ISO 31000:2018 & IEC 31010 Risk Management System
ISO 31000:2018 & IEC 31010 Risk Management System
A risk register earns its place only when the method behind each score can be explained.
Couldn't load pickup availability
Written and reviewed by practising specialists. Who writes this
Built and reviewed with our methodology. Read it
Read the guide: ISO 31000:2018 and IEC 31010:2019: how do they work together?
By document type
| Category | Files |
|---|---|
| Manuals | 2 |
| Procedures & SOPs | 10 |
| Forms & Records | 9 |
| Checklists & Audit Tools | 4 |
| Training & Awareness | 2 |
| Guides & Work Instructions | 2 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-QM-01 | Risk Management Quality Manual | Word |
| AGS-PR-03 | Risk Assessment Procedure | Word |
| AGS-PR-04 | Risk Treatment Procedure | Word |
| AGS-PR-01 | Establishing Context, Scope & Criteria Procedure | Word |
| AGS-FR-04 | Risk Assessment Worksheet | Word |
| AGS-FR-01 | Risk Register | Word |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
ISO 31000:2018 and IEC 31010 are the core international guidance on managing risk. ISO 31000 sets out principles, a framework and a process for any organisation, any sector and any type of risk, whether its consequences are negative or positive. It is guidance rather than a certifiable requirements standard, written for boards, executives and anyone deciding under uncertainty, and it holds that risk management should be integrated, structured, customised, inclusive and dynamic, based on the best available information, and should create and protect value.
The framework covers leadership and commitment, integration, design, implementation, evaluation and improvement; the process runs from communication and consultation and the establishment of scope, context and criteria, through risk assessment and treatment, to monitoring, review, recording and reporting. IEC 31010 expands the assessment step, cataloguing techniques and setting out where each applies and where it falls short: brainstorming, structured interviews, checklists, failure modes and effects analysis, hazard and operability studies, fault and event tree analysis, bow-tie analysis and Monte Carlo simulation among others. Vocabulary follows ISO Guide 73, so the register lines up with the risk-based thinking already embedded in ISO 22301, ISO 27001 and ISO 37301.
What this system covers
- Scope, context and criteria — what is assessed, and the thresholds by which risk is judged
- Identification and analysis — choosing an IEC 31010 technique that suits the decision in hand
- Evaluation and scoring — consistent likelihood and consequence criteria across departments
- Risk treatment — selecting, justifying and tracking controls, with residual risk recorded
- Communication and consultation — involving stakeholders throughout, not at sign-off
- Monitoring, review and reporting — keeping the register current and risk in front of management
- Framework maturity — leadership commitment, integration into decisions, review of the framework
Who it's for
Risk managers, internal auditors and the executives who own the register, most often where every department scores risk its own way and the results cannot be compared. Purchase follows a board request for one consistent view of risk, or an auditor asking how a rating was arrived at. Because both documents are guidance, the outcome is not a certificate but a defensible framework, a live register and treatment plans whose reasoning survives challenge.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
Any of your staff, at any of your own sites. No per-seat fees.
Sector specialists author each toolkit. A principal reviewer with more than twenty years reviews it.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
If a document is wrong, missing or not as described, tell us within 14 days. We fix it or refund you.
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes, for 12 months. Fixes and revisions to this toolkit are free for 12 months from your order. Email us with your order number to get them.
What is your refund policy?
If a document is wrong, missing or not as described, tell us within 14 days of your order. We fix it or refund you. If you have not downloaded yet, we can cancel the order and refund you in full. We don't refund a change of mind after download. See the Refund policy.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.
More in Information Security, Risk & Business Continuity
See all 55
ISMS - ISO/IEC 27001:2022
Information Security, Risk & Business Continuity39 documents $790USD
ISO 22301-2019-Business Continuity Management System
Information Security, Risk & Business Continuity48 documents $790USD
ISO IEC 42001-2023 -AI Management System
Information Security, Risk & Business Continuity43 documents $790USD