Modified QFD Approach for Context Analysis and Risk Management According to ISO Standards

In recent years, the concept of risk has widened to many areas of business management. Substantially born in the economic-financial and industrial safety sectors, today, risk management covers entire business and organization management fields. Lastly, in the latest edition of ISO 9001 (2015), the concept of enterprise risk has been introduced as a tool for the design and development of a management system. This paper aims to provide a first structured approach to implementing a proper risk analysis and risk management process in accordance with the requirements of ISO standards. The method, based on the Quality Function Deployment (QFD) technique, considers the following steps: (i) an analysis of the external and internal context in which the organization operates, (ii) the collection and analysis of data related to the needs of the stakeholders, (iii) the definition of risk factors and strategic opportunities and (iv) the linkage of these with the processes of the enterprise management system and (v) to define actions for treatment of risks and opportunities to improve the performances. The original operational tool proposed can allow organizations to respond effectively to the requirements of recent international standards concerning management systems and enable the company to define, address and manage strategic risks and opportunities in a structured and systematic process. Within the article, a case study described the methodology