Risk and opportunity procedure

Management system procedures and forms

Introduction and purpose

procedures and forms

The purpose of the risk and opportunity procedure and forms is to help businesses define their risk and opportunity management framework and activities, including methodology, risk appetite, methods for training, reporting, and escalating risks.

Application and scope

The risk and opportunity procedure has been developed to assist in meeting the requirements of Clause 6.1 of ISO 9001:2015, ISO 14001:2015, or ISO 45001:2018 - Actions to address risks and opportunities.

Risks and opportunities are defined as ‘something happening that may impact the achievement of the management system's objectives and the policy, and which can adversely affect the conformity of products and services or the effectiveness of your management system.' Risk-based thinking and risk and opportunity management should be central to any organization’s strategic management process.

The risk and opportunity procedure includes four essential form templates referenced from the procedure, supplied in .docx and .xlsx formats that can be retained as hard or soft copies.

Risk and opportunity register

Although risks and opportunities have to be determined and addressed, there is no requirement for a formal, documented risk management process. The risk and opportunity register will provide your organization with a consistent methodology to capture, assess, and prioritize strategic and operational risks and opportunities with respect to the management system.

Use the risk and opportunity register to capture and evaluate the full range of issues facing different areas of your business. Identifying risk is a critical step in managing it, and the risk and opportunity register allows your organization to assess the risk in context with your overall strategy and helps record the controls and treatments of those risks.

The risk and opportunity register uses pre and post-control indicators enabled by conditional formatting to compare the risk score to the defined risk exposure level. Based on the risk exposure indicators, the adjacent cells will display a proposed control action as per the risk assessment scoring worksheet.

Opportunity evaluation

Organizations can take advantage of new opportunities by building on current strengths, anticipating future trends, introducing new technology, developing new products or services, capturing and disseminating lessons learned, sharing and promoting good practices, opening new markets, and attracting new customers.

Taking or not taking an opportunity presents different levels of risk. To evaluate these risks, taking (or not taking) each opportunity is defined in the risk and opportunity register, and the associated risks are evaluated. Opportunities may be identified as positive effects of risks, such as a risk that forces the implementation of a risk reduction measure that is beneficial in a broader context than just reducing a particular risk.

Quick to download and easy to implement!

Prepared using Office 2016, the risk and opportunity procedure and forms are fully editable. Easily amend the headers, footers, text, turtle diagrams, process maps, and layout style to suit your business's formatting requirements.

Risk and opportunity procedure and forms.
ISO 9001:2015 QMS (PR04)
ISO 14001:2015 EMS (PR05)
ISO 45001:2018 OHS (PR06)
ISO Management system procedure template, with 4 forms, in .docx and .xlsx formats
» 12-page risk and opportunity procedure [in .docx]
» Risk & Opporunity Register Template [in .xlsx]
» Opportunity Evaluation Template [in .docx]
» SWOT Analysis Template [in .docx]
» PESTLE Analysis Template [in.docx]
Shop with confidence! Secure payment and fast download direct from our SSL server
» Unlimited email support
» 100% Compliance guarantee
» 100% Money-back guarantee

Payment Option 1: PayPal. You can pay using PayPal, click the 'buy now' button and you'll be asked to log in to your account and confirm payment.

Payment Option 2: Credit or Debit Card. Click the 'buy now' button opposite, select the 'Pay with Debit or Credit Card' option and enter your details to confirm payment.

Downloadable products will be delivered to you by a download link becoming available after completing purchase.

ISO 9001:2015 QMS (PR04)
ISO 14001:2015 EMS (PR05)
ISO 45001:2018 OHS (PR06)

£14.99

~ €17.00 EUR, $18.00 USD, $26.00 AUD

£14.99

~ €17.00 EUR, $18.00 USD, $26.00 AUD

£14.99

~ €17.00 EUR, $18.00 USD, $26.00 AUD

 

National and International customers are welcome to pay using your PayPal account, or with your credit or debit card, in your currency. PayPal will automatically convert your payment to £GBP. We can accept payments from buyers in over 190 different countries and regions worldwide.

PayPal

PayPal Logo

Payment Option 1: PayPal. You can choose to pay using PayPal, just click the 'buy now' button and you'll be asked to log in to your PayPal account and confirm the payment.

Debit or credit card

Payment Option 2: Credit or Debit Card. We use PayPal to securely process your credit or debit card payments. You don't need to register an account. Click the 'buy now' button and select the 'Pay with Debit or Credit Card' option. You'll be asked to enter your details and confirm the payment.

Purchase orders

Please e-mail us your Purchase Order (which must confirm the email address to which the download link is to be sent). We will forward an invoice for payment by bank transfer (BACS). Once the payment has cleared, we will forward the template's download link to the specified email address.

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.

Planning

ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Relevant Interested Parties
4.3 Management System Scope 4.3 Management System Scope 4.3 Management System Scope
4.4 QMS Processes 4.4 EMS Processes 4.4 OH&S Management System
 
ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities/Authorities 5.3 Roles, Responsibilities/Authorities 5.3 Roles, Responsibilities/Authorities
    5.4 Consultation & Participation
 
ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
6.1.1 Address Risks & Opportunities 6.1.1 Address Risks & Opportunities 6.1.1 Address Risks & Opportunities
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identifcation
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning for Change 6.1.4 Planning Action 6.1.4 Planning Action
  6.2.1 Environmental Objectives 6.2.1 OH&S Objectives
  6.2.2 Planning to Achieve Objectives 6.2.2 Planning to Achieve Objectives
 

Doing

ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
7.1.1 Resources - General
7.1 Resources 7.1 Resources
7.1.2 People 7.2 Competence 7.2 Competence
7.1.3 Infrastructure
7.3 Awareness 7.3 Awareness
7.1.4 Operational Environment 7.4.1 Communcation - General 7.4.1 Communcation - General
7.1.5 Monitoring & Measuring 7.4.2 Internal Communcation 7.4.2 Internal Communcation
7.1.6 Organizational Knowledge 7.4.3 External Communcation 7.4.3 External Communcation
7.2 Competence 7.5 Documented Information 7.5 Documented Information
7.3 Awareness    
7.4 Communcation    
7.5 Documented Information    
 
ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
8.1 Operational Planning & Control
8.1 Operational Planning & Control 8.1.1 General
8.2.1 Customer Communication 8.2 Emergency Preparedness 8.1.2 Eliminating Hazards
8.2.2 Determining Requirements
  8.1.3 Management of Change
8.2.3 Reviewing Requirements   8.1.4 Outsourcing
8.2.4 Changes in Requirements
  8.2 Emergency Preparedness
8.3.1 Design Development - General    
8.3.2 Design Development - Planning
   
8.3.3 Design Development - Inputs    
8.3.4 Design Development - Controls    
8.3.5 Design Development - Outputs    
8.3.6 Design Development - Changes    
8.4.1 External Processes - General    
8.4.2 Purchasing Controls    
8.4.3 Purchasing Information    
8.5.1 Production & Service Provision    
8.5.2 Identification & Traceability    
8.5.3 3rd Party Property    
8.5.4 Preservation    
8.5.5 Post-delivery Activities    
8.5.6 Control of Changes    
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
9.1.1 Performance Evaluation 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.1.2 Customer Satisfaction 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.1.3 Analysis & Evaluation 9.2 Internal Audit 9.2 Internal Audit
9.2 Internal Audit 9.3 Management Review 9.3 Management Review
9.3 Management Review    
 

Acting

ISO 9001:2015 ISO 14001:2015 ISO 45001:2018
10.1 Improvement - General 10.1 Improvement - General 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
10.3 Continual Improvement 10.3 Continual Improvement 10.3 Continual Improvement