Principles for Managing Risk

• Creates value.
• Is an integral part of organizational processes.
• Part of decision making.
• Explicitly addresses uncertainty.
• Systematic, structured and timely.
• Based on the best available information.
• Tailored.
• Takes human and cultural factors into account.
• Transparent and inclusive.
• Dynamic, iterative and responsive to change.
• Facilitates continual improvement and enhancement of the organization.

This standard will apply to all organisations worldwide, to all risks and in all sectors. It will become the benchmark for good practice risk management, wherever an organisation operates and whether it is the private or public sectors.

With its new definition of risk as “the effect of uncertainty on objectives", ISO 31000 endorses the central, value-creating role that risk management plays.  Broadleaf is now working with many major organisations helping them develop or revise their approaches to risk management, aligned to the new standard so that they are ‘future proofed’.

Again here, through one of our Associate Directors, Grant Purdy, a nominated expert on the ISO Risk Management Working Group, Broadleaf continues to play a thought-leader role in the drafting of what will be the world’s first and paramount standard for risk management: ISO 31000 will be published early in 2009 along with a vocabulary for risk management contained in the revised ISO/IEC ‘Guide 73’.

Click on the image below for a page of downloads including full documentation of the current draft of ISO 31000.

ISO 31000 Process for Developing and Sustaining a Risk Management Framework

ISO 31000 is based on the AS/NZS 4360:2004 risk management process, but goes much further to define the principles against which organisations can evaluate their approach to risk management and use the standard to provide a road map for their future development.

Particularly for those companies and government bodies who wish to practice Enterprise Risk Management, the new standard sets out the practical approach to establishing and sustaining a capable framework for the management of all the risks they face.

Attributes of Excellence

1. An emphasis on continual improvement in risk management.
2. Comprehensive, fully defined and fully accepted accountability for risks, risk controls and risk treatment tasks.
3. All decision making within the organization, whatever the level of importance and significance, involves the explicit consideration of risks and the application of risk management to some appropriate degree.
4. Continual communications with internal and external stakeholders including comprehensive and frequent reporting of risk management performance is part of good governance.
5. Comprehensive and frequent internal and external reporting on both significant risks and on risk management.
6. Risk management is viewed as central to the organization's management processes so that risks are considered in terms of effect of uncertainty on objectives

ISO 31000 Process for Developing and Sustaining a Risk Management Framework

If you wish to plan for your move onto the new standard, or just require a health check on your existing approaches, Broadleaf is able to offer a diagnostic, maturity evaluation and gap analysis that leads to the formulation of a practical strategy for the future.

Our tutorial notes on ERM and Governance Reporting contain much practical advice on how organisations align themselves to ISO 31000. Please feel free to contact us for further advice and assistance.

Click here for a page of downloads including full documentation of the current draft of ISO 31000.