1. Identify the principles of risk management

ISO 31000 places risk management under the aegis and purpose of creating/preserving value for the organization and its stakeholders.

The aim is to create value in the financial sense of the term, but also in terms of corporate performance. Risk management thus enables the achievement of objectives, while improving the health and safety of goods and people, compliance with regulatory and contractual requirements, environmental protection, and the conformity of products and services.

The standard identifies eight guiding principles for implementing a risk management approach within the organization, enabling it to manage the effects of uncertainty on its objectives.