Implementation of risk-based thinking in ISO 9001 - Solution approaches