Risk Management Standards - ISO 31000 Flashcards
1
Q
How many ISO 31000 Risk Management Principles are there?
A
8
2
Q
What are the ISO 31000 Risk Management Principles?
A
- Customised + Proportionate
- Involvement of stakeholders
- Structured and comprehensive
- Risk as an integral part of all organisational activities
- Anticipates, detects, acknowledges and responds to change.
- Acknowledge limitations of information
- Human and cultural factors have influence.
- Continuous improvement through learning and experience.
3
Q
What are the key components of the ISO 31000 Risk Management Standard?
A
- Define scope, context and criteria
- Risk Assessment - risk identification, risk analysis, risk evaluation.
Risk Assessment inputs - communication & consultation and monitoring and review.
- Risk Treatment
Risk treatment inputs - recording and reporting
4
Q
Describe the ISO 31000 Risk Management Framework.
A
Leadership and Commitment are at the centre.
Design, Implementation, Evaluation, Improvement, Integration
5
Q
What is the risk context?
A
RASP - Risk Architecture, Strategy and Protocols