ISO 9001:2015 does not introduce the term “risk management” or terms like “risk mitigation” or “risk treatment.” Instead ISO 9001:2015 introduces the term “risk-based thinking” and clearly states that ...