ISO 31000 (2018)

ISO 31000 provides principles, a framework and a process for managing risk of any kind faced by an organisation. Rather than prescribing detailed requirements, it offers guidance that can be adapted to any organisation and integrated into governance, strategy, planning and decision making. The current edition presents risk management as an activity that creates and protects value and that should be embedded across all organisational activities.

Because ISO 31000 is a guidance document rather than a requirements standard, it is not intended for certification. Organisations use it to design or benchmark their own risk management arrangements, often alongside the supporting techniques set out in IEC 31010.