New Featured Standard

ISO 31000-2018
 Five things you need to know

There are five differences between the 2009 and 2018 versions
1) New simplified language with purpose statements
 Technical terms and definitions were reduced from 29 to 8
2) Value creation and protection - eight new principles for risk framework
and process include:
 A structured, integrated and comprehensive approach to risk
 Customizing to include stakeholders and consider human and cultural factors
 Being dynamic and responsive to organizational changes
 Using best practices for learning, adapting and continually improving
Five things you need to know (continued)

There are five differences between the 2009 and 2018 versions
3) Total integration
 Across all employees and all activities
4) Leadership from management
 Oversight bodies are accountable for overseeing risk management
5) Risk management is an interactive process
 Manage risk when decisions are being made
 Repetition of a sequence of operations yields results successively
closer to a desired result
  Risk Criteria

The Risk Management

 Risk Matrices Risk Management
 Spider Chart Process
 Pareto Analysis  Brainstorming

Process
 Checklists
 Interviews
 Delphi Technique
Scope, Context, Criteria  Nominal Group
 Causal Factors
 HAZID & RISKID

Co m m u nic atio n & Co n su lta tio n

Risk Assessment

XXXXX

M o nitoring & R eview

 What-If Analysis
 Risk-based Decision Risk  Fault Tree
 Risk Register Identification  Event Tree

 It’s a continuous process 


Risk Reports
Assessment Triggers
Risk


Bow Tie Analysis
LOPA
 Striped Bow Tie
Analysis
 There is a logical flow to the process
 HACCP

Risk

 An organization can implement risk

Evaluation
 Risk Indices
 Risk Matrices

management at any part of the  Hierarchy of

Controls Risk Treatment
 ALARA/ALARP

organization and at any part of the  Cost/Benefit

Analysis

cycles a continuous process 


Financial Benefits
Non-financial
Benefits
Recording & Reporting


Key Risk Indicators
Key Performance
Indicators
 There is a logical flow to the process  Multi-Criteria
Analysis
 Risk Management
Performance

 An organization can implement risk management 


Risk Register
Risk Reports
at any part of the organization and at any part of
the cycle
Graphic developed by Bruce K. Lyon, adapted from IEC/DIS 31010-2018
 ASSP has published a new book on risk

Risk Management Tools for Safety Professionals

 by Bruce K. Lyon and Georgi Popov

 The authors expand on the ISO 31000, Z690, Z10 and Z590.3 standards
providing a step-by-step guide to the risk management process

 The book includes practical examples of risk management applications and

prevention through design concepts

 The authors make use of case studies on risk treatment and

business interface

 Downloadable interactive tools and 28 risk management tools

are included