Quality Risk Management Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Quality Managers, Quality Assurance Specialists and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-QP-053

Before you join: Participants should have experience of a business, service, manufacturing, project or operational process where quality requirements apply.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Quality failures rarely arise from a single missed check. They develop when hazards are poorly identified, process changes bypass assessment, controls are selected without evidence, or warning signals are not escalated. The consequences include customer complaints, rework, batch rejection, service disruption, regulatory findings, contractual penalties and loss of confidence. Quality risk management provides a disciplined basis for deciding which risks require action, which controls are proportionate, and how residual risk should be accepted or reduced.

This course teaches participants to build and operate a quality risk management system using recognised methods including ISO 31000, ISO 9001, ICH Q9(R1), FMEA, fault tree analysis, HACCP principles and control plans. Participants learn to define risk questions, map processes, identify failure modes and hazards, score likelihood and impact, assess detectability, select preventive and detective controls, and document risk-based decisions. The course also addresses change control, supplier quality, deviation management, CAPA, quality metrics, management review and risk communication.

Teaching combines focused instructor briefings with sector-based cases from manufacturing, financial services, healthcare, public services and supply operations. Participants work with risk registers, process maps, FMEA worksheets, control plans, bow-tie diagrams and CAPA records, applying each method to a selected process or quality issue. They leave with a completed quality risk management dossier that can be adapted for their workplace, including a risk assessment, control strategy, monitoring plan and management review pack.

The course suits professionals responsible for quality, operations, compliance, process improvement, audit, product delivery or supplier performance. It is particularly useful where teams must demonstrate that quality decisions are evidence-based, documented and proportionate to risk.

What you will be able to do

  • Design a quality risk management process aligned with ISO 31000 and ISO 9001 requirements
  • Define risk assessment questions, boundaries, assumptions and acceptance criteria for a process
  • Conduct FMEA analyses using severity, occurrence, detection and action-priority ratings
  • Develop risk registers linking causes, controls, owners, due dates and residual risks
  • Select preventive, detective and corrective controls using bow-tie and control-plan methods
  • Apply risk-based decision rules to deviations, changes, suppliers and CAPA investigations
  • Monitor quality risk through leading indicators, control effectiveness tests and management review
  • Present a documented quality risk management dossier for management approval

Benefits of attending

For you

  • Produce defensible quality risk assessments for operational decisions and audit evidence
  • Facilitate FMEA sessions that identify actionable failure modes and control gaps
  • Translate process data, complaints and deviations into prioritised risk actions
  • Challenge weak corrective actions using root-cause and control-effectiveness evidence
  • Present residual-risk decisions clearly to quality leaders and process owners

For your organisation

  • Fewer recurring defects through earlier identification of failure modes and weak controls
  • More consistent change-control decisions supported by documented risk acceptance criteria
  • Stronger audit evidence linking quality controls to identified process risks
  • Better allocation of improvement resources toward high-priority quality exposures
  • Clearer escalation of supplier, process and customer-quality risks to management

Course modules

20 modules over 10 days

Participants can explain the purpose, principles and governance of quality risk management.

  • Quality risk management principles: risk-based decisions, lifecycle thinking, and evidence
  • ISO 31000 risk management framework and ISO 9001 quality requirements
  • ICH Q9(R1) principles for structured quality risk decisions
  • Risk appetite, tolerance thresholds, and quality risk acceptance authority
  • Distinguishing hazards, risks, issues, deviations, nonconformities, and incidents
  • Quality risk governance roles: process owner, quality assurance, reviewer, approver

Participants can frame a risk assessment with clear scope, criteria and decision needs.

  • Risk assessment charter defining purpose, scope, boundaries, and decision owner
  • Writing precise risk questions before selecting an assessment method
  • Process context captured through stakeholders, requirements, interfaces, and constraints
  • Assumptions, exclusions, and evidence limitations recorded before assessment begins
  • Risk criteria based on safety, compliance, customer impact, cost, and continuity
  • Choosing qualitative, semi-quantitative, or quantitative assessment approaches

Participants can map a process to reveal critical steps, handoffs and control points.

  • SIPOC diagrams establish suppliers, inputs, process boundaries, outputs, and customers
  • Swimlane maps expose ownership gaps and cross-functional handoff failures
  • Critical-to-quality requirements translated into measurable process specifications
  • Inputs, activities, outputs, controls, and records mapped at each step
  • Decision points and exception paths identified within the process flow
  • Process maps validated against procedures, records, and frontline observations

Participants can identify quality risks systematically from process evidence and operational knowledge.

  • Brainstorming rules separate possible failure causes from preferred solutions
  • Checklists draw on complaints, audits, deviations, recalls, and near misses
  • Ishikawa diagrams structure potential causes across people, methods, machines, materials
  • Five Whys tests causal chains without treating symptoms as root causes
  • Failure mode statements specify what fails, where, and under what conditions
  • Hazard identification considers product, service, data, supplier, and process risks

Participants can analyse risk using consistent scoring scales and documented evidence.

  • Likelihood scales anchored to historical frequency, exposure, and process conditions
  • Impact scales distinguish customer harm, compliance breach, cost, and disruption
  • Detectability ratings assess whether failure reaches the customer undetected
  • Risk matrices combine likelihood and impact without false precision
  • Scoring guidance reduces assessor bias and inconsistent risk classifications
  • Evidence logs record data sources, assumptions, and confidence in ratings

Participants can complete an FMEA that prioritises meaningful quality risk actions.

  • FMEA structure links functions, failure modes, effects, causes, and controls
  • Severity ratings reflect credible consequences when the failure occurs
  • Occurrence ratings use process capability, history, and known causal factors
  • Detection ratings evaluate existing checks before release or customer use
  • Action Priority tables direct resources beyond simple risk-priority numbers
  • Recommended actions address prevention, detection, containment, and response

Participants can build a risk register that supports ownership, escalation and review.

  • Risk register fields capture event, cause, consequence, controls, and owner
  • Inherent and residual risk ratings show the effect of controls
  • Action owners, target dates, dependencies, and status support accountability
  • Escalation criteria identify risks requiring management or quality approval
  • Risk treatment decisions recorded as accept, avoid, reduce, transfer, or monitor
  • Version control preserves an auditable history of changing risk decisions

Participants can select proportionate controls that prevent, detect and contain quality failures.

  • Control hierarchy prioritises elimination, substitution, engineering, administrative, and inspection controls
  • Preventive controls reduce causal conditions before a failure develops
  • Detective controls identify deviations before release, delivery, or escalation
  • Corrective controls restore conformity after a confirmed quality failure
  • Control plans specify methods, frequencies, records, owners, and reaction plans
  • Poka-yoke designs prevent predictable human errors at source

Participants can use bow-tie analysis to connect threats, controls and consequences.

  • Bow-tie diagrams place the top event between threats and consequences
  • Threat barriers prevent initiating events from reaching the top event
  • Recovery barriers limit consequences after the top event occurs
  • Escalation factors identify conditions that weaken critical barriers
  • Barrier ownership assigns testing, maintenance, and reporting responsibilities
  • Critical control verification tests whether safeguards work as designed

Participants can connect investigations and CAPA actions to verified quality risks.

  • Problem statements separate observed nonconformity from assumed root cause
  • Five Whys and fishbone analysis structure investigation of contributing factors
  • Cause-and-effect evidence distinguishes root causes from contributing conditions
  • CAPA plans define correction, corrective action, preventive action, and ownership
  • Effectiveness checks test whether CAPA actions reduced residual risk
  • Recurring-event analysis identifies weak actions, trends, and systemic causes

Participants can assess quality risks before approving process, system or supplier changes.

  • Change requests define proposed state, rationale, scope, and affected requirements
  • Impact assessments examine documents, training, validation, suppliers, and controls
  • Risk assessments identify new failure modes introduced by the change
  • Pre-implementation controls include trials, approvals, training, and acceptance criteria
  • Post-implementation review confirms outcomes, deviations, and residual risks
  • Emergency changes require documented justification, containment, and retrospective review

Participants can assess supplier quality risks and define appropriate oversight controls.

  • Supplier segmentation considers criticality, spend, substitutability, and quality history
  • Due diligence reviews certifications, capability, controls, and financial stability
  • Supplier scorecards track defects, on-time delivery, responsiveness, and audit findings
  • Incoming inspection plans reflect material criticality and supplier performance
  • Quality agreements define specifications, notification duties, deviations, and change approval
  • Supplier corrective actions require root-cause evidence and effectiveness verification

Participants can plan audits that test the controls protecting the highest quality risks.

  • Audit universes group processes, sites, suppliers, systems, and quality activities
  • Risk-based audit plans prioritise critical processes and weak control environments
  • Control objectives state what must be prevented, detected, or evidenced
  • Audit tests examine design adequacy, operating effectiveness, and retained records
  • Sampling approaches reflect risk, volume, history, and control frequency
  • Findings distinguish isolated errors from systemic control failures

Participants can use quality data to identify emerging risks and control deterioration.

  • Leading indicators signal control weakness before defects reach customers
  • Lagging indicators measure complaints, rejects, rework, returns, and failures
  • Pareto charts prioritise defect categories by frequency and consequence
  • Run charts reveal shifts, trends, cycles, and unusual variation
  • Control charts distinguish common-cause variation from special-cause signals
  • Thresholds and triggers define escalation, investigation, and management response

Participants can communicate quality risks, decisions and residual exposures to different stakeholders.

  • Risk reports distinguish facts, assumptions, uncertainty, and management recommendations
  • Heat maps summarise exposure while retaining supporting assessment detail
  • Management dashboards connect risks, controls, actions, indicators, and decisions
  • Escalation messages state event, impact, immediate containment, and decision required
  • Risk acceptance records document rationale, authority, duration, and review date
  • Communication plans address operational teams, quality functions, executives, and suppliers

Participants can identify human-performance factors that increase the probability of quality failures.

  • Human factors analysis examines workload, fatigue, competence, interfaces, and distractions
  • Standard work reduces variation in repeatable quality-critical activities
  • Training effectiveness verifies demonstrated competence rather than attendance records
  • Visual management makes specifications, status, abnormalities, and actions visible
  • Error-proofing controls address predictable slips, lapses, mistakes, and violations
  • Shift handovers protect critical information during responsibility transfers

Participants can assess events quickly and determine proportionate containment and investigation actions.

  • Triage criteria classify events by customer impact, severity, scope, and urgency
  • Immediate containment protects customers, products, data, and operational continuity
  • Deviation records capture chronology, affected population, evidence, and initial assessment
  • Complaint investigations connect customer symptoms to process failure modes
  • Impact assessments determine recall, notification, remediation, and monitoring needs
  • Event trending identifies repeated signals requiring systemic risk reassessment

Participants can run management review discussions that drive accountable quality risk decisions.

  • Management review inputs include risk trends, metrics, audits, CAPA, and changes
  • Residual-risk reviews test whether accepted exposure remains within tolerance
  • Control performance evidence supports retain, strengthen, redesign, or retire decisions
  • Action logs record decisions, resources, owners, deadlines, and verification requirements
  • Lessons learned update risk criteria, procedures, training, and assessment templates
  • Annual risk review cycles align quality priorities with business planning

Participants can embed quality risk management into routine operational planning and decision-making.

  • Daily management boards display critical quality controls and abnormal conditions
  • Tiered meetings escalate unresolved risks through defined management levels
  • Operational planning incorporates risk actions, resource needs, and control checks
  • Quality objectives link process performance targets to material risk reduction
  • Procedure design embeds risk checkpoints, records, approvals, and exception handling
  • Risk ownership maps align accountability with authority and process knowledge

Participants can build, review and present a complete quality risk management dossier for a selected process.

  • Process scope, quality requirements, stakeholders, and assessment question finalised
  • Process map and critical control points reviewed for completeness
  • FMEA and bow-tie analysis prioritise failure modes and barriers
  • Risk register documents inherent risk, residual risk, actions, and ownership
  • Control plan defines monitoring methods, response triggers, and verification evidence
  • Management presentation states decisions required, resources, timelines, and residual exposure

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Quality risk management charter template
  2. FMEA worksheet with action-priority criteria
  3. Quality risk register and escalation matrix
  4. Bow-tie analysis and critical-control verification checklist
  5. Risk-based control plan template
  6. Completed quality risk management dossier

Who should attend

  • Quality Managers — accountable for quality systems, risk registers and control effectiveness
  • Quality Assurance Specialists — required to assess deviations, changes and CAPA actions
  • Operations Managers — responsible for reducing process failures, rework and service errors
  • Process Improvement Professionals — applying risk methods to process redesign and standardisation
  • Internal Auditors — assessing whether quality controls address material process risks
  • Supplier Quality Managers — evaluating supplier risks, controls and corrective action commitments

Skills and tools covered

Quality risk assessmentFMEA facilitationControl plan designRisk-based decision makingCAPA risk analysisQuality risk reporting

Tools and standards

ISO 31000, ISO 9001, ICH Q9(R1), Failure Modes and Effects Analysis

How the course runs

Training methodology

The course uses short instructor briefings to introduce each method, followed by facilitated case work, group analysis, simulations and individual application planning. Participants assess realistic quality events such as recurring defects, supplier failures, process changes, complaint trends and control breakdowns. They build working documents throughout the course: process maps, risk registers, FMEA worksheets, bow-tie diagrams, control plans and CAPA evaluations. Instructor feedback focuses on evidence quality, scoring discipline, control selection, ownership and decision records. The final capstone integrates these materials into a workplace-ready quality risk management dossier.

Requirements and prerequisites

Participants should have experience of a business, service, manufacturing, project or operational process where quality requirements apply. Familiarity with process maps, standard operating procedures, audits, nonconformities, customer complaints or corrective actions is useful. Participants should be comfortable reading basic performance data and discussing process controls with operational colleagues. No prior qualification in risk management, statistics, ISO auditing or quality engineering is required. The course explains scoring methods, FMEA calculations and control-plan design from first principles before applying them to increasingly complex cases.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should understand the basic process they work in and have some exposure to quality requirements, procedures, incidents or improvement work. Prior study of ISO standards, FMEA, statistics or formal risk management is not required.

Bring a real process, recurring quality issue, supplier concern, change request or control weakness that you can use as an application example. Participants may also bring non-confidential procedures, process maps, audit findings or quality metrics.

It is designed for quality, assurance, operations, compliance, audit, supplier management and process-improvement professionals. It also suits project managers whose work changes controlled processes or quality-critical services.

General risk courses often focus on enterprise, financial or project risks, while this course concentrates on quality failures, process controls, deviations, CAPA and customer impact. ISO 9001 training explains requirements; this course develops the working analyses and records used to meet them.

The methods apply directly to process changes, recurring defects, complaint investigations, supplier reviews, audit planning and CAPA evaluation. Participants leave with templates and a completed dossier that can be adapted to their own quality system.

The first part establishes process mapping, risk identification, scoring, FMEA and control design, with participants building working materials from the outset. The later part applies these methods to change control, suppliers, audits, quality data, CAPA, management review and the final dossier presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.