ISO 31000
What is ISO 31000?
The international standard for risk management that provides principles, a framework, and a process for managing risk. ISO 31000 applies to any type of risk, regardless of its nature, and is applicable to any organisation.
Terms that appear alongside iso 31000
Each of these is named in at least one of the same controls as iso 31000. The number is how many controls name both.
- risk assessment 15 shared controls
- governance 14 shared controls
- risk treatment 11 shared controls
- risk identification 10 shared controls
- audit 9 shared controls
- compliance 8 shared controls
- risk monitoring 7 shared controls
- due diligence 6 shared controls
Frameworks that govern iso 31000
What the standards actually require on iso 31000
Requirements naming iso 31000 across 6 standards, quoted from the control text.
Capability + improvement + integration + coordination ensure that the IRM risk management framework matures and aligns with the wider ecosystem.
IRM-Capability-Training-CMIRM-Improvement-Integration-Coord-ISO31000-COSO-FRC-Walker-Basel-APRA · IRM Capability + Risk Training + CMIRM/Diploma Qualifications + Continual Improvement + Integration with Strategy + Coordination ISO 31000 + COSO ERM + UK FRC + Walker Review + Basel + APRA + GRC Software →Requirement defined in ISO 31000:2018, clause 5.4 (Design). See licensed source for normative text. Implementation focus is to demonstrate conformity with the obligations of this clause through the artefacts listed in evidence_requirements.
iso-31000-2018::5.4 · Design →Terms and definitions specific to AI risk management building on ISO 31000, ISO/IEC 22989 (AI concepts), and ISO/IEC 23053 (AI framework).
ISO23894-3 · AI-Specific Terminology →16 CFR 314.4(b) risk assessment. REQUIREMENT: financial institution must conduct a WRITTEN RISK ASSESSMENT to identify reasonably foreseeable internal + external risks to the security + confidentiality + integrity of customer information that could result in u...
FTC-Safeguards-Risk-Assessment · Written Risk Assessment (16 CFR 314.4(b)) →Sapin II Pillar 3 - Corruption Risk Mapping (Cartographie des risques de corruption). REQUIREMENTS: a documented + risk-based + regularly-updated MAPPING of corruption risks across the organization.
Sapin2-Pillar3-Risk-Mapping · Pillar 3 - Corruption Risk Mapping (Cartographie des Risques) →GAMP 5 RISK-BASED + LIFE-CYCLE + LEVERAGE-SUPPLIER + SCALABLE + CRITICAL-THINKING approach. KEY CONCEPT 1 RISK-BASED: validation effort proportional to risk to product quality + patient safety + data integrity + regulatory impact;
GAMP5-Risk-CriticalThinking · Risk-Based Approach, Critical Thinking and 5 Key Concepts →Questions people ask about iso 31000
What is ISO 31000?
Why is ISO 31000 important for compliance?
Which compliance frameworks address ISO 31000?
Where can I learn more about ISO 31000?
See how ISO 31000 applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.