Integrated Risk Monitoring In The Quality Management System

Context: The digital transformation has led to higher market competitive-ness, allowing organizations to have competitive advantages over prominent installed players. However, it led to a greater exposure of organizations to new threats, which reinforces the need for integrated monitoring of risk. This approach has particular significance when the Quality Management System (QMS) implementation of the ISO 9001:2015 standard requires inte-grating risk management (RM) into the organization's business processes. This article explores and analyses how this approach is rooted in the Portu-guese business fabric. The article presents the Model of the Integrated Risk Monitoring (MMIR) developed according to ISO 31000 standard of RM, hav-ing an alert mechanism in the face of risk situations in organizations.

Methodology: A systematic literature review was conducted on a descriptive and content analysis of scientific articles published from the B-on database (www.b-on.pt). An online survey, based on questionnaires, was implemented to get insights into the organization's perception of risk. The questionnaire was sent, by email, to 3599 organizations certified in Portugal under the ISO 9001:2015 standard.

Results: The response rate (6.4%) of the online survey enabled us to rein-force the importance of the organization implementing a formal RM process and applying risk techiniques to the SGQ (ISO 9001:2015), as well as the idea that the use of RM models should not be restricted to specific sectors. To this end, the MMIR presents an agnostic approach to the sector of activi-ty in which the organization operates, which integrates a RM process with different RM techniques (both strategic and operational), and includes a set of reference KRI to the QMS. The paper contributes to alerting the need for organizations to use integrated risk monitoring processes in business plan-ning and operation.