Understanding organisational risk . . .

I've spent the last week working with an organisation on an upskilling programme for their most experienced Internal Auditors.  Most are departmental managers, well used to business ethics, goals and operating practices.  We've been looking at how they can help the business develop and move towards compliance with ISO9001:2015, and its been fascinating to see how their understanding of the standard and it's interdependencies has grown during the workshop.  The standard brings into sharp focus the need for businesses to understand and act on risk and opportunity and as we've moved through the days we've identified some really key risks which can be addressed and which in turn will drive in real business improvement.  The more I work with this new version of the standard the more I like it!