ISO 31000:2018

Risk management — Guidelines

ISO 31000:2018 provides guidelines on managing risk faced by organizations. The application of these guidelines can be customized to any organization and its context. ISO 31000:2018 provides a common approach to managing any type of risk and is not industry or sector specific. ISO 31000:2018 can be used throughout the life of the organization and can be applied to any activity, including decision-making at all levels.

Management du risque — Lignes directrices

ISO 31000:2018 fournit des lignes directrices concernant le management du risque auquel sont confrontés les organismes. L'application de ces lignes directrices peut être adaptée à tout organisme et à son contexte. ISO 31000:2018 fournit une approche générique permettant de gérer toute forme de risque et n'est pas spécifique à une industrie ou un secteur. ISO 31000:2018 peut être utilisé tout au long de la vie de l'organisme et peut être appliqué à toute activité, y compris la prise de décisions à tous les niveaux.

Obvladovanje tveganja - Smernice

Ta dokument zagotavlja smernice o obvladovanju tveganja, s katerim se soočajo organizacije. Uporabo teh smernic je mogoče prilagoditi vsaki organizaciji in njenemu kontekstu.
Ta dokument zagotavlja splošni pristop k obvladovanju vseh vrst tveganja in ni specifičen za neko industrijo ali sektor.
Ta dokument se lahko uporablja v celotnem življenju organizacije in za katerokoli aktivnost, vključno s sprejemanjem odločitev na vseh ravneh.

General Information

• Status: Published
• Publication Date: 13-Feb-2018
• ICS: 03.100.01 - Company organization and management in general
• Technical Committee: ISO/TC 262 - Risk management
• Drafting Committee: ISO/TC 262 - Risk management
• Current Stage: 9093 - International Standard confirmed
• Completion Date: 05-Oct-2023
• Ref Project: SIST ISO 31000:2018 - Risk management - Guidelines

Relations

• Revises: ISO 31000:2009 - Risk management — Principles and guidelines
• Effective Date: 28-Dec-2013

Standards Content (Sample)

SLOVENSKI STANDARD
SIST ISO 31000:2018
01-maj-2018
Obvladovanje tveganja - Smernice
Risk management - Guidelines
Management du risque -- Lignes directrices
Ta slovenski standard je istoveten z: ISO 31000:2018
ICS:
03.100.01 Organizacija in vodenje Company organization and
podjetja na splošno management in general
SIST ISO 31000:2018 en,fr
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST ISO 31000:2018

---------------------- Page: 2 ----------------------

SIST ISO 31000:2018
INTERNATIONAL ISO
STANDARD 31000
Second edition
2018-02
Risk management — Guidelines
Management du risque — Lignes directrices
Reference number
ISO 31000:2018(E)
©
ISO 2018

---------------------- Page: 3 ----------------------

SIST ISO 31000:2018
ISO 31000:2018(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved

---------------------- Page: 4 ----------------------

SIST ISO 31000:2018
ISO 31000:2018(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Principles . 2
5 Framework . 4
5.1 General . 4
5.2 Leadership and commitment . 5
5.3 Integration . 5
5.4 Design . 6
5.4.1 Understanding the organization and its context . 6
5.4.2 Articulating risk management commitment . 6
5.4.3 Assigning organizational roles, authorities, responsibilities and accountabilities 7
5.4.4 Allocating resources. 7
5.4.5 Establishing communication and consultation . 7
5.5 Implementation .
...

ةيلودلا ةفصاوملا
ISO


 00333
يناثلا رادصلإا
2302/2
ةٌمسرلا ةمجرتلا

Official translation
Traductionofficielle

ةيهيجوتلا ةلدلأا - رطاخملا ةرادإ
Risk management — Guidelines
Management du risque — Lignes
directrices
بهزًجرر ذًر خًُضر خُثرػ خًجرزك ارطَىض ، فُُج ٍف ISO خَسكرًنا خَبيلأا ٍف ذؼجغ
262ISO TC رغبخًنا حرادلإ خُُفنا خُجهنا ٍف خُثرؼنا خًجرزنا مًػ خػىًجي مجل ٍي
1/ATTF

ًؼجرًنا ىلرنا
ISO 3100002013 (A)
خًُضرنا خًجرزنا
©ISO 2013
)ع( 2013031000 وسَلأا

---------------------- Page: 1 ----------------------
:تفصإًنا ِذْ ثذًتعا يتنا تيبزعنا شييقتنا ثآج
ٌدرلأا خَُدرلأا صَُبمًناو دبفصاىًنا خطضؤي
داربيلأا صَُبمًناو دبفصاىًهن داربيلأا خئُھ
رئاسجنا صُُمزهن ٌرئاسجنا ذهؼًنا
خَدىؼطنا صَُبمًناو دبفصاىًهن خَدىؼطنا خئُهنا
قارؼنا خُػىُنا حرطُطناو صُُمزهن ٌسكرًنا زبهجنا
ذَىكنا خػبُصهن خيبؼنا خئُهنا
ٌادىطنا صَُبمًناو دبفصاىًهن خَُادىطنا خئُهنا
ًٍُنا حدىجنا ػجظو صَُبمًناو دبفصاىًهن خًُُُنا خئُهنا
صَىر خُػبُصنا خُكهًناو دبفصاىًهن ًُغىنا ذهؼًنا
بَرىض خَرىطنا خُثرؼنا صَُبمًناو دبفصاىًنا خئُھ
بُجُن خُضبُمنا رَُبؼًناو دبفصاىًهن ًُغىنا سكرًنا
رصي حدىجناو دبفصاىًهن خيبؼنا خَرصًنا خئُهنا

زشُنأ عبطنا قٕقد تياًد تقيثٔ
©2013 وسَأ
همادختسا وأ روشنملا اذه نم ءزج يأ جاتنإ ةداعإ زوجٌ لا ، هذٌفنت قاٌس ًف ًابولطم وأ ، كلذ فلاخ ىلع صنٌ مل ام .ةظوفحم قوقحلا عٌمج
 . قبسم نذإ نود تنارتنلاا وأ تنرتنلاا ىلع رشنلا وأ وأ خسنلا كلذ ًف امب ، ةٌكٌناكٌم وأ ةٌنورتكلإ ، ةلٌسو يأب وأ لكش يأب ىرخأ ةقٌرطب
.ةبلاطلا ةھجلا ةلود ًف سٌٌقتلل ةٌلودلا ةمظنملا ًف ءاضعلأا تائٌھلا ىدحإ نم وأ هاندأ ناونعلا ىلع ISO ـلا نم امإ نذلإا بلط نكمٌ
صُُمزهن خُنوذنا خًظًُنا خُكهي قىمح تزكي
CP 401. Ch. De Blandonnet 3
CH-1214 Vernier, Geneva, Switzerland
004122٧4٢0111 :فربھ
004122٧4٢0٢4٧ :صكبف
[e-mail] :ٍَورزكنا ذَرث
www.iso.org :ٍَورزكنلأا غلىًنا
2021 وبػ ٍف0 خُثرؼنا خخطُنارشَ ىر
ارطَىض ٍف رشُنا ىر


ِ

---------------------- Page: 2 ----------------------
و
)ع( 02813:8222 زيا
سزٓفنا
IV . : ذيًٓت
V . :تيذقًنا
VI . تيٓيجٕتنا تندلأا - زطاخًنا ةرادإ
1 . :قاطُنا .1
VI . :تيضييقتنا عجازًنا .2
VI . :ثافيزعتنأ ثاذهطصًنا .3
1 . :زطخنا 1.3
1 . زطاخًنا ةرادإ 2.3
VI . تيُعًنا فازطلأا 3.3
VII . زطخنا رذصي 4.3
2VII . ثذذنا 5.3
2VII . تبقاعنا 6.3
2 . تيناًتدلاا 3.3
2 . ظبإضنا 3.3
3 . :ادابًنا .4
4 . :يًيظُتنا راطلإا .5
4 . واع 1.5
5 . :وازتنلاا ٔ ةدايقنا 2.5
6 . جايذَلاا 3.5
3 .
...

INTERNATIONAL ISO
STANDARD 31000
Second edition
2018-02
Risk management — Guidelines
Management du risque — Lignes directrices
Reference number
ISO 31000:2018(E)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 31000:2018(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 31000:2018(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Principles . 2
5 Framework . 4
5.1 General . 4
5.2 Leadership and commitment . 5
5.3 Integration . 5
5.4 Design . 6
5.4.1 Understanding the organization and its context . 6
5.4.2 Articulating risk management commitment . 6
5.4.3 Assigning organizational roles, authorities, responsibilities and accountabilities 7
5.4.4 Allocating resources. 7
5.4.5 Establishing communication and consultation . 7
5.5 Implementation . 7
5.6 Evaluation . 8
5.7 Improvement . 8
5.7.1 Adapting . 8
5.7.2 Conti
...

INTERNATIONAL ISO
STANDARD 31000
Redline version
compares Second edition to
First edition
Risk management — Guidelines
Management du risque — Lignes directrices
Reference number
ISO 31000:redline:2018(E)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 31000:redline:2018(E)

IMPORTANT — PLEASE NOTE
This is a mark-up copy and uses the following colour coding:
Text example 1 — indicates added text (in green)
Text example 2 — indicates removed text (in red)
— indicates added graphic figure
— indicates removed graphic figure
1.x . — Heading numbers containg modifications are highlighted in yellow in
the Table of Contents
DISCLAIMER
This Redline version provides you with a quick and easy way to compare the main changes
between this edition of the standard and its previous edition. It doesn’t capture all single
changes such as punctuation but highlights the modifications providing customers with
the most valuable information. Therefore it is important to note that this Redline version is
not the official ISO standard and that the users must consult with the clean version of the
standard, which is the official standard, for implementation purposes.
COPYRIGHT PROTECTED DOCUMENT
© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 31000:redline:2018(E)

Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
2 3 Terms and definitions . 1
3 4 Principles . 7
4 5 Framework . 9
4.1 5.1 General . 9
4.2 5.2 Mandate Leadership and commitment .11
5.3 Integration .11
4.3 5.4 Design of framework for managing risk  .12
4.3.1 5.4.1 Understanding of  the organization and its context .12
4.3.2 5.4.2 Establishing Articulating risk management policy commitment .13
4.3.3 5.4.3 Accountability Assigning organizational roles, authorities,
responsibilities and accountabilities .13
4.3.4 Integration into organizational processes .14
4.3.
...

NORME ISO
INTERNATIONALE 31000
Deuxième édition
2018-02
Management du risque — Lignes
directrices
Risk management — Guidelines
Numéro de référence
ISO 31000:2018(F)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 31000:2018(F)

DOCUMENT PROTÉGÉ PAR COPYRIGHT
© ISO 2018
Tous droits réservés. Sauf prescription différente ou nécessité dans le contexte de sa mise en oeuvre, aucune partie de cette
publication ne peut être reproduite ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique,
y compris la photocopie, ou la diffusion sur l’internet ou sur un intranet, sans autorisation écrite préalable. Une autorisation peut
être demandée à l’ISO à l’adresse ci-après ou au comité membre de l’ISO dans le pays du demandeur.
ISO copyright office
Case postale 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Tél.: [phone]
Fax: [phone]
E-mail: [e-mail]
Web: www.iso.org
Publié en Suisse
ii © ISO 2018 – Tous droits réservés

---------------------- Page: 2 ----------------------
ISO 31000:2018(F)

Sommaire Page
Avant-propos .iv
Introduction .v
1 Domaine d’application . 1
2 Références normatives . 1
3 Termes et définitions . 1
4 Principes . 2
5 Cadre organisationnel . 4
5.1 Généralités . 4
5.2 Leadership et engagement. 5
5.3 Intégration . 5
5.4 Conception . 6
5.4.1 Compréhension de l’organisme et de son contexte . 6
5.4.2 Définir clairement l’engagement en matière de management du risque. 6
5.4.3 Attribution des rôles, pouvoirs et responsabilités au sein de l’organisme . 7
5.4.4 Affectation des ressources . 7
5.4.5 Établissement d’une communication et d’une concertation . 7
5.5 Mise en œuvre. 8
5.6 Évaluation . 8
5.7 Amélioration . 8
5.7.1 Adaptation . 8
5.7.2 Amélioration continue .
...

NORME ISO
INTERNATIONALE 31000
Redline version
compare la Deuxième édition
à la Première édition
Management du risque — Lignes
directrices
Risk management — Guidelines
Numéro de référence
ISO 31000:redline:2018(F)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 31000:redline:2018(F)

IMPORTANT — PLEASE NOTE
This is a mark-up copy and uses the following colour coding:
Text example 1 — indicates added text (in green)
Text example 2 — indicates removed text (in red)
— indicates added graphic figure
— indicates removed graphic figure
1.x . — Heading numbers containg modifications are highlighted in yellow in
the Table of Contents
DISCLAIMER
This Redline version provides you with a quick and easy way to compare the main changes
between this edition of the standard and its previous edition. It doesn’t capture all single
changes such as punctuation but highlights the modifications providing customers with
the most valuable information. Therefore it is important to note that this Redline version is
not the official ISO standard and that the users must consult with the clean version of the
standard, which is the official standard, for implementation purposes.
DOCUMENT PROTÉGÉ PAR COPYRIGHT
© ISO 2018
Tous droits réservés. Sauf prescription différente ou nécessité dans le contexte de sa mise en oeuvre, aucune partie de cette
publication ne peut être reproduite ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique,
y compris la photocopie, ou la diffusion sur l’internet ou sur un intranet, sans autorisation écrite préalable. Une autorisation peut
être demandée à l’ISO à l’adresse ci-après ou au comité membre de l’ISO dans le pays du demandeur.
ISO copyright office
Case postale 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Tél.: [phone]
Fax: [phone]
E-mail: [e-mail]
Web: www.iso.org
Publié en Suisse
ii © ISO 2018 – Tous droits réservés

---------------------- Page: 2 ----------------------
ISO 31000:redline:2018(F)

Sommaire Page
Avant-propos .v
Introduction .vi
1 Domaine d'application d’application . 1
2 Références normatives . 1
2 3 Termes et définitions . 1
3 4 Principes . 7
4 5 Cadre organisationnel .10
4.1 5.1 Généralités .10
4.2 5.2 Mandat Leadership et engagement .11
5.3 Intégration .12
4.3 5.4 Conception du cadre organisationnel de management du risque  .13
4.3.1 5.4.1 Compréhension de l'organisme l’organisme et de son contexte .13
4.3.2 Établissement de la politique de management du risque .13
4.3.3 5.4.2 Responsabilité Définir clairement l’engagement en matière de
management du risque .14
4.3.4 5.4.3 Intégration aux processus organisationnels Attribution des rôles,
pouvoirs et responsabilités au sein de l’organisme .14
...

NORMA ISO
INTERNACIONAL 31000
Traducción oficial
Segunda edición
Official translation
2018-02

Traduction officielle


Gestión del riesgo — Directrices
Risk management — Guidelines
Management du risque — Lignes directrices
Publicado por la Secretaría Central de ISO en Ginebra, Suiza, como
traducción oficial en español avalada por el Translation
Management Group, que ha certificado la conformidad en relación
con las versiones inglesa y francesa.




Número de referencia
ISO 31000:2018

(traducción oficial)
©
ISO 2018

---------------------- Page: 1 ----------------------
ISO 31000:2018 (traducción oficial)


DOCUMENTO PROTEGIDO POR COPYRIGHT


©  ISO 2018. Publicado en Suiza
Reservados los derechos de reproducción. Salvo prescripción diferente, o requerido en el contexto de su implementación, no
podrá reproducirse ni utilizarse ninguna parte de esta publicación bajo ninguna forma y por ningún medio, electrónico o
mecánico, incluidos el fotocopiado, o la publicación en Internet o una Intranet, sin la autorización previa por escrito. La
autorización puede solicitarse a ISO en la siguiente dirección o al organismo miembro de ISO en el país solicitante.
ISO copyright office
Ch. de Blandonnet 8  CP 401
CH-1214 Vernier, Ginebra, Suiza
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Versión española publicada en 2018

Traducción oficial/Official translation/Traduction officielle
ii © ISO 2018 — Todos los derechos reservados

---------------------- Page: 2 ----------------------
ISO 31000:2018 (traducción oficial)
Índice Página
Prólogo . iv
Prólogo de la versión en español . v
Introducción . vi
1 Objeto y campo de aplicación .1
2 Referencias normativas.1
3 Términos y definiciones .1
4 Principios .3
5 Marco de referencia .4
5.1 Generalidades . 4
5.2 Liderazgo y compromiso . 5
5.3 Integración . 6
5.4 Diseño . 6
5.4.1 Comprensión de la organización y de su contexto . 6
5.4.2 Articulación del compromiso con la gestión del riesgo . 7
5.4.3 Asignación de roles, autoridades, responsabilidades y obligación de rendir
cuentas en la organización . 8
5.4.4 Asignación de recursos . 8
5.4.5 Establecimiento de la comunicación y la consulta . 8
5.5 Implementación . 9
5.6 Valoración . 9
5.7 Mejora . 9
5.7.1 Adaptación .
...

SLOVENSKI SIST ISO 31000
STANDARD maj 2018
Obvladovanje tveganja – Smernice
Risk management – Guidelines
Management du risque – Lignes directrices
Referenčna oznaka
ICS 03.100.01 SIST ISO 31000:2018 (en,sl)
 Nadaljevanje na straneh 2 do 32
© 2018-12. Slovenski inštitut za standardizacijo. Razmnoževanje ali kopiranje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST ISO 31000 : 2018
NACIONALNI UVOD

Standard SIST ISO 31000 (sl, en), Obvladovanje tveganja – Smernice, 2018, ima status slovenskega
standarda in je enakovreden mednarodnemu standardu ISO 31000, Risk management – Guidelines,
2018.

Ta standard nadomešča SIST ISO 31000:2011.

NACIONALNI PREDGOVOR

Mednarodni standard ISO 31000:2018 je pripravil tehnični odbor ISO/TC 262 Obvladovanje tveganja.
Slovenski standard SIST ISO 31000:2018 je prevod angleškega besedila mednarodnega standarda ISO
31000:2018. V primeru spora glede besedila slovenskega prevoda v tem standardu je odločilen izvirni
mednarodni standard v angleškem jeziku. Slovensko-angleško izdajo standarda je pripravil SIST/TC
VZK Vodenje in zagotavljanje kakovosti.

Odločitev za izdajo tega standarda je dne 26. marca 2018 sprejel SIST/TC VZK Vodenje in
zagotavljanje kakovosti.
ZVEZE S STANDARDI
Ta dokument ne vsebuje zvez s standardi.
OSNOVA ZA IZDAJO STANDARDA

– privzem standarda ISO 31000:2018

PREDHODNA IZDAJA

‒ SIST ISO 31000:2011, Obvladovanje tveganja – Načela in smernice

OPOMBE

– Povsod, kjer se v besedilu standarda uporablja izraz "mednarodni standard", v SIST ISO
31000:2018 to pomeni "slovenski standard".
– Nacionalni uvod in nacionalni predgovor nista sestavni del standarda.




















2

---------------------- Page: 2 ----------------------

SIST ISO 31000 : 2018
VSEBINA Stran CONTENTS Page
Predgovor . 5 Foreword . 5
Uvod . 7 Introduction . 7
1 Področje uporabe . 9 1 Scope . 9
2 Zveze s standardi . 9 2 Normative references . 9
3 Izrazi in definicije . 9 3 Terms and definitions . 9
4 Načela. 14 4 Principles . 14
5 Okvir . 14 5 Framework . 14
5.1 Splošno . 14 5.1 General . 14
5.2 Voditeljstvo in zavezanost . 16 5.2 Leadership and commitment . 16
5.3 Vključevanje . 17 5.3 Integration . 17
5.4 Zasnova . 17 5.4 Design . 17
5.4.1 Razumevanje organizacije in njenega 5.4.1 Understanding the organization and its
konteksta . 17 context . 17
5.4.2 Izražanje zavezanosti obvladovanju 5.4.2 Articulating risk management
tveganja . 18 commitment . 18
5.4.3 Dodeljevanje organizacijskih vlog, 5.4.3 Assigning organizational roles,
pooblastil in odgovornosti . 19 authorities, responsibilities and
accountabilities . 19

5.4.4 Razporejanje virov . 19 5.4.4 Allocating resources . 19
5.4.5 Vzpostavljanje komuniciranja in 5.4.5 Establishing communication and
posvetovanja . 20 consultation . 20
5.5 Izvajanje . 20 5.5 Implementation . 20
5.6 Ovrednotenje . 21 5.6 Evaluation . 21
5.7 Izboljševanje . 21 5.7 Improvement . 21
5.7.1 Prilagajanje . 21 5.7.1 Adapting . 21
5.7.2 Nenehno izboljševanje .
...

SLOVENSKI STANDARD
oSIST ISO/DIS 31000:2017
01-april-2017
Obvladovanje tveganja - Smernice
Risk management - Guidelines
Management du risque -- Lignes directrices
Ta slovenski standard je istoveten z: ISO/DIS 31000
ICS:
03.100.01 Organizacija in vodenje Company organization and
podjetja na splošno management in general
oSIST ISO/DIS 31000:2017 en,fr
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
oSIST ISO/DIS 31000:2017

---------------------- Page: 2 ----------------------
oSIST ISO/DIS 31000:2017
DRAFT INTERNATIONAL STANDARD
ISO/DIS 31000
ISO/TC 262 Secretariat: BSI
Voting begins on: Voting terminates on:
2017-02-17 2017-05-11
Risk management — Guidelines
Management du risque — Lignes directrices
ICS: 03.100.01
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
This document is circulated as received from the committee secretariat.
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/DIS 31000:2017(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
©
PROVIDE SUPPORTING DOCUMENTATION. ISO 2017

---------------------- Page: 3 ----------------------
oSIST ISO/DIS 31000:2017
ISO/DIS 31000:2017(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO 2017, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO 2017 – All rights reserved

---------------------- Page: 4 ----------------------
oSIST ISO/DIS 31000:2017
ISO/DIS 31000 :2017(E)
14 Contents Page
15 Foreword .3
16 Introduction.3
17 1 Scope.5
18 2 Normative references .5
19 3 Terms and definitions.5
20 4 Principles .7
21 5 Framework .9
22 5.1. General.9
23 5.2. Leadership and commitment. 10
24 5.2.1. General. 10
25 5.2.2. Integrating risk management. 10
26 5.3. Design . 11
27 5.3.1. Understanding the organization and its context . 11
28 5.3.2. Articulate risk management commitment(s). 11
29 5.3.3. Assigning organizational rol
...