A few points for risk management: 1) ISO 14971, this standard is accepted throughout the world
2)FMEA is not risk management
3) establish a risk management policy and procedure
4)keep severity, probability, and risk levels simple
45use risk management as a tool during design and development as well as AFTER.
There are a lot of articles online that discusses risk management and common mistakes to avoid.