If you are involved in regulated industries, and are governed by the ISO quality management standards, you are aware of this concept of employing risk-based thinking or risk-based approach. Having audited and consulted with many medical device companies, it is rare that I have come across many who have effectively grasped this concept.
In this blog I will explore what I believe should be a reasonable approach to instituting an effective process to manage business risk.