ISO/IEC 31010 (2009)

ISO/IEC 31010 is a supporting standard for ISO 31000 that focuses on risk assessment techniques. It explains how to select and apply a wide range of methods for identifying, analysing and evaluating risk, from simple checklists and brainstorming to structured approaches such as failure mode and effects analysis, bow-tie analysis, fault and event tree analysis and scenario methods. For each technique it describes the purpose, strengths and limitations so that users can choose methods suited to their situation.

The standard is guidance rather than a set of requirements, so it is not intended for certification. It is used together with ISO 31000 to put the risk assessment part of the risk management process into practice.