ISO 31000 is the international standard providing principles, a framework and a process for risk management applicable to any organization.
ISO 31000:2018 establishes guidelines for managing risks systematically, transparently and reliably. It is not certifiable but a reference framework complementing all ISO management system standards. It defines risk as the effect of uncertainty on objectives.
No. ISO 31000 is a guidelines standard, not a requirements standard. There is no accredited ISO 31000 certification. It is used as a reference to improve risk management.
ISO 27001 requires an information security risk assessment process. ISO 31000 provides the methodological framework many organizations adopt to meet that requirement.
Need an assessment in this area?