If you are involved in regulated industries, and are governed by the ISO quality management standards, you are aware of this concept of employing risk-based thinking or risk-based approach.  Having audited and consulted with many medical device companies, it is rare that I have come across many who have effectively grasped this concept.

In  this blog I will explore what I believe should be a reasonable approach to instituting an effective process to manage business risk.