Risk-based thinking

Risk-based thinking

Risk-based thinking refers to a coordinated set of activities and methods that organizations use to manage and control the many risks that affect its ability to achieve objectives.

Risk-based thinking replaces what the old standard used to call preventive action. While risk-based thinking is now an essential part of the new standard, it does not actually expect you to implement a formal risk management process nor does it expect you to document your organization’s risk-based approach.