BS ISO 31000:2009

BS ISO 31000:2009 Risk management. Principles and guidelines

Become a member and save 50%

What is BS ISO 31000:2009?

BS ISO 31000 is the international standard for risk management. By providing comprehensive principles and guidelines, this standard helps organisations with their risk analysis and risk assessments. Whether you work in a public, private or community enterprise, you can benefit from BS ISO 31000, because it applies to most business activities including planning, management operations and communication processes. Whilst all organisations manage risk to some extent, this international standard’s best-practice recommendations were developed to improve management techniques and ensure safety and security in the workplace at all times.

How does it work?

By implementing the principles and guidelines of BS ISO 31000 in your organisation, you’ll be able to improve operational efficiency, governance and stakeholder confidence, while minimising losses. This international standard also helps you to boost health and safety performance, establish a strong foundation for decision making and encourage proactive management in all areas.

Who should buy it?

• Risk managers
• Internal auditors
• Business continuity managers
• Risk management consultants
• Quality control managers

Why BSI?

We are global, we’re independent and we’re a trusted service provider to 80,000 businesses. We operate in 147 countries and are the number one certification body in the UK and US. We created 85% of our portfolio because we know standards and we know your business. We’re leaders and we can make you one too.

Contents of BS ISO 31000:
Foreword
Introduction
1 Scope
2 Terms and definitions
3 Principles
4 Framework
4.1 General
4.2 Mandate and commitment
4.3 Design of framework for managing risk
4.3.1 Understanding of the organization and its context
4.3.2 Establishing risk management policy
4.3.3 Accountability
4.3.4 Integration into organizational processes
4.3.5 Resources
4.3.6 Establishing internal communication and reporting mechanisms
4.3.7 Establishing external communication and reporting mechanisms
4.4 Implementing risk management
4.4.1 Implementing the framework for managing risk
4.4.2 Implementing the risk management process
4.5 Monitoring and review of the framework
4.6 Continual improvement of the framework
5 Process
5.1 General
5.2 Communication and consultation
5.3 Establishing the context
5.3.1 General
5.3.2 Establishing the external context
5.3.3 Establishing the internal context
5.3.4 Establishing the context of the risk management process
5.3.5 Defining risk criteria
5.4 Risk assessment
5.4.1 General
5.4.2 Risk identification
5.4.3 Risk analysis
5.4.4 Risk evaluation
5.5 Risk treatment
5.5.1 General
5.5.2 Selection of risk treatment options
5.5.3 Preparing and implementing risk treatment plans
5.6 Monitoring and review
5.7 Recording the risk management process
Annex A (informative) Attributes of enhanced risk management
Bibliography

Also available to buy:

BS 31100:2011
Risk management. Code of practice and guidance for the implementation of BS ISO 31000

BS EN 31010:2010
Risk management. Risk assessment techniques

ISO GUIDE 73:2009 Ed 1
Risk management. Vocabulary

Visit BSI’s Risk website for other useful information