Risk ManagementInternational
ISO 31000
What is ISO 31000?
Risk management guidelines and principles. It comprises 43 controls organised across 7 domains, published by ISO/IEC, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →The 7 domains ISO 31000 groups its controls into
ISO 31000: Risk Assessment
Process
Framework
Principles
ISO 31000: Risk Monitoring & Review
Where ISO 31000 overlaps with the standards you already hold
More ISO 31000 comparisons
Analysis of ISO 31000
How to Execute Operational Risk Management Integration with ISO 31000 Risk Management Principles for Banking Digital Transformation InitiativesBanks implementing digital transformation initiatives face complex operational risks requiring systematic management approaches that satisfy regulatory expectations. ISO 31000 provides the foundational risk management principles necessary for effective operational risk oversight during digital initiatives, ensuring both regulatory compliance and business objective achievement.
How to Execute ISO 31000:2018 Risk Management Integration with COSO 2017 Enterprise Risk Management for Board-Level Risk GovernanceOrganizations implementing enterprise risk management often struggle to reconcile ISO 31000:2018's process-focused approach with COSO 2017's governance-oriented framework. Successful integration requires mapping ISO 31000's risk management process to COSO's five components while establishing clear board oversight mechanisms that satisfy both frameworks' governance requirements.
How to Execute ISO 31000:2018 Risk Assessment Integration with Operational Risk Modeling for Financial Services Stress Testing ComplianceFinancial institutions must integrate enterprise risk management frameworks with quantitative modeling to meet regulatory stress testing requirements. This guide demonstrates how ISO 31000:2018 risk assessment principles enhance operational risk modeling accuracy for Basel III and CCAR compliance.
How to Implement COSO ERM Framework Integration with ISO 31000:2018 Risk Management for Enterprise-Wide Risk Governance AutomationOrganizations seeking comprehensive enterprise risk management benefit from integrating COSO ERM's governance-focused approach with ISO 31000's process methodology. This integration creates automated risk governance that spans strategic, operational, and compliance risk domains.
Training that covers ISO 31000
Where to get trained on ISO 31000
4 courses in the catalogue cover ISO 31000 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
What ISO 31000 means in your sector
What ISO 31000 means for your job
Questions people ask about ISO 31000
What is ISO 31000?
Risk management guidelines and principles.
How many controls does ISO 31000 have?
ISO 31000 contains 43 controls organized across 7 domains.
Where does ISO 31000 apply?
ISO 31000 is applicable in International. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does ISO 31000 map to?
ISO 31000 has control-to-control mappings with 183 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with ISO 31000 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query ISO 31000 programmatically
ISO 31000, its 43 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 31000 API reference and MCP config →How ready are you for ISO 31000?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .