ISO/IEC 31000:2009: risk management – Principles and guidelines

This international standard provides principles and generic guidelines on risk management. It is intended to be used by any public, private or community enterprise, association, group or individual and is not specific to any industry or sector. It is aimed to be applied: (i) throughout the life of an organization, and to a wide range of activities, including strategies and decisions, operations, processes, functions, projects, products, services and assets; (ii) to any type of risk, whatever its nature, whether having positive or negative consequences.