Working through remedial action and corrective actions are relatively easy, defining problems before they exist and then fixing them (Preventive Action) is tough. Sometimes opportunites come from employee comments, concerns and complaints. A big opportunity is by looking at implementation of new equipment or new procedures before they get implemented using risk tools such as the Failure Mode Effects Analysis (FMEA). Another tool is using a RISK - Occurrence grid where on looks at the likelihood of the bad thing occurring (Remote, Rare, Common, Frequent) and its effects (Trivial, Minor, Major, Critical). By creating measurement values to each pairing (a remote occurrence but with critical impact or a common occurrence with minor impact) one can define risk and set priorities.
These are decisions that come up all the time, and having a working strategy is REALLY useful.
The article in QP is pretty good and easy to follow.
But for a little bit of money you can order a copy of 22367.
Either way you can't loose.