The latest versions of the ISO 9001 and ISO 14001 standards require that organizations use risk based thinking when managing numerous processes.
Check out the 5 steps for an effective risk & opportunity identification process in the organization. Simple and effective management process