ISO 14971 is the international standard for risk management, and it guides how to identify, assess, and control risks of an organization. It also provides a framework for managing risks and guidelines to carrying out risk assessment activities. The risks identified in this standard can be classified into two major categories: operational and non-operational risks.
