Action to address risk shall be appropriate to the impact of the risk. Some of the possible actions to address risks and opportunities may include:

• Avoiding a risk.
• Taking a risk in order to pursue an opportunity.
• Eliminating the source of a risk.
• Changing the likelihood or consequences of the a risk on the Quality management system.
• Sharing the risk through the commitment of stakeholders.
• Retaining risk by informed decision.
• SWOT analysis by the organization as part of its business strategy to identify the internal risk and opportunities and action plans to address them.
• Formal business risk assessment performed by the organization taking into consideration its context, associated risk and opportunities and mitigation plan.
• Use of process approach by the organization to identify sources of input, activities, output, receiver of output, performance indicators to control and monitor processes, the risks and opportunities associated with them and action plan to address them.

To adequately address risks, one or more of the following may apply:

• Corrective action process.
• Nonconformity management process.
• Defining quality control checkpoints.
• Customer feedback survey and complaints management process.
• Training and retraining of personnel to achieve competency.
• Restructuring by redefining processes and their interactions or reassigning roles, responsibilities and authorities.
• Acquisition of new technologies.
• Engagement of people.
• Internal process review.
• Changes to methods and internally defined requirements.
• Subcontracting to competent and approved external providers.
• Communication with relevant interested parties.

The responsibilities and authorities to address the risk or opportunity shall be assigned. These shall include:

• Responsibility to implement the planned action.
• Responsibility to verify the conformity of action taken.
• The responsibility to evaluate the effectiveness of action taken.
• The authority to validate action taken.

Resources shall be adequately provided to include:

• Competent people.
• Required technologies and machinery fit for use.
• Measuring and test equipment fit for use.
• Applicable environmental conditions.
• Applicable methods and procedures.

Planned action shall be implemented within the assigned time frame.