ISO ‘Misses the Mark’ on Context
SO 31000:2009 included several definitions that provide the support for organizations to understand the meaning of context:
Establishing the context (2.9) – defining the external and internal parameters to be considered when managing risk and setting the scope and risk criteria (2.22) for the risk management policy (2.4). Continue reading
In my past two blogs, we have examined the risk-aware culture[i] and the risk management process[ii] as found in ISO 31000:2018 and COSO ERM 2017. This blog will address the third structural element defined by these documents – “risk management framework.” ISO 31000:2018 includes the risk management framework along with the risk-aware culture and the risk management process. COSO ERM 2017 is a risk management framework even though it addresses what ISO 31000:2018 addresses in its three-component risk management standard. Continue reading
There are two widely-used risk management standards:
In my previous blog[i], I presented details on how these risk management standards address the development of a risk-aware culture – a necessary foundation for risk management success. As promised, this blog will address the risk management “process.” This is how the organization addresses specific risks. Continue reading
Disrupting ISO 9001:2015
There have been many articles in the past few weeks that provided information about disruption and its effect on the transition that many companies must make to ISO 9001:2015. This must be all wrapped up by September 15, 2018. A recent article in ASQ’s Quality Progress magazine[i] is adding fuel to the fire. Let’s take a look at the recently-released ISO 9004:2018. Continue reading
Fanfare Over New International Health and Safety Standard
On March 12, 2018, ISO published the World’s first International Standard dealing with health and safety at work. This document “offers a single, clear framework for all organizations wishing to improve OH&S performance.”[i] ISO 45001:2018 is also the first health and safety standard to deal with risks and opportunities instead of focusing only on hazard risk. Continue reading