how does the AS/NZ ISO 31000:2009 Risk management - principles and guidelines standard assist organisations to reduce risk?
Scope[edit]
ISO 31000:2009 provides generic guidelines for the design, implementation and maintenance of risk management processes throughout an organization. This approach to formalizing risk management practices will facilitate broader adoption by companies who require an enterprise risk management standard that accommodates multiple ‘silo-centric’ management systems.[4]
The scope of this approach to risk management is to enable all strategic, management and operational tasks of an organization throughout projects, functions, and processes to be aligned to a common set of risk management objectives.
Accordingly, ISO 31000:2009 is intended for a broad stakeholder group including:
executive level stakeholders
appointment holders in the enterprise risk management group
risk analysts and management officers
line managers and project managers
compliance and internal auditors
independent practitioners.