Risk Based Thinking

Gregory Hutchins

Nov 2018 · Greg Hutchins

About this ebook

 What is Risk Based Thinking (RBT)?

International Organization for Standardization (ISO) incorporated Risk Based Thinking (RBT) into ISO 9001:2015 and its management system standards. ISO: Risk Based Thinking is the first book to address risk in the new ISO families of standards. Learn what RBT means and most importantly understand what you need to do to adopt RBT. Everyone who is certified to ISO 9001:2015 should read this book to understand and implement RBT.

 

What This Book Can Do for You? 

·   Explains the integration of risk into ISO management systems.

·   Answers the most critical questions you need to know about RBT and risk management.

·   Explains key risk concepts such as RBT, risk management assessment, risk management, VUCA, risk context, Risk Maturity, and etc.

·   Explains in detail ISO 31000, ISO 31010, and other key risk standards.

·   Explains the steps in the RBT journey.

·    Presents insider tips and tools known to standards developers and high-priced risk consultants.

·    Lists critical risk, process, effectiveness, and RBT questions that your QMS consultant and Certification Body should be able to answer.

 

Bonus Materials/Resources

·    Access almost 2,000 risk and quality articles through CERM Academy.

·    Get Lessons Learned at the end of each key question.

·    Get free course materials such as using FMEA’s in ISO 9001:2015.

About the author

Greg Hutchins is the founder of 800Compete.com, WorkingIt.com, CERMAcademy.com, QualityPlusEngineering.com. He is the risk evangelist who coined the expression Future of Quality: Risk®. He can be contacted at [e-mail] Hutchins PE CERM is also the principal professional engineer Quality + Engineering - international supply and quality management firm. He has written best-selling books on global ISO standards and risk management. He is the author of ISO 9000 (best-selling translated into 8 languages), Value Added Auditing, ISO 31000: Enterprise Risk Management, ISO Risk Based Thinking, Risk Based Thinking, Supply Management Strategies (APICS, ISM, ASQ endorsed and used in certifications), and Standard Manual of Quality Auditing and more than a dozen other international books.Q+E is the designer and developer of Certified Enterprise Risk Manager® (CERM), CERM Cyber certificate, and best-selling ISO and ERM books. Q+E has deep domain expertise in ISO 31000, ISO 27001, and NIST 800's. Q+E designed CERM based on its security IP including Critical Infrastructure Protection: Forensics, Assurance, Analytics®; Value Added Auditing; Certified Enterprise Risk Manager®; Future of Quality: Risk®; CERM: Risk Based, Problem Solving | Risk Based, Decision Making®; etc. Q+E has been certified by the Department of Homeland Security for Critical Infrastructure Protection: Forensics, Assurance, Analytics®. Q+E has conducted the following Critical Infrastructure Protection (CIP) risk assessments. Q+E engineers and scientists conduct analytical analyses following Q+E protocols evaluating business continuity, cyber security, and physical security systems against IEEE, NFPA, ISA, PMI, ISO, NIST, COSO, NERC, DIACAP, FISMA, and ASIS standards. Q+E offers the client three levels of assurance:+ Compliance. Q+E conducts a compliance audit against appropriate standards and guidance.+ Assurance with opinion. Q+E issues an opinion based on the results of a governance, risk, and compliance (GRC) audit or ERM controls assessment.Assurance with insurance coverage. Q+E conducts an audit and provides the requisite level of due diligence for the auditee to be covered.+ Forensics. Q+E provides the above levels of assurance as well as supplies a letter to the regulatory authority averring compliance.