Risk management should change decisions - not simply produce another register.
ISO 31000: The Executive Guide to Operational Risk provides a practical, leadership-focused approach to understanding and applying risk management in complex organisations.
Written for operational leaders, managers, risk professionals, assurance practitioners and decision-makers, the book translates the principles, framework and process of ISO 31000 into practical organisational thinking.
It begins with a simple proposition: risk is the effect of uncertainty on objectives. Effective risk management therefore starts with understanding what the organisation is trying to achieve, the context in which decisions are being made and the uncertainty surrounding those objectives.
Readers are guided through:
• ISO 31000 principles, framework and process
• Objectives, organisational context and risk criteria
• Identifying threats, opportunities, causes and consequences
• Risk analysis without false precision
• Control effectiveness and residual exposure
• Selecting appropriate risk-assessment techniques
• Risk appetite, evaluation and escalation
• Treatment and control ownership
• Human factors, organisational culture and decision bias
• Emerging risk and organisational change
• Digital, AI, climate and systemic risk
• Monitoring, reporting and continual learning
• Executive risk governance and decision-making
The guide also examines practical assessment techniques including bow-tie analysis, scenario analysis, FMEA, fault and event trees, structured "what if" techniques, quantitative modelling, business impact analysis and expert judgement.
An Executive Risk-Readiness Scorecard provides leaders with a practical method for examining whether risk management is merely documented or genuinely influencing objectives, governance, controls, people, change and organisational learning.
This is risk management designed for the real operation: understand uncertainty, assess what matters, act proportionately and learn from the evidence.
This is an independent educational guide and is not an official ISO publication, legal advice or a substitute for authorised standards. ISO 31000 is guidance and is not a certifiable management-system standard.
