This document discusses risk management and risk-based thinking as it relates to ISO 9001:2015. It begins by outlining the objectives of understanding risk management and risk-based thinking. It then defines identifying and addressing risks, listing options like risk avoidance, mitigation, and acceptance. It provides definitions of risk and risk-based thinking, explaining that risk-based thinking is a process of addressing risks and opportunities to improve effectiveness and results. It discusses why risk-based thinking is important and how to implement a risk-based approach through steps like risk assessment, analysis, evaluation, and treatment.