ISO - ISO 31000

ISO 31000 is an international standard that provides guidelines on managing any type of risk in any business activity. The standard provides guidelines on principles, risk management framework, and application of the risk management process.

ISO 31000 is applicable to organizations of all types and sizes who seek to integrate risk management into business functions. It covers the risk management principles which are the foundation for managing risk, and guides organizations in developing a risk management framework by:

• Integrating risk management into organizational structures
• Designing a framework for managing risk that fits the organization’s context
• Implementing the risk management framework
• Evaluating the effectiveness and continually improve the suitability and adequacy of the risk management framework
• Demonstrating leadership and commitment (top management)