ISO 31000
Apply a common risk management language and process across strategy, operations and projects.
ISO 31000: what it is and why it matters
ISO 31000 provides guidelines on managing risk. It describes principles, a framework and a process that can be applied to any organisation and any type of risk, and it is used as a common reference by many risk and assurance functions.
It is guidance, not a set of requirements to certify against, which makes it a useful base for the way risk is reported and discussed with leadership.
Built for the people who carry the work
- Risk, compliance and internal audit professionals
- Information security and business continuity managers
- Project and programme managers who handle risk
- Executives and board support teams who use risk reports
What you will be able to do
- Describe the principles, framework and process of ISO 31000
- Establish scope, context and risk criteria
- Identify, analyse and evaluate risk with a repeatable approach
- Choose treatment options and record residual risk
- Communicate risk and monitor it over time
Subject outline
- 01
Principles of risk management
- 02
Framework: leadership, integration and design
- 03
Process: scope, context and criteria
- 04
Risk assessment: identification, analysis, evaluation
- 05
Risk treatment, monitoring and review
- 06
Recording and reporting
How it supports real work
Giving different teams one risk scale so reports can be compared
Linking risk criteria to what leadership is willing to accept
Showing how treatment decisions were made and reviewed
Training, examination and certification are different steps
ISO 31000 is guidance, so there is no organisational certificate against it. Personal credentials in risk management are offered by several bodies, each with its own prerequisites and exams.
- No organisational certification exists for ISO 31000 itself.
- Training builds knowledge. It does not award a credential.
- Ask us which personal credential, if any, applies to your goal.
What is confirmed, and what people ask
Delivery information
Delivery details for this course have not been confirmed for publication, so none are listed here. Course length, schedule, language, delivery format and fees are confirmed per enquiry. Certification bodies set their own exam and eligibility rules, and we confirm the route to any certificate before you enrol.
Enquire About This CourseFrequently asked questions
Can my organisation be certified to ISO 31000?
No. It is a guidance standard rather than a requirements standard.
How does it relate to ISO/IEC 27005?
ISO 31000 is the general risk management guideline. ISO/IEC 27005 applies similar thinking to information security risk.
Is it only for large organisations?
No. The guidance applies to organisations of any size and type.
Related courses
Related Valtrenix services
Request course information
Tell us who the training is for and what you want to achieve. We reply with confirmed details only, including what is currently available for ISO 31000.
- Individual and team training enquiries welcome
- No fees, dates or formats are published until confirmed
- We confirm the certification route before you enrol