The document discusses risk control methods in ISO 9001:2015, including monitoring employees, workplaces, equipment, processes, and work methods. It also discusses upgrading from ISO 9001:2008 to the 2015 version by revising policies, goals, training, procedures, quality manuals, and preparing new risk management procedures and documents depending on the organization's size. Finally, it notes that ISO certificates are not strictly necessary but can help communicate an organization's systems to customers.

1. Smart thinking 1: what can we do about?
Risk control methods and Technics in ISO 9001:2015!
 Monitoring / control of employees
 Monitoring / control of work place
 Monitoring / control of equipment (production line / services infrastructure, …)
 Monitoring / control of production/services process
 Monitoring / control of methods of execution of work
Please feel free to contact us if you have any questions or comments. (mc@faragozin.com)

2. Smart thinking 2: what can we do about?
Upgrading the version of ISO 9001:2008 to 2015!
 Change your organization policy (change the revision of written standards)
 Revise your organization goals setting and adding one item about implementation of
risk base management
 Train The New Revision Of ISO 9001:2015 Standard Or Changed
 Revise your ISO system base structure as a below procedure:
O Documented information control procedure
O Procedure for corrective action
O Procedure for IMS/QMS internal audit
O Procedure for management review
O Procedure for controlling the non-conforming products – services
O Quality manual
O Or Finally Procedure For Quality Plan, Assurance And Control (If There And You Need)
 Prepare the new procedure for risk management and some work instruction and
other document (it’s depends on your organization size and developed systems *) as
below:
O Preparation of risk recognition phase
O Work instruction for Plan Risk Management (RMP)
O Work instruction for Risk identification
O Work instruction for Perform qualitative & quantitative Risk analysis
O Work instruction for Plan Risk responses
* If you are QA responsible in refinery, petrochemical and gas plant or maintenance
contractor and your leaders and top managers are fully interested to improve
organizational quality, you have a long path ahead.
Important notice: As you know, risk management is a knowledge area of PMBOK, and
has a separate standard with specific no. ISO 31000 (Risk management — Principles
and guidelines), and have a Guidelines on tools and techniques for hazard identification
and risk assessment for Petroleum and natural gas industries - Offshore production
installations with specific no. ISO 17776.
Please feel free to contact us if you have any questions or comments. (mc@faragozin.com)

3. Smart thinking 3: what can we do about?
Why we need ISO 9001, 14001 … & other certificates?
Actually we don’t need to get any ISO certificates. This is truth and real. You may
implement all ISO 9001 or 14001 or … requirements for your management systems but
you don’t need to say any things to your customers. It’s your decision.
Sometimes, we want to say some things to our customers and presented ours! The
easiest way to say your thinking, policy, implemented management system … to your
customers is getting related certificates. This is the minimum level and expectation of
your organization requirements. Finally, you can choose and make your management
systems such as QMS, EMS, HSE MS…!
Please feel free to contact us if you have any questions or comments. (mc@faragozin.com)