Risk Management Specialist
ISO 14971:2019 risk management implementation throughout the medical device lifecycle.
Table of Contents
Risk Management Planning Workflow
Establish risk management process per ISO 14971.
Workflow: Create Risk Management Plan
- Define scope of risk management activities:
- Medical device identification
- Lifecycle stages covered
- Applicable standards and regulations
- Establish risk acceptability criteria:
- Define probability categories (P1-P5)
- Define severity categories (S1-S5)
- Create risk matrix with acceptance thresholds
- Assign responsibilities:
- Risk management lead
- Subject matter experts
- Approval authorities
- Define verification activities:
- Methods for control verification
- Acceptance criteria
- Plan production and post-production activities:
- Information sources
- Review triggers
- Update procedures
- Obtain plan approval
- Establish risk management file
- Validation: Plan approved; acceptability criteria defined; responsibilities assigned; file established
Risk Management Plan Content
| Section |
Content |
Evidence |
| Scope |
Device and lifecycle coverage |
Scope statement |
| Criteria |
Risk acceptability matrix |
Risk matrix document |
| Responsibilities |
Roles and authorities |
RACI chart |
| Verification |
Methods and acceptance |
Verification plan |
| Production/Post-Production |
Monitoring activities |
Surveillance plan |
Risk Acceptability Matrix (5x5)
| Probability \ Severity |
Negligible |
Minor |
Serious |
Critical |
Catastrophic |
| Frequent (P5) |
Medium |
High |
High |
Unacceptable |
Unacceptable |
| Probable (P4) |
Medium |
Medium |
High |
High |
Unacceptable |
| Occasional (P3) |
Low |
Medium |
Medium |
High |
High |
| Remote (P2) |
Low |
Low |
Medium |
Medium |
High |
| Improbable (P1) |
Low |
Low |
Low |
Medium |
Medium |
Risk Level Actions
| Level |
Acceptable |
Action Required |
| Low |
Yes |
Document and accept |
| Medium |
ALARP |
Reduce if practicable; document rationale |
| High |
ALARP |
Reduction required; demonstrate ALARP |
| Unacceptable |
No |
Design change mandatory |
Risk Analysis Workflow
Identify hazards and estimate risks systematically.
Workflow: Conduct Risk Analysis
- Define intended use and reasonably foreseeable misuse:
- Medical indication
- Patient population
- User population
- Use environment
- Select analysis method(s):
- FMEA for component/function analysis
- FTA for system-level analysis
- HAZOP for process deviations
- Use Error Analysis for user interaction
- Identify hazards by category:
- Energy hazards (electrical, mechanical, thermal)
- Biological hazards (bioburden, biocompatibility)
- Chemical hazards (residues, leachables)
- Operational hazards (software, use errors)
- Determine hazardous situations:
- Sequence of events
- Foreseeable misuse scenarios
- Single fault conditions
- Estimate probability of harm (P1-P5)
- Estimate severity of harm (S1-S5)
- Document in hazard analysis worksheet
- Validation: All hazard categories addressed; all hazards documented; probability and severity assigned
Hazard Categories Checklist
| Category |
Examples |
Analyzed |
| Electrical |
Shock, burns, interference |
☐ |
| Mechanical |
Crushing, cutting, entrapment |
☐ |
| Thermal |
Burns, tissue damage |
☐ |
| Radiation |
Ionizing, non-ionizing |
☐ |
| Biological |
Infection, biocompatibility |
☐ |
| Chemical |
Toxicity, irritation |
☐ |
| Software |
Incorrect output, timing |
☐ |
| Use Error |
Misuse, perception, cognition |
☐ |
| Environment |
EMC, mechanical stress |
☐ |
Analysis Method Selection
| Situation |
Recommended Method |
| Component failures |
FMEA |
| System-level failure |
FTA |
| Process deviations |
HAZOP |
| User interaction |
Use Error Analysis |
| Software behavior |
Software FMEA |
| Early design phase |
PHA |
Probability Criteria
| Level |
Name |
Description |
Frequency |
| P5 |
Frequent |
Expected to occur |
>10⁻³ |
| P4 |
Probable |
Likely to occur |
10⁻³ to 10⁻⁴ |
| P3 |
Occasional |
May occur |
10⁻⁴ to 10⁻⁵ |
| P2 |
Remote |
Unlikely |
10⁻⁵ to 10⁻⁶ |
| P1 |
Improbable |
Very unlikely |
<10⁻⁶ |
Severity Criteria
| Level |
Name |
Description |
Harm |
| S5 |
Catastrophic |
Death |
Death |
| S4 |
Critical |
Permanent impairment |
Irreversible injury |
| S3 |
Serious |
Injury requiring intervention |
Reversible injury |
| S2 |
Minor |
Temporary discomfort |
No treatment needed |
| S1 |
Negligible |
Inconvenience |
No injury |
See: references/risk-analysis-methods.md
Risk Evaluation Workflow
Evaluate risks against acceptability criteria.
Workflow: Evaluate Identified Risks
- Calculate initial risk level from probability × severity
- Compare to risk acceptability criteria
- For each risk, determine:
- Acceptable: Document and accept
- ALARP: Proceed to risk control
- Unacceptable: Mandatory risk control
- Document evaluation rationale
- Identify risks requiring benefit-risk analysis
- Complete benefit-risk analysis if applicable
- Compile risk evaluation summary
- Validation: All risks evaluated; acceptability determined; rationale documented
Risk Evaluation Decision Tree
Risk Estimated
│
▼
Apply Acceptability Criteria
│
├── Low Risk ──────────► Accept and document
│
├── Medium Risk ───────► Consider risk reduction
│ │ Document ALARP if not reduced
│ ▼
│ Practicable to reduce?
│ │
│ Yes──► Implement control
│ No───► Document ALARP rationale
│
├── High Risk ─────────► Risk reduction required
│ │ Must demonstrate ALARP
│ ▼
│ Implement control
│ Verify residual risk
│
└── Unacceptable ──────► Design change mandatory
Cannot proceed without control
ALARP Demonstration Requirements
| Criterion |
Evidence Required |
| Technical feasibility |
Analysis of alternative controls |
| Proportionality |
Cost-benefit of further reduction |
| State of the art |
Comparison to similar devices |
| Stakeholder input |
Clinical/user perspectives |
Benefit-Risk Analysis Triggers
| Situation |
Benefit-Risk Required |
| Residual risk remains high |
Yes |
| No feasible risk reduction |
Yes |
| Novel device |
Yes |
| Unacceptable risk with clinical benefit |
Yes |
| All risks low |
No |
Risk Control Workflow
Implement and verify risk control measures.
Workflow: Implement Risk Controls
- Identify risk control options:
- Inherent safety by design (Priority 1)
- Protective measures in device (Priority 2)
- Information for safety (Priority 3)
- Select optimal control following hierarchy
- Analyze control for new hazards introduced
- Document control in design requirements
- Implement control in design
- Develop verification protocol
- Execute verification and document results
- Evaluate residual risk with control in place
- Validation: Control implemented; verification passed; residual risk acceptable; no unaddressed new hazards
Risk Control Hierarchy
| Priority |
Control Type |
Examples |
Effectiveness |
| 1 |
Inherent Safety |
Eliminate hazard, fail-safe design |
Highest |
| 2 |
Protective Measures |
Guards, alarms, automatic shutdown |
High |
| 3 |
Information |
Warnings, training, IFU |
Lower |
Risk Control Option Analysis Template
RISK CONTROL OPTION ANALYSIS
Hazard ID: H-[XXX]
Hazard: [Description]
Initial Risk: P[X] × S[X] = [Level]
OPTIONS CONSIDERED:
| Option | Control Type | New Hazards | Feasibility | Selected |
|--------|--------------|-------------|-------------|----------|
| 1 | [Type] | [Yes/No] | [H/M/L] | [Yes/No] |
| 2 | [Type] | [Yes/No] | [H/M/L] | [Yes/No] |
SELECTED CONTROL: Option [X]
Rationale: [Justification for selection]
IMPLEMENTATION:
- Requirement: [REQ-XXX]
- Design Document: [Reference]
VERIFICATION:
- Method: [Test/Analysis/Review]
- Protocol: [Reference]
- Acceptance Criteria: [Criteria]
Risk Control Verification Methods
| Method |
When to Use |
Evidence |
| Test |
Quantifiable performance |
Test report |
| Inspection |
Physical presence |
Inspection record |
| Analysis |
Design calculation |
Analysis report |
| Review |
Documentation check |
Review record |
Residual Risk Evaluation
| After Control |
Action |
| Acceptable |
Document, proceed |
| ALARP achieved |
Document rationale, proceed |
| Still unacceptable |
Additional control or design change |
| New hazard introduced |
Analyze and control new hazard |
Post-Production Risk Management
Monitor and update risk management throughout product lifecycle.
Workflow: Post-Production Risk Monitoring
- Identify information sources:
- Customer complaints
- Service reports
- Vigilance/adverse events
- Literature monitoring
- Clinical studies
- Establish collection procedures
- Define review triggers:
- New hazard identified
- Increased frequency of known hazard
- Serious incident
- Regulatory feedback
- Analyze incoming information for risk relevance
- Update risk management file as needed
- Communicate significant findings
- Conduct periodic risk management review
- Validation: Information sources monitored; file current; reviews completed per schedule
Information Sources
| Source |
Information Type |
Review Frequency |
| Complaints |
Use issues, failures |
Continuous |
| Service |
Field failures, repairs |
Monthly |
| Vigilance |
Serious incidents |
Immediate |
| Literature |
Similar device issues |
Quarterly |
| Regulatory |
Authority feedback |
As received |
| Clinical |
PMCF data |
Per plan |
Risk Management File Update Triggers
| Trigger |
Response Time |
Action |
| Serious incident |
Immediate |
Full risk review |
| New hazard identified |
30 days |
Risk analysis update |
| Trend increase |
60 days |
Trend analysis |
| Design change |
Before implementation |
Impact assessment |
| Standards update |
Per transition period |
Gap analysis |
Periodic Review Requirements
| Review Element |
Frequency |
| Risk management file completeness |
Annual |
| Risk control effectiveness |
Annual |
| Post-market information analysis |
Quarterly |
| Risk-benefit conclusions |
Annual or on new data |
Risk Assessment Templates
→ See references/risk-assessment-templates.md for details
Decision Frameworks
Risk Control Selection
What is the risk level?
│
├── Unacceptable ──► Can hazard be eliminated?
│ │
│ Yes─┴─No
│ │ │
│ ▼ ▼
│ Eliminate Can protective
│ hazard measure reduce?
│ │
│ Yes─┴─No
│ │ │
│ ▼ ▼
│ Add Add warning
│ protection + training
│
└── High/Medium ──► Apply hierarchy
starting at Level 1
New Hazard Analysis
| Question |
If Yes |
If No |
| Does control introduce new hazard? |
Analyze new hazard |
Proceed |
| Is new risk higher than original? |
Reject control option |
Acceptable trade-off |
| Can new hazard be controlled? |
Add control |
Reject control option |
Risk Acceptability Decision
| Condition |
Decision |
| All risks Low |
Acceptable |
| Medium risks with ALARP |
Acceptable |
| High risks with ALARP documented |
Acceptable if benefits outweigh |
| Any Unacceptable residual |
Not acceptable - redesign |
Tools and References
Scripts
| Tool |
Purpose |
Usage |
| risk_matrix_calculator.py |
Calculate risk levels and FMEA RPN |
python risk_matrix_calculator.py --help |
Note: Bundled scripts ship as Markdown reference (.md) — copy the code out of the .md file to run it.
Risk Matrix Calculator Features:
- ISO 14971 5x5 risk matrix calculation
- FMEA RPN (Risk Priority Number) calculation
- Interactive mode for guided assessment
- Display risk criteria definitions
- JSON output for integration
References
| Document |
Content |
| iso14971-implementation-guide.md |
Complete ISO 14971:2019 implementation with templates |
| risk-analysis-methods.md |
FMEA, FTA, HAZOP, Use Error Analysis methods |
Quick Reference: ISO 14971 Process
| Stage |
Key Activities |
Output |
| Planning |
Define scope, criteria, responsibilities |
Risk Management Plan |
| Analysis |
Identify hazards, estimate risk |
Hazard Analysis |
| Evaluation |
Compare to criteria, ALARP assessment |
Risk Evaluation |
| Control |
Implement hierarchy, verify |
Risk Control Records |
| Residual |
Overall assessment, benefit-risk |
Risk Management Report |
| Production |
Monitor, review, update |
Updated RM File |
Related Skills
Creator: Ra Qm Team
License: MIT
Source Repo: neekware/dojo-skills
Source Bucket: ra-qm-team
Original Path: ra-qm-team/risk-management-specialist
1---2name: risk-management-specialist-23description: Risk Management Specialist4---5# Risk Management Specialist67ISO 14971:2019 risk management implementation throughout the medical device lifecycle.89---1011## Table of Contents1213- [Risk Management Planning Workflow](#risk-management-planning-workflow)14- [Risk Analysis Workflow](#risk-analysis-workflow)15- [Risk Evaluation Workflow](#risk-evaluation-workflow)16- [Risk Control Workflow](#risk-control-workflow)17- [Post-Production Risk Management](#post-production-risk-management)18- [Risk Assessment Templates](#risk-assessment-templates)19- [Decision Frameworks](#decision-frameworks)20- [Tools and References](#tools-and-references)2122---2324## Risk Management Planning Workflow2526Establish risk management process per ISO 14971.2728### Workflow: Create Risk Management Plan29301. Define scope of risk management activities:31 - Medical device identification32 - Lifecycle stages covered33 - Applicable standards and regulations342. Establish risk acceptability criteria:35 - Define probability categories (P1-P5)36 - Define severity categories (S1-S5)37 - Create risk matrix with acceptance thresholds383. Assign responsibilities:39 - Risk management lead40 - Subject matter experts41 - Approval authorities424. Define verification activities:43 - Methods for control verification44 - Acceptance criteria455. Plan production and post-production activities:46 - Information sources47 - Review triggers48 - Update procedures496. Obtain plan approval507. Establish risk management file518. **Validation:** Plan approved; acceptability criteria defined; responsibilities assigned; file established5253### Risk Management Plan Content5455| Section | Content | Evidence |56| -------------------------- | ----------------------------- | -------------------- |57| Scope | Device and lifecycle coverage | Scope statement |58| Criteria | Risk acceptability matrix | Risk matrix document |59| Responsibilities | Roles and authorities | RACI chart |60| Verification | Methods and acceptance | Verification plan |61| Production/Post-Production | Monitoring activities | Surveillance plan |6263### Risk Acceptability Matrix (5x5)6465| Probability \ Severity | Negligible | Minor | Serious | Critical | Catastrophic |66| ---------------------- | ---------- | ------ | ------- | ------------ | ------------ |67| **Frequent (P5)** | Medium | High | High | Unacceptable | Unacceptable |68| **Probable (P4)** | Medium | Medium | High | High | Unacceptable |69| **Occasional (P3)** | Low | Medium | Medium | High | High |70| **Remote (P2)** | Low | Low | Medium | Medium | High |71| **Improbable (P1)** | Low | Low | Low | Medium | Medium |7273### Risk Level Actions7475| Level | Acceptable | Action Required |76| ------------ | ---------- | ----------------------------------------- |77| Low | Yes | Document and accept |78| Medium | ALARP | Reduce if practicable; document rationale |79| High | ALARP | Reduction required; demonstrate ALARP |80| Unacceptable | No | Design change mandatory |8182---8384## Risk Analysis Workflow8586Identify hazards and estimate risks systematically.8788### Workflow: Conduct Risk Analysis89901. Define intended use and reasonably foreseeable misuse:91 - Medical indication92 - Patient population93 - User population94 - Use environment952. Select analysis method(s):96 - FMEA for component/function analysis97 - FTA for system-level analysis98 - HAZOP for process deviations99 - Use Error Analysis for user interaction1003. Identify hazards by category:101 - Energy hazards (electrical, mechanical, thermal)102 - Biological hazards (bioburden, biocompatibility)103 - Chemical hazards (residues, leachables)104 - Operational hazards (software, use errors)1054. Determine hazardous situations:106 - Sequence of events107 - Foreseeable misuse scenarios108 - Single fault conditions1095. Estimate probability of harm (P1-P5)1106. Estimate severity of harm (S1-S5)1117. Document in hazard analysis worksheet1128. **Validation:** All hazard categories addressed; all hazards documented; probability and severity assigned113114### Hazard Categories Checklist115116| Category | Examples | Analyzed |117| ----------- | ----------------------------- | -------- |118| Electrical | Shock, burns, interference | ☐ |119| Mechanical | Crushing, cutting, entrapment | ☐ |120| Thermal | Burns, tissue damage | ☐ |121| Radiation | Ionizing, non-ionizing | ☐ |122| Biological | Infection, biocompatibility | ☐ |123| Chemical | Toxicity, irritation | ☐ |124| Software | Incorrect output, timing | ☐ |125| Use Error | Misuse, perception, cognition | ☐ |126| Environment | EMC, mechanical stress | ☐ |127128### Analysis Method Selection129130| Situation | Recommended Method |131| -------------------- | ------------------ |132| Component failures | FMEA |133| System-level failure | FTA |134| Process deviations | HAZOP |135| User interaction | Use Error Analysis |136| Software behavior | Software FMEA |137| Early design phase | PHA |138139### Probability Criteria140141| Level | Name | Description | Frequency |142| ----- | ---------- | ----------------- | ------------ |143| P5 | Frequent | Expected to occur | >10⁻³ |144| P4 | Probable | Likely to occur | 10⁻³ to 10⁻⁴ |145| P3 | Occasional | May occur | 10⁻⁴ to 10⁻⁵ |146| P2 | Remote | Unlikely | 10⁻⁵ to 10⁻⁶ |147| P1 | Improbable | Very unlikely | <10⁻⁶ |148149### Severity Criteria150151| Level | Name | Description | Harm |152| ----- | ------------ | ----------------------------- | ------------------- |153| S5 | Catastrophic | Death | Death |154| S4 | Critical | Permanent impairment | Irreversible injury |155| S3 | Serious | Injury requiring intervention | Reversible injury |156| S2 | Minor | Temporary discomfort | No treatment needed |157| S1 | Negligible | Inconvenience | No injury |158159See: [references/risk-analysis-methods.md](references/risk-analysis-methods.md)160161---162163## Risk Evaluation Workflow164165Evaluate risks against acceptability criteria.166167### Workflow: Evaluate Identified Risks1681691. Calculate initial risk level from probability × severity1702. Compare to risk acceptability criteria1713. For each risk, determine:172 - Acceptable: Document and accept173 - ALARP: Proceed to risk control174 - Unacceptable: Mandatory risk control1754. Document evaluation rationale1765. Identify risks requiring benefit-risk analysis1776. Complete benefit-risk analysis if applicable1787. Compile risk evaluation summary1798. **Validation:** All risks evaluated; acceptability determined; rationale documented180181### Risk Evaluation Decision Tree182183```184Risk Estimated185 │186 ▼187Apply Acceptability Criteria188 │189 ├── Low Risk ──────────► Accept and document190 │191 ├── Medium Risk ───────► Consider risk reduction192 │ │ Document ALARP if not reduced193 │ ▼194 │ Practicable to reduce?195 │ │196 │ Yes──► Implement control197 │ No───► Document ALARP rationale198 │199 ├── High Risk ─────────► Risk reduction required200 │ │ Must demonstrate ALARP201 │ ▼202 │ Implement control203 │ Verify residual risk204 │205 └── Unacceptable ──────► Design change mandatory206 Cannot proceed without control207```208209### ALARP Demonstration Requirements210211| Criterion | Evidence Required |212| --------------------- | --------------------------------- |213| Technical feasibility | Analysis of alternative controls |214| Proportionality | Cost-benefit of further reduction |215| State of the art | Comparison to similar devices |216| Stakeholder input | Clinical/user perspectives |217218### Benefit-Risk Analysis Triggers219220| Situation | Benefit-Risk Required |221| --------------------------------------- | --------------------- |222| Residual risk remains high | Yes |223| No feasible risk reduction | Yes |224| Novel device | Yes |225| Unacceptable risk with clinical benefit | Yes |226| All risks low | No |227228---229230## Risk Control Workflow231232Implement and verify risk control measures.233234### Workflow: Implement Risk Controls2352361. Identify risk control options:237 - Inherent safety by design (Priority 1)238 - Protective measures in device (Priority 2)239 - Information for safety (Priority 3)2402. Select optimal control following hierarchy2413. Analyze control for new hazards introduced2424. Document control in design requirements2435. Implement control in design2446. Develop verification protocol2457. Execute verification and document results2468. Evaluate residual risk with control in place2479. **Validation:** Control implemented; verification passed; residual risk acceptable; no unaddressed new hazards248249### Risk Control Hierarchy250251| Priority | Control Type | Examples | Effectiveness |252| -------- | ------------------- | ---------------------------------- | ------------- |253| 1 | Inherent Safety | Eliminate hazard, fail-safe design | Highest |254| 2 | Protective Measures | Guards, alarms, automatic shutdown | High |255| 3 | Information | Warnings, training, IFU | Lower |256257### Risk Control Option Analysis Template258259```260RISK CONTROL OPTION ANALYSIS261262Hazard ID: H-[XXX]263Hazard: [Description]264Initial Risk: P[X] × S[X] = [Level]265266OPTIONS CONSIDERED:267| Option | Control Type | New Hazards | Feasibility | Selected |268|--------|--------------|-------------|-------------|----------|269| 1 | [Type] | [Yes/No] | [H/M/L] | [Yes/No] |270| 2 | [Type] | [Yes/No] | [H/M/L] | [Yes/No] |271272SELECTED CONTROL: Option [X]273Rationale: [Justification for selection]274275IMPLEMENTATION:276- Requirement: [REQ-XXX]277- Design Document: [Reference]278279VERIFICATION:280- Method: [Test/Analysis/Review]281- Protocol: [Reference]282- Acceptance Criteria: [Criteria]283```284285### Risk Control Verification Methods286287| Method | When to Use | Evidence |288| ---------- | ------------------------ | ----------------- |289| Test | Quantifiable performance | Test report |290| Inspection | Physical presence | Inspection record |291| Analysis | Design calculation | Analysis report |292| Review | Documentation check | Review record |293294### Residual Risk Evaluation295296| After Control | Action |297| --------------------- | ----------------------------------- |298| Acceptable | Document, proceed |299| ALARP achieved | Document rationale, proceed |300| Still unacceptable | Additional control or design change |301| New hazard introduced | Analyze and control new hazard |302303---304305## Post-Production Risk Management306307Monitor and update risk management throughout product lifecycle.308309### Workflow: Post-Production Risk Monitoring3103111. Identify information sources:312 - Customer complaints313 - Service reports314 - Vigilance/adverse events315 - Literature monitoring316 - Clinical studies3172. Establish collection procedures3183. Define review triggers:319 - New hazard identified320 - Increased frequency of known hazard321 - Serious incident322 - Regulatory feedback3234. Analyze incoming information for risk relevance3245. Update risk management file as needed3256. Communicate significant findings3267. Conduct periodic risk management review3278. **Validation:** Information sources monitored; file current; reviews completed per schedule328329### Information Sources330331| Source | Information Type | Review Frequency |332| ---------- | ----------------------- | ---------------- |333| Complaints | Use issues, failures | Continuous |334| Service | Field failures, repairs | Monthly |335| Vigilance | Serious incidents | Immediate |336| Literature | Similar device issues | Quarterly |337| Regulatory | Authority feedback | As received |338| Clinical | PMCF data | Per plan |339340### Risk Management File Update Triggers341342| Trigger | Response Time | Action |343| --------------------- | --------------------- | -------------------- |344| Serious incident | Immediate | Full risk review |345| New hazard identified | 30 days | Risk analysis update |346| Trend increase | 60 days | Trend analysis |347| Design change | Before implementation | Impact assessment |348| Standards update | Per transition period | Gap analysis |349350### Periodic Review Requirements351352| Review Element | Frequency |353| --------------------------------- | --------------------- |354| Risk management file completeness | Annual |355| Risk control effectiveness | Annual |356| Post-market information analysis | Quarterly |357| Risk-benefit conclusions | Annual or on new data |358359---360361## Risk Assessment Templates362363→ See references/risk-assessment-templates.md for details364365## Decision Frameworks366367### Risk Control Selection368369```370What is the risk level?371 │372 ├── Unacceptable ──► Can hazard be eliminated?373 │ │374 │ Yes─┴─No375 │ │ │376 │ ▼ ▼377 │ Eliminate Can protective378 │ hazard measure reduce?379 │ │380 │ Yes─┴─No381 │ │ │382 │ ▼ ▼383 │ Add Add warning384 │ protection + training385 │386 └── High/Medium ──► Apply hierarchy387 starting at Level 1388```389390### New Hazard Analysis391392| Question | If Yes | If No |393| ---------------------------------- | --------------------- | --------------------- |394| Does control introduce new hazard? | Analyze new hazard | Proceed |395| Is new risk higher than original? | Reject control option | Acceptable trade-off |396| Can new hazard be controlled? | Add control | Reject control option |397398### Risk Acceptability Decision399400| Condition | Decision |401| -------------------------------- | ------------------------------- |402| All risks Low | Acceptable |403| Medium risks with ALARP | Acceptable |404| High risks with ALARP documented | Acceptable if benefits outweigh |405| Any Unacceptable residual | Not acceptable - redesign |406407---408409## Tools and References410411### Scripts412413| Tool | Purpose | Usage |414| -------------------------------------------------------------- | ---------------------------------- | ----------------------------------------- |415| [risk_matrix_calculator.py](scripts/risk_matrix_calculator.py) | Calculate risk levels and FMEA RPN | `python risk_matrix_calculator.py --help` |416417> **Note:** Bundled scripts ship as Markdown reference (`.md`) — copy the code out of the `.md` file to run it.418419**Risk Matrix Calculator Features:**420421- ISO 14971 5x5 risk matrix calculation422- FMEA RPN (Risk Priority Number) calculation423- Interactive mode for guided assessment424- Display risk criteria definitions425- JSON output for integration426427### References428429| Document | Content |430| ------------------------------------------------------------------------------- | ----------------------------------------------------- |431| [iso14971-implementation-guide.md](references/iso14971-implementation-guide.md) | Complete ISO 14971:2019 implementation with templates |432| [risk-analysis-methods.md](references/risk-analysis-methods.md) | FMEA, FTA, HAZOP, Use Error Analysis methods |433434### Quick Reference: ISO 14971 Process435436| Stage | Key Activities | Output |437| ---------- | ---------------------------------------- | ---------------------- |438| Planning | Define scope, criteria, responsibilities | Risk Management Plan |439| Analysis | Identify hazards, estimate risk | Hazard Analysis |440| Evaluation | Compare to criteria, ALARP assessment | Risk Evaluation |441| Control | Implement hierarchy, verify | Risk Control Records |442| Residual | Overall assessment, benefit-risk | Risk Management Report |443| Production | Monitor, review, update | Updated RM File |444445---446447## Related Skills448449| Skill | Integration Point |450| ------------------------------------------------------------------ | ---------------------- |451| [quality-manager-qms-iso13485](../quality-manager-qms-iso13485/) | QMS integration |452| [capa-officer](../capa-officer/) | Risk-based CAPA |453| [regulatory-affairs-head](../regulatory-affairs-head/) | Regulatory submissions |454| [quality-documentation-manager](../quality-documentation-manager/) | Risk file management |455456> **Creator:** Ra Qm Team457> **License:** MIT458> **Source Repo:** `neekware/dojo-skills`459> **Source Bucket:** `ra-qm-team`460> **Original Path:** `ra-qm-team/risk-management-specialist`