Discover millions of ebooks, audiobooks, and so much more with a free trial

Only $11.99/month after trial. Cancel anytime.

Ioannis Tsiouras - The risk management according to the standard ISO 31000
Ioannis Tsiouras - The risk management according to the standard ISO 31000
Ioannis Tsiouras - The risk management according to the standard ISO 31000
Ebook109 pages1 hour

Ioannis Tsiouras - The risk management according to the standard ISO 31000

Rating: 3 out of 5 stars

3/5

()

Read preview

About this ebook

The organizations, of any type and size, conducting their activities are faced to uncertainties, due, mainly, to the factors and influences that reside in the external as well as in the internal context. The uncertainties, therefore, are sources of risks, which have an effect on the achievement of the objectives and the impact could be significant to the business.

The organizations to deal with this situation try in any case to manage the risks by implementing approaches more or less known, sometimes in effective manner and sometimes not and often they rely on the technological solutions.

To address risks in systematic, effective and efficient manner, the International Organization for Standardization (ISO) has issued a set of standards for the risk. Among them, the main standard for the risk management is the ISO 31000.

The ISO 31000 Risk Management - Principles and guidelines is applicable to all types of organizations and to any size and type of goods. The ISO 31000 as a guideline provides a framework for risk management giving quick instructions without examining in detail the concepts and without providing operational support for the effective implementation of methodology proposed.

With a wide and significant lived experience in this field, the author proposes to managers, security managers and all those who want or are forced to make decisions in the presence of uncertainty, a practical method for risk management, also through practical case study. The author does not limit to generic interpretations, but develops approaches in detail through matrices and calculations of real risks and refers to case studies bringing examples in order to guide those involved in managing any form of risk in a systematic, transparent and credible and in any scope and context.

The book provides an introduction to risk management, to risk governance and to the risk management process; provides an introduction on the concept of risk, risk factors, the level of risk and correlation between the elements involved in risk analysis. It illustrates also the importance of risk management in decision-making, the awareness to the risk management and the benefits that may obtained from risk management.

The author has paid special attention to the process of developing risk management flow and detailing all activities: establishing the context and the scope, risk assessment (identification, analysis and risk assessment), treatment plan with countermeasures to implement in order to reduce the risks, calculation of the residual risks, acceptance of the residual risks proposed, implementation of the countermeasures and monitoring and review.

The risk management process here developed is supported by a practical case study example useful to learn and to apply the methodology in all the contexts of the life of the organizations, but also in the activities of life.
LanguageEnglish
Release dateSep 25, 2015
ISBN9788893066891
Ioannis Tsiouras - The risk management according to the standard ISO 31000

Related to Ioannis Tsiouras - The risk management according to the standard ISO 31000

Related ebooks

Management For You

View More

Related articles

Reviews for Ioannis Tsiouras - The risk management according to the standard ISO 31000

Rating: 3 out of 5 stars
3/5

1 rating0 reviews

What did you think?

Tap to rate

Review must be at least 10 words

    Book preview

    Ioannis Tsiouras - The risk management according to the standard ISO 31000 - Ioannis Tsiouras

    Title| Risk Management according to the standard ISO 31000. The methodology to implement effectively risk management in every context.

    Author| Ioannis Tsiouras

    The cover is designed by the author

    ISBN | 9788893066891

    Ioannis Tsiouras, 2015

    © All rights reserved

    No part of this publication may be reproduced without the

    prior consent of the author and the publisher.

    Ioannis Tsiouras was born in Greece, where he studied classics and science in secondary school and later attended university degree in engineering in Italy, where he has been living for the past forty years. As part of his professional experiences he has had international recognition through the publication of books and articles in national and international journals and as expert member on excellence in business and the Risk Management Committees in Italian and European. He is the author of articles and the following books published by the italian publishing house FrancoAngeli:

    Security Information - From the management system to the security of computer systems. The standards BS 7799-2 and ISO/IEC 15408 (Common Criteria), 2004.

    The design of the management system in organizations of high information intensity - From the ISO 9000 to business modeling, 2005.

    Guideline for the ISO 9000 certification for the organizations, 1998.

    Governance and Process Improvement, 1998.

    To my wife

    FOREWORD

    The organizations, of any type and size, while conducting their activities are faced to uncertainties, due, mainly, to the factors and influences that reside in the external as well as in the internal context. The uncertainties, therefore, are sources of risk, which have an effect on the achievement of the objectives and the impact could be significant to the business.

    The organizations to deal with this situation try in any case to manage the risks by implementing approaches more or less known, sometimes in effective manner and sometimes not and often they rely on the technological solutions.

    To address risks in a systematic, effective and efficient manner the International Organization for Standardization (ISO) has issued a set of standards for the risk and risk management. Among them, the main standard for the risk management is the ISO 31000.

    The ISO 31000 Risk management – Principles and guidelines is applicable to all types of organizations (manufacturing, service, commercial, government organizations, as well as non-profit organizations) and to any size and type of goods, but could also be applied to any entity that has the need to manage risk. The ISO 31000 as a guideline provides a framework for risk management which is a systematic and logical for the effective management of risks giving quick instructions without examining in detail the concepts and without providing operational support for the effective implementation of methodology proposed.

    Thanks to a wide and significant lived experience in this field, the author proposes to managers, security managers and all those who want or are forced to make decisions in the presence of uncertainty, a full description of the reasons and ways of applying the prescriptions of the standard related to risk management, also through practical case study.

    The book provides a modular and practical method for risks management by deepening the concepts and approaches of the standard. The author does not limit himself to generic interpretations, but develops approaches in detail through matrices and calculations of real risks and refers to case studies bringing examples in order to guide those involved in managing any form of risk in a systematic, transparent and believable way and in any scope and context.

    The book provides an introduction to risk management, to risk governance that gives the setting of the framework and to the risk management process; It provides an introduction on the concept of risk, risk factors, the level of risk and correlation between the elements involved in risk analysis. It illustrates also the importance of risk management in decision-making, the awareness to the risk management and the benefits that may be obtained from risk management. The framework and the process of risk management are based on the principles that guide the risk management.

    In the book the author develops the framework for risk management which is based on the Plan-Do-Check-Act approach, the leadership and commitment of the top management, the design and implementation of the framework which contains the following activities: understanding the context, policy for the risk management, responsibilities, integration with the business processes, resources , communication, implementation, monitoring, review and continuous improvement.

    The author pays special attention to the process of developing risk management flow and detailing all activities: establishing the context and the scope, risk assessment (identification, analysis and risk assessment), treatment plan with countermeasures to implement in order to reduce the risks, calculation of the residual risks, acceptance of the residual risks proposed, implementation of the countermeasures and monitoring and review.

    The risk management process here developed is supported by a practical example useful to learn and to apply the methodology in all the contexts of the life of the organizations, but also in the activities of life.

    INDEX

    1. Introduction

    2. Risk governance

    3. Risk

    3.1 The risk concept

    3.2 Risk elements and relationship

    4. Risk management and decision-making

    4.1 The awareness and the decision-making

    4.2 Benefits from risk management

    5. Risk management principles

    6. Risk management framework

    6.1 Framework based on the PDCA

    6.2 Mandate and commitment

    6.3 Design of framework for managing risk (Plan)

    6.3.1 Understanding the organization and its context

    6.3.2 Establishing the risk management policy

    6.3.3 Organizational roles and responsibilities

    6.3.4 Integration into organizational processes

    6.3.5 Resources, competence and awareness

    6.3.6 Establishing communication and reporting mechanisms

    6.4 6.4 Implementing risk management (Do)

    6.4.1 Implementing the framework for risk assessment

    6.4.2 Implementing the risk assessment process

    6.5 Monitoring and review of the framework (Check)

    6.5.1 Monitoring, measurement, analysis and

    Enjoying the preview?
    Page 1 of 1