6.1 risk and opportunities managed strategically and operational?

Good day Qualmx,

I have seen many clients use SWOT to very good effect for planning risk. The SWOT also is useful for Context... it can also be an ideal tool for coordinating information in Management Review, if managers are comfortable with it. Modified SWOTs can include internal and external issues, for managers' monitoring which issues have changed, why, and what actions to take, if any.

Them term "considered" is one that does not require documented information. That being the case, the organization is tasked with "demonstrating" consideration of risk in operational criteria. Since that can be demonstrated (described, shown) in any number of ways, I try to discourage the concept that a given tool (such as a spreadsheet) must be used to demonstrate that risk has been considered in operational criteria, as well as the consideration and handling of opportunities and improvements.

The basic difference between 6.1 and 10.3 is:

• 6.1 is taken to directly address a recognized risk
• 10.3 is an improvement upon what was already done

Neither requires documented information, but Management Review inputs are required to include the effectiveness of actions taken to reduce risk. How you choose to demonstrate that is up to you.

 

I think the term "more importance because is strategic" may be problematic because process level operational controls could be contributing an overwhelming opportunity through process improvements. It may be problematic to presume the process level opportunities bring less value. Let us please be sensitive to opportunities at all levels, so as to avoid neglecting the value of any of them.