1. International Standards on Risk Management
Topic 2
SMQR 5103

2. The Standard Infrastructure in Malaysia

3. Draft International Standard International Standard
Stages of International Standards Development
Proposal
Working Draft
Committee Draft
Draft International Standard
International Standard

4. Standards on Risk Management

5. Terms and Definitions (ISO Guide 73)
Risk
Risk management
Risk management process
Risk assessment
Risk identification
Risk source
Risk owner
Risk analysis
Risk evaluation
Risk appetite
Risk treatment
Risk retention
Residual risk
Risk profile
Risk register

6. Risk Management Principles, Framework & Process

7. QSHE MS and Risk Management Standards
RISK MANAGEMENT SYSTEM
ISO 31000
QUALITY MANAGEMENT SYSTEM
ISO 9001:2015
OSH MANAGEMENT SYSTEM
ISO 45001
ENVIRONMENTAL MANAGEMENT SYSTEM
ISO 14001
RISK ASSESSMENT TECHNIQUES (Env. Impact assessment, HIRADC, FMEA, etc)
ISO 31010

8. High Level Structure (HLS) in QSHE-MS
ISO 9001: 2015
ISO 14001: 2015
ISO 45001: 2016 (expected)
0. Introduction
1. Scope
2. Normative Reference
3. Terms and Definitions
4. Context of the Organization
5. Leadership
Planning
Support
8. Operation
9. Performance Evaluation
10. Improvement

9. The new generation of iso management systems standards
Cl. 1: Scope
Cl. 2: Normative references
Cl. 3: Terms and definitions
Cl. 4: Context of the organization
Cl. 5: Leadership
Cl. 6: Planning
Cl. 6.1 Action to address risks and opportunities
Cl. 6.2 OH&S objectives and planning to achieve them
Cl. 7: Support
Cl. 8: Operation
Cl. 9: Performance evaluation
Cl. 10: Improvement
RISK ASSESSMENT

10. ISO 9001/14001/45001 structure Organization & its context (4) PLAN DO
Support (7)
Communication & consultation
Operation (8)
Risk Control Process
Planning
(6)
Risk Assessment
Performance evaluation (9)
Monitor & review RM
Improvement (10)
Update risk & opportunities
Leadership (5)
Determine risk & opportunities DO
PLAN
ACT
CHECK
Organization & its context (4)
Customer requirement
Needs & expectations of relevant interested parties (4)
Intended Outcomes of
QMS/EMS/OSH MS

11. ISO 31000 : Risk Management Process
Communication
&
Consultation
(5.2)
Monitoring
&
Review (5.6)
Establishing the context (5.3)
Risk assessment (5.4)
Risk identification (5.4.2)
Risk analysis (5.4.3)
Risk evaluation (5.4.4)
Risk treatment (5.5)

12. Integration between ISO 31000: 2009 and ISO 9001: 2015
Communication & Consultation (5.2)
Monitoring and review (5.6)
Establishing the context (5.3)
Risk Assessment (5.4)
Risk Identification (5.4.2)
Risk Analysis (5.4.3)
Risk Evaluation (5.4.4)
Risk Treatment (5.5)
4.1 & 4.2
6.1.1
7.4
9.3.2 &
6.1.2 & 8.1
Legend:
ISO clause
ISO 9001 clause