AS9100C and Risk Management
This new AS9100 certification standard, AS 9100C, involves implementation of a risk management process throughout product realization (product life-cycle).
The stated requirement for risk management within the current version of AS9100B is to understand risk during review of requirements related to the product during contracting activities. Risk management, to some extent, has always been at least inferred by QMSs through planning and preventive action processes. The new risk management clause requires organizations to establish a process for managing risks to achieving customer,statutory and regulatory requirements.
The process should consider: assignment of responsibilities for risk management;criteria for risk acceptance; identification, assessment and communication of risk; and identification, implementation and management of actions to mitigate risk.
There are many business consulting firms that can assist you with how to determine your risks and then prioritize them to better safeguard your companies interests and the community at large.
This requirement is very similar to that required by the new Aviation Safety Management System regulation. SMS requires a risk assessment structure that is overseen by a designated by the organization. The structure will be used by individual departments to assess threats and mitigate them by putting up appropriate defenses.