If 6.1.1 of ISO 9001:2015 requires an organization to determine risks and opportunities, can FMEAs or Risks Registries satisfy the requirement? Bear in mind that both tools only identify the "negative" effects of uncertainty. There is no section or column in both tools that identifies opportunities. There's a column for "action", but is intended to address the identified "negative" effect of uncertainty (i.e. risk).