This master thesis focuses on the revision of the standard for quality management systems ISO 9001, which will be released in 2015. The theoretical part discussed the changes of the ISO 9001:2015, in particular the consideration of risks. Furthermore, different risk management processes as well as methods and tools for risk assessment were discussed in detail. In the practical part of this master thesis a comprehensive risk management process according to ISO 31000 was developed for the company ETS. This process was documented in detail in a process description. The risk management process was integrated as management process in the existing management system of the organization. This new process allows for evaluating changes in the risk landscape of the company, specifically in areas with customer relevance. Appropriate provisions shall be set in order to handle the risks. In addition, the introduced risk management process meets the future requirement of the ISO 9001:2015 regarding the introduction of a risk-based approach in the company. The results of the process and the status quo of the realization of the action planning are input data for the annual management review. After the development and integration the risk management process was realized in one department of the company. Based on the identified risks appropriate provisions were set and the implementation of these provisions was initiated in order to handle the risks.