ISO 9001:2015 Clause 6.1.1

ISO 9001:2015 Clause 6.1.1 – Actions to Address Risks and Opportunities: Consider Risks and Opportunities in QMS Planning, tailored for an API Pharmaceutical Manufacturing Compan

Below is an audit-ready SOP for ISO 9001:2015 Clause 6.1.1 – Actions to Address Risks and Opportunities: Consider Risks and Opportunities in QMS Planning, tailored for an API Pharmaceutical Manufacturing Company.

Standard Operating Procedure (SOP)

Clause 6.1.1 – Consider Risks and Opportunities in QMS Planning

ISO 9001:2015

Document No.: QMS/SOP/008

Version: 01

Effective Date: __________

Review Date: __________

Approved By: Head – Quality / Site Head

---

1. Purpose

To establish a systematic process for identifying and considering risks and opportunities during Quality Management System (QMS) planning to ensure the organization achieves its intended results, enhances customer satisfaction, prevents undesired effects, and drives continual improvement.

---

2. Scope

This procedure applies to all departments involved in the manufacture, testing, storage, release, and distribution of Active Pharmaceutical Ingredients (APIs).

---

3. Definitions

Risk: The effect of uncertainty on achieving intended QMS results.

Opportunity: A circumstance that can improve process performance, customer satisfaction, regulatory compliance, or business performance.

Risk-Based Thinking: Considering risks and opportunities while planning and operating the QMS.

---

4. Procedure

4.1 Identification of Risks and Opportunities

While planning the QMS, each department shall identify risks and opportunities considering:

- Internal and external issues (Clause 4.1)

- Needs and expectations of interested parties (Clause 4.2)

- Organizational processes

- Customer requirements

- Applicable statutory and regulatory requirements

- Business objectives

- Previous audit findings

- Customer complaints

- Deviations, CAPA, and trend analysis

---

4.2 Typical Risks

Examples include:

- Failure of critical manufacturing equipment.

- Supplier quality issues.

- Raw material shortages.

- Laboratory testing errors.

- Data integrity failures.

- Human errors during manufacturing.

- Regulatory non-compliance.

- Utility failures (power, water, HVAC).

- Cross-contamination.

- Delayed batch release.

---

4.3 Typical Opportunities

Examples include:

- Automation of manufacturing and laboratory processes.

- Digital document management.

- Employee competency enhancement.

- Supplier development programmes.

- Process optimization.

- Energy conservation initiatives.

- Reduction of deviations and waste.

- Improved customer communication.

---

4.4 Risk Assessment

Each identified risk shall be evaluated based on:

- Likelihood of occurrence.

- Severity of impact.

- Ability to detect or prevent the issue.

The organization may use suitable tools such as:

- Risk Matrix

- FMEA (Failure Mode and Effects Analysis)

- HACCP (where applicable)

- SWOT Analysis

- PESTLE Analysis

---

4.5 Risk Treatment

Appropriate actions shall be planned to:

- Eliminate the risk where practical.

- Reduce the likelihood of occurrence.

- Reduce the impact of the risk.

- Accept the risk when justified and documented.

- Enhance identified opportunities.

Risk controls shall be integrated into routine business and operational processes.

---

4.6 Monitoring and Review

Risks and opportunities shall be reviewed:

- During Management Review.

- Following significant process changes.

- After deviations or major CAPAs.

- During Internal Audits.

- After regulatory inspections.

- At least annually.

---

5. Responsibilities

Top Management

- Ensure risk-based thinking is integrated into business planning.

- Provide resources for risk mitigation.

- Review significant organizational risks.

Head – Quality Assurance

- Coordinate risk management activities.

- Maintain the Risk Register.

- Verify implementation through audits.

Department Heads

- Identify departmental risks and opportunities.

- Implement mitigation plans.

- Monitor effectiveness.

Employees

- Report potential risks.

- Follow approved procedures.

- Participate in risk assessments when required.

---

6. Documented Information

Maintained Documents

- Risk Management Procedure

- Risk Assessment Methodology

- Risk Register

- Opportunity Register

Retained Records

- Completed Risk Assessments

- FMEA Reports

- SWOT Analysis

- PESTLE Analysis

- CAPA Records

- Management Review Minutes

- Internal Audit Reports

---

7. References

- ISO 9001:2015 – Clause 6.1.1

- ISO 9001:2015 – Clauses 4.1 and 4.2

- Risk Management Procedure

- Change Control Procedure

- CAPA Procedure

---

Auditor Expectations

Auditors generally verify that:

- Risks and opportunities are identified during QMS planning.

- Risk assessments are documented and current.

- Appropriate actions are implemented.

- Risk-based thinking is applied throughout the organization.

- Risks are reviewed periodically and updated.

- Opportunities for improvement are actively pursued.

---

Typical Auditor Questions

1. How do you identify risks affecting your QMS?

2. Can you show your Risk Register?

3. How do you prioritize risks?

4. Which risk assessment method do you use?

5. Can you provide an example of a recently identified risk?

6. How do you monitor the effectiveness of risk controls?

7. How are opportunities identified and implemented?

8. How are risks reviewed during Management Review?

---

Expected Employee Response

"My department identifies risks by reviewing process performance, deviations, customer complaints, audit findings, and regulatory requirements. We assess the significance of each risk, implement appropriate controls, monitor their effectiveness, and identify opportunities that improve quality, compliance, efficiency, and customer satisfaction. Significant risks are documented in the Risk Register and reviewed periodically."API Pharmaceutical Examples

Process Risk Opportunity Action

Raw Material Procurement Supplier delivers non-conforming material Qualify additional suppliers Supplier qualification and periodic audits

Manufacturing Equipment breakdown Predictive maintenance Preventive maintenance and spare parts management

Quality Control OOS due to analyst error Analyst skill enhancement Training and periodic competency assessment

Documentation Data integrity errors Electronic document management Implement validated electronic QMS

Batch Release Delayed review Digital workflow Electronic batch record review and approval

This document aligns with ISO 9001:2015 Clause 6.1.1 and integrates well with pharmaceutical GMP expectations for quality risk management.