Risk Management

One risk model.
Every module.

Register, FMEA, JHA — three views, one shared underlying risk record. A risk raised in an audit is the same record an MOC reads, an NCR escalates, and the Risk Register reports on. No duplicates, no reconciliation.

app.qformance.io / risk-register

Risk Register

· 142 active · 7 above toleranceFILTER · OPERATIONAL
IDRiskSourceSLScore
R-118Lacquer humidity exposure during storageNCR-01484312
R-117Single supplier for ECU firmwareMOC-00915210
R-115Unguarded press conveyor pinch pointJHA · Press 44416
R-112PFMEA · paint booth purge undersizedPFMEA · Paint339
R-109Annual recertification missed (3 op.)Training326
Severity × Likelihood
L1
L2
L3
L4
L5
S5
5
1
15
20
25
S4
4
8
1
1
20
S3
3
1
1
12
15
S2
2
4
6
8
10
S1
1
2
3
4
5
LowMediumHighCritical

Three views, one record.

The same risk shows up where it matters: in the Register for governance, in FMEAs for design and process work, in JHAs for safety walks. Edit it once.

Risk Register

Strategic and operational risks, severity × likelihood scoring, treatments, owners, review dates. Above-tolerance risks surface to the unified Actions queue automatically.

FMEA

Design and Process FMEAs in the same workspace. RPN scoring, mitigation actions, automatic re-evaluation when controls change. Shared cause library across products.

JHA / Job Safety

Step-by-step task hazards with control hierarchies. PPE, engineering, administrative — every control linked to the document or training that delivers it.

Shared model

The same risk, wherever it surfaces.

A press-pinch hazard logged in a JHA, an above-tolerance score in the Register, and an RPN row in a Process FMEA can all reference the same underlying risk record. Update the score once, every view reflects it. No more spreadsheets diverging from each other.

Risk R-115 · Press 4 conveyor pinch point
S4 × L4 = 16Owner: M. PatelLast reviewed 12 Apr
Surfaces in
Risk Register
Operational · Safety category
PFMEA · Press cell
Step 4 — Loading · RPN 96
JHA · Press 4 setup
Hazard 7 — Conveyor
MOC-0102 · Guard upgrade
Open · target residual S4×L1
Live re-evaluation

Mitigations recalculate automatically.

When a corrective action closes — or an MOC ships, or a training campaign completes — every risk that referenced that control is re-evaluated. The Register and FMEAs reflect the new residual risk without anyone updating a spreadsheet.

Live re-evaluation · MOC-0102 just shipped
Before
S4 × L4 = 16
Critical · above tolerance
After
S4 × L1 = 4
Low · within tolerance
Updated PFMEA Press cell row, Register R-115, JHA Press 4 setup. Notified: M. Patel (owner), Quality lead.

FMEA, the way engineers think.

Process or Design — same workspace. Severity, Occurrence, Detection scored consistently. Mitigations link straight to the document, training, or MOC that delivers them.

PFMEA · Dashboard panel finishing line
StepFailure modeSODRPNCurrent controlTrend
1. Material prepWrong batch loaded42324Barcode scan WI-MAT-03↓ improving
2. Press setupConveyor pinch hazard44696JHA Press 4 + PPE↓ improving
3. Lacquer cureHumidity exceeds spec43896RH alarm + retest↑ rising
4. Final QCClouded finish missed33436Visual + gloss meter— flat

Reusable cause library

Build a cause library once — supplier defects, operator error modes, environmental conditions — and reuse them across every FMEA. Consistency without re-typing.

RPN thresholds & gates

Set RPN escalation thresholds per product family. Anything above triggers an action automatically — high RPN can't sit in a workbook unaddressed.

Linked to the controls

Each mitigation row references the document section, training course, or work instruction that actually delivers the control. Audits get a verifiable chain, not just narrative.

Job Hazard Analysis

Walk the job. Log the hazard. Close the loop.

JHAs structured the way safety leads actually work — step by step, with control hierarchies (elimination → substitution → engineering → administrative → PPE). Each control points back to the SOP, training course, or PPE issue record that proves it's in place.

JHA · Press 4 setup · 7 hazards · 4 above tolerance
Lockout/tagoutStored energy releaseEngineeringEnergy isolation procedure SOP-MX-04S4×L1
Tool changeHand crush in die setEngineeringTwo-hand control + die safety blocksS3×L2
Conveyor resetPinch point at idlerPPECut-resistant gloves + WI-MX-12S4×L4
Sample inspectionSharp edge lacerationPPECut gloves issued · refresher Q2S2×L3

The system that pulls every other module along.

Risk doesn't sit on a quarterly review cycle. Cross-module triggers route every change through the right gate, automatically.

MOC routing by risk score

An MOC that touches a risk above your threshold is automatically routed for safety/quality/operations approval before it can ship. No more changes slipping through review.

NCR escalation by severity

High-severity NCRs raise (or update) a Register risk on submission. The risk lifts when the corrective verifies — not when someone remembers to clean up the spreadsheet.

Audits target the highest risks

Audit Planner reads the Register and biases scope toward areas with active above-tolerance risks. Your audit program follows the data, not last year's calendar.

Training mapped to controls

When a control on a high-RPN row depends on a training course, the Training module flags retrain dates that drift past tolerance — before they become an audit finding.

One risk model, every module.

Stop reconciling spreadsheets that disagree. Start running risk where the work happens.