CHAPTER 4: USING ISO 31000 TO ASSIST RISK-BASED THINKING

In this chapter we will look more at ISO 31000 itself and how it can be used to influence RBT for any of the Annex SL standards. We have chosen ISO 27001:2022 just as one example, along with some references to ISO 9001.

Although ISO 31000 wasn’t written with the express intention of directly assisting the understanding of Annex SL standards such as ISO 9001, it can certainly inspire better practice with such implementations. This is because the whole subject matter is risk and risk management, whereas with, for example, ISO 9001 or ISO 27001, RBT is just a component, albeit a very fundamental one in a whole host of other requirements.

When you read ISO 31000 – and it is worth doing – you ...

Get Risk Management and ISO 31000 - A pocket guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.