Two planning questions with different purposes
A component manufacturer relies on one external heat treatment provider. Disruption could delay orders or create uncertainty about product conformity. At the same time, improved production data could allow the manufacturer to offer customers more reliable delivery forecasts. The first situation concerns potential adverse outcomes. The second offers a possible beneficial result worth pursuing.
ISO’s public explanation of the 2026 edition identifies a clearer distinction between risks and opportunities in clause 6.1. This article explains a suggested decision approach through original examples. It does not reproduce the clause or establish a complete requirement checklist. Check the official ISO 9001:2026 text for exact criteria.
The requirements overview explains the system relationship, while the planning article connects these decisions with objectives and change.
Describe the outcome and its mechanism
A useful risk description explains what could happen and why it matters. Supplier failure is too broad if it conceals several different mechanisms. A late collection, unavailable furnace capacity and unreliable processing evidence may each affect the manufacturer’s output differently.
Gather information from actual operations. Review delivery variation, rejected certificates, capacity discussions and recent changes at the supplier. Include employee observations about workarounds. Distinguish recurring evidence from a single rumour, while recognising that limited information may itself require attention.
Identify the customer or process consequence. A delay might affect a customer’s assembly programme, while uncertain treatment results might prevent release. This helps management compare possible actions without relying solely on a generic high, medium or low label.
Choose actions that can influence the outcome
The manufacturer could qualify another provider, reserve capacity, improve forecast communication or strengthen verification of received evidence. Each choice addresses a different part of the exposure. Evaluate feasibility, lead time, technical constraints and the possibility of creating another problem.
An alternative provider is not automatically an effective answer. The provider may lack the necessary capability, require a long approval process or depend on the same transport route. A credible action considers whether the proposed alternative changes the relevant mechanism.
Assign the decision and the implementation work separately where necessary. Procurement may gather options, engineering may evaluate technical capability and management may approve cost or changed delivery commitments. A risk register entry cannot replace those decisions.
Assess opportunities on their own merits
The forecasting opportunity has a different starting question: what benefit could the company obtain, for whom and under what conditions? Better forecasts might reduce customer uncertainty and repeated status enquiries. The benefit depends on whether production information is timely and whether customers can use it.
A trial could involve one product family and a few consenting customers. Define what would demonstrate usefulness, such as fewer avoidable status calls or fewer unexpected delivery changes. These are suggested business measures, not numerical requirements imposed by ISO.
Also consider possible adverse effects. Publishing unreliable forecasts more frequently can reduce trust. Staff may spend excessive time maintaining reports. Opportunity assessment should therefore examine the value proposition and its assumptions, while related risks are considered explicitly rather than hidden behind enthusiasm for a new idea.
Integrate the response into ordinary work
Actions become effective through the processes people actually use. If management decides to reserve heat treatment capacity, scheduling and purchasing need usable rules about which orders qualify and who confirms the booking. If a second provider is approved, job instructions and receiving checks may need updating.
Avoid parallel arrangements that only exist for audit presentation. A planning spreadsheet saying alternative supplier available is misleading if production staff cannot place an order with that supplier or do not know which products it can handle.
Choose records that preserve important reasoning and support follow through. The APG Risk Based Thinking paper discusses the earlier edition and offers historical guidance on following risk responses into processes. Its statements about mandatory documentation should not be assumed to settle the revised edition’s position.
Evaluate whether action changed the exposure or benefit
For the supplier response, examine whether reserved capacity reduced delays for the relevant orders and whether verification remained adequate. For the forecasting trial, compare the actual customer experience with the intended benefit. Include cases where the new method did not work.
Completion evidence and effectiveness evidence differ. A signed supplier agreement shows a commitment exists. Later orders show how it behaves. A live customer dashboard shows deployment. Customer use and the reliability of its information show whether it delivers value.
Review uncertainty honestly. If few orders have passed through the new arrangement, the evidence may support only a provisional conclusion. Define the additional information or experience needed rather than closing the issue as effective on the strength of an implementation date.
Keep the method proportionate and reviewable
A scoring tool, workshop or structured decision note can each be useful depending on the organisation. The method should help people make better choices and explain why those choices fit the actual work. Do not turn a preferred consultant template into an assumed universal ISO requirement.
Reconsider the decisions when circumstances change. A new customer tolerance, provider acquisition or different product mix could alter the exposure. A forecasting service may become more valuable as customers change their planning methods. Risks and opportunities deserve continuing attention because the conditions and potential results evolve, not because a register needs another annual signature.