Risk-based thinking is something we all do automatically, often subconsciously, to get the best results. It has always been implicit in the ISO 9001 quality management system (QMS) and ensures that risk is considered from the beginning and throughout.