This document discusses risk and opportunity analysis according to ISO 9001:2015. It defines risk as uncertainty that can have a negative impact, while opportunity can have a positive impact. It outlines the clauses in ISO 9001:2015 that address determining risks and opportunities based on understanding the organization's context, interested parties' needs and expectations, and quality management system processes. Actions to address risks and opportunities must be planned, implemented, and evaluated for effectiveness.