Every organisation faces uncertainty and how this is addressed can influence and even determine success. ISO 9001 is based on the principle of risk-based thinking, which provides a structured and measured approach to the issues that are most likely to impact an organisation.