There is no risk management established in place. But the facility established quality control plan and QC/ QA standard instead.
There is no risk assessment record established.
There is no process flow with product or process risk assessment established.