Enterprise Risk Management

Answer:

You can use ISO 31000:2018, Risk management – Guidelines, which provides principles, framework and a process for managing risk. It can be used by any organization regardless of its size, activity or sector and although it cannot be used for certification purposes organizations can use it to compare their risk management practices with an internationally recognised benchmark.

To learn more about risk management in companies you can see the following materials:

- Article - Similarities and differences in risk management in ISO 9001 , ISO 31001 and ISO 27001: https://advisera.com/9001academy/blog/2016/10/25/similarities-and-differences-in-risk-management-in-iso-9001-iso-31000-and-iso-27001/
- Article - How to address risk and opportunities in ISO 9001: https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/