integrated Management System concept.(9001,14001,45001.)

*It is a new requirement as per ISO 9001:2015,ISO 14001:2015,ISO 45001:2018.

Will be publishing an article with 10 volumes starts with

1.Where is risk and opportunity addressed in the standard? 2.How to identify the context of my organisation?(Manufacturing industries.) 3.What are the internal/external issues,compliance obligations which can affect an organization in terms of Quality,Environment,occupational health and safety 4.Methodology for risk based thinking. 5.How i can identify my company's risk and opportunities in terms of Quality? 6.How i can identify my company's risk and opportunities in terms of Environment? 7.How i can identify my company's risk and opportunities in terms of occupational health and safety? 8.How i can monitor/measure/analyse/evaluate the effectiveness of risk identified and mitigation measures. 9.How is my company's QHSE objective related to the risks i have identified? 10.How to document all these in a single format.(Integrated document format for identified risk and opportunities and follow up.)

Volume 1:Where is Risk and opportunity addressed in the standard???

Refer clauses :

Clause 4: Context of the organization ; The organization has to determine its QMS/EMS/OHS processes and to address its risk and opportunities. Clause 5: Leadership: Top management is required to Promote awareness of risk based thinking.Determine and address risk and opportunities that can affect products and services,environment,occupational health and safety. Clause 6: Planning : The organization is required to identify risks and opportunities related to QMS,EMS,OHS performance and take appropriate actions to address them. Clause 7 :Support :The organization is required to determine and provide necessary resources. Clause 8: Operation: The organization is required to manage its operational processes. Clause 9: Performance evaluation: the organisation is required to monitor,measure,analyse and evaluate the effectiveness of actions taken to address the risk and opportunities. Clause 10: Improvement: The organization is required to correct,prevent or reduce undesired effects and improve the QMS/EMS/OHS and update risks and opportunities.

Volume 2:How to identify the context of my organisation?(Manufacturing industries.)

Context is nothing but the scope of your organization(area of work).We have to identify that within our company's scope,if there are any external issues,internal issues,legal requirements which can affect our organization in terms of Quality,cost,time(for ISO 9001),environment(ISO 14001) and occupational health and safety(ISO 45001).

Example: If your organization is a Production plant,first set a list out of all your departments say 1.Design 2.Sales 3.Purchase 4.Maintenance 5.Production 6.Quality control 7.Stores 8.Logistics etc... In a risk and opportunity assessment,first and foremost is we have to list out the context of our organization(or scope of work) and we should ensure that we have covered all areas.

Volume 3:What are the internal/external issues,compliance obligations which can affect an organization in terms of Quality,Environment, Occupational health and safety.

An issue can be positive as well as negative.Issues can arise internally,externally or due to some legal requirements.As i said earlier,we shall list out our organizations context to identify the issues related to it.Here i am taking some of the above identified contexts. Design: The internal issues are 1.Design verification 2.Resources 3.Internal communication. The external issues are 1.Design inputs 2.Communication.

Production: The internal issues are 1.Non availability of raw materials 2.Internal rejection by QC 3.Power failures. External issues 1.Quality of raw materials procured.

Volume 4:Methodology of risk based thinking:

Refer ISO 31000 which will give you a clear idea on the risk based thinking methodology.

5.How i can identify my company's risk and opportunities in terms of Quality?

We have to consider 3 things if we want to analyse risk and opportunities in Quality(ISO 9001). 1.Quality : What are the risks and opportunities which affects the quality of my company's products and services. 2.Cost : What risks and opportunities are there which can affect my company's products and services in terms of cost. 3.Time/delay:What risks and opportunities are there which can affect the delivery of my company's products and services.

6.How i can identify my company's risk and opportunities in terms of Environment?

If you are an ISO 14001 certified firm,them it is not a new thing to you. You will be having your environmental aspect and impact assessment register.(ISO 14001:2004 , section 4.3.1) You have to take out your most significant aspects from you aspect and impact register and it can be made as your risk and opportunities in terms of environment.

eg: In your aspect impact register your most significant aspect may be grit blasting operation and the impact is environmental pollution,you can take out the same significant aspect while addressing risk and opportunities in terms of environment.

7.How i can identify my company's risk and opportunities in terms of occupational health and safety?

If you are an OHSAS 18001 certified firm,them it is not a new thing to you. You will be having your occupational health and safety hazard analysis and risk assessment register.(OHSAS 18001:2007 , section 4.3.1) You have to take out your most significant hazard from your occupational health and safety hazard analysis and risk assessment register and it can be made as your risk and opportunities in terms of occupational health and safety.

eg: In your occupational health and safety hazard analysis and risk assessment register your most significant hazard may be working in confined space and the risk is fatality you can take out the same significant hazard while addressing risk and opportunities in terms of occupational health and safety. My personal view is you have to make these identified risk and opportunities as your yearly objectives and set targets and should work towards that to minimize the risk.