Get audit-ready for ISO 31000
ISO 31000:2018 · Risk Management Guidelines
International standard providing principles, framework, and process guidelines for managing risk, applicable to any organization regardless of size, activity, or sector.
ISO 31000What is ISO 31000?
International standard providing principles, framework, and process guidelines for managing risk, applicable to any organization regardless of size, activity, or sector.
Who it applies to
Any organisation putting a risk management framework in place. Often adopted underneath a certifiable standard, since ISO management systems require risk-based thinking without prescribing how to do it.
How the standard is organised
Principles, a framework and a process, and explicitly stated by ISO as not intended for certification purposes - so no accredited body issues an ISO 31000 certificate.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
ISO 31000 on the Bitkosh platform
The 28 ISO 31000 controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- P-2Structured and comprehensive
Use a consistent, orderly approach so risk results are comparable and dependable across the organisation.
Principles - P-7Human and cultural factors
Account for how people's behaviour and culture influence every stage of risk management.
Principles - 5.7Improvement (adaptation and continual improvement)
Monitor the framework against change, then adjust it and improve its fit and effectiveness over time.
Framework - Implementation and Improvement - 6.5Risk treatment options and plans
Choose treatment options, then document who does what, with resources, timing, and residual risk to be accepted.
Process - Risk Treatment - 5.4.1Understanding the organisation and its context
Examine external and internal factors that shape the organisation before designing the risk framework.
Framework - Design - 5.4.2Articulating risk management commitment
Have top management state in writing why risk management matters and how it supports objectives and policy.
Framework - Design
More quality & management systems frameworks
Frequently Asked Questions
Who publishes ISO 31000, and who does it apply to?
How is ISO 31000 conformance demonstrated?
How is ISO 31000 structured?
Ready to get audit-ready for ISO 31000?
See how the Bitkosh Readiness Platform gets you audit-ready for ISO 31000 — and the other 47 ready frameworks — from a single control library.