Method to apply the Risk Management theory in Integrated Management System - the case of Acque Group

PURPOSE The purpose of this work is the development of a methodology to introduce the process of Risk Management in Integrated Management Systems and to support companies in managing the risks and opportunities in accordance with the recent update publication of ISO 9001 "Quality standards Management Systems: Requirements ", ISO 14001" Environmental management systems: Requirements with guidance for use ", and the future ISO 45001" Occupational health and safety management systems: Requirements with guidance for use ". DESIGN/METHODOLOGY/APPROACH The basis, on that the methodology is developed, are described in the Standard UNI ISO 31000 “Risk management: principles and guideline", which acts as a guide and provides the framework for Risk Management. The methodology was developed and tested within Acque Group, company of Pisa that manages water services in Basso Valdarno and the purpose has been achieved by adapting to the specific case, the rules dictated by the literature to build the matrices according to the technique of QFD-Quality Function Deployment. The context analysis, the stakeholders analysis and the involvement of Executives and Managers in the company, has allowed us to identify, analyze, evaluate and treat risks and opportunities under consideration. FINDINGS The obtained result, following the application of the methodology, is a list of risks and opportunities to which is associated a score which defines the priority of treatment. In the case of the Acque Group we were identified 17 risks and 12 opportunities that have been analyzed, evaluated and then treated according to the resulting ranking. Following the treatment, the risks were all managed while opportunities have been taken in charge by the company executives who will decide to exploit them or not. PRACTICAL IMPLICATIONS The use of the methodology is useful to company managers, in certified and uncertified organizations, who want to develop a Risk Management process in the Integrated Management Systems to manage the risks and opportunities in a trasparent manner, through the entire organization, and involving executives and managers. ORIGINALITY/VALUE Due to the recent update of Standards and the novelty of the introduction of Risk Management in Management Systems, the experts, in collaboration with businesses, are developing methodologies to be implemented in order to manage these types of risks and opportunities