ISO 31000
What is ISO 31000?
The international standard for risk management that provides principles, a framework, and a process for managing risk. ISO 31000 applies to any type of risk, regardless of its nature, and is applicable to any organisation.
Terms that appear alongside iso 31000
Each of these is named in at least one of the same controls as iso 31000. The number is how many controls name both.
- risk assessment 15 shared controls
- governance 14 shared controls
- risk treatment 11 shared controls
- risk identification 10 shared controls
- audit 9 shared controls
- compliance 8 shared controls
- risk monitoring 7 shared controls
- due diligence 6 shared controls
Frameworks that govern iso 31000
What the standards actually require on iso 31000
Requirements naming iso 31000 across 6 standards, quoted from the control text.
On top of 6.3 of ISO 31000:2018, the organization should look specifically at the internal and external context of its legal risk (5.2.2, 5.2.3) and set legal risk criteria (5.2.4).
iso-31022-2020::5.2.1 · General: context and criteria beyond ISO 31000 →The Supplier and its External Providers show objective evidence that risks, External Provider risks included, are considered in planning through identification, analysis, control and mitigation at least;
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.2.1 · 5.2.1 Manage risk from contract review onward to ISO 31000 and share the risk plan →ISO 31000:2018, 5.3 applies with nothing AI-specific added: integration begins with understanding how the organization is structured and what surrounds it, risk is handled throughout that structure, each person has a part in it, and governance and leadership d...
iso-iec-23894-2023::5.3 · Integration →ISO 31000:2018 5.7.1 is taken over without additions: the framework is kept under watch and changed as circumstances inside and outside the organization change, so that it keeps and increases its value.
iso-iec-27557-2022-organisational-privacy-risk-management::5.7.1 · 5.7.1 Adapting →Implement the framework refined in 8.4: provide the environment and assign roles; set audit criteria (company standards, external standards, legal requirements); implement the mechanism for information from both parties' performance and quality teams;
iso-37500-2014::8.7 · Deploy the quality, risk, audit and compliance frameworks →The organization has to identify the internal and external issues that bear on its purpose and that influence whether its ISMS can deliver the outcomes intended for it.
iso-27001-2022::clause-4.1 · Understanding the organization and its context →Questions people ask about iso 31000
What is ISO 31000?
Why is ISO 31000 important for compliance?
Which compliance frameworks address ISO 31000?
Where can I learn more about ISO 31000?
See how ISO 31000 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.