AS/NZS ISO 31000:2009

Provides a generic guide for managing risk. It may be applied to a wide range of activities or operations of any public, private or community enterprise, or group.

This International Standard provides principles and generic guidelines on risk management.This International Standard can be used by any public, private or community enterprise, association, group or individual. Therefore, this International Standard is not specific to any industry or sector.NOTE: For convenience, all the different users of this International Standard are referred to by the general term“organization”.This International Standard can be applied throughout the life of an organization, and to a wide range ofactivities, including strategies and decisions, operations, processes, functions, projects, products, services and assets.This International Standard can be applied to any type of risk, whatever its nature, whether having positive or negative consequences.Although this International Standard provides generic guidelines, it is not intended to promote uniformity of risk management across organizations. The design and implementation of risk management plans andframeworks will need to take into account the varying needs of a specific organization, its particular objectives, context, structure, operations, processes, functions, projects, products, services, or assets and specific practices employed.It is intended that this International Standard be utilized to harmonize risk management processes in existing and future standards. It provides a common approach in support of standards dealing with specific risks and/or sectors, and does not replace those standards.This International Standard is not intended for the purpose of certification.

First published as AS/NZS 4360:1995.Second edition 1999.Third edition 2004.Revised and redesignated as AS/NZS ISO 31000:2009. Originated as AS/NZS 4360:1995. Third edition 2004. Revised and redesignated as AS/NZS ISO 31000:2009.