AS9100D Risk Management Checklist

What is risk management?

Risk management is the process of identifying, assessing, minimizing, and monitoring risks efficiently and effectively.

Why do you need risk management?

In short, risk management greatly lowers the chances of anything detrimental happening to your business. When a company puts little thought into their risk management, it can result in unforeseen issues that perhaps could have been preventable had a preventative plan been set into place.

This Process Street checklist template ensures that guidelines for risk management are adhered to in line with requirements of AS9100D for aerospace quality management.

The checklist walks you step by step through the entire process, supplemented with further information within each task and form fields to input all the necessary information and make sure that your company's risk management is on track.

Though the checklist offers a strong framework to work from, we always recommend that users edit the checklist and contents of the checklist to better suit their specific use cases, if needed.

Formalize the objectives & policies (this is your risk management plan).

Use the form fields below to make notes and then when finished, upload the finished risk management plan.

Also, make sure to assign your manager to the role below.

Take some time to identify potentially impacted stakeholders.

Use the form field below to record notes.

Apply risk questioning in the organization’s decision-making. 

These questions should help you see your company's risk management process from a new perspective and determine whether changes need to be made.

Use the form fields below to record your answers.

Next, verify the completeness of identified risks of impacted stakeholders.

You should develop a risk identification strategy that documents risk areas and how to identify risks in each area.

Use the form field below to take notes, and then upload the finished risk identification strategy.

Identify (using risk ID checklists) and document risks (using standard form).

Risk checklists are a list of identified risks or past experienced risks. They are beneficial to make sure that common risks are not overlooked.

Use the form field below to take notes, and then upload the finalized document with identified risks.

After you've identified your risks, take some time to review and analyze them (determine likelihood, consequence, urgency, and customer priorities and preferences and determine risk handling priorities).

Use the form fields below to take notes and upload your finalized risk analysis.

Next, review and assess your risk handling options and determine what would and/or wouldn't be effective (avoid, transfer, assume, mitigate).

Use the form field below to formulate notes and then upload a finalized document with your updated risk handling options.

After assessing your risk handling options, you should review your tradeoffs and ensure that they are made among different, and often competing cost, schedule, technical, and quality goals.

Use the form fields below to take notes and outline any changes you made.

Now that you've reviewed and updated your tradeoffs, you should decide on what to do, how much do, when to do, and what not to do in the event that something goes wrong.

Use the form field below to formulate notes and then upload a finalized document with your outlined plan of action.

Now, you should decide on who will take the mitigation actions and what actions will be applied when necessary.

Use the form field below to formulate notes, then take down the chosen team member's information and finalized mitigation actions.

Take some time to identify owners/stakeholders of the risks.

Use the form field below to record notes.

Next, you should define your risk handling actions/plans. 

Use the form field below to take notes, and then upload the finalized risk handling plan.

Refer back to the information you've taken down in the previous tasks and record it all in your Risk Register.

A Risk Register is a tool used for documenting risks, and corresponding actions to manage those risks.

Use the form field below to take notes, and then upload the Risk Register document.

Now, review your documented risks and organize them by priority. Update your Risk Register accordingly.

Use the form field below to take notes, and then upload the updated Risk Register document.

Next, you should plan and perform risk actions (what, who, when, where, how, how much).

Use the form field below to take notes, upload the finalized risk actions, and record any notable results from perform those actions.

You should then assess the severity and likelihood of occurrence of all undesired events.

Use the form field below to take notes, upload a document with all the finalized information.

Using the information you recorded in the previous task, classify the likelihood of occurrence and severity (low, moderate, or high) for all potential risks and update your Risk Register with this information.

Use the form field below to take notes, and then upload the updated Risk Register document.

Next, assess your risk mitigation alternatives to determine effectiveness and make any necessary changes.

Use the form field below to take notes, and record any changes made to your risk mitigation alternatives.

In order to begin optimally monitoring and managing your risk management as you move forward, you should begin by establishing a culture of open communication and reporting if measures are not being followed.

If undesired events take place, take actions based on results of the initial risk mitigation efforts.

Make consistent effort to recode recurring issues and corresponding lessons learned (and, in turn, use them).

It's also important to communicate and track risks as time goes on.

It is recommended that these elements be addressed in writing, but they can also be expressed through different means, such as, meetings, etc.

• as9100store - Risk Management Guidance Material
• as9100store - Project Manager’s Guide
• advisera - Applying AS9100 Rev D
• newiso9001 - Transition Towards 9100D AS9100 Rev. D Requirements 
• nmtgroup - Quality Systems Manual
• PJR - AS9100D revision 2016 

• AS9100D Checklist (Mandatory Documentation for AS9100D)
• AS9100D Quality Management System Structure Template
• AS9100D Audit Checklist
• AS9100D Project Manager Meeting Planner Checklist
• AS9100C to AS9100D Transition Requirements Checklist