Description

This Standard provides principles and generic guidelines on risk management

This Standard can be used by any public, private or community enterprise, association, group or individual, and is not specific to any industry or sector. It can be applied throughout the life of an organization, and to a wide range of activities, including strategies and decisions, operations, processes, functions, projects, products, services and assets. Although the Standard provides generic guidelines, it is not intended to promote uniformity of risk management across organizations.

The design and implementation of risk management plans and frameworks will need to take into account the varying needs of a specific organization, its particular objectives, context, structure, operations, processes, functions, projects, products, services, or assets and specific practices employed. Organizations with existing risk management processes can use this Standard to critically review, align and improve their existing practices.

Identical to and reproduced from ISO 31000:2009.