Risk Based Thinking - Hutchins, Greg

. .

Résumé :
Twenty years ago, we wrote 4 best selling, ISO 9001 books. They were fun times. Quality was Job #1. W. Edwards Deming, Joseph Juran, Phil Crosby, and other quality gurus were considered quality management and general management authorities. We would give a quality or ISO talk and then walk away with 1 or more clients. So why are we writing another book on quality and replowing a topic that has been written about extensively? The challenge is there is little information on Risk Based Thinking (RBT) addressing ISO 9001:2015 and ISO other management system standards. ISO: Risk Based Thinking is the first book on RBT and operational risk. This book in its second edition is the first update.

Biographie:
Greg Hutchins PE CERM is the founder of: + 800Compete.com. + WorkingIt.com. + CERMAcademy.com. + QualityPlusEngineering.com, and other startups. + CERMAcademy.com. Greg Hutchins is the risk evangelist who coined the expression Future of Quality: Risk?. He is the founder of Certified Enterprise Risk Manager Academy?. He can be contacted at GregH@europa.com or 503.233.1012. Greg is the founder of Working It Academy and the author of Working It: Disruption Rules. Greg Hutchins PE CERM is also the principal professional engineer Quality + Engineering - international supply and quality management firm. Q+E is the designer and developer of Certified Enterprise Risk Manager? (CERM), CERM Cyber? certificate, and best-selling ISO and ERM books. Q+E has deep domain expertise in ISO 31000, ISO 27001, and NIST 800's. Q+E designed CERM based on its security IP including Critical Infrastructure Protection: Forensics, Assurance, Analytics?; Value Added Auditing?; Certified Enterprise Risk Manager?; Future of Quality: Risk?; CERM: Risk Based, Problem Solving

Sommaire:
Risk Based, Decision Making?; etc. Q+E has been certified by the Department of Homeland Security for Critical Infrastructure Protection: Forensics, Assurance, Analytics?. Q+E has conducted the following Critical Infrastructure Protection (CIP) risk assessments: + Analytical. Q+E engineers and scientists conduct analytical analyses following Q+E protocols evaluating business continuity, cyber security, and physical security systems against IEEE, NFPA, ISA, PMI, ISO, NIST, COSO, NERC, DIACAP, FISMA, and ASIS standards. + Assurance. Q+E offers the client three levels of assurance: + Compliance. Q+E conducts a compliance audit against appropriate standards and guidance. + Assurance with opinion. Q+E issues an opinion based on the results of a governance, risk, and compliance (GRC) audit or ERM controls assessment. + Assurance with insurance coverage. Q+E conducts an audit and provides the requisite level of due diligence for the auditee to be covered. + Forensics. Q+E provides the above levels of assurance as well as supplies a letter to the regulatory authority averring compliance that criteria have been met. Our ISO background includes: Was lead trainer and consultant for first US based certification body in 1987 (AGA Laboratories). Was member of US TAG in 1987 - developer of ISO 9001 Consulted and trained FAA in risk-based auditing, certification, etc.