Ask most quality managers what clause 6.1 of ISO 9001:2015 is about and they will say risk. That answer is only half correct, and the missing half is usually the part that never makes it into the risk register at all. The clause is titled "Actions to address risks and opportunities," and in practice the opportunities side gets a token line item, if it gets one at all, while the risk side fills pages. Auditors have started noticing the imbalance, and a well-run manufacturing qms is usually the difference between a register that only lists threats and one that captures both sides honestly.
The reason opportunities get skipped is not laziness. Risk has a natural home in existing habits: nonconformance reports, customer complaints, and scrap logs all generate risk-shaped inputs automatically. Opportunities have no equivalent feeder system. Nobody files a report when a process turns out to be more capable than required, or when a supplier's new capability could eliminate a step downstream. That information exists, but it lives in someone's head rather than in a document, so it never reaches the review where clause 6.1 decisions get made.
What an opportunity actually looks like on a shop floor
Opportunities in a manufacturing context are rarely dramatic. They look like a machine that has been running well under its tolerance band for six months, suggesting a chance to widen a customer-facing spec conversation or reduce an inspection frequency. They look like a supplier who picked up a new certification that could let a shop skip a redundant incoming test. They look like a training investment in one operator that, if extended, would remove a single point of failure from a critical operation. None of these show up as incidents, so none of them show up in a system built only to catch problems.
Auditors evaluating clause 6.1 conformance are increasingly asking a pointed question during Stage 2 and surveillance visits: show me an opportunity you evaluated and what you decided to do about it. A register with twenty risks and zero opportunities does not fail the letter of the standard, since 6.1 does not mandate a fixed number of either, but it invites a finding for objective evidence, because the standard clearly expects both categories to receive genuine consideration, not just risk with an opportunities heading pasted on top for appearances.
Why the imbalance costs more than an audit finding
The business cost is larger than the paperwork cost. A quality system that only hunts for what could go wrong trains everyone in it to think defensively. Over a few years that shapes culture: engineers stop proposing process improvements through the QMS because the QMS has no mechanism built for that kind of input, so good ideas either die quietly or get handled informally outside any documented system, where they leave no trace and cannot be evaluated consistently against other competing priorities.
There is also a subtler cost in management review. Clause 9.3 requires review of the effectiveness of actions taken to address risks and opportunities from 6.1. When the opportunities column is empty, that review agenda item becomes a formality rather than a real conversation, and leadership loses a structured channel for hearing about capability gains that could inform capacity planning, pricing, or bid decisions. The register was supposed to feed strategy in both directions; instead it only feeds defense.
Building a feeder system for opportunities
Fixing this does not require new software or a new procedure, just a deliberate decision to treat opportunity capture as a first-class input alongside nonconformance and complaint data. Some shops add a standing agenda item to weekly production meetings: has anything happened this week that suggests we could do more, faster, or with less inspection than we currently require? Others tie it to internal audits, asking auditors to note not just what is broken but what is performing better than expected and why. The mechanism matters less than the consistency of applying it.
The evaluation step matters as much as the capture step. An opportunity that gets logged but never assessed against risk, cost, and benefit is not meaningfully different from one that was never logged. Clause 6.1 expects a plan: how the opportunity will be integrated into the QMS, and how its effectiveness will be evaluated afterward. That is the same rigor applied to risk, just aimed in the other direction, and it is what separates a register that satisfies an auditor from one that actually changes how a shop operates.
Making it visible at review
The last piece is presentation. A risk register that lists risks and opportunities in one undifferentiated column tends to bury the latter, because reviewers scan for red flags first and stop reading once those are addressed. Separating the two, even informally, forces a moment where someone has to look at the opportunities list and ask what happened to it. That small structural choice does more to keep clause 6.1 balanced than any policy statement about valuing both sides equally, because it makes the imbalance visible the moment it starts to reappear.
None of this requires treating opportunity management as a parallel bureaucracy. It requires treating it as seriously as risk management already is, with the same habit of capture, evaluation, and follow-up. Shops that get this right tend to find that the exercise pays for itself in ways that never show up as an audit finding at all, simply because they stopped leaving good information on the table.