6. Glossary

Risk assessment

"The entire process of risk identification, risk analysis and risk assessment" (source: paragraph 2.14 – ISO 31000:2018 standard).

Reasonable insurance

"Concept according to which the risk management system, however clearly defined and applied, cannot guarantee the systematic achievement of objectives" (source: COSO II).

Audit

"Methodical, independent and documented process for obtaining objective evidence and evaluating it objectively to determine the extent to which audit criteria are met" (source: ISO 19011:2018 standard, paragraph 3.1).

"A form of observation that tends to verify that an organization has actually done what it says it has done, that it makes the best use of its resources, that it retains its autonomy and...