31000 2015, 2009

1. ISO 31000:2018 Vs ISO 31000:2009
clause ISO 31000:2018 clause ISO 31000:2009
1 Scope 1 Scope
2 Normative references
3 Terms and definitions 2 Terms and definitions
4 Principles 3 Principles
5 Framework 4 Framework
5.1 General 4.1 General
5.2 Leadership and commitment 4.2 Mandate and commitment
5.3 Integration 4.3 Design of framework for managing risk
5.4 Design 4.3.1 Understanding of the organization and its context
5.4.1 Understanding the organization and its context 4.3.2 Establishing risk management policy
5.4.2 Articulating risk management commitment 4.3.3 Accountability
5.4.3 Assigning organizational roles, authorities, responsibilities and accountabilities 4.3.4 Integration into organizational processes
5.4.4 Allocating resources 4.3.5 Resources
5.4.5 Establishing communication and consultation 4.3.6 Establishing internal communication and reporting mechanisms
5.5 Implementation 4.3.7 Establishing external communication and reporting mechanisms
5.6 Evaluation 4.4 Implementing risk management
5.7 Improvement 4.4.1 Implementing the framework for managing risk
5.7.1 Adapting 4.4.2 Implementing the risk management process
5.7.2 Continually improving 4.5 Monitoring and review of the framework
4.6 Continual improvement of the framework
6 Process 5 Process
6.1 General 5.1 General
6.2 Communication and consultation 5.2 Communication and consultation
6.3 Scope, context and criteria 5.3 Establishing the context
6.3.1 General 5.3.1 General
6.3.2 Defining the scope 5.3.2 Establishing the external context
6.3.3 External and internal context 5.3.3 Establishing the internal context
6.3.4 Defining risk criteria 5.3.4 Establishing the context of the risk management process
6.4 Risk assessment 5.3.5 Defining risk criteria
6.4.1 General 5.4 Risk assessment
6.4.2 Risk identification 5.4.1 General
6.4.3 Risk analysis 5.4.2 Risk identification
6.4.4 Risk evaluation 5.4.3 Risk analysis
6.5 Risk treatment 5.4.4 Risk evaluation
6.5.1 General 5.5 Risk treatment
6.5.2 Selection of risk treatment options 5.5.1 General
6.5.3 Preparing and implementing risk treatment plans 5.5.2 Selection of risk treatment options
6.6 Monitoring and review 5.5.3 Preparing and implementing risk treatment plans
6.7 Recording and reporting 5.6 Monitoring and review
5.7 Recording the risk management process
eng.hossam7@yahoo.com