Risk Management Process Template

Risk Management Process Template

The Risk Management Process Template sets out the risk management process and procedure. It is used to fully manage risks and the risk management lifecycle. Aligned to ISO 31000.  If you want to know how to manage risk then you want to download this template. It works alongside the Risk Management Policy and the Risk Register.

Risk Management Process Contents

Document Version Control 2
Document Contents Page 3
Purpose 5
Scope 5
Risk Management Procedure 5
Principle 5
Risk Register 5
Risk Identification 6
Risk assessment 7
Risk Treatment 7
Risk Monitoring 7
Compliance Measurement 7
Exceptions 7
Non-Compliance 8
Continual Improvement 8

Tip: ISO 27001 is a risk based information security management system rather than rule based. In a rule based system not having controls would fail BUT in ISO 27001 it is about managing the risk, which can include accepting the risk. Spending time on risk identification and risk management is a key process step and at the heart of the ISO 27001 standard.