Tools such as FMEA, HACCP, FTA, and risk matrices are commonly used to systematically identify and assess risks in a QMS.