Risk Management in QM365

The illustration below shows how the risk functionality is structured in QM365.

• The context analysis provides the overall risk picture and serves as input to the risk work.

• Risk group category: here you can group the risk groups if you have many. It is not necessary to use this categorization. When you have many risk groups, it will be useful to be able to group them using this categorization. The risk reporting function makes it possible to filter out all risks related to a Risk Group category.

• Risk groups: In the risk groups, the concrete risks that are relevant to the risk groups are created. You can group in many different ways that suit the individual organisation. You can also tag a risk to several risk groups - then you avoid registering the same risk several times.

• Risk: as written above - these are entered in the relevant risk group

• Evaluate risk: a risk can be evaluated in several places such as different departments and processes. When evaluating a risk, you can choose one or more consequence axes:

  • Quality (ISO 9001)

  • Environment (ISO 14001)

  • Health and saftey (ISO 45001)

  • Information security (ISO 27001)

  • Personal data protection (GDPR)

  • Emergency preparedness

  • Possibly enter more/others: Food safety, Economy, Reputation etc.

• Control: when evaluating, you enter measures and/or tag relevant security measures to reduce risk / exploit the opportunity.