Improve your organisation
Risk management.
Describe uncertain events in operational terms and choose proportionate responses with owners and review dates.
Why it matters
Turn an idea into a working change.
Describe uncertain events in operational terms and choose proportionate responses with owners and review dates.
Begin with one specific outcome. Ask who experiences the current problem, what evidence would show it, and which decision or process could change. Assign an owner and set a date to review the effect.
- Describe the current work and the result it produces.
- Gather a small set of real examples and involve the people doing the work.
- Choose a proportionate change with an owner and a measure.
- Review the result, unintended effects and next decision.
Linked standards
Formal systems that may help.
Quality management
A framework for consistently meeting customer and applicable requirements, learning from performance and improving the way work is done.
View standard ISO/IEC 27001:2022Information security management
A risk-based management system for protecting information, choosing controls and showing that those controls remain effective.
View standard ISO 45001:2018Occupational health and safety
A framework for preventing work-related injury and ill health through worker participation, hazard control and learning.
View standardEvidence to discuss
Use the linked frameworks as prompts.
Process map and ownership
A framework for consistently meeting customer and applicable requirements, learning from performance and improving the way work is done. Read the standard context
Customer requirements and feedback
A framework for consistently meeting customer and applicable requirements, learning from performance and improving the way work is done. Read the standard context
Information security scope
A risk-based management system for protecting information, choosing controls and showing that those controls remain effective. Read the standard context
Risk assessment and treatment
A risk-based management system for protecting information, choosing controls and showing that those controls remain effective. Read the standard context
These are suggested evidence areas, not a checklist proving conformity. Choose what is material to your work and verify the current edition with the publisher.
Where this appears