Master risk and opportunity across the QMS — context, planning, operations, audits, and certification