According to the ISO 9000:2015 quality management principles document1, risk-based approach is not one of the seven quality management principles that ISO 9000, ISO 9001 and other related quality management standards are based on. The seven quality management principles are:

Customer focus

Leadership

Engagement of people

Process approach

Improvement

Evidence-based decision making

Relationship management

Therefore, risk-based approach is not a quality management principle under ISO 9001:2015.