ISO 31000 provides guidelines for managing risk effectively in organizations of any sector and size. It is not certifiable, but it is the most widely used methodological reference for enterprise risk management.
Key principles
The standard establishes principles, a governance framework and an iterative process covering risk identification, analysis, evaluation and treatment, together with continuous monitoring and review.
ermine and ISO 31000
ermine is built on the ISO 31000 methodology, with configurable risk matrices, approval workflows and executive reporting aligned with the standard’s requirements.