ISO 31000 risk management consulting and training

Introduction to ISO 31000

Long-term success requires organisations to improve their products, services and processes while addressing uncertainty. ISO developed the ISO 31000 family to support a structured approach to risk management.

Risk management can support operational continuity, resilience, reputation and environmental and safety outcomes. ISO 31000 provides adaptable guidance for organisations seeking a consistent approach to risk.

(Source: https://www.iso.org/iso-31000-risk-management.html)

• ISO 31000 sets out principles, a framework and a process for managing risk, helping organisations take a proactive approach to uncertainty affecting their objectives.
• The framework supports integration of risk management into organisational processes, strategy and decision-making, with continual review and improvement.
• The process includes communication and consultation; defining scope, context and criteria; risk identification, analysis and evaluation; risk treatment; monitoring and review; and recording and reporting.
• The guidance helps organisations strengthen decision-making and overall management.
• A structured approach to identifying and evaluating risk supports important decisions in complex situations.
• ISO 31000:2018 is not intended for certification, but its guidance can inform internal or external audits and provide a recognised benchmark for reviewing risk management and governance practices.

ISO 31000 and related standards

Key references include:

ISO 31000:2018 RISK MANAGEMENT  Guidelines

IEC 31010:2019 RISK MANAGEMENT  Risk assessment techniques

ISO 31073:2022 - Risk management vocabulary

ISO Guide 73:2009 is an older vocabulary reference; consult ISO 31073:2022 for the current international vocabulary. The Vietnamese TCVN links below retain their stated publication years and do not imply that all corresponding international editions remain current.

Vietnamese reference documents

TCVN ISO 31000:2018 reference document

TCVN ISO 31010:2013 reference document

TCVN 9788:2013 (ISO Guide 73) reference document

Structure of ISO 31000:2018

1–3. Scope, references and terminology

• Scope
• Normative references
• Terms and definitions: eight risk-management terms and definitions.

4. Principles

integrated; structured and comprehensive; customised; inclusive; dynamic; best available information; human and cultural factors; and continual improvement.

5. Framework

general considerations; leadership and commitment; integration; design; implementation; evaluation; and improvement.

6. Process

general considerations; communication and consultation; scope, context and criteria; risk assessment; risk treatment; monitoring and review; and recording and reporting.

ITVC risk management consulting and training

ITVC Global provides the following services to support risk management based on ISO 31000:

• Awareness training and practical application of ISO 31000 guidance.
• Consulting on the development and implementation of a risk management framework and processes.
• Internal review and audit support using ISO 31000 as a reference.

Explore ISO consulting services