ISO 31000 is going to be used more often as more ISO certified companies adopt Risk Based Thinking.  However, ISO 31000 can be challenging.  Why?

Interestingly, the descriptive nature of the ISO 31000 standard may well be its strength, but may also be its weakness.  The standard without the proper guidance of a risk practitioner maybe come discretionary and even arbitrary.

ISO 9001:2015 has Risk Based Thinking requirements.  Note ISO 31000 was developed in 2009 and is not harmonized with the new annex SL standards and ISO 9001:2015. Continue reading →