Norma ISO 9001. Riesgos y Oportunidades. 6.1. Parte 1. ISO 9000:2015
Introduction to Actions for Addressing Risks and Opportunities
This section discusses the actions that can be taken to address risks and opportunities in an organization. It defines risk as the effect of uncertainty and emphasizes the relationship between risk, objectives, and success.
Risks in Different Areas of an Organization
- Talent Human Risks:
- Non-selection of suitable personnel
- Inadequate training
- High employee turnover
- Lack of creativity and commitment
- Deficiencies in remuneration or job satisfaction
- Economic Resources Risks:
- Liquidity loss
- Increase in debt or reduction in income
- Higher taxes, tariffs, or costs of inputs
- Communication Risks:
- Communication system failures
- Privacy breaches and information leaks
- Lack of timely communication with customers
- Tools Risks:
- Inadequate or unsafe tools
- Loss or disorganization of tools
- Infrastructure Risks:
- Inadequate maintenance
- Unsafe conditions and structural failures
- Equipment and Machinery Risks:
- Equipment malfunctions
- Lack of preventive maintenance plans
- Distribution and Delivery Risks:
- Delays due to poor route planning
- Damage or loss of goods
- Theft or robbery
- Cold chain management risks for perishable products
Importance of Addressing Risks
It is crucial to address risks to ensure that the quality management system achieves desired results, increases desirable effects, prevents or reduces undesirable effects, and promotes improvement.
Relevant Standards for Risk Management
ISO standards provide guidance on risk management:
- ISO/IEC Guide 73: Principles for Risk Management.
- ISO/IEC Standard: Techniques for Risk Assessment (ISO/IEC Guide).
- ISO/IEC Standard 737: Vocabulary for Risk Management.
Stages of Addressing Risks
- Establishing the Context:
- Defining the terms of reference to evaluate risk importance.
- Risk Identification:
- Process of recognizing and documenting risks.
- Risk Analysis:
- Understanding the nature of risks and determining their level.
- Risk Evaluation:
- Comparing risk analysis results with risk criteria to determine acceptability or tolerability.
- Risk Treatment:
- Implementing actions to manage or mitigate identified risks.
Conclusion and Normative References
This section concludes the discussion on addressing risks and provides normative references related to risk management.
Importance of Addressing Risks (Continued)
Addressing risks is essential for achieving desired outcomes, preventing undesirable effects, and promoting improvement in quality management systems.
Normative References for Addressing Risks
Relevant standards for addressing risks include:
- ISO 31000: Principles and Guidelines on Risk Management
- ISO 31010: Techniques for Risk Assessment
- IEC 737: Vocabulary for Risk Management
These standards provide valuable guidance on managing risks effectively within an organization.